$ rpki-client -vvf repo-rpki.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.mft File: 20B15C95FA3351402D60E968AD1D9ECD289ABFF9.mft (raw, json) Hash identifier: TcunAOWgNmT1EEPUEZq6kT6FrRIN/1eiYfVbErcshAg= Subject key identifier: 24:88:E0:F2:59:67:0D:B7:B3:2E:11:3B:A4:67:1E:A0:22:FD:02:E7 Authority key identifier: 20:B1:5C:95:FA:33:51:40:2D:60:E9:68:AD:1D:9E:CD:28:9A:BF:F9 Certificate issuer: /CN=20B15C95FA3351402D60E968AD1D9ECD289ABFF9 Certificate serial: 7B489815F5E2ADFFBFA518B676E9A0B6E47049E7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.mft Manifest number: 044D Signing time: Fri 25 Apr 2025 05:30:46 +0000 Manifest this update: Fri 25 Apr 2025 05:25:46 +0000 Manifest next update: Mon 28 Apr 2025 12:49:46 +0000 Files and hashes: 1: 3130332e3136322e312e302f32342d3234203d3e2036393339.roa (hash: fzXYj+/Wlk2+pHJ1gJZrQ6X0Tnu8HMMmPoocnHTOJ8E=) 2: 3130332e3136322e302e302f32332d3233203d3e20313431363334.roa (hash: 3OXjddu9GYm+pnGIRRvw8uTtgTnaQOQocX2ZWf81HfA=) 3: 3130332e3136322e312e302f32342d3234203d3e20313431363334.roa (hash: WZEcRoBw5pAR5VSb916+kaVDUlS4wq/ib5rS3X/sotw=) 4: 20B15C95FA3351402D60E968AD1D9ECD289ABFF9.crl (hash: UKvPSfzp8ILdvumtpZYDdbNPI63BA+4i0+s50HboGnI=) 5: 3130332e3136322e302e302f32342d3234203d3e20313431363334.roa (hash: UmfhnL8RZYJSndBdwe7iI677EbidAY8O+tflsfoU+/Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.crl rsync://repo-rpki.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:48:98:15:f5:e2:ad:ff:bf:a5:18:b6:76:e9:a0:b6:e4:70:49:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20B15C95FA3351402D60E968AD1D9ECD289ABFF9 Validity Not Before: Apr 25 05:25:46 2025 GMT Not After : Apr 28 12:49:46 2025 GMT Subject: CN=2488E0F259670DB7B32E113BA4671EA022FD02E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4d:cd:db:bc:06:a8:eb:97:d6:14:ed:fe:2a: 62:ce:69:1a:0b:b4:e3:c9:94:4a:1b:7b:d6:1b:bb: 22:a8:23:3a:5b:e0:1c:7f:5e:44:a2:50:00:52:5b: bd:32:7b:eb:00:51:6b:01:4a:5c:a4:38:bb:7f:54: 0c:b0:30:28:1e:53:14:38:ed:50:ea:18:ec:ac:09: 61:81:31:48:dc:23:4d:07:ab:61:95:d8:cc:64:a5: 88:af:3e:c9:ce:c0:c7:00:5e:fc:8f:48:cf:24:b3: 9d:a2:30:00:d1:12:6e:d6:44:05:d7:d4:c4:4a:e9: 7d:9c:6b:c3:ff:71:d4:64:74:d4:54:37:07:a5:4b: d4:52:7a:d7:99:f6:62:02:cd:38:06:c5:c9:5a:8c: d4:ff:8f:ee:ef:c5:6e:3b:bd:97:ba:00:31:8f:cb: 6c:09:6b:c2:16:35:8e:d6:c9:65:1c:89:55:48:68: 12:a8:88:65:a4:bc:ad:46:55:f0:44:ea:89:3f:ef: 80:fa:d2:81:64:9a:12:8d:9a:fd:32:65:99:18:97: f8:f5:c6:a8:08:70:fc:32:9b:cf:09:be:be:cd:ed: 75:42:d5:d9:15:67:9d:bb:2d:fd:d2:66:33:d3:7f: 81:e5:ae:a9:09:00:b4:47:fc:ca:38:79:00:97:36: d9:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:88:E0:F2:59:67:0D:B7:B3:2E:11:3B:A4:67:1E:A0:22:FD:02:E7 X509v3 Authority Key Identifier: keyid:20:B1:5C:95:FA:33:51:40:2D:60:E9:68:AD:1D:9E:CD:28:9A:BF:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:e5:a0:a4:31:4d:2b:4a:dd:b3:18:07:01:a2:9c:3d:82:02: b7:c1:e7:bc:92:82:d3:3a:b4:87:be:3b:08:b8:7a:32:4a:ef: ed:36:81:35:78:a7:da:82:5f:89:48:27:df:62:5c:13:04:dc: d8:2f:31:d0:5f:83:82:0f:71:47:7d:58:7a:c8:09:6b:62:58: bd:fd:3d:71:9d:f0:32:62:51:e1:f4:b8:bf:32:15:ca:3b:f8: ff:e7:cf:d6:08:a4:6c:af:a5:57:0a:21:1c:db:1e:1b:ff:52: 9c:1c:73:c1:e4:95:3b:72:b8:c3:5b:4c:b3:37:48:31:bc:86: fe:40:64:31:eb:5a:cf:07:31:fa:52:a2:58:23:8c:cb:ac:19: de:1d:cb:33:7c:73:f3:30:1b:05:74:7a:4a:45:d4:e4:ce:a9: ec:9f:f0:f5:ae:d4:62:52:f9:01:05:a0:9a:3d:5b:82:4b:62: da:a4:99:bd:82:db:52:64:f2:8a:21:1a:19:94:79:ad:9d:a6: 37:ad:f7:c6:eb:24:b1:4f:cb:6b:b9:ce:1b:0a:db:04:1e:24: 50:db:fd:d0:c0:83:f4:db:a8:76:f2:07:b6:01:a3:83:08:ad: 04:4f:7b:9f:18:8e:d4:a2:94:b5:cc:d8:cd:5d:c8:30:9d:7a: 11:28:91:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe0iYFfXirf+/pRi2dumgtuRwSecwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBCMTVDOTVGQTMzNTE0MDJENjBFOTY4QUQxRDlFQ0Qy ODlBQkZGOTAeFw0yNTA0MjUwNTI1NDZaFw0yNTA0MjgxMjQ5NDZaMDMxMTAvBgNV BAMTKDI0ODhFMEYyNTk2NzBEQjdCMzJFMTEzQkE0NjcxRUEwMjJGRDAyRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDITc3bvAao65fWFO3+KmLOaRoL tOPJlEobe9YbuyKoIzpb4Bx/XkSiUABSW70ye+sAUWsBSlykOLt/VAywMCgeUxQ4 7VDqGOysCWGBMUjcI00Hq2GV2MxkpYivPsnOwMcAXvyPSM8ks52iMADREm7WRAXX 1MRK6X2ca8P/cdRkdNRUNwelS9RSeteZ9mICzTgGxclajNT/j+7vxW47vZe6ADGP y2wJa8IWNY7WyWUciVVIaBKoiGWkvK1GVfBE6ok/74D60oFkmhKNmv0yZZkYl/j1 xqgIcPwym88Jvr7N7XVC1dkVZ527Lf3SZjPTf4HlrqkJALRH/Mo4eQCXNtnDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJIjg8llnDbezLhE7pGceoCL9AucwHwYDVR0j BBgwFoAUILFclfozUUAtYOlorR2ezSiav/kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MTQxOTNjNC00YWJkLTRlMmMtYTFkMC0xYjVjZTMyZTQyMGIvMC8yMEIxNUM5NUZB MzM1MTQwMkQ2MEU5NjhBRDFEOUVDRDI4OUFCRkY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjBCMTVDOTVGQTMzNTE0MDJENjBFOTY4QUQxRDlFQ0QyODlB QkZGOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDE0MTkzYzQtNGFiZC00ZTJjLWEx ZDAtMWI1Y2UzMmU0MjBiLzAvMjBCMTVDOTVGQTMzNTE0MDJENjBFOTY4QUQxRDlF Q0QyODlBQkZGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKjloKQxTStK3bMYBwGinD2CArfB57ySgtM6 tIe+Owi4ejJK7+02gTV4p9qCX4lIJ99iXBME3NgvMdBfg4IPcUd9WHrICWtiWL39 PXGd8DJiUeH0uL8yFco7+P/nz9YIpGyvpVcKIRzbHhv/Upwcc8HklTtyuMNbTLM3 SDG8hv5AZDHrWs8HMfpSolgjjMusGd4dyzN8c/MwGwV0ekpF1OTOqeyf8PWu1GJS +QEFoJo9W4JLYtqkmb2C21Jk8oohGhmUea2dpjet98brJLFPy2u5zhsK2wQeJFDb /dDAg/TbqHbyB7YBo4MIrQRPe58YjtSilLXM2M1dyDCdehEokY8= -----END CERTIFICATE-----Generated at Fri Apr 25 08:21:09 2025 by rpki-client on console.sobornost.net