$ rpki-client -vvf repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.mft File: EAAF14D74C27E1502835CCF1541D5D92498C8427.mft (raw, json) Hash identifier: guJR3/ifHWh+IW0jefzjs3vgdnPu1iyuRkD69rXjzeU= Subject key identifier: CA:C3:29:14:80:75:B8:51:FC:3D:FB:97:23:15:17:3C:F1:2D:7B:13 Authority key identifier: EA:AF:14:D7:4C:27:E1:50:28:35:CC:F1:54:1D:5D:92:49:8C:84:27 Certificate issuer: /CN=EAAF14D74C27E1502835CCF1541D5D92498C8427 Certificate serial: 4CDF01300BA8A17CFA7998B0D8C4485F520ED956 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAAF14D74C27E1502835CCF1541D5D92498C8427.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.mft Manifest number: B0 Signing time: Wed 23 Apr 2025 19:11:48 +0000 Manifest this update: Wed 23 Apr 2025 19:06:48 +0000 Manifest next update: Sat 26 Apr 2025 20:24:48 +0000 Files and hashes: 1: 323030313a6466333a393263303a3a2f34382d3438203d3e20313532343231.roa (hash: sF0+Hzy6oJxlj5HSJzIfCoHVtQeeL/eSjk9uB3se86E=) 2: EAAF14D74C27E1502835CCF1541D5D92498C8427.crl (hash: sM8Ee6xAvVy2NH8LbpkUiYKN7jaPkkh+Gt7wASJtVnk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.crl rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAAF14D74C27E1502835CCF1541D5D92498C8427.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 20:24:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:df:01:30:0b:a8:a1:7c:fa:79:98:b0:d8:c4:48:5f:52:0e:d9:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EAAF14D74C27E1502835CCF1541D5D92498C8427 Validity Not Before: Apr 23 19:06:48 2025 GMT Not After : Apr 26 20:24:48 2025 GMT Subject: CN=CAC329148075B851FC3DFB972315173CF12D7B13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:1b:46:6a:60:11:98:8a:be:7d:8f:ae:2f:b2: 41:47:81:38:e8:d9:87:c4:4c:1a:9f:cf:76:5d:e0: 94:1e:c4:d3:1a:77:0a:36:c4:0e:02:59:8b:61:5b: 50:62:f4:3f:bb:fa:f9:bb:fa:5f:c4:0d:bc:18:f0: 1d:fc:a2:ed:61:05:bb:9d:2c:06:b1:04:e4:1e:d7: f3:f5:f5:01:d5:bd:3a:36:d3:3c:7f:c5:a9:09:db: c6:6d:c8:fc:67:a8:ff:e7:bd:96:53:09:c9:38:99: a5:26:77:3d:2d:5c:19:f1:aa:0f:76:94:b9:18:a8: fb:1d:4f:ea:34:5f:ff:12:79:0d:08:e8:ee:ef:1b: 86:d0:5b:76:61:f5:64:bf:38:b2:53:29:9b:c6:d0: 6f:fd:c0:8e:a7:af:27:20:00:63:ff:5b:85:8b:90: 3b:0c:85:89:5b:f4:60:6e:ee:9d:6b:83:4a:93:cd: 0a:db:e7:d8:a7:b3:f8:d1:ba:a9:0a:50:4c:fd:db: 7b:ae:31:38:8b:12:80:80:f4:f6:06:3b:01:d7:96: ae:68:7e:f1:d0:74:66:eb:04:c7:6a:59:30:63:a4: ab:7b:2b:f6:f0:7a:19:97:5c:44:35:8d:36:89:04: 20:eb:a5:87:5f:f0:01:bc:31:15:51:7b:a6:ee:a9: f0:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:C3:29:14:80:75:B8:51:FC:3D:FB:97:23:15:17:3C:F1:2D:7B:13 X509v3 Authority Key Identifier: keyid:EA:AF:14:D7:4C:27:E1:50:28:35:CC:F1:54:1D:5D:92:49:8C:84:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAAF14D74C27E1502835CCF1541D5D92498C8427.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:0d:59:05:9d:38:83:7a:4d:79:d1:87:49:9d:25:0a:ea:84: 81:23:be:78:43:56:32:80:7f:f1:09:15:92:c3:33:78:f4:28: dc:ea:cd:c2:76:dd:82:a2:4c:c1:a8:fd:30:ef:8a:f9:5e:0f: e0:a4:74:0a:e7:3f:69:2d:e3:bb:45:14:c7:50:2a:a3:29:55: fd:f7:82:93:4c:ff:32:66:ff:37:86:7c:e4:62:5a:91:75:ce: 79:a5:51:ea:59:7a:ac:47:f0:ba:65:98:4d:63:5e:4a:d2:5c: c5:cf:3a:b8:ef:1f:e1:74:55:37:51:30:e1:45:cb:77:1e:92: 71:2d:54:17:8f:e9:84:96:ef:9d:47:c2:52:5e:40:7e:a9:4a: f4:01:a9:81:c9:18:f0:01:cd:b1:0e:f6:4c:7a:c6:cb:0a:f8: 78:3a:92:e5:4b:84:a3:c0:54:a6:a3:72:c3:08:2c:b8:7f:e9: e5:39:ec:a2:82:ee:6e:90:cf:67:f1:66:92:4e:ae:67:ea:28: 74:42:22:57:ce:3c:1d:49:e7:3e:42:68:87:3d:e5:fb:df:ba: 6a:ad:67:bc:82:78:f9:ab:25:6b:ca:8f:64:28:cb:2f:99:d2: f2:ae:63:ed:c6:99:5e:7d:5b:dc:5f:0b:db:b9:de:06:a9:da: 0a:f3:6f:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTN8BMAuooXz6eZiw2MRIX1IO2VYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUFBRjE0RDc0QzI3RTE1MDI4MzVDQ0YxNTQxRDVEOTI0 OThDODQyNzAeFw0yNTA0MjMxOTA2NDhaFw0yNTA0MjYyMDI0NDhaMDMxMTAvBgNV BAMTKENBQzMyOTE0ODA3NUI4NTFGQzNERkI5NzIzMTUxNzNDRjEyRDdCMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTG0ZqYBGYir59j64vskFHgTjo 2YfETBqfz3Zd4JQexNMadwo2xA4CWYthW1Bi9D+7+vm7+l/EDbwY8B38ou1hBbud LAaxBOQe1/P19QHVvTo20zx/xakJ28ZtyPxnqP/nvZZTCck4maUmdz0tXBnxqg92 lLkYqPsdT+o0X/8SeQ0I6O7vG4bQW3Zh9WS/OLJTKZvG0G/9wI6nrycgAGP/W4WL kDsMhYlb9GBu7p1rg0qTzQrb59ins/jRuqkKUEz923uuMTiLEoCA9PYGOwHXlq5o fvHQdGbrBMdqWTBjpKt7K/bwehmXXEQ1jTaJBCDrpYdf8AG8MRVRe6buqfDBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUysMpFIB1uFH8PfuXIxUXPPEtexMwHwYDVR0j BBgwFoAU6q8U10wn4VAoNczxVB1dkkmMhCcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTRmNzkzNC1jZGM3LTQwODItODNmYi1kZjdkNGY4MjE5YWYvMS9FQUFGMTRENzRD MjdFMTUwMjgzNUNDRjE1NDFENUQ5MjQ5OEM4NDI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUFBRjE0RDc0QzI3RTE1MDI4MzVDQ0YxNTQxRDVEOTI0OThD ODQyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE0Zjc5MzQtY2RjNy00MDgyLTgz ZmItZGY3ZDRmODIxOWFmLzEvRUFBRjE0RDc0QzI3RTE1MDI4MzVDQ0YxNTQxRDVE OTI0OThDODQyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABANWQWdOIN6TXnRh0mdJQrqhIEjvnhDVjKA f/EJFZLDM3j0KNzqzcJ23YKiTMGo/TDvivleD+CkdArnP2kt47tFFMdQKqMpVf33 gpNM/zJm/zeGfORiWpF1znmlUepZeqxH8LplmE1jXkrSXMXPOrjvH+F0VTdRMOFF y3ceknEtVBeP6YSW751HwlJeQH6pSvQBqYHJGPABzbEO9kx6xssK+Hg6kuVLhKPA VKajcsMILLh/6eU57KKC7m6Qz2fxZpJOrmfqKHRCIlfOPB1J5z5CaIc95fvfumqt Z7yCePmrJWvKj2Qoyy+Z0vKuY+3GmV59W9xfC9u53gap2grzb+U= -----END CERTIFICATE-----Generated at Wed Apr 23 22:12:04 2025 by rpki-client on console.sobornost.net