$ rpki-client -vvf repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.mft File: D2EF21DBD545255BED30EEC34623F204A3E12D23.mft (raw, json) Hash identifier: 1anYjZjdG108GYaB1xFW5T/e3+22Zow4anWymgjpyYk= Subject key identifier: B4:D6:FC:98:8F:03:1B:75:37:00:6A:C9:7C:B7:00:87:BB:37:22:6E Authority key identifier: D2:EF:21:DB:D5:45:25:5B:ED:30:EE:C3:46:23:F2:04:A3:E1:2D:23 Certificate issuer: /CN=D2EF21DBD545255BED30EEC34623F204A3E12D23 Certificate serial: 4B27F75912D9639D99004A87159C2E38ABC575CB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EF21DBD545255BED30EEC34623F204A3E12D23.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.mft Manifest number: 04C7 Signing time: Sun 27 Apr 2025 20:31:09 +0000 Manifest this update: Sun 27 Apr 2025 20:26:09 +0000 Manifest next update: Thu 01 May 2025 01:59:09 +0000 Files and hashes: 1: 323430323a316134303a3a2f33322d3332203d3e20313336383639.roa (hash: M8G7fg26FDnNwWV4HPrq23C/br3Zk2rCpobcnxBUCyY=) 2: 3130332e3130342e3230362e302f32342d3234203d3e20313336383639.roa (hash: 5DrcuSL2kj2578vfxL+VIIRLyXGA+oCNPnvjmoU21cs=) 3: 3130332e3130342e3230352e302f32342d3234203d3e20313336383639.roa (hash: iNjcB0kWnopXWaRjUuHXoGmYpnB3R6bix+q7nd5LKus=) 4: 3130332e3130342e3230372e302f32342d3234203d3e20313336383639.roa (hash: D3QpbLwBuqBnzghQzR94brnrZBQs5SslJENq3gZzkrM=) 5: D2EF21DBD545255BED30EEC34623F204A3E12D23.crl (hash: R8akiUF5rar6UGjofDcid0fFJnitPsJ2cJ7ErNIV7T4=) 6: 3130332e3130342e3230342e302f32342d3234203d3e20313336383639.roa (hash: hQDC9v2yWbYZiHxog5fWu9s3/ZtDVdDk75QTAxXB7es=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.crl rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EF21DBD545255BED30EEC34623F204A3E12D23.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 01:59:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:27:f7:59:12:d9:63:9d:99:00:4a:87:15:9c:2e:38:ab:c5:75:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2EF21DBD545255BED30EEC34623F204A3E12D23 Validity Not Before: Apr 27 20:26:09 2025 GMT Not After : May 1 01:59:09 2025 GMT Subject: CN=B4D6FC988F031B7537006AC97CB70087BB37226E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:66:18:88:3d:02:e6:93:f2:b4:01:36:ee:c1: ce:b5:aa:84:8b:51:b4:47:08:dc:55:6c:fe:79:be: b7:7b:43:6c:3c:f3:db:cb:de:aa:bb:53:9c:58:05: 83:eb:eb:f0:9d:cc:fb:97:32:c6:f5:0e:19:5e:f9: b7:a0:91:1a:76:0c:f7:46:c2:db:14:a6:03:22:4b: 99:3d:fb:8b:b5:22:83:55:8c:01:03:f2:dd:31:13: 42:70:39:61:f1:6c:96:a9:be:45:9c:97:95:dd:3c: 70:49:ba:a6:2d:50:8d:82:fb:c4:1d:8e:3d:5d:fa: ff:23:15:f8:13:7f:0a:5e:f6:01:4c:c8:84:5c:9e: 92:33:2f:59:42:25:6e:11:d3:cb:a6:59:02:29:6b: 5d:84:3c:1d:89:b3:ec:9a:e3:9b:8c:d1:f9:5d:9e: dd:fa:a5:69:46:39:df:7a:ff:b0:6e:7d:62:35:96: 5d:b0:ee:18:55:d3:84:44:f9:f6:87:cf:14:61:57: 15:18:a7:98:e7:5f:66:0c:86:8b:62:19:fe:f3:83: d7:3e:07:07:e9:c6:ad:64:f4:e7:cc:2f:9a:53:bc: 92:67:fc:5c:30:44:70:ce:ce:88:88:ab:69:6a:7f: 5f:12:c1:50:96:91:86:83:34:35:e2:79:8b:8d:12: 5f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:D6:FC:98:8F:03:1B:75:37:00:6A:C9:7C:B7:00:87:BB:37:22:6E X509v3 Authority Key Identifier: keyid:D2:EF:21:DB:D5:45:25:5B:ED:30:EE:C3:46:23:F2:04:A3:E1:2D:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EF21DBD545255BED30EEC34623F204A3E12D23.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:9e:09:fb:37:4e:f4:44:28:a4:ee:ab:b1:ee:cb:17:0e:f9: 44:4b:a7:5f:d8:af:fe:ad:4f:3c:86:b7:35:f3:4f:61:1e:87: c4:35:9b:c5:e2:9d:b9:65:09:d0:41:57:0d:f5:46:fc:3b:68: 4c:61:b8:80:f6:b2:ae:87:88:02:22:98:11:83:69:dd:80:bd: cd:ba:1a:a2:07:90:5e:b1:c3:a0:da:d3:6f:f8:47:4a:42:ef: 18:a7:18:80:d5:b9:47:3a:c2:87:d4:af:27:70:29:4e:66:dd: be:c2:87:7c:42:89:25:13:97:bd:7e:ba:f2:0f:f2:25:38:32: 3c:ff:32:6a:3b:51:da:10:b2:a3:ae:ad:10:69:0e:7d:e4:71: 44:34:6d:ff:77:dd:55:17:82:a4:30:01:1e:37:d1:b3:71:72: 93:65:dd:9f:82:91:9d:1a:81:3e:b9:52:ff:3a:d2:65:72:c6: 90:c5:52:50:1a:58:b4:20:fb:c9:06:5c:1b:24:54:06:ca:41: 9a:52:a2:16:2a:8f:03:ec:25:9c:89:f9:67:b9:30:a0:eb:ab: af:1b:e5:92:e2:74:f9:1d:8d:8e:f0:94:4b:a3:84:d8:a3:54: 4c:bf:f5:e8:8c:69:67:db:b5:69:15:4c:b8:a2:5e:f9:9f:38: b0:99:24:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSyf3WRLZY52ZAEqHFZwuOKvFdcswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDJFRjIxREJENTQ1MjU1QkVEMzBFRUMzNDYyM0YyMDRB M0UxMkQyMzAeFw0yNTA0MjcyMDI2MDlaFw0yNTA1MDEwMTU5MDlaMDMxMTAvBgNV BAMTKEI0RDZGQzk4OEYwMzFCNzUzNzAwNkFDOTdDQjcwMDg3QkIzNzIyNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6ZhiIPQLmk/K0ATbuwc61qoSL UbRHCNxVbP55vrd7Q2w889vL3qq7U5xYBYPr6/CdzPuXMsb1Dhle+begkRp2DPdG wtsUpgMiS5k9+4u1IoNVjAED8t0xE0JwOWHxbJapvkWcl5XdPHBJuqYtUI2C+8Qd jj1d+v8jFfgTfwpe9gFMyIRcnpIzL1lCJW4R08umWQIpa12EPB2Js+ya45uM0fld nt36pWlGOd96/7BufWI1ll2w7hhV04RE+faHzxRhVxUYp5jnX2YMhotiGf7zg9c+ Bwfpxq1k9OfML5pTvJJn/FwwRHDOzoiIq2lqf18SwVCWkYaDNDXieYuNEl/NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtNb8mI8DG3U3AGrJfLcAh7s3Im4wHwYDVR0j BBgwFoAU0u8h29VFJVvtMO7DRiPyBKPhLSMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MjMxZTZiMS0xODQxLTQ3NmQtYjQ2Yi1iNDRiOWNiOTY4YjAvMC9EMkVGMjFEQkQ1 NDUyNTVCRUQzMEVFQzM0NjIzRjIwNEEzRTEyRDIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDJFRjIxREJENTQ1MjU1QkVEMzBFRUMzNDYyM0YyMDRBM0Ux MkQyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDIzMWU2YjEtMTg0MS00NzZkLWI0 NmItYjQ0YjljYjk2OGIwLzAvRDJFRjIxREJENTQ1MjU1QkVEMzBFRUMzNDYyM0Yy MDRBM0UxMkQyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI+eCfs3TvREKKTuq7HuyxcO+URLp1/Yr/6t TzyGtzXzT2Eeh8Q1m8XinbllCdBBVw31Rvw7aExhuID2sq6HiAIimBGDad2Avc26 GqIHkF6xw6Da02/4R0pC7xinGIDVuUc6wofUrydwKU5m3b7Ch3xCiSUTl71+uvIP 8iU4Mjz/Mmo7UdoQsqOurRBpDn3kcUQ0bf933VUXgqQwAR430bNxcpNl3Z+CkZ0a gT65Uv860mVyxpDFUlAaWLQg+8kGXBskVAbKQZpSohYqjwPsJZyJ+We5MKDrq68b 5ZLidPkdjY7wlEujhNijVEy/9eiMaWfbtWkVTLiiXvmfOLCZJBw= -----END CERTIFICATE-----Generated at Mon Apr 28 05:59:02 2025 by rpki-client on console.sobornost.net