$ rpki-client -vvf repo-rpki.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/4443E43239D3F5B9674F2F5B5A37711434C48AF2.mft File: 4443E43239D3F5B9674F2F5B5A37711434C48AF2.mft (raw, json) Hash identifier: bXISQW6NSesj049SswTYxiZc5teGIgWOXumkIqgPwIs= Subject key identifier: 14:8B:11:58:F7:61:62:C2:BD:94:4A:6A:4E:98:0F:CE:B3:6A:D1:49 Authority key identifier: 44:43:E4:32:39:D3:F5:B9:67:4F:2F:5B:5A:37:71:14:34:C4:8A:F2 Certificate issuer: /CN=4443E43239D3F5B9674F2F5B5A37711434C48AF2 Certificate serial: 74B3B182D635A1CE1034C6B0D29A05FEFD62808E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4443E43239D3F5B9674F2F5B5A37711434C48AF2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/4443E43239D3F5B9674F2F5B5A37711434C48AF2.mft Manifest number: 6B Signing time: Thu 24 Apr 2025 20:31:54 +0000 Manifest this update: Thu 24 Apr 2025 20:26:54 +0000 Manifest next update: Mon 28 Apr 2025 00:18:54 +0000 Files and hashes: 1: 3130332e3134332e3233332e302f32342d3234203d3e20313339343038.roa (hash: xB/XqJ5dJTYe2nf2B7toQua0M24fdekoYi8o2PugdP4=) 2: 3130332e3134332e3233322e302f32342d3234203d3e20313339343038.roa (hash: TD2xB1HLXamIjjFpw2dotgVlnTzLq7PRhXP0sb7oneE=) 3: 3130332e3134332e3233322e302f32332d3233203d3e20313339343038.roa (hash: ABcl7hjRsw3Xa0yDPigEjdLuUfujbY1jm15mYQSG+s4=) 4: 4443E43239D3F5B9674F2F5B5A37711434C48AF2.crl (hash: sut7VOPeL1PUMhc/1VMKf7ibvjLY2QQZ4X1880kG5KE=) 5: 323430353a356534303a3a2f33322d3332203d3e20313339343038.roa (hash: iiMZJOJE0I/AUErV1vyRCE+uPLpfCmgdzT+r6epJErs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/4443E43239D3F5B9674F2F5B5A37711434C48AF2.crl rsync://repo-rpki.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/4443E43239D3F5B9674F2F5B5A37711434C48AF2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4443E43239D3F5B9674F2F5B5A37711434C48AF2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:b3:b1:82:d6:35:a1:ce:10:34:c6:b0:d2:9a:05:fe:fd:62:80:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4443E43239D3F5B9674F2F5B5A37711434C48AF2 Validity Not Before: Apr 24 20:26:54 2025 GMT Not After : Apr 28 00:18:54 2025 GMT Subject: CN=148B1158F76162C2BD944A6A4E980FCEB36AD149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:21:ca:03:99:10:d2:cd:46:14:ed:86:3a:45: a3:bc:18:64:45:6f:33:c4:e0:98:96:0f:de:8d:23: 0a:b0:68:97:35:d1:61:cd:a2:e6:7f:f0:0d:b4:d4: 9e:35:a2:4a:4f:64:30:b3:a8:80:81:1e:19:eb:64: e2:1a:f3:4f:93:78:7f:0c:6b:12:13:1e:d8:61:0d: c3:70:59:97:4c:2e:b6:a5:1b:d5:68:2e:a6:52:9d: 41:ba:68:71:6e:f4:e2:0e:3c:cc:13:2f:2d:bf:ac: 62:bb:f4:3a:90:85:c0:ed:e4:8b:34:b2:1c:4f:79: 59:8a:d4:9d:92:04:2a:a4:da:f3:f0:1a:d9:54:22: 6a:98:61:50:e8:8b:de:03:60:4d:44:a1:7f:9d:3e: 2f:4f:46:07:76:c6:1e:72:69:70:fb:85:bd:29:db: 6a:e1:c9:a5:f9:b4:69:3b:a1:3c:f1:06:49:c4:18: d0:bf:83:f8:3b:c3:e5:4a:fc:05:89:5a:b8:8b:c0: e8:06:4b:6e:fb:58:76:36:c9:82:2e:f4:d1:32:8c: b2:3a:04:d6:e9:0d:4c:ad:0c:ba:2e:9b:03:81:fe: 25:a9:64:94:ba:1a:05:2d:90:08:44:87:3a:79:f7: c6:22:76:29:84:5b:40:9f:96:3c:2b:90:00:5a:c2: 0c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:8B:11:58:F7:61:62:C2:BD:94:4A:6A:4E:98:0F:CE:B3:6A:D1:49 X509v3 Authority Key Identifier: keyid:44:43:E4:32:39:D3:F5:B9:67:4F:2F:5B:5A:37:71:14:34:C4:8A:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/4443E43239D3F5B9674F2F5B5A37711434C48AF2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4443E43239D3F5B9674F2F5B5A37711434C48AF2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/4443E43239D3F5B9674F2F5B5A37711434C48AF2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:65:4e:a8:8d:b0:54:ed:86:b7:f2:ab:82:05:dc:51:be:35: ce:b8:4f:52:1a:26:7a:4e:f0:d2:95:a5:32:d1:ff:e2:24:35: 8f:2b:2b:18:19:27:de:24:30:2f:03:df:53:08:4b:8a:56:31: e0:cc:d5:30:52:2b:c9:12:66:a5:6a:9b:d8:2f:74:cb:19:c8: ee:53:a4:b1:db:ea:c9:f2:23:d6:40:cf:23:5c:74:73:65:27: f6:1a:04:9b:f1:52:af:68:57:f9:26:45:c1:88:90:37:e4:fa: bc:b6:26:19:30:d1:04:3c:d0:0a:55:cc:0b:db:32:d5:0a:dc: 91:ff:a4:40:a1:e7:3c:8a:27:40:12:f8:7b:a4:be:ed:53:49: de:2f:48:c0:4b:82:8b:5b:01:5d:4e:41:aa:02:28:37:33:60: ba:ea:81:ad:e8:76:7d:13:f6:a4:5d:5d:f0:2a:d1:b0:72:1e: 45:71:fc:0a:d2:6b:5e:89:ce:10:24:e2:78:01:f3:94:7d:49: 5f:7a:cc:b0:10:15:57:a9:eb:2a:80:d4:6c:fb:d5:30:6c:e5: 35:89:2f:67:1d:28:f1:03:8f:fd:ff:5f:f1:71:c7:b4:cb:34: ba:09:c5:38:da:6b:1f:2a:a7:1e:4a:4b:e6:4a:de:09:d8:bc: 1d:a2:a1:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdLOxgtY1oc4QNMaw0poF/v1igI4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQ0M0U0MzIzOUQzRjVCOTY3NEYyRjVCNUEzNzcxMTQz NEM0OEFGMjAeFw0yNTA0MjQyMDI2NTRaFw0yNTA0MjgwMDE4NTRaMDMxMTAvBgNV BAMTKDE0OEIxMTU4Rjc2MTYyQzJCRDk0NEE2QTRFOTgwRkNFQjM2QUQxNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2IcoDmRDSzUYU7YY6RaO8GGRF bzPE4JiWD96NIwqwaJc10WHNouZ/8A201J41okpPZDCzqICBHhnrZOIa80+TeH8M axITHthhDcNwWZdMLralG9VoLqZSnUG6aHFu9OIOPMwTLy2/rGK79DqQhcDt5Is0 shxPeVmK1J2SBCqk2vPwGtlUImqYYVDoi94DYE1EoX+dPi9PRgd2xh5yaXD7hb0p 22rhyaX5tGk7oTzxBknEGNC/g/g7w+VK/AWJWriLwOgGS277WHY2yYIu9NEyjLI6 BNbpDUytDLoumwOB/iWpZJS6GgUtkAhEhzp598YidimEW0CfljwrkABawgwvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFIsRWPdhYsK9lEpqTpgPzrNq0UkwHwYDVR0j BBgwFoAUREPkMjnT9blnTy9bWjdxFDTEivIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NmM4YjNhOS00ZWZmLTQ2MGQtYjAxZC02YmE1ZDk5ZGFkYjkvMC80NDQzRTQzMjM5 RDNGNUI5Njc0RjJGNUI1QTM3NzExNDM0QzQ4QUYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDQ0M0U0MzIzOUQzRjVCOTY3NEYyRjVCNUEzNzcxMTQzNEM0 OEFGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDZjOGIzYTktNGVmZi00NjBkLWIw MWQtNmJhNWQ5OWRhZGI5LzAvNDQ0M0U0MzIzOUQzRjVCOTY3NEYyRjVCNUEzNzcx MTQzNEM0OEFGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEFlTqiNsFTthrfyq4IF3FG+Nc64T1IaJnpO 8NKVpTLR/+IkNY8rKxgZJ94kMC8D31MIS4pWMeDM1TBSK8kSZqVqm9gvdMsZyO5T pLHb6snyI9ZAzyNcdHNlJ/YaBJvxUq9oV/kmRcGIkDfk+ry2Jhkw0QQ80ApVzAvb MtUK3JH/pECh5zyKJ0AS+Hukvu1TSd4vSMBLgotbAV1OQaoCKDczYLrqga3odn0T 9qRdXfAq0bByHkVx/ArSa16JzhAk4ngB85R9SV96zLAQFVep6yqA1Gz71TBs5TWJ L2cdKPEDj/3/X/Fxx7TLNLoJxTjaax8qpx5KS+ZK3gnYvB2ioYw= -----END CERTIFICATE-----Generated at Fri Apr 25 00:06:29 2025 by rpki-client on console.sobornost.net