$ rpki-client -vvf repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.mft File: 1CA9E40710262DA751A67E932477D6E12B4B2DED.mft (raw, json) Hash identifier: cDIVUcXtxhqmiQIsRWakKAJIJQXJQ3LJfrL7XqhD8fI= Subject key identifier: 7E:E0:74:ED:BB:92:3A:0A:BD:86:09:BA:50:50:51:21:A7:CB:81:7F Authority key identifier: 1C:A9:E4:07:10:26:2D:A7:51:A6:7E:93:24:77:D6:E1:2B:4B:2D:ED Certificate issuer: /CN=1CA9E40710262DA751A67E932477D6E12B4B2DED Certificate serial: 7F72106A9272A4E5F7D88154BF0E626738A78EDF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CA9E40710262DA751A67E932477D6E12B4B2DED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.mft Manifest number: 04CD Signing time: Fri 25 Apr 2025 05:30:02 +0000 Manifest this update: Fri 25 Apr 2025 05:25:02 +0000 Manifest next update: Mon 28 Apr 2025 12:07:02 +0000 Files and hashes: 1: 3130332e3132332e3130362e302f32342d3234203d3e20313338303730.roa (hash: 1Qj+0yJlnyRAkhJQW7JxleOTtApsG7fPmAlVCQ6z7p8=) 2: 323430333a396663303a3a2f33322d3438203d3e20313338303730.roa (hash: g2I091o7xGYF01O50CUZMPsQctw2lflU2v4s2FAorWY=) 3: 1CA9E40710262DA751A67E932477D6E12B4B2DED.crl (hash: eNMB9mloWsm/GNpcASHsmreDaGn0ikGW5MXLQ57QIWE=) 4: 3130332e3132332e3130342e302f32322d3234203d3e20313338303730.roa (hash: Yh/X3wf3xgSBLANEs82b75GugxHKann/OAKH3YrZy2U=) 5: 3130332e3132332e3130372e302f32342d3234203d3e20313338303730.roa (hash: cke05Fz1pU7ph5quQU6BQAXvAK/qW0tlFEcIja5SVaM=) 6: 3130332e3132332e3130352e302f32342d3234203d3e20313338303730.roa (hash: 3PS0oz/pScPQzie5Mti3z4hmWgtkSmXElwu/lAFPvxo=) 7: 3130332e3132332e3130342e302f32342d3234203d3e20313338303730.roa (hash: uDKGCmtuAh53SMb+C/Ryy+REf5CV1In4kTPm6c1f6Xc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.crl rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CA9E40710262DA751A67E932477D6E12B4B2DED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:72:10:6a:92:72:a4:e5:f7:d8:81:54:bf:0e:62:67:38:a7:8e:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CA9E40710262DA751A67E932477D6E12B4B2DED Validity Not Before: Apr 25 05:25:02 2025 GMT Not After : Apr 28 12:07:02 2025 GMT Subject: CN=7EE074EDBB923A0ABD8609BA50505121A7CB817F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:69:64:73:73:22:11:f4:76:b0:41:1a:b8:e7: 56:95:16:81:12:59:cb:65:d3:d3:44:dc:6c:a8:6b: 6d:c8:eb:00:d6:5c:8b:a5:87:ed:fe:04:d1:bc:a4: 25:09:95:08:2b:14:37:ff:0e:c9:9c:b2:f8:a3:73: a1:4c:97:0e:87:93:b6:bb:28:3f:c4:bb:a4:03:84: 27:4a:9d:b3:17:67:f6:4d:76:0d:df:86:ed:48:68: fb:7a:37:c7:4e:24:84:49:76:ad:0f:b8:81:db:0f: 8b:ac:68:b5:c2:94:08:e7:b3:3b:05:c3:6e:26:c8: 17:68:d7:ca:8e:b6:6d:45:bf:56:d3:35:9f:29:d8: 99:57:e8:ce:7b:6e:c2:ac:26:6f:a4:4b:63:b0:49: a8:b2:8b:a5:5e:97:22:f0:7c:d6:ce:f7:98:a5:95: ca:36:00:f2:b1:b2:7f:42:85:e9:35:dd:8a:f9:72: 60:ed:a2:12:27:21:3f:f2:b2:a0:ac:ed:a0:b2:85: cd:b2:5b:cb:dd:e6:e9:99:99:8c:60:aa:4c:35:cb: 1b:8c:0c:1f:24:82:ea:a4:db:19:d8:a9:49:a2:64: 34:a4:89:e5:92:bc:f7:48:3a:b5:ef:ff:73:d3:04: da:e4:ba:4a:d9:5f:00:c0:44:d6:56:ad:ff:c8:2c: 57:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:E0:74:ED:BB:92:3A:0A:BD:86:09:BA:50:50:51:21:A7:CB:81:7F X509v3 Authority Key Identifier: keyid:1C:A9:E4:07:10:26:2D:A7:51:A6:7E:93:24:77:D6:E1:2B:4B:2D:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CA9E40710262DA751A67E932477D6E12B4B2DED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:7a:aa:e3:83:4f:44:c6:86:06:c2:ca:68:8a:0e:52:0c:a9: e4:b3:dd:59:8e:bc:2d:74:dd:fe:9f:da:9e:62:a0:04:3c:57: 91:f5:c9:86:a7:03:b7:6b:c7:ca:f9:2a:90:46:e4:4d:49:bb: 7f:6c:0a:31:6d:5f:e7:0f:1d:1f:2f:02:9e:84:85:b6:08:5a: da:fe:76:8a:76:7a:3b:a5:31:c3:fc:44:70:f4:03:fd:d2:39: 13:38:be:fb:5f:cf:a0:53:78:07:16:26:54:f6:37:fe:46:c7: b8:93:1b:99:d7:49:6e:83:19:bf:e5:fa:ea:6c:59:7d:32:4a: df:b1:8b:d7:28:47:fd:cf:16:47:b1:bc:04:45:71:b5:dc:f9: 5e:22:11:e8:33:69:49:9b:fc:24:a7:f9:3a:57:32:dd:66:b2: 54:85:41:47:9f:e4:ea:e0:af:36:44:de:1f:71:89:42:08:af: e2:9d:7d:d0:82:b2:8d:34:63:79:92:0f:03:e3:6f:e3:b5:05: 03:7f:af:19:9e:b6:4c:80:10:9e:27:c9:65:a7:85:60:b1:72: 47:86:02:14:aa:08:da:02:02:64:da:e9:e4:aa:4e:4e:84:ba: 9e:fd:28:81:26:9d:90:80:d2:23:dc:01:60:a5:72:6c:55:3f: 85:b2:d3:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf3IQapJypOX32IFUvw5iZzinjt8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNBOUU0MDcxMDI2MkRBNzUxQTY3RTkzMjQ3N0Q2RTEy QjRCMkRFRDAeFw0yNTA0MjUwNTI1MDJaFw0yNTA0MjgxMjA3MDJaMDMxMTAvBgNV BAMTKDdFRTA3NEVEQkI5MjNBMEFCRDg2MDlCQTUwNTA1MTIxQTdDQjgxN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1aWRzcyIR9HawQRq451aVFoES Wctl09NE3Gyoa23I6wDWXIulh+3+BNG8pCUJlQgrFDf/Dsmcsvijc6FMlw6Hk7a7 KD/Eu6QDhCdKnbMXZ/ZNdg3fhu1IaPt6N8dOJIRJdq0PuIHbD4usaLXClAjnszsF w24myBdo18qOtm1Fv1bTNZ8p2JlX6M57bsKsJm+kS2OwSaiyi6VelyLwfNbO95il lco2APKxsn9Chek13Yr5cmDtohInIT/ysqCs7aCyhc2yW8vd5umZmYxgqkw1yxuM DB8kguqk2xnYqUmiZDSkieWSvPdIOrXv/3PTBNrkukrZXwDARNZWrf/ILFe5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfuB07buSOgq9hgm6UFBRIafLgX8wHwYDVR0j BBgwFoAUHKnkBxAmLadRpn6TJHfW4StLLe0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWQ2N2Q1Zi01NzEzLTQxNTMtODcxYi0xYjAwOGY3ZmZkZDIvMC8xQ0E5RTQwNzEw MjYyREE3NTFBNjdFOTMyNDc3RDZFMTJCNEIyREVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUNBOUU0MDcxMDI2MkRBNzUxQTY3RTkzMjQ3N0Q2RTEyQjRC MkRFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFkNjdkNWYtNTcxMy00MTUzLTg3 MWItMWIwMDhmN2ZmZGQyLzAvMUNBOUU0MDcxMDI2MkRBNzUxQTY3RTkzMjQ3N0Q2 RTEyQjRCMkRFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGh6quODT0TGhgbCymiKDlIMqeSz3VmOvC10 3f6f2p5ioAQ8V5H1yYanA7drx8r5KpBG5E1Ju39sCjFtX+cPHR8vAp6EhbYIWtr+ dop2ejulMcP8RHD0A/3SORM4vvtfz6BTeAcWJlT2N/5Gx7iTG5nXSW6DGb/l+ups WX0ySt+xi9coR/3PFkexvARFcbXc+V4iEegzaUmb/CSn+TpXMt1mslSFQUef5Org rzZE3h9xiUIIr+KdfdCCso00Y3mSDwPjb+O1BQN/rxmetkyAEJ4nyWWnhWCxckeG AhSqCNoCAmTa6eSqTk6Eup79KIEmnZCA0iPcAWClcmxVP4Wy06w= -----END CERTIFICATE-----Generated at Fri Apr 25 08:21:09 2025 by rpki-client on console.sobornost.net