$ rpki-client -vvf repo-rpki.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.mft File: 2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.mft (raw, json) Hash identifier: EucpE/olTU5s3/w2a0XRHYyo2ieDXWVkCFbrWR0Wtqw= Subject key identifier: 63:F8:89:C3:59:7B:C6:28:3D:AB:A8:CC:4A:A9:D3:D3:6A:1B:0E:05 Authority key identifier: 2D:EC:7D:B2:A5:C9:62:CF:A5:3D:57:8D:EA:7D:C8:43:83:A6:33:D4 Certificate issuer: /CN=2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4 Certificate serial: 43493256C2FD84541B2B7EC22BC0A639DEF19803 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.mft Manifest number: 049E Signing time: Sat 26 Apr 2025 07:21:22 +0000 Manifest this update: Sat 26 Apr 2025 07:16:22 +0000 Manifest next update: Tue 29 Apr 2025 12:41:22 +0000 Files and hashes: 1: 323430343a613463303a666163653a3a2f34382d3438203d3e20313338383232.roa (hash: 8BcFapwe+X3BcAcYyUi0aKlB+9OoLNEUNoO57IgvOug=) 2: 2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.crl (hash: jeqfDa5KnmXSoX0NSBEJC2gDI4ZK86pcVnGf9vkyCmI=) 3: 323430343a613463303a3a2f33322d3438203d3e20313338383232.roa (hash: jd8RzIV4pb6xOSx8M2iJByCvMa7m6mddhFLRaUaFvoI=) 4: 3130332e3133372e33382e302f32332d3234203d3e20313338383232.roa (hash: mA/rP0hr8/EieVP2HKsGbfcjdkP2Kd8or4Jc67/Y7I0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.crl rsync://repo-rpki.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 09:52:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:49:32:56:c2:fd:84:54:1b:2b:7e:c2:2b:c0:a6:39:de:f1:98:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4 Validity Not Before: Apr 26 07:16:22 2025 GMT Not After : Apr 29 12:41:22 2025 GMT Subject: CN=63F889C3597BC6283DABA8CC4AA9D3D36A1B0E05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b9:8b:0f:46:5a:78:35:bf:a7:d1:fa:7a:ce: 61:77:cb:f1:83:c3:b6:8c:0d:52:7c:d8:0a:6a:4c: ce:95:f0:1c:44:69:5f:14:83:f7:5d:e5:e8:f5:18: f8:03:32:cb:de:09:2c:9c:99:cc:52:2e:5d:5e:8a: 98:69:e8:d0:c7:25:b0:73:d8:3a:d0:ec:6c:3d:eb: 00:09:54:5c:ca:ce:fd:49:93:08:c4:73:48:37:90: 5d:33:ee:77:70:88:50:c6:5d:1b:45:5f:d1:ea:f2: ce:80:ea:29:e0:95:ff:e8:21:55:bd:d6:ea:8f:8c: ac:2f:d4:eb:78:8e:e7:7e:c1:7c:fb:cc:fa:1c:c5: 96:89:10:09:13:c4:bf:9a:7a:fa:d3:d2:74:db:6b: 0c:7d:4f:86:17:d7:4f:0b:ef:6c:50:a4:d0:46:f3: a9:ec:cf:b5:8e:45:de:ed:35:29:ab:3e:e4:09:c6: 3e:4e:93:62:bb:7d:61:9a:c4:a1:af:85:fa:f8:07: 9a:9c:9f:b8:6c:ef:98:f8:ab:76:79:98:c7:86:55: 9d:01:a4:02:ca:38:5d:78:31:83:06:0f:e1:78:93: c3:54:fc:3c:3e:64:76:ea:02:d2:2f:1b:3b:25:f2: d6:56:05:80:c0:fa:3a:f3:b8:41:71:cf:e6:45:a6: e5:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:F8:89:C3:59:7B:C6:28:3D:AB:A8:CC:4A:A9:D3:D3:6A:1B:0E:05 X509v3 Authority Key Identifier: keyid:2D:EC:7D:B2:A5:C9:62:CF:A5:3D:57:8D:EA:7D:C8:43:83:A6:33:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:2b:c5:68:fa:8d:58:54:5d:92:19:5a:9b:5f:05:d5:63:24: 67:bb:e9:15:b3:49:cc:20:ee:13:e3:75:0b:79:31:6a:94:78: 4b:a8:a3:a5:68:25:31:8c:75:96:06:0c:2e:ca:b7:57:ac:49: 63:40:86:5f:76:ca:84:00:2c:38:b4:45:6b:df:6a:4c:6c:22: 0d:ac:79:fe:bc:5b:de:90:f3:d9:95:ea:0d:3c:0e:73:21:03: e5:f6:c4:f4:98:7a:06:8f:48:34:c0:59:d8:9f:91:8d:5a:66: ed:6c:59:2b:1f:66:c4:74:a5:8a:a2:64:69:ea:59:59:84:86: 4d:e3:3b:63:da:62:2e:c4:aa:58:cb:2c:3d:1b:a0:6f:de:6c: 67:a4:d0:f8:11:85:8b:51:6c:0b:ce:a0:19:7f:e9:72:78:31: 5f:37:c9:b8:17:e4:0e:1d:d7:bb:4c:cb:41:b6:b9:a3:8a:ef: 25:bf:d1:5f:b2:67:70:c9:4a:ee:3c:34:9f:0e:16:10:a7:6d: e2:3d:a0:be:dd:ec:29:cc:b8:b5:8d:ce:0f:68:23:cf:e8:0e: 61:8d:c0:75:60:12:24:1d:be:f8:a8:77:e3:1a:49:4c:fc:9d: c3:85:3b:79:a9:45:f5:87:5d:72:d1:96:cf:a1:3e:f1:6b:9f: cd:fb:5a:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ0kyVsL9hFQbK37CK8CmOd7xmAMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRFQzdEQjJBNUM5NjJDRkE1M0Q1NzhERUE3REM4NDM4 M0E2MzNENDAeFw0yNTA0MjYwNzE2MjJaFw0yNTA0MjkxMjQxMjJaMDMxMTAvBgNV BAMTKDYzRjg4OUMzNTk3QkM2MjgzREFCQThDQzRBQTlEM0QzNkExQjBFMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+uYsPRlp4Nb+n0fp6zmF3y/GD w7aMDVJ82ApqTM6V8BxEaV8Ug/dd5ej1GPgDMsveCSycmcxSLl1eiphp6NDHJbBz 2DrQ7Gw96wAJVFzKzv1JkwjEc0g3kF0z7ndwiFDGXRtFX9Hq8s6A6inglf/oIVW9 1uqPjKwv1Ot4jud+wXz7zPocxZaJEAkTxL+aevrT0nTbawx9T4YX108L72xQpNBG 86nsz7WORd7tNSmrPuQJxj5Ok2K7fWGaxKGvhfr4B5qcn7hs75j4q3Z5mMeGVZ0B pALKOF14MYMGD+F4k8NU/Dw+ZHbqAtIvGzsl8tZWBYDA+jrzuEFxz+ZFpuXHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY/iJw1l7xig9q6jMSqnT02obDgUwHwYDVR0j BBgwFoAULex9sqXJYs+lPVeN6n3IQ4OmM9QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l M2JiZjFkYS1lMzE3LTQ4ZWYtYWQ2ZC1mZThhOGJmMDg0MDAvMC8yREVDN0RCMkE1 Qzk2MkNGQTUzRDU3OERFQTdEQzg0MzgzQTYzM0Q0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkRFQzdEQjJBNUM5NjJDRkE1M0Q1NzhERUE3REM4NDM4M0E2 MzNENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTNiYmYxZGEtZTMxNy00OGVmLWFk NmQtZmU4YThiZjA4NDAwLzAvMkRFQzdEQjJBNUM5NjJDRkE1M0Q1NzhERUE3REM4 NDM4M0E2MzNENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHwrxWj6jVhUXZIZWptfBdVjJGe76RWzScwg 7hPjdQt5MWqUeEuoo6VoJTGMdZYGDC7Kt1esSWNAhl92yoQALDi0RWvfakxsIg2s ef68W96Q89mV6g08DnMhA+X2xPSYegaPSDTAWdifkY1aZu1sWSsfZsR0pYqiZGnq WVmEhk3jO2PaYi7EqljLLD0boG/ebGek0PgRhYtRbAvOoBl/6XJ4MV83ybgX5A4d 17tMy0G2uaOK7yW/0V+yZ3DJSu48NJ8OFhCnbeI9oL7d7CnMuLWNzg9oI8/oDmGN wHVgEiQdvviod+MaSUz8ncOFO3mpRfWHXXLRls+hPvFrn837Wp8= -----END CERTIFICATE-----Generated at Sat Apr 26 11:16:30 2025 by rpki-client on console.sobornost.net