$ rpki-client -vvf repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.mft File: 0121B523CA474B24830F641FAFB3BBF25D84D66F.mft (raw, json) Hash identifier: zRgUTPxou2DqO5XaZivpaCwF0Mt6Rgf1ZxrrnvrOk+I= Subject key identifier: 90:BA:54:BB:F4:FF:F6:C1:D4:E3:3D:08:5F:C0:3C:29:5C:01:88:D8 Authority key identifier: 01:21:B5:23:CA:47:4B:24:83:0F:64:1F:AF:B3:BB:F2:5D:84:D6:6F Certificate issuer: /CN=0121B523CA474B24830F641FAFB3BBF25D84D66F Certificate serial: 47AEF1DCD38B3BD7093C81D6A9C3EDA86762C7DD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0121B523CA474B24830F641FAFB3BBF25D84D66F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.mft Manifest number: 0309 Signing time: Thu 24 Apr 2025 17:40:55 +0000 Manifest this update: Thu 24 Apr 2025 17:35:55 +0000 Manifest next update: Mon 28 Apr 2025 04:52:55 +0000 Files and hashes: 1: 0121B523CA474B24830F641FAFB3BBF25D84D66F.crl (hash: JSCO1VsPGT0nOlnlniow2hg0O3OvzBQ3Q9PvfiCqC+0=) 2: 3130332e3136362e3136342e302f32342d3234203d3e20313431393530.roa (hash: XW48ld4PLEVZF/n5xQQKh4lnda/V5NxwteSGEFQE2uA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.crl rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0121B523CA474B24830F641FAFB3BBF25D84D66F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:ae:f1:dc:d3:8b:3b:d7:09:3c:81:d6:a9:c3:ed:a8:67:62:c7:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0121B523CA474B24830F641FAFB3BBF25D84D66F Validity Not Before: Apr 24 17:35:55 2025 GMT Not After : Apr 28 04:52:55 2025 GMT Subject: CN=90BA54BBF4FFF6C1D4E33D085FC03C295C0188D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:87:64:ce:18:21:76:f7:ac:f1:c2:27:cc:58: a3:ed:5e:37:99:b2:ec:2e:00:04:ac:df:e9:da:9f: 89:b0:2c:e1:73:98:02:0a:ac:06:57:29:60:81:be: 86:15:e7:06:ca:2c:18:18:b7:5a:0e:d4:2a:56:cb: 2d:80:83:c8:80:20:22:f6:b4:7f:58:12:a9:45:cc: 6a:fc:fd:b5:94:2a:79:ed:76:e9:74:40:8d:f5:50: 81:bf:0f:11:ae:f1:7c:aa:ef:ba:30:b9:0d:cb:85: d2:b5:38:05:95:7b:f0:36:01:de:b3:ea:e2:c5:be: 9e:d2:5d:22:94:19:39:eb:3b:2d:c5:98:a7:f7:0b: b1:5a:9f:f3:01:e4:3f:44:25:9c:52:f7:6b:5e:c0: 8d:42:25:43:2c:a1:f9:f6:96:8d:5e:79:c3:bf:b8: 6d:df:8b:d4:4e:76:ca:9f:63:21:7b:a5:91:89:d0: 7b:b7:27:37:7d:c5:70:6d:d7:8e:2d:54:a6:f5:4d: 9f:b0:b5:b8:05:26:95:3b:b0:92:b9:e1:ef:7c:8c: ca:80:bd:eb:70:56:ee:e7:75:4b:b4:c4:62:7c:7f: 83:d8:57:07:90:78:73:be:34:29:72:26:05:8d:c5: 57:62:2d:57:a1:f7:ba:d5:1e:e0:a9:11:02:12:b4: c0:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:BA:54:BB:F4:FF:F6:C1:D4:E3:3D:08:5F:C0:3C:29:5C:01:88:D8 X509v3 Authority Key Identifier: keyid:01:21:B5:23:CA:47:4B:24:83:0F:64:1F:AF:B3:BB:F2:5D:84:D6:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0121B523CA474B24830F641FAFB3BBF25D84D66F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:ce:e3:66:76:ab:0f:22:0b:26:69:68:c9:3d:47:f2:b1:70: 66:de:7e:cb:64:a6:a8:2b:22:c8:27:4b:55:5c:ef:43:13:ba: 4c:34:c2:39:15:4a:80:dc:c8:2e:44:03:43:c5:98:82:cc:cc: c2:a0:be:f6:61:d0:2e:ed:de:b3:cb:34:51:d3:a7:d5:a9:24: ce:72:d2:51:40:10:69:a2:57:f8:59:7d:79:bc:bf:2b:94:94: 9e:f3:9f:a2:56:7c:bf:f1:8c:eb:86:e7:41:ea:be:b6:91:41: d1:69:0d:32:a6:98:ea:ad:a9:0a:f7:fc:ec:f8:a4:f4:b8:b2: b7:02:b7:c8:3b:14:1d:bf:8b:4b:5f:55:88:ce:de:5b:1a:41: 59:1e:42:ec:8a:0d:06:79:3f:56:94:87:32:97:7d:67:88:75: 7b:4b:94:54:46:55:04:1d:ec:d6:26:9f:be:4a:0e:4b:e7:9f: 3f:f8:ca:63:dd:57:e4:f8:02:af:c2:01:ea:bc:28:b8:dc:2f: da:58:01:0c:fb:f5:fe:b1:6c:57:83:e4:2f:ae:80:c4:40:7e: b1:d4:25:d9:20:27:0d:73:0e:83:f2:3c:95:7b:2d:14:0a:20: 99:3c:63:87:3c:72:19:92:76:c2:14:c3:b2:ca:c4:01:c7:3d: 18:45:a3:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR67x3NOLO9cJPIHWqcPtqGdix90wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDEyMUI1MjNDQTQ3NEIyNDgzMEY2NDFGQUZCM0JCRjI1 RDg0RDY2RjAeFw0yNTA0MjQxNzM1NTVaFw0yNTA0MjgwNDUyNTVaMDMxMTAvBgNV BAMTKDkwQkE1NEJCRjRGRkY2QzFENEUzM0QwODVGQzAzQzI5NUMwMTg4RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIh2TOGCF296zxwifMWKPtXjeZ suwuAASs3+nan4mwLOFzmAIKrAZXKWCBvoYV5wbKLBgYt1oO1CpWyy2Ag8iAICL2 tH9YEqlFzGr8/bWUKnntdul0QI31UIG/DxGu8Xyq77owuQ3LhdK1OAWVe/A2Ad6z 6uLFvp7SXSKUGTnrOy3FmKf3C7Fan/MB5D9EJZxS92tewI1CJUMsofn2lo1eecO/ uG3fi9ROdsqfYyF7pZGJ0Hu3Jzd9xXBt144tVKb1TZ+wtbgFJpU7sJK54e98jMqA vetwVu7ndUu0xGJ8f4PYVweQeHO+NClyJgWNxVdiLVeh97rVHuCpEQIStMDjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkLpUu/T/9sHU4z0IX8A8KVwBiNgwHwYDVR0j BBgwFoAUASG1I8pHSySDD2Qfr7O78l2E1m8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTliODIyYS04YjkxLTQ4ZDItOWJjMS1hZTBkOTAwYmY5YzcvMC8wMTIxQjUyM0NB NDc0QjI0ODMwRjY0MUZBRkIzQkJGMjVEODRENjZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDEyMUI1MjNDQTQ3NEIyNDgzMEY2NDFGQUZCM0JCRjI1RDg0 RDY2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE5YjgyMmEtOGI5MS00OGQyLTli YzEtYWUwZDkwMGJmOWM3LzAvMDEyMUI1MjNDQTQ3NEIyNDgzMEY2NDFGQUZCM0JC RjI1RDg0RDY2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAATO42Z2qw8iCyZpaMk9R/KxcGbefstkpqgr IsgnS1Vc70MTukw0wjkVSoDcyC5EA0PFmILMzMKgvvZh0C7t3rPLNFHTp9WpJM5y 0lFAEGmiV/hZfXm8vyuUlJ7zn6JWfL/xjOuG50HqvraRQdFpDTKmmOqtqQr3/Oz4 pPS4srcCt8g7FB2/i0tfVYjO3lsaQVkeQuyKDQZ5P1aUhzKXfWeIdXtLlFRGVQQd 7NYmn75KDkvnnz/4ymPdV+T4Aq/CAeq8KLjcL9pYAQz79f6xbFeD5C+ugMRAfrHU JdkgJw1zDoPyPJV7LRQKIJk8Y4c8chmSdsIUw7LKxAHHPRhFo3g= -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:25 2025 by rpki-client on console.sobornost.net