$ rpki-client -vvf repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.mft File: 255AA179563123A815C2B4073AD84B69F0967F4D.mft (raw, json) Hash identifier: qRwQnIO72+mLKuZbalsQxRnqQi7Z2JMQHrMuoXWHJaQ= Subject key identifier: DE:04:7F:AE:B8:62:E5:25:45:E5:3C:50:BC:31:9B:8E:3E:63:E0:DC Authority key identifier: 25:5A:A1:79:56:31:23:A8:15:C2:B4:07:3A:D8:4B:69:F0:96:7F:4D Certificate issuer: /CN=255AA179563123A815C2B4073AD84B69F0967F4D Certificate serial: 2326F56F78D6D9D38839538B177FDFACBC2DB73C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/255AA179563123A815C2B4073AD84B69F0967F4D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.mft Manifest number: 049D Signing time: Wed 23 Apr 2025 16:10:50 +0000 Manifest this update: Wed 23 Apr 2025 16:05:50 +0000 Manifest next update: Sun 27 Apr 2025 01:07:50 +0000 Files and hashes: 1: 3130332e3132362e3137352e302f32342d3234203d3e20313338313132.roa (hash: ZULjTp4+NYAssAp0CZz3FEnycGBYt+NoPkGuUHEyL7E=) 2: 3130332e3132362e3137342e302f32342d3234203d3e20313338313132.roa (hash: ls44OG0TlScZudQjWi2hOoJfckGlkJcK1X+4UZNTijw=) 3: 3130332e3132362e3137322e302f32342d3234203d3e20313338313132.roa (hash: y5FW1sgnfU+HeLMU5Bqbn06zuZEAtwFBXzjZotq5ERw=) 4: 3130332e3132362e3137332e302f32342d3234203d3e20313338313132.roa (hash: TNpUK4dJFrU18RMU9Zgd4YTXy5oNCmoEosozxJBeWMA=) 5: 255AA179563123A815C2B4073AD84B69F0967F4D.crl (hash: TMz34XO/f6219Vtfs54mqXAgBrI4XDO6KWKKzWL6nEA=) 6: 323430343a6563303a3a2f33322d3332203d3e20313338313132.roa (hash: ZQI865FxGh10FmxCAL3EfpXRTSxcXYfsdjKIE28NGOQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.crl rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/255AA179563123A815C2B4073AD84B69F0967F4D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 12:29:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:26:f5:6f:78:d6:d9:d3:88:39:53:8b:17:7f:df:ac:bc:2d:b7:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=255AA179563123A815C2B4073AD84B69F0967F4D Validity Not Before: Apr 23 16:05:50 2025 GMT Not After : Apr 27 01:07:50 2025 GMT Subject: CN=DE047FAEB862E52545E53C50BC319B8E3E63E0DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:67:00:38:d1:a2:f6:d2:c8:7c:8c:32:99:fb: 11:0b:26:b4:8b:8d:81:d7:2d:8f:07:a0:70:30:4d: ca:9a:8e:6d:49:77:e6:b9:8e:09:06:64:03:50:72: cd:9e:fe:06:9e:10:27:e8:ef:73:ae:ea:f0:f1:23: b3:a5:e6:f6:02:03:c3:35:ac:ab:10:af:47:3e:cd: 34:77:b1:59:0f:f0:dd:f2:67:0f:34:1a:ef:f1:e1: 25:6d:43:b3:37:c4:e3:cb:22:67:dc:8c:81:03:53: e5:e2:ae:fe:91:e2:0e:b0:da:88:9f:79:2d:9a:41: 04:8c:e7:1e:f6:93:0f:3e:79:4a:d3:0e:27:1b:db: 7a:89:71:b1:12:7d:82:67:02:7c:61:7a:07:a1:1a: d9:2d:55:83:11:a8:ef:15:fe:7a:09:15:e9:b6:8e: b5:a4:c9:62:17:ed:5b:b3:27:a6:f4:39:5d:53:4e: 37:b4:37:f6:c8:af:24:ca:c7:7c:0f:35:45:39:18: 38:27:86:53:29:43:7a:97:35:0a:e9:4b:bb:20:69: c2:4d:25:ee:76:92:69:65:e0:e4:a2:7e:f2:39:bb: 17:ce:52:9f:a7:74:00:24:71:7b:7f:6c:5c:34:99: e6:cd:2a:09:ef:74:c8:08:2e:24:19:a9:ad:54:c6: 66:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:04:7F:AE:B8:62:E5:25:45:E5:3C:50:BC:31:9B:8E:3E:63:E0:DC X509v3 Authority Key Identifier: keyid:25:5A:A1:79:56:31:23:A8:15:C2:B4:07:3A:D8:4B:69:F0:96:7F:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/255AA179563123A815C2B4073AD84B69F0967F4D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:9d:9b:8c:ed:4d:cd:3c:aa:05:14:f4:a6:c6:d4:68:e4:c7: ab:8a:30:51:d7:2a:42:20:32:43:76:7a:46:81:cf:81:c2:fc: 85:6f:03:5c:74:0c:ab:d2:70:e1:61:25:44:d5:93:f5:11:08: 19:a1:35:f3:be:14:60:d7:13:ce:42:a4:94:60:c7:87:f1:2e: b9:70:78:f2:d2:1b:03:9d:3f:e9:40:9d:2a:5f:9f:6b:40:c1: 62:43:93:0f:77:0f:ca:d5:e3:54:3e:e5:a0:3e:e2:98:b1:ee: 21:ed:52:bb:83:11:94:73:5f:34:94:47:d2:3a:49:39:f7:78: ce:e9:cf:03:38:10:a9:8d:ce:2d:63:aa:41:f9:91:d7:92:59: d4:5c:d1:31:74:f8:5f:7f:3d:92:ae:6c:33:8a:f2:0f:08:06: 65:d9:05:06:a8:5b:fd:7a:b2:97:1e:b7:43:2a:ae:bf:60:2d: c9:15:48:26:31:2a:15:b9:d7:e4:53:f5:13:10:dc:41:d5:83: aa:62:62:a5:5d:c0:c4:d0:f1:cd:7e:06:5d:b0:30:dc:11:4f: 24:1d:67:0e:35:55:07:69:c8:6c:bb:32:c9:23:22:6b:ad:f9: a9:80:a1:28:cf:0e:3c:0c:f9:25:ac:ea:b3:cb:7a:38:c9:d9: 88:86:6b:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIyb1b3jW2dOIOVOLF3/frLwttzwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU1QUExNzk1NjMxMjNBODE1QzJCNDA3M0FEODRCNjlG MDk2N0Y0RDAeFw0yNTA0MjMxNjA1NTBaFw0yNTA0MjcwMTA3NTBaMDMxMTAvBgNV BAMTKERFMDQ3RkFFQjg2MkU1MjU0NUU1M0M1MEJDMzE5QjhFM0U2M0UwREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpZwA40aL20sh8jDKZ+xELJrSL jYHXLY8HoHAwTcqajm1Jd+a5jgkGZANQcs2e/gaeECfo73Ou6vDxI7Ol5vYCA8M1 rKsQr0c+zTR3sVkP8N3yZw80Gu/x4SVtQ7M3xOPLImfcjIEDU+Xirv6R4g6w2oif eS2aQQSM5x72kw8+eUrTDicb23qJcbESfYJnAnxhegehGtktVYMRqO8V/noJFem2 jrWkyWIX7VuzJ6b0OV1TTje0N/bIryTKx3wPNUU5GDgnhlMpQ3qXNQrpS7sgacJN Je52kmll4OSifvI5uxfOUp+ndAAkcXt/bFw0mebNKgnvdMgILiQZqa1UxmYVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3gR/rrhi5SVF5TxQvDGbjj5j4NwwHwYDVR0j BBgwFoAUJVqheVYxI6gVwrQHOthLafCWf00wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZGI4ZDkwOC0xYjk5LTQ1NWMtYWM3Ni04ZDYyNGRmYTQzYjYvMC8yNTVBQTE3OTU2 MzEyM0E4MTVDMkI0MDczQUQ4NEI2OUYwOTY3RjRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjU1QUExNzk1NjMxMjNBODE1QzJCNDA3M0FEODRCNjlGMDk2 N0Y0RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGRiOGQ5MDgtMWI5OS00NTVjLWFj NzYtOGQ2MjRkZmE0M2I2LzAvMjU1QUExNzk1NjMxMjNBODE1QzJCNDA3M0FEODRC NjlGMDk2N0Y0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADadm4ztTc08qgUU9KbG1Gjkx6uKMFHXKkIg MkN2ekaBz4HC/IVvA1x0DKvScOFhJUTVk/URCBmhNfO+FGDXE85CpJRgx4fxLrlw ePLSGwOdP+lAnSpfn2tAwWJDkw93D8rV41Q+5aA+4pix7iHtUruDEZRzXzSUR9I6 STn3eM7pzwM4EKmNzi1jqkH5kdeSWdRc0TF0+F9/PZKubDOK8g8IBmXZBQaoW/16 spcet0Mqrr9gLckVSCYxKhW51+RT9RMQ3EHVg6piYqVdwMTQ8c1+Bl2wMNwRTyQd Zw41VQdpyGy7MskjImut+amAoSjPDjwM+SWs6rPLejjJ2YiGa1o= -----END CERTIFICATE-----Generated at Wed Apr 23 17:38:31 2025 by rpki-client on console.sobornost.net