$ rpki-client -vvf repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.mft File: B2D1CBD015A419010845E6F56D8385C8647B5390.mft (raw, json) Hash identifier: GQqV2XaZ47uokTfEpVXQNZC8/dlGwvHWsEg2gBX2nko= Subject key identifier: 5D:3B:0C:51:42:0F:D8:A0:64:71:7C:9A:54:2E:CC:35:8F:16:A1:C8 Authority key identifier: B2:D1:CB:D0:15:A4:19:01:08:45:E6:F5:6D:83:85:C8:64:7B:53:90 Certificate issuer: /CN=B2D1CBD015A419010845E6F56D8385C8647B5390 Certificate serial: 5094A7001928A668F2B53F24A67BAE97DFE0DC1C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2D1CBD015A419010845E6F56D8385C8647B5390.cer Subject info access: rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.mft Manifest number: 027A Signing time: Thu 24 Apr 2025 20:12:06 +0000 Manifest this update: Thu 24 Apr 2025 20:07:06 +0000 Manifest next update: Mon 28 Apr 2025 06:38:06 +0000 Files and hashes: 1: 323430363a343534303a3a2f33322d3332203d3e20313430343634.roa (hash: zD3MmvWg8/hnp1isGEqEx8GCf/Gya3epsj8OBSoizYQ=) 2: 3130332e3135332e3133352e302f32342d3234203d3e20313430343634.roa (hash: WsmI0rdfXmL0fWdst11niyZhvNmKpEwJDzCH1ijVhS8=) 3: 3130332e3135332e3133342e302f32342d3234203d3e20313430343634.roa (hash: cW/9D7f3rSD1Wd+uYOFJYajDwTDUi1FLo5623123rGc=) 4: B2D1CBD015A419010845E6F56D8385C8647B5390.crl (hash: lvRGX0p02y8jin5C8bLSQrn16QtReT381eCbl3peGAw=) 5: 3130332e3135332e3133342e302f32332d3233203d3e20313430343634.roa (hash: cPwdxx5hPy0Al9znnfs7+/9F2Ic938FTNbuxG5Z3xhY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.crl rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2D1CBD015A419010845E6F56D8385C8647B5390.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:94:a7:00:19:28:a6:68:f2:b5:3f:24:a6:7b:ae:97:df:e0:dc:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2D1CBD015A419010845E6F56D8385C8647B5390 Validity Not Before: Apr 24 20:07:06 2025 GMT Not After : Apr 28 06:38:06 2025 GMT Subject: CN=5D3B0C51420FD8A064717C9A542ECC358F16A1C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a3:5b:bb:c4:e8:85:15:8d:a5:c4:3d:95:3a: e9:25:ff:fe:62:7c:87:34:47:29:3b:09:f9:b6:24: 2b:e8:f9:e4:b6:3b:a4:c0:1f:78:b1:a8:b6:8d:3b: 13:51:7f:3e:8c:5c:c2:a9:51:d7:af:eb:07:b0:c9: 7b:dc:1e:ca:c7:69:dd:f6:c9:e1:0e:c0:a3:bf:8e: 8a:ff:af:92:ca:11:b3:58:56:f9:57:6a:9f:d5:55: 2e:7e:88:5b:d5:b7:da:f3:9a:7e:86:2d:c2:42:6b: 2a:15:0a:12:ad:7d:fc:b7:27:da:08:77:b3:37:54: f0:7d:71:8a:cd:9d:85:9b:7d:ac:37:fe:61:ed:c7: 79:41:66:75:77:70:55:ea:0b:6d:5d:52:d1:01:fe: 50:e2:39:bc:4b:53:ca:53:77:02:3f:07:8c:25:83: 48:90:c3:62:fd:51:df:ee:db:5d:52:e8:7e:83:6a: bf:85:3d:3e:d0:d4:fb:cb:95:b1:45:69:ff:c1:61: 1d:13:67:d9:3e:d3:ee:6b:ef:ac:fa:bc:a2:bf:9f: 78:72:2b:8b:85:3f:87:b2:dd:c4:1b:99:45:43:36: 42:b4:97:1d:6b:80:7b:cc:83:51:11:9a:85:78:0b: 62:33:e6:1a:a4:b2:5c:fb:9d:a7:ac:8a:6e:5c:04: 32:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:3B:0C:51:42:0F:D8:A0:64:71:7C:9A:54:2E:CC:35:8F:16:A1:C8 X509v3 Authority Key Identifier: keyid:B2:D1:CB:D0:15:A4:19:01:08:45:E6:F5:6D:83:85:C8:64:7B:53:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2D1CBD015A419010845E6F56D8385C8647B5390.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:54:91:f8:90:45:71:d5:0c:84:44:41:d0:52:80:48:f9:e3: 22:9e:be:1f:31:f4:fe:07:e0:b1:24:df:c8:09:f6:09:69:75: e3:a8:51:cc:2c:64:0f:e7:2c:0f:24:37:e3:05:8f:7e:05:e9: b4:af:a9:61:93:31:f9:cc:9d:1f:ff:8b:eb:07:a9:08:6b:b2: 5a:3b:40:0d:63:d7:02:5e:17:8e:ef:56:ab:52:ff:73:e9:7e: e0:3a:cb:64:6b:5e:97:1b:f3:68:f2:63:db:ab:e6:cc:3f:b1: 5a:b0:ba:13:f8:65:95:72:fa:fb:3b:18:3c:86:f1:55:55:35: 01:ab:e9:67:f1:c8:a2:37:76:b5:3b:60:52:7d:df:21:71:f4: 58:90:fe:ff:fe:c5:e4:15:9a:1b:3d:61:ab:29:1b:3c:e6:6a: 69:91:3e:61:4f:9d:43:6b:7b:dd:48:12:e7:41:20:f8:4e:e3: 5d:21:de:ec:e0:d2:71:b4:36:75:48:14:ae:f4:7f:ec:50:cf: 50:23:bb:26:40:25:30:57:f9:ed:dc:b3:7e:86:00:ab:c8:df: 6c:07:f8:27:24:ce:37:14:ba:49:94:86:9c:fc:f9:cb:64:af: 49:34:0b:30:4e:71:6e:d3:68:48:a3:c1:9b:ad:a9:97:aa:19: 10:08:7f:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUJSnABkopmjytT8kpnuul9/g3BwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJEMUNCRDAxNUE0MTkwMTA4NDVFNkY1NkQ4Mzg1Qzg2 NDdCNTM5MDAeFw0yNTA0MjQyMDA3MDZaFw0yNTA0MjgwNjM4MDZaMDMxMTAvBgNV BAMTKDVEM0IwQzUxNDIwRkQ4QTA2NDcxN0M5QTU0MkVDQzM1OEYxNkExQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCso1u7xOiFFY2lxD2VOukl//5i fIc0Ryk7Cfm2JCvo+eS2O6TAH3ixqLaNOxNRfz6MXMKpUdev6wewyXvcHsrHad32 yeEOwKO/jor/r5LKEbNYVvlXap/VVS5+iFvVt9rzmn6GLcJCayoVChKtffy3J9oI d7M3VPB9cYrNnYWbfaw3/mHtx3lBZnV3cFXqC21dUtEB/lDiObxLU8pTdwI/B4wl g0iQw2L9Ud/u211S6H6Dar+FPT7Q1PvLlbFFaf/BYR0TZ9k+0+5r76z6vKK/n3hy K4uFP4ey3cQbmUVDNkK0lx1rgHvMg1ERmoV4C2Iz5hqkslz7naesim5cBDKlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXTsMUUIP2KBkcXyaVC7MNY8WocgwHwYDVR0j BBgwFoAUstHL0BWkGQEIReb1bYOFyGR7U5AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YjhiZTkwNS1mMjk2LTQ1ZDEtYTg3OS00YTRkZTUyY2IyZDYvMC9CMkQxQ0JEMDE1 QTQxOTAxMDg0NUU2RjU2RDgzODVDODY0N0I1MzkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjJEMUNCRDAxNUE0MTkwMTA4NDVFNkY1NkQ4Mzg1Qzg2NDdC NTM5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGI4YmU5MDUtZjI5Ni00NWQxLWE4 NzktNGE0ZGU1MmNiMmQ2LzAvQjJEMUNCRDAxNUE0MTkwMTA4NDVFNkY1NkQ4Mzg1 Qzg2NDdCNTM5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKJUkfiQRXHVDIREQdBSgEj54yKevh8x9P4H 4LEk38gJ9glpdeOoUcwsZA/nLA8kN+MFj34F6bSvqWGTMfnMnR//i+sHqQhrslo7 QA1j1wJeF47vVqtS/3PpfuA6y2RrXpcb82jyY9ur5sw/sVqwuhP4ZZVy+vs7GDyG 8VVVNQGr6WfxyKI3drU7YFJ93yFx9FiQ/v/+xeQVmhs9YaspGzzmammRPmFPnUNr e91IEudBIPhO410h3uzg0nG0NnVIFK70f+xQz1AjuyZAJTBX+e3cs36GAKvI32wH +CckzjcUukmUhpz8+ctkr0k0CzBOcW7TaEijwZutqZeqGRAIfzY= -----END CERTIFICATE-----Generated at Fri Apr 25 00:06:29 2025 by rpki-client on console.sobornost.net