$ rpki-client -vvf repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.mft File: 2E83B1793FA2E18A4137A66A092163F5DABD45F0.mft (raw, json) Hash identifier: CNmJT5v/v0yHhyDlGcrStnBE+c5kLuk9y1PbT8sOo/8= Subject key identifier: 03:F8:95:D5:71:A2:96:FF:DF:F0:D3:2E:83:D5:B6:DA:2E:14:82:51 Authority key identifier: 2E:83:B1:79:3F:A2:E1:8A:41:37:A6:6A:09:21:63:F5:DA:BD:45:F0 Certificate issuer: /CN=2E83B1793FA2E18A4137A66A092163F5DABD45F0 Certificate serial: 0DF451B14577C3D4EBC4C0DE9549BAF3378808F5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E83B1793FA2E18A4137A66A092163F5DABD45F0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.mft Manifest number: 01E0 Signing time: Fri 25 Apr 2025 16:31:15 +0000 Manifest this update: Fri 25 Apr 2025 16:26:15 +0000 Manifest next update: Tue 29 Apr 2025 02:24:15 +0000 Files and hashes: 1: 3132332e3235332e3235322e302f32322d3234203d3e20313339333937.roa (hash: 1PlLZ70/l1XO167EbfOMkFAS5NVNN52M28JEV2n5Nfw=) 2: 2E83B1793FA2E18A4137A66A092163F5DABD45F0.crl (hash: NMD3cJCUDT3ER6opnj0Gvp/LrErSPEoeTuyNpFrXxjo=) 3: 3130332e39312e33322e302f32322d3234203d3e203338343936.roa (hash: lG93mDy8mZJ1KYLzkUSHtFdOp3jxkVuITP5q7tld/tA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.crl rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E83B1793FA2E18A4137A66A092163F5DABD45F0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 00:35:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:f4:51:b1:45:77:c3:d4:eb:c4:c0:de:95:49:ba:f3:37:88:08:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E83B1793FA2E18A4137A66A092163F5DABD45F0 Validity Not Before: Apr 25 16:26:15 2025 GMT Not After : Apr 29 02:24:15 2025 GMT Subject: CN=03F895D571A296FFDFF0D32E83D5B6DA2E148251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:49:95:55:6e:19:63:ef:f7:38:b0:02:5e:23: 0d:e2:ea:83:49:d9:71:fe:b0:39:0b:6a:d3:9b:e1: 6c:87:eb:ba:91:bc:33:55:e5:14:1a:c8:2f:4b:54: 91:22:8f:fa:4e:a7:f0:7a:f4:d7:2a:b6:08:4a:67: b8:29:71:e3:e3:77:42:90:b8:ba:b6:5e:58:3b:1e: ce:54:e1:e1:d1:b1:43:5c:55:3b:fc:30:3c:81:75: b7:ec:fe:41:c7:2c:18:3d:78:9f:be:b4:b2:f4:2e: 38:32:ea:88:92:91:29:4d:1f:a6:dd:f4:99:bb:ef: 84:0f:7c:75:40:b0:c3:bb:f4:e3:15:04:b8:cc:2e: 78:c4:15:08:c1:14:db:5f:35:66:de:8e:3f:ef:95: 34:91:a4:d4:82:31:5b:1e:76:b9:63:9d:70:86:f5: 7e:cb:ef:70:37:61:59:3e:2e:90:37:17:7a:be:4b: fe:ef:02:8b:86:ac:20:61:da:f2:5d:1b:52:67:21: bb:f6:7c:f6:77:d5:17:f3:07:d3:96:fc:70:07:3e: 33:34:5f:e8:b4:f4:39:80:a6:91:25:7c:14:0d:e8: 2c:d4:31:9a:1c:1a:63:23:44:20:7d:a0:85:89:4f: 11:5e:f4:3e:42:b1:72:8f:98:9d:c0:33:bd:b3:28: 41:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:F8:95:D5:71:A2:96:FF:DF:F0:D3:2E:83:D5:B6:DA:2E:14:82:51 X509v3 Authority Key Identifier: keyid:2E:83:B1:79:3F:A2:E1:8A:41:37:A6:6A:09:21:63:F5:DA:BD:45:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E83B1793FA2E18A4137A66A092163F5DABD45F0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:7d:6d:6d:6f:3b:5b:51:e5:31:3f:5d:59:82:d6:c0:37:04: 88:40:87:14:8f:1b:96:1f:f1:c0:dd:e9:87:54:3e:9c:6a:43: fd:12:08:3a:fa:25:c3:f9:a5:52:9b:0b:24:59:54:33:52:13: 36:7c:e2:20:76:c9:9b:c1:8a:d1:bd:96:98:54:f3:32:ed:5c: cd:0d:b9:81:d7:4f:7d:15:22:77:25:6e:52:52:2a:43:53:c2: b3:fc:f7:11:66:69:ed:10:5f:04:9d:14:8f:1b:b6:94:b7:0d: 7d:9a:3a:a8:4e:f4:36:fb:7c:26:88:9e:08:4c:d5:b2:a5:98: 39:c2:42:57:e0:ba:41:24:0b:85:25:a5:ba:7a:cd:ec:89:e0: 8e:fa:24:be:dd:54:d7:f9:1a:ba:ed:27:ca:bd:03:90:bd:73: ae:45:53:3e:de:df:58:4f:7a:39:7f:8f:92:06:69:96:eb:85: d7:b3:2e:66:79:6b:ba:59:2e:45:c1:46:6b:24:80:bc:2b:da: 32:45:fc:7e:99:13:ab:0c:57:fb:6b:5d:76:9e:13:06:70:a9: 2a:d0:65:01:72:47:fd:92:e6:46:03:3f:19:10:3a:7f:d1:5d: 07:60:0e:05:37:63:aa:44:56:eb:7e:b1:5a:eb:1d:e3:42:ee: 84:32:e1:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDfRRsUV3w9TrxMDelUm68zeICPUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU4M0IxNzkzRkEyRTE4QTQxMzdBNjZBMDkyMTYzRjVE QUJENDVGMDAeFw0yNTA0MjUxNjI2MTVaFw0yNTA0MjkwMjI0MTVaMDMxMTAvBgNV BAMTKDAzRjg5NUQ1NzFBMjk2RkZERkYwRDMyRTgzRDVCNkRBMkUxNDgyNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiSZVVbhlj7/c4sAJeIw3i6oNJ 2XH+sDkLatOb4WyH67qRvDNV5RQayC9LVJEij/pOp/B69NcqtghKZ7gpcePjd0KQ uLq2Xlg7Hs5U4eHRsUNcVTv8MDyBdbfs/kHHLBg9eJ++tLL0Ljgy6oiSkSlNH6bd 9Jm774QPfHVAsMO79OMVBLjMLnjEFQjBFNtfNWbejj/vlTSRpNSCMVsedrljnXCG 9X7L73A3YVk+LpA3F3q+S/7vAouGrCBh2vJdG1JnIbv2fPZ31RfzB9OW/HAHPjM0 X+i09DmAppElfBQN6CzUMZocGmMjRCB9oIWJTxFe9D5CsXKPmJ3AM72zKEGtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA/iV1XGilv/f8NMug9W22i4UglEwHwYDVR0j BBgwFoAULoOxeT+i4YpBN6ZqCSFj9dq9RfAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YWVjYjAwMi0yNGE0LTQ5NTUtYTMzMy0wMDJmZGI3NDU1M2YvMC8yRTgzQjE3OTNG QTJFMThBNDEzN0E2NkEwOTIxNjNGNURBQkQ0NUYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkU4M0IxNzkzRkEyRTE4QTQxMzdBNjZBMDkyMTYzRjVEQUJE NDVGMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2FlY2IwMDItMjRhNC00OTU1LWEz MzMtMDAyZmRiNzQ1NTNmLzAvMkU4M0IxNzkzRkEyRTE4QTQxMzdBNjZBMDkyMTYz RjVEQUJENDVGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIN9bW1vO1tR5TE/XVmC1sA3BIhAhxSPG5Yf 8cDd6YdUPpxqQ/0SCDr6JcP5pVKbCyRZVDNSEzZ84iB2yZvBitG9lphU8zLtXM0N uYHXT30VInclblJSKkNTwrP89xFmae0QXwSdFI8btpS3DX2aOqhO9Db7fCaInghM 1bKlmDnCQlfgukEkC4Ulpbp6zeyJ4I76JL7dVNf5GrrtJ8q9A5C9c65FUz7e31hP ejl/j5IGaZbrhdezLmZ5a7pZLkXBRmskgLwr2jJF/H6ZE6sMV/trXXaeEwZwqSrQ ZQFyR/2S5kYDPxkQOn/RXQdgDgU3Y6pEVut+sVrrHeNC7oQy4R0= -----END CERTIFICATE-----Generated at Fri Apr 25 19:23:50 2025 by rpki-client on console.sobornost.net