$ rpki-client -vvf repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft File: D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft (raw, json) Hash identifier: PZRWUeFhZJivfZ2NxLWv/GJ0w/FdlDYzwnqC7CiEJn4= Subject key identifier: 4B:A4:0B:3B:B2:90:B4:10:6A:E2:C2:06:FC:91:BA:9B:AA:01:E9:8B Authority key identifier: D9:47:E8:BE:AE:01:A6:71:0E:32:4C:D4:16:D3:28:2A:DD:FB:BF:E9 Certificate issuer: /CN=D947E8BEAE01A6710E324CD416D3282ADDFBBFE9 Certificate serial: 3321285A6904E785B26437F584F63F76EB60EC0B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft Manifest number: 014D Signing time: Thu 24 Apr 2025 21:01:42 +0000 Manifest this update: Thu 24 Apr 2025 20:56:42 +0000 Manifest next update: Mon 28 Apr 2025 00:02:42 +0000 Files and hashes: 1: 3130332e3133302e3131372e302f32342d3234203d3e203435333035.roa (hash: 64hkXaMmv8q9lQyKvexZaickn9WEOo3hlnxK+RI4sN8=) 2: 3130332e3133302e3131362e302f32342d3234203d3e203435333035.roa (hash: 4Vd8P2QZRrVwjwwfWNA03SkDkSQgcKvmELrI6u40LK8=) 3: D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.crl (hash: CE9zbq4Qkig+uGuFjEKzxnNV9hh/2ldF202E9Npwl3Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.crl rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:21:28:5a:69:04:e7:85:b2:64:37:f5:84:f6:3f:76:eb:60:ec:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D947E8BEAE01A6710E324CD416D3282ADDFBBFE9 Validity Not Before: Apr 24 20:56:42 2025 GMT Not After : Apr 28 00:02:42 2025 GMT Subject: CN=4BA40B3BB290B4106AE2C206FC91BA9BAA01E98B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2e:7c:0f:d3:1b:5d:6e:18:d4:90:24:ac:59: 7e:7e:15:1c:fd:70:65:4d:18:a8:1d:51:d0:2e:70: 51:7d:5d:f9:08:0c:42:25:a9:01:8a:81:1d:12:05: 3c:60:fa:99:4d:1f:0f:a9:1e:13:76:a0:33:96:6b: 1a:6d:6d:f0:3a:5d:52:82:5d:44:59:d5:f0:91:34: 51:18:40:13:46:b8:2e:ed:cf:13:03:9e:1d:3c:b1: 2a:da:fb:2f:9b:9f:17:28:45:b7:a0:0f:12:0f:0f: 4e:c6:47:68:a5:dc:78:3a:56:a0:2f:84:1d:24:85: 52:db:8d:bb:cd:50:b5:bc:db:f0:23:d9:a3:b9:10: 19:9a:e6:3a:0d:b1:c7:15:6f:5d:a8:b6:72:e0:61: d5:f4:82:fc:05:c3:c9:52:21:78:ec:d4:c5:14:4a: f2:b1:21:a7:62:75:78:0e:de:7b:3a:d0:58:ef:73: 9f:a3:f8:49:c4:cb:91:72:74:31:be:f6:c2:39:14: 11:2b:55:67:c7:a1:71:11:06:47:f5:5a:b5:c6:41: 68:59:05:f9:77:4c:30:24:ca:66:59:b2:37:f8:36: 95:6e:55:6c:7b:7a:2e:1e:8a:16:96:49:11:07:81: 4d:a5:dd:1c:a8:94:08:c6:84:1b:38:42:33:f9:b8: 7a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:A4:0B:3B:B2:90:B4:10:6A:E2:C2:06:FC:91:BA:9B:AA:01:E9:8B X509v3 Authority Key Identifier: keyid:D9:47:E8:BE:AE:01:A6:71:0E:32:4C:D4:16:D3:28:2A:DD:FB:BF:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:fe:84:f0:e5:87:5a:02:95:18:d2:7d:f8:fd:77:e2:fb:63: b5:42:a1:ab:af:ec:47:d9:a9:85:61:45:49:0f:23:33:a8:a9: 08:02:26:50:c5:84:7a:fb:7c:f1:b2:c5:d4:dd:c4:f5:f5:bd: 02:9c:cb:c4:b2:c7:2c:a9:01:cf:19:f9:0b:c1:3b:94:9f:4a: b7:fd:8d:c0:1d:20:17:8d:c1:fe:ff:33:a0:51:15:01:39:bf: 3b:bc:15:6a:79:c6:c0:c9:8b:26:bd:2a:9c:e6:a1:c2:2c:50: ee:ad:c6:b7:b1:42:79:6b:d1:fc:6a:dc:48:6a:1c:29:cd:83: 9b:f7:ca:5e:cc:37:52:03:50:76:6f:fa:be:c3:0d:e4:79:f9: 70:24:39:90:13:d2:b1:ce:97:f6:6f:72:a2:e9:d4:4b:30:e1: 9c:41:19:b6:37:fd:d8:0b:2e:a3:dd:a4:1f:fd:2b:01:d9:f4: 35:00:78:a8:33:0a:c1:67:c6:d1:d0:70:d2:fc:f3:f4:0d:1a: cc:1a:82:ab:22:3d:0c:29:22:c0:f9:7a:9d:6d:a7:60:72:24: d2:c8:ca:cf:17:32:85:fe:1f:26:93:04:dd:a4:32:4e:4f:0c: bb:4a:14:01:3f:83:85:d3:d5:51:9a:9e:6e:df:9a:eb:a8:2c: 6c:be:20:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMyEoWmkE54WyZDf1hPY/dutg7AswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDk0N0U4QkVBRTAxQTY3MTBFMzI0Q0Q0MTZEMzI4MkFE REZCQkZFOTAeFw0yNTA0MjQyMDU2NDJaFw0yNTA0MjgwMDAyNDJaMDMxMTAvBgNV BAMTKDRCQTQwQjNCQjI5MEI0MTA2QUUyQzIwNkZDOTFCQTlCQUEwMUU5OEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9LnwP0xtdbhjUkCSsWX5+FRz9 cGVNGKgdUdAucFF9XfkIDEIlqQGKgR0SBTxg+plNHw+pHhN2oDOWaxptbfA6XVKC XURZ1fCRNFEYQBNGuC7tzxMDnh08sSra+y+bnxcoRbegDxIPD07GR2il3Hg6VqAv hB0khVLbjbvNULW82/Aj2aO5EBma5joNsccVb12otnLgYdX0gvwFw8lSIXjs1MUU SvKxIadidXgO3ns60Fjvc5+j+EnEy5FydDG+9sI5FBErVWfHoXERBkf1WrXGQWhZ Bfl3TDAkymZZsjf4NpVuVWx7ei4eihaWSREHgU2l3RyolAjGhBs4QjP5uHoBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS6QLO7KQtBBq4sIG/JG6m6oB6YswHwYDVR0j BBgwFoAU2Ufovq4BpnEOMkzUFtMoKt37v+kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZmZkYzJiNy1mMzA1LTRlMDctYWFjNS00NjllOTExM2IwYjQvMC9EOTQ3RThCRUFF MDFBNjcxMEUzMjRDRDQxNkQzMjgyQURERkJCRkU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDk0N0U4QkVBRTAxQTY3MTBFMzI0Q0Q0MTZEMzI4MkFEREZC QkZFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2ZmZGMyYjctZjMwNS00ZTA3LWFh YzUtNDY5ZTkxMTNiMGI0LzAvRDk0N0U4QkVBRTAxQTY3MTBFMzI0Q0Q0MTZEMzI4 MkFEREZCQkZFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACX+hPDlh1oClRjSffj9d+L7Y7VCoauv7EfZ qYVhRUkPIzOoqQgCJlDFhHr7fPGyxdTdxPX1vQKcy8SyxyypAc8Z+QvBO5SfSrf9 jcAdIBeNwf7/M6BRFQE5vzu8FWp5xsDJiya9KpzmocIsUO6txrexQnlr0fxq3Ehq HCnNg5v3yl7MN1IDUHZv+r7DDeR5+XAkOZAT0rHOl/ZvcqLp1Esw4ZxBGbY3/dgL LqPdpB/9KwHZ9DUAeKgzCsFnxtHQcNL88/QNGswagqsiPQwpIsD5ep1tp2ByJNLI ys8XMoX+HyaTBN2kMk5PDLtKFAE/g4XT1VGanm7fmuuoLGy+IIY= -----END CERTIFICATE-----Generated at Fri Apr 25 00:06:29 2025 by rpki-client on console.sobornost.net