$ rpki-client -vvf repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.mft File: 1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.mft (raw, json) Hash identifier: ZxUj1wrcMj0BqbmZWWFIIESMtPC2LucxwZ2TU0PnLHw= Subject key identifier: B5:20:04:12:8B:41:85:41:57:B9:13:5D:15:C2:C6:3E:F9:88:50:E2 Authority key identifier: 1D:8D:9C:BC:52:93:4E:F0:2B:CD:1D:47:8A:EB:A6:A3:68:F8:04:19 Certificate issuer: /CN=1D8D9CBC52934EF02BCD1D478AEBA6A368F80419 Certificate serial: 1306E1CEC7DBF87F273688EADBA5C2CD071FC81A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.mft Manifest number: 0499 Signing time: Wed 23 Apr 2025 21:11:45 +0000 Manifest this update: Wed 23 Apr 2025 21:06:45 +0000 Manifest next update: Sun 27 Apr 2025 00:29:45 +0000 Files and hashes: 1: 323430363a376234303a3a2f33322d3438203d3e203538383231.roa (hash: UaGmn4kTfe+1TDn5eCuN9O53yKjU57F4Hz3jxRXHWWY=) 2: 3130332e3135362e31342e302f32332d3234203d3e203538383231.roa (hash: uhbTS40xOE2iorcFCGhU6uKqyXCDewHO7yiFkBSc5gw=) 3: 1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.crl (hash: ZEtBUnbOaqAXRwNWcAHZJnXel3Hv25kQgvcrTmtgrjc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.crl rsync://repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 00:29:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:06:e1:ce:c7:db:f8:7f:27:36:88:ea:db:a5:c2:cd:07:1f:c8:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D8D9CBC52934EF02BCD1D478AEBA6A368F80419 Validity Not Before: Apr 23 21:06:45 2025 GMT Not After : Apr 27 00:29:45 2025 GMT Subject: CN=B52004128B41854157B9135D15C2C63EF98850E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:99:bd:a8:c8:59:bb:e2:51:38:a3:e4:1b:cb: df:b9:48:ad:05:6d:40:b3:cb:50:b7:ba:72:b5:7f: 05:53:9a:8d:a8:89:bf:11:63:2c:69:f4:8d:3b:38: ce:b2:e6:1f:8a:da:8a:c2:58:9f:f1:81:17:87:32: 5e:2d:21:f2:a2:45:56:ad:89:b4:a1:40:4e:ca:c0: 63:ee:70:ed:b1:e7:ee:18:03:f6:c9:e4:ce:4e:1e: 8f:b9:29:d2:8f:ed:7b:bb:10:2a:45:ae:e4:43:c5: 9d:f2:33:8f:7a:e7:70:6d:f8:f1:f6:87:96:79:a2: 7d:4a:cb:55:fd:25:db:7a:91:5f:b0:6f:6e:92:c5: 2d:c5:62:a1:e5:ae:b3:08:a6:bc:75:18:c2:9a:7f: dd:92:99:88:f7:42:81:db:ad:a2:d6:1f:36:92:c9: cd:fd:7b:81:96:48:57:17:05:b1:d8:48:f5:d5:43: 9c:bb:7b:62:1d:f4:4d:29:c2:3b:c1:aa:52:33:3b: 05:75:c0:a8:b5:89:9e:f3:df:77:e3:d8:c7:77:19: 57:3b:ae:07:44:ed:06:93:b0:0e:47:b0:02:39:91: 23:d6:a2:5b:b2:bf:aa:ea:61:ae:62:31:b8:e3:04: 59:42:4d:ca:4b:ef:49:6a:05:8e:c7:32:73:3b:cb: 07:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:20:04:12:8B:41:85:41:57:B9:13:5D:15:C2:C6:3E:F9:88:50:E2 X509v3 Authority Key Identifier: keyid:1D:8D:9C:BC:52:93:4E:F0:2B:CD:1D:47:8A:EB:A6:A3:68:F8:04:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:f3:58:d8:01:49:87:4c:2a:0d:98:5a:70:fe:96:a1:2e:3f: 52:64:92:b9:76:8b:96:6d:47:31:e4:7b:cf:40:f1:f6:71:a6: 10:78:0e:3b:20:d4:72:67:b9:c3:7e:81:0e:25:54:52:88:3b: 5d:85:f7:01:ab:4b:02:83:99:54:ce:1b:dd:23:34:55:69:53: e8:df:b1:14:51:d8:b1:9d:67:17:11:64:4e:6a:f3:ce:b1:3c: 22:e7:59:79:aa:63:17:be:e9:95:7c:8f:1f:d5:2b:2b:4a:f8: 42:3c:aa:16:7d:2f:c6:3b:fd:07:2f:c7:9d:bb:cc:67:2e:d3: 4c:05:a4:db:4c:18:34:01:6e:31:2a:0a:f6:a5:a8:a1:75:f6: 1a:60:fe:73:29:c7:b7:8a:db:e4:5e:43:5f:ca:ea:a9:e7:40: f4:d8:b1:4e:cd:6d:8b:31:f9:31:71:d1:e7:b2:1f:b1:6e:b1: c4:3a:f4:bb:d9:79:3d:4e:62:ad:ee:b7:c1:a3:6b:25:4c:7f: 5b:19:05:2b:d9:18:75:19:3c:2e:03:3e:ef:4a:0c:4f:e1:47: 6c:fb:25:d0:15:1a:25:52:2a:44:5d:36:ad:88:46:84:4d:04: 27:7b:d0:8d:fd:e5:53:66:d1:d6:cf:ac:79:1a:45:59:dc:14: c4:3e:36:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEwbhzsfb+H8nNojq26XCzQcfyBowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ4RDlDQkM1MjkzNEVGMDJCQ0QxRDQ3OEFFQkE2QTM2 OEY4MDQxOTAeFw0yNTA0MjMyMTA2NDVaFw0yNTA0MjcwMDI5NDVaMDMxMTAvBgNV BAMTKEI1MjAwNDEyOEI0MTg1NDE1N0I5MTM1RDE1QzJDNjNFRjk4ODUwRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYmb2oyFm74lE4o+Qby9+5SK0F bUCzy1C3unK1fwVTmo2oib8RYyxp9I07OM6y5h+K2orCWJ/xgReHMl4tIfKiRVat ibShQE7KwGPucO2x5+4YA/bJ5M5OHo+5KdKP7Xu7ECpFruRDxZ3yM49653Bt+PH2 h5Z5on1Ky1X9Jdt6kV+wb26SxS3FYqHlrrMIprx1GMKaf92SmYj3QoHbraLWHzaS yc39e4GWSFcXBbHYSPXVQ5y7e2Id9E0pwjvBqlIzOwV1wKi1iZ7z33fj2Md3GVc7 rgdE7QaTsA5HsAI5kSPWoluyv6rqYa5iMbjjBFlCTcpL70lqBY7HMnM7ywezAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtSAEEotBhUFXuRNdFcLGPvmIUOIwHwYDVR0j BBgwFoAUHY2cvFKTTvArzR1Hiuumo2j4BBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZTFlYTUxMy1hYzZlLTRhNWYtYjNlYi1kNTM1MmNhZjQ4NmIvMC8xRDhEOUNCQzUy OTM0RUYwMkJDRDFENDc4QUVCQTZBMzY4RjgwNDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQ4RDlDQkM1MjkzNEVGMDJCQ0QxRDQ3OEFFQkE2QTM2OEY4 MDQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2UxZWE1MTMtYWM2ZS00YTVmLWIz ZWItZDUzNTJjYWY0ODZiLzAvMUQ4RDlDQkM1MjkzNEVGMDJCQ0QxRDQ3OEFFQkE2 QTM2OEY4MDQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACLzWNgBSYdMKg2YWnD+lqEuP1Jkkrl2i5Zt RzHke89A8fZxphB4Djsg1HJnucN+gQ4lVFKIO12F9wGrSwKDmVTOG90jNFVpU+jf sRRR2LGdZxcRZE5q886xPCLnWXmqYxe+6ZV8jx/VKytK+EI8qhZ9L8Y7/Qcvx527 zGcu00wFpNtMGDQBbjEqCvalqKF19hpg/nMpx7eK2+ReQ1/K6qnnQPTYsU7NbYsx +TFx0eeyH7FuscQ69LvZeT1OYq3ut8GjayVMf1sZBSvZGHUZPC4DPu9KDE/hR2z7 JdAVGiVSKkRdNq2IRoRNBCd70I395VNm0dbPrHkaRVncFMQ+Ngg= -----END CERTIFICATE-----Generated at Thu Apr 24 01:45:22 2025 by rpki-client on console.sobornost.net