$ rpki-client -vvf repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.mft File: 42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.mft (raw, json) Hash identifier: yAvk7a51nH76LJOwLv26wOsZuwNTHfFeQFf2bgQD2u4= Subject key identifier: 2A:E0:F9:6D:AC:47:1E:35:31:A2:24:2A:05:2D:D1:29:AC:88:A1:D3 Authority key identifier: 42:C6:E1:0C:B4:D5:AF:0F:92:CC:A6:A9:59:5C:CC:05:E2:E8:29:AE Certificate issuer: /CN=42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE Certificate serial: 40FA2B60430964D9B3C3BDADD626429D0CD94C59 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.mft Manifest number: EA Signing time: Wed 23 Apr 2025 17:01:02 +0000 Manifest this update: Wed 23 Apr 2025 16:56:02 +0000 Manifest next update: Sun 27 Apr 2025 04:09:02 +0000 Files and hashes: 1: 3130332e3135392e39332e302f32342d3234203d3e20313431313339.roa (hash: BgUfjlBOik3lVreb6x1VhcmAzB8os2FuzbKBtvTz7gM=) 2: 42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.crl (hash: Kx+48lsKMRrTMILfRG21YetqRGm40cSu1y1eJ+2OLC8=) 3: 3130332e3135392e39322e302f32342d3234203d3e20313431313339.roa (hash: yu8z55+Tr/+kJKakk3Vmp/sSKFGPsRRjeFUSIw8Az4o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.crl rsync://repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 02:40:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:fa:2b:60:43:09:64:d9:b3:c3:bd:ad:d6:26:42:9d:0c:d9:4c:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE Validity Not Before: Apr 23 16:56:02 2025 GMT Not After : Apr 27 04:09:02 2025 GMT Subject: CN=2AE0F96DAC471E3531A2242A052DD129AC88A1D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ee:c4:d1:47:3b:ff:c2:dd:98:fe:28:ee:dd: a4:19:71:11:43:16:82:7e:96:52:11:d2:be:78:2b: f0:ba:51:90:72:da:20:67:f6:fa:97:19:8f:cd:b2: 18:0a:94:25:27:42:78:33:a8:d7:8d:e1:67:77:63: 96:ee:cb:43:8f:96:4f:6e:92:26:83:9c:c4:0d:ec: 61:76:19:a4:8b:40:90:55:15:f5:53:5e:0e:83:ba: 6b:d1:03:50:ee:47:8b:eb:91:98:57:e9:45:41:f1: 3b:04:8a:98:8b:65:c8:08:2b:31:ec:86:fd:ee:52: dd:b0:24:ce:c1:f3:88:f5:21:bb:80:10:9e:5a:db: 79:87:a7:71:6f:2b:eb:a0:64:0f:f2:fd:0d:65:d1: e5:f0:c1:d9:ab:a6:e0:1d:d5:62:5a:3f:b6:74:0c: 82:5a:ea:f8:2c:67:e0:ec:22:7b:4e:59:1a:e1:e1: a9:76:6d:0d:4f:85:74:37:dc:1a:b2:5e:2f:b1:1e: 05:bb:91:1f:0a:17:e0:9d:86:ca:9a:da:b4:97:71: 28:82:26:8c:54:20:bb:d1:d3:66:42:83:d5:4d:62: 20:57:dc:ed:5d:96:26:e2:ac:7e:7b:9d:e1:aa:cc: 35:57:b1:2e:07:03:b9:8b:74:f2:4c:0e:98:f1:a6: eb:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:E0:F9:6D:AC:47:1E:35:31:A2:24:2A:05:2D:D1:29:AC:88:A1:D3 X509v3 Authority Key Identifier: keyid:42:C6:E1:0C:B4:D5:AF:0F:92:CC:A6:A9:59:5C:CC:05:E2:E8:29:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:d1:a1:fd:8c:8f:99:5b:80:c1:4d:3c:38:0c:4a:fb:87:ee: b0:1a:f4:d5:e8:1c:9a:e9:d9:72:cc:cd:4a:cb:b7:90:88:fd: e5:b7:43:a5:70:0c:f2:33:b7:ce:d8:97:bc:16:06:ee:63:75: b6:3e:e2:17:e8:90:7f:2b:aa:a4:fd:7e:65:c8:98:f1:31:7c: c1:b7:e8:3f:04:b2:56:32:bc:71:06:b2:a1:8c:56:ef:2e:cf: d8:c6:6b:11:a5:23:b3:f0:92:1c:4e:4d:61:54:e5:29:6a:2e: 2c:de:78:c1:bd:c4:f5:4a:c5:e0:0a:45:da:d5:10:1a:dc:36: 42:62:5e:df:1a:4e:2f:dc:05:83:a9:cd:c5:fd:0a:6d:27:9f: 96:6e:d6:cf:0b:35:72:0e:6e:e2:95:1d:b9:82:33:75:d3:6c: 72:0e:9e:7e:23:29:83:44:ff:8b:c8:7b:df:b6:55:08:42:49: 03:8c:68:49:cd:87:77:17:e3:ac:6c:41:59:b3:62:c3:a2:52: 4e:6e:6f:00:55:15:e8:e7:b4:69:de:65:0b:23:1b:f2:b9:80: 1f:cb:19:01:50:72:6d:d4:c1:d7:f3:f7:36:b9:6e:b9:93:4f: f7:2b:54:1c:ab:cd:c8:5b:09:27:18:2f:93:3e:f0:c0:39:0f: d9:a0:c5:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQPorYEMJZNmzw72t1iZCnQzZTFkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJDNkUxMENCNEQ1QUYwRjkyQ0NBNkE5NTk1Q0NDMDVF MkU4MjlBRTAeFw0yNTA0MjMxNjU2MDJaFw0yNTA0MjcwNDA5MDJaMDMxMTAvBgNV BAMTKDJBRTBGOTZEQUM0NzFFMzUzMUEyMjQyQTA1MkREMTI5QUM4OEExRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO7sTRRzv/wt2Y/iju3aQZcRFD FoJ+llIR0r54K/C6UZBy2iBn9vqXGY/NshgKlCUnQngzqNeN4Wd3Y5buy0OPlk9u kiaDnMQN7GF2GaSLQJBVFfVTXg6DumvRA1DuR4vrkZhX6UVB8TsEipiLZcgIKzHs hv3uUt2wJM7B84j1IbuAEJ5a23mHp3FvK+ugZA/y/Q1l0eXwwdmrpuAd1WJaP7Z0 DIJa6vgsZ+DsIntOWRrh4al2bQ1PhXQ33BqyXi+xHgW7kR8KF+Cdhsqa2rSXcSiC JoxUILvR02ZCg9VNYiBX3O1dlibirH57neGqzDVXsS4HA7mLdPJMDpjxputBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKuD5baxHHjUxoiQqBS3RKayIodMwHwYDVR0j BBgwFoAUQsbhDLTVrw+SzKapWVzMBeLoKa4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NzM0MTliOS01NDIyLTRmYzItYTNlMC1jNDlhOGFhMDdmNzMvMC80MkM2RTEwQ0I0 RDVBRjBGOTJDQ0E2QTk1OTVDQ0MwNUUyRTgyOUFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDJDNkUxMENCNEQ1QUYwRjkyQ0NBNkE5NTk1Q0NDMDVFMkU4 MjlBRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTczNDE5YjktNTQyMi00ZmMyLWEz ZTAtYzQ5YThhYTA3ZjczLzAvNDJDNkUxMENCNEQ1QUYwRjkyQ0NBNkE5NTk1Q0ND MDVFMkU4MjlBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABrRof2Mj5lbgMFNPDgMSvuH7rAa9NXoHJrp 2XLMzUrLt5CI/eW3Q6VwDPIzt87Yl7wWBu5jdbY+4hfokH8rqqT9fmXImPExfMG3 6D8EslYyvHEGsqGMVu8uz9jGaxGlI7PwkhxOTWFU5SlqLizeeMG9xPVKxeAKRdrV EBrcNkJiXt8aTi/cBYOpzcX9Cm0nn5Zu1s8LNXIObuKVHbmCM3XTbHIOnn4jKYNE /4vIe9+2VQhCSQOMaEnNh3cX46xsQVmzYsOiUk5ubwBVFejntGneZQsjG/K5gB/L GQFQcm3Uwdfz9za5brmTT/crVByrzchbCScYL5M+8MA5D9mgxXQ= -----END CERTIFICATE-----Generated at Wed Apr 23 19:50:54 2025 by rpki-client on console.sobornost.net