$ rpki-client -vvf repo-rpki.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.mft File: 1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.mft (raw, json) Hash identifier: uUcGtAl+aaeXbWU4883iy4mFBiYs/PvvnU/+9lPb/20= Subject key identifier: 9E:90:5A:DD:0B:24:7B:7E:84:36:DB:25:9A:1E:7B:79:FA:93:90:45 Authority key identifier: 1E:AF:FD:F7:6C:26:1A:0C:98:01:D9:F2:B0:2D:5B:A1:49:67:F3:CD Certificate issuer: /CN=1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD Certificate serial: 3BEB60601470FB28AA2E334CD632AA20148F273E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.mft Manifest number: 015F Signing time: Thu 24 Apr 2025 06:31:20 +0000 Manifest this update: Thu 24 Apr 2025 06:26:20 +0000 Manifest next update: Sun 27 Apr 2025 12:53:20 +0000 Files and hashes: 1: 3130332e3139302e39342e302f32342d3234203d3e20313530353531.roa (hash: ZLit+8UW98ngBL2LPf2rRbdHr7opbJkANqxKGJG/n4c=) 2: 1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.crl (hash: y+keiV9VPVWEleM2UN4M72L2GIOU/9ygce3uyxu+lCE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.crl rsync://repo-rpki.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 08:44:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:eb:60:60:14:70:fb:28:aa:2e:33:4c:d6:32:aa:20:14:8f:27:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD Validity Not Before: Apr 24 06:26:20 2025 GMT Not After : Apr 27 12:53:20 2025 GMT Subject: CN=9E905ADD0B247B7E8436DB259A1E7B79FA939045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:50:e2:f9:45:c9:b8:63:5f:53:9a:62:1b:e0: a9:08:31:bd:24:ca:07:1f:5e:30:9a:6d:cb:e4:68: 14:79:5b:c2:c0:2f:f5:be:ae:e0:91:27:d2:69:5f: 3d:85:a6:c6:33:e1:8a:f6:a4:08:35:0a:4e:4f:b1: 86:0e:b2:77:89:5a:8f:29:1c:e5:0b:f3:49:e7:27: 48:ff:02:43:d3:3a:e0:4d:8c:eb:95:d9:39:40:45: 68:f7:67:54:6d:ca:55:68:9f:ed:35:f1:af:d6:b1: 31:00:17:79:5d:bf:09:b3:b5:24:8b:b1:18:6f:66: 7f:6d:c0:de:36:8a:3b:85:76:34:e8:ee:6e:04:40: af:2b:bc:c6:d6:ed:24:4a:9a:97:98:7b:b1:20:28: 8f:ef:2a:34:51:aa:89:46:2f:86:57:64:4e:2b:40: e7:34:b1:16:02:5c:32:e4:47:b5:eb:ba:c2:d5:eb: 0f:58:b5:94:8f:7d:16:41:a0:a6:1d:d9:c2:13:43: d2:36:e6:56:a5:bc:07:19:7c:58:df:1c:15:04:16: 0e:55:31:70:88:12:31:db:0d:32:0f:b2:c7:d2:18: 36:73:fa:31:21:db:1a:16:73:fd:b4:b0:52:14:9e: fd:95:f1:44:97:81:a6:ee:df:af:b4:39:bc:85:0b: c2:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:90:5A:DD:0B:24:7B:7E:84:36:DB:25:9A:1E:7B:79:FA:93:90:45 X509v3 Authority Key Identifier: keyid:1E:AF:FD:F7:6C:26:1A:0C:98:01:D9:F2:B0:2D:5B:A1:49:67:F3:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:f6:55:2a:7d:4d:27:75:3d:11:86:bd:46:64:43:2b:61:1b: 42:4f:d6:5d:76:87:1b:b9:d8:32:74:43:b2:d1:51:08:c2:6b: 7f:7a:9e:4b:a9:80:99:07:6f:aa:b4:e1:e9:41:0b:4b:2b:b3: d5:69:d2:8e:d5:88:bd:a4:7e:3b:10:98:fa:7d:14:fa:05:66: eb:02:07:81:bd:f5:b0:6d:ac:0a:8b:65:6c:79:03:b3:2b:40: 05:90:0e:5b:0c:85:66:8d:4d:eb:e0:b7:9e:6d:87:2a:81:cd: 84:f1:a2:d8:72:23:3b:8c:9f:c3:a0:90:75:a1:d8:c4:e9:89: 9a:1d:62:2e:9c:b4:26:6e:dd:24:33:9e:a1:34:87:e0:ac:a2: 66:e3:be:3d:1c:85:a0:65:6f:6e:bb:40:63:28:d7:cf:71:14: a6:8d:a9:74:d6:d4:86:0a:32:63:ab:4b:34:3a:f5:42:45:28: fd:fd:7c:ab:9b:a1:e5:5f:c0:d2:7c:57:62:a0:7e:02:58:05: a1:f2:54:71:61:42:81:6a:ca:5e:b6:64:a1:38:f5:9a:1f:d8: d7:6d:5b:25:ef:d3:2b:f0:54:78:d5:76:d2:d0:9d:68:e8:a8: d1:1e:b5:fd:39:68:c6:11:f5:b8:8e:c3:ed:16:ba:1c:17:4c: 4b:1f:91:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO+tgYBRw+yiqLjNM1jKqIBSPJz4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUVBRkZERjc2QzI2MUEwQzk4MDFEOUYyQjAyRDVCQTE0 OTY3RjNDRDAeFw0yNTA0MjQwNjI2MjBaFw0yNTA0MjcxMjUzMjBaMDMxMTAvBgNV BAMTKDlFOTA1QUREMEIyNDdCN0U4NDM2REIyNTlBMUU3Qjc5RkE5MzkwNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtUOL5Rcm4Y19TmmIb4KkIMb0k ygcfXjCabcvkaBR5W8LAL/W+ruCRJ9JpXz2FpsYz4Yr2pAg1Ck5PsYYOsneJWo8p HOUL80nnJ0j/AkPTOuBNjOuV2TlARWj3Z1RtylVon+018a/WsTEAF3ldvwmztSSL sRhvZn9twN42ijuFdjTo7m4EQK8rvMbW7SRKmpeYe7EgKI/vKjRRqolGL4ZXZE4r QOc0sRYCXDLkR7XrusLV6w9YtZSPfRZBoKYd2cITQ9I25lalvAcZfFjfHBUEFg5V MXCIEjHbDTIPssfSGDZz+jEh2xoWc/20sFIUnv2V8USXgabu36+0ObyFC8KXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnpBa3Qske36ENtslmh57efqTkEUwHwYDVR0j BBgwFoAUHq/992wmGgyYAdnysC1boUln880wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k Nzk4MDkxZS1jMWFlLTQwNDktOTZkMi1jNGNlMzdmZGMzNWIvMC8xRUFGRkRGNzZD MjYxQTBDOTgwMUQ5RjJCMDJENUJBMTQ5NjdGM0NELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUVBRkZERjc2QzI2MUEwQzk4MDFEOUYyQjAyRDVCQTE0OTY3 RjNDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDc5ODA5MWUtYzFhZS00MDQ5LTk2 ZDItYzRjZTM3ZmRjMzViLzAvMUVBRkZERjc2QzI2MUEwQzk4MDFEOUYyQjAyRDVC QTE0OTY3RjNDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA32VSp9TSd1PRGGvUZkQythG0JP1l12hxu5 2DJ0Q7LRUQjCa396nkupgJkHb6q04elBC0srs9Vp0o7ViL2kfjsQmPp9FPoFZusC B4G99bBtrAqLZWx5A7MrQAWQDlsMhWaNTevgt55thyqBzYTxothyIzuMn8OgkHWh 2MTpiZodYi6ctCZu3SQznqE0h+Csombjvj0chaBlb267QGMo189xFKaNqXTW1IYK MmOrSzQ69UJFKP39fKuboeVfwNJ8V2KgfgJYBaHyVHFhQoFqyl62ZKE49Zof2Ndt WyXv0yvwVHjVdtLQnWjoqNEetf05aMYR9biOw+0WuhwXTEsfkaI= -----END CERTIFICATE-----Generated at Thu Apr 24 09:03:03 2025 by rpki-client on console.sobornost.net