$ rpki-client -vvf repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft File: 2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft (raw, json) Hash identifier: NQi7JdI3+9+ma3K50TE9Ecb0X+XdVSq0/gpHrkaD0GE= Subject key identifier: AD:1F:BE:1F:1D:FA:F7:BA:B2:31:2F:E6:96:15:FC:DC:D5:57:86:E3 Authority key identifier: 2D:23:C6:29:ED:95:6F:17:36:B7:DA:EC:CD:2A:AF:31:C4:F1:7C:26 Certificate issuer: /CN=2D23C629ED956F1736B7DAECCD2AAF31C4F17C26 Certificate serial: 149F86868499EFB05BEFF484A8D6269707AF3C45 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft Manifest number: 01AA Signing time: Thu 24 Apr 2025 03:30:53 +0000 Manifest this update: Thu 24 Apr 2025 03:25:53 +0000 Manifest next update: Sun 27 Apr 2025 08:43:53 +0000 Files and hashes: 1: 3130332e3133382e31302e302f32342d3234203d3e20313338383335.roa (hash: 2Vdu2MWYo3OwMz4g8uGZOXFnM8X1Z4ETt9GbdMMRo+8=) 2: 2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.crl (hash: midiMHwpgetRnm2eynX/tezEIqzkFVQ/fftPDtgEonU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.crl rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 08:43:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:9f:86:86:84:99:ef:b0:5b:ef:f4:84:a8:d6:26:97:07:af:3c:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D23C629ED956F1736B7DAECCD2AAF31C4F17C26 Validity Not Before: Apr 24 03:25:53 2025 GMT Not After : Apr 27 08:43:53 2025 GMT Subject: CN=AD1FBE1F1DFAF7BAB2312FE69615FCDCD55786E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:17:02:56:28:72:0d:7d:55:2a:a8:67:85:4e: 5a:9e:01:0e:45:30:df:4e:7b:57:49:a9:6d:39:82: 0e:e1:c4:9d:83:51:7a:34:fe:c1:5d:4b:45:eb:59: 8d:40:b2:e1:bd:32:2e:fd:13:2c:cf:67:ac:ea:fc: a6:fc:1f:90:84:95:4f:49:13:6a:90:4e:bc:63:4f: bf:43:70:5a:91:48:5d:40:18:ed:c5:81:c9:14:9e: 7d:ec:1b:57:42:11:7e:48:1a:ae:4e:60:e5:7d:a0: 6e:39:f2:ff:ec:e6:7d:7b:64:e4:f0:41:8c:8b:fc: 39:32:93:53:86:ca:dc:5a:71:7b:8f:16:62:8b:d8: b4:34:f3:f8:9c:2d:c2:ff:76:88:46:6a:ca:5b:6e: 53:52:fc:d1:64:bf:3a:b0:e0:81:66:2e:cf:b1:74: ac:eb:2d:85:fb:73:f9:c6:dc:ff:c3:2b:a8:05:ae: 15:87:2d:b4:bb:8a:86:5b:55:8f:60:93:4f:d0:75: c0:95:49:05:7b:6c:a4:d8:86:5c:f3:38:70:42:3c: 43:5b:79:bb:b7:3d:da:98:8c:97:eb:cc:a5:7d:a6: cf:3b:4a:bc:2a:ea:fe:16:93:b1:55:e2:19:d8:19: 6b:d2:e5:a1:c5:b8:7b:d3:b7:c6:ca:0a:df:b5:38: 34:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:1F:BE:1F:1D:FA:F7:BA:B2:31:2F:E6:96:15:FC:DC:D5:57:86:E3 X509v3 Authority Key Identifier: keyid:2D:23:C6:29:ED:95:6F:17:36:B7:DA:EC:CD:2A:AF:31:C4:F1:7C:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:40:c1:9f:18:0d:74:df:16:1c:2e:53:ed:41:c6:03:ed:25: 42:bc:2f:9e:80:f3:42:3d:e8:2e:2d:95:6a:de:03:9e:d2:7b: a7:44:28:80:33:4a:03:c2:63:7f:da:36:b4:3e:eb:4f:d7:7b: 39:47:92:c3:e0:33:a2:e6:bd:25:6c:0a:71:ea:d7:b2:5e:20: 61:c9:a8:2b:b1:13:5a:f9:c2:67:5a:e1:a9:74:ed:2c:91:75: fa:29:6b:8a:cb:24:81:3b:e5:42:f6:89:a0:48:a1:6e:54:5e: 33:05:e1:d4:e2:0e:8a:1f:ca:ef:74:44:9f:51:f4:0a:38:74: d0:29:16:6a:57:d9:32:9d:ec:5c:e4:80:19:6f:8e:23:a7:c1: 21:b0:69:8b:84:5a:6b:77:16:15:34:cd:5c:bd:b0:24:00:84: 0b:37:0b:d8:a2:5f:82:ac:ee:96:28:4a:fa:a3:08:50:b4:b5: 14:42:c0:0e:28:f9:34:da:e8:79:54:db:62:96:4c:1a:dd:c2: 97:91:e5:8b:a6:6a:20:dc:94:0b:81:49:37:94:ef:fc:97:e8: 5f:c4:77:cb:8f:43:dd:1b:12:93:e2:26:c8:f6:81:db:64:5d: f2:2e:00:c2:92:15:94:f6:4b:01:4e:aa:40:d4:27:b4:3f:58: e1:7f:88:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFJ+GhoSZ77Bb7/SEqNYmlwevPEUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQyM0M2MjlFRDk1NkYxNzM2QjdEQUVDQ0QyQUFGMzFD NEYxN0MyNjAeFw0yNTA0MjQwMzI1NTNaFw0yNTA0MjcwODQzNTNaMDMxMTAvBgNV BAMTKEFEMUZCRTFGMURGQUY3QkFCMjMxMkZFNjk2MTVGQ0RDRDU1Nzg2RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgFwJWKHINfVUqqGeFTlqeAQ5F MN9Oe1dJqW05gg7hxJ2DUXo0/sFdS0XrWY1AsuG9Mi79EyzPZ6zq/Kb8H5CElU9J E2qQTrxjT79DcFqRSF1AGO3FgckUnn3sG1dCEX5IGq5OYOV9oG458v/s5n17ZOTw QYyL/Dkyk1OGytxacXuPFmKL2LQ08/icLcL/dohGaspbblNS/NFkvzqw4IFmLs+x dKzrLYX7c/nG3P/DK6gFrhWHLbS7ioZbVY9gk0/QdcCVSQV7bKTYhlzzOHBCPENb ebu3PdqYjJfrzKV9ps87Srwq6v4Wk7FV4hnYGWvS5aHFuHvTt8bKCt+1ODS/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrR++Hx3697qyMS/mlhX83NVXhuMwHwYDVR0j BBgwFoAULSPGKe2Vbxc2t9rszSqvMcTxfCYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ODY4Y2YyMi1kMDI5LTQ1ZTItOWUyMS1kOTg5MmQzYWY3YTYvMC8yRDIzQzYyOUVE OTU2RjE3MzZCN0RBRUNDRDJBQUYzMUM0RjE3QzI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQyM0M2MjlFRDk1NkYxNzM2QjdEQUVDQ0QyQUFGMzFDNEYx N0MyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDg2OGNmMjItZDAyOS00NWUyLTll MjEtZDk4OTJkM2FmN2E2LzAvMkQyM0M2MjlFRDk1NkYxNzM2QjdEQUVDQ0QyQUFG MzFDNEYxN0MyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABdAwZ8YDXTfFhwuU+1BxgPtJUK8L56A80I9 6C4tlWreA57Se6dEKIAzSgPCY3/aNrQ+60/XezlHksPgM6LmvSVsCnHq17JeIGHJ qCuxE1r5wmda4al07SyRdfopa4rLJIE75UL2iaBIoW5UXjMF4dTiDoofyu90RJ9R 9Ao4dNApFmpX2TKd7FzkgBlvjiOnwSGwaYuEWmt3FhU0zVy9sCQAhAs3C9iiX4Ks 7pYoSvqjCFC0tRRCwA4o+TTa6HlU22KWTBrdwpeR5YumaiDclAuBSTeU7/yX6F/E d8uPQ90bEpPiJsj2gdtkXfIuAMKSFZT2SwFOqkDUJ7Q/WOF/iJU= -----END CERTIFICATE-----Generated at Thu Apr 24 06:50:02 2025 by rpki-client on console.sobornost.net