$ rpki-client -vvf repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.mft File: 4A243A1EC4991C40D3A6148515E3C51981B425F7.mft (raw, json) Hash identifier: u7zRqzAHr6McTLqLExDeUNvQRWb5N4Urs12lGrPUi+8= Subject key identifier: C0:ED:CA:7B:D3:5B:03:77:EE:83:72:DD:05:84:4E:F9:90:23:28:49 Authority key identifier: 4A:24:3A:1E:C4:99:1C:40:D3:A6:14:85:15:E3:C5:19:81:B4:25:F7 Certificate issuer: /CN=4A243A1EC4991C40D3A6148515E3C51981B425F7 Certificate serial: 1ED23E595D5FA6CC2943D7E65C0436A440903772 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A243A1EC4991C40D3A6148515E3C51981B425F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.mft Manifest number: 0160 Signing time: Wed 23 Apr 2025 06:00:58 +0000 Manifest this update: Wed 23 Apr 2025 05:55:58 +0000 Manifest next update: Sat 26 Apr 2025 08:04:58 +0000 Files and hashes: 1: 4A243A1EC4991C40D3A6148515E3C51981B425F7.crl (hash: AiLBHwonikJg+aoMIWCU+87kfo6hv3eHAXO9qJNgZNA=) 2: 3130332e3130392e3230362e302f32342d3234203d3e20313530393335.roa (hash: Rcu96XphgA8WvPbRK/1ptZ3CZTir4MCBj7MHKlWlNMw=) 3: 3130332e3130392e3230372e302f32342d3234203d3e20313530393335.roa (hash: W7qNwUKI6yVYK0QKsHqMQf5TpfiakU3FHDTDzkx2y0k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.crl rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A243A1EC4991C40D3A6148515E3C51981B425F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 08:04:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:d2:3e:59:5d:5f:a6:cc:29:43:d7:e6:5c:04:36:a4:40:90:37:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A243A1EC4991C40D3A6148515E3C51981B425F7 Validity Not Before: Apr 23 05:55:58 2025 GMT Not After : Apr 26 08:04:58 2025 GMT Subject: CN=C0EDCA7BD35B0377EE8372DD05844EF990232849 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:28:43:94:a4:23:ee:66:64:c3:f0:7a:3f:be: a5:47:d0:3c:2f:91:23:cd:37:32:4c:ae:53:03:6e: 11:6d:b8:f7:d7:8c:04:4b:99:34:a0:1e:b6:64:aa: c6:52:1b:8e:16:f9:28:a9:51:b5:b0:2c:b4:f9:f2: 29:aa:5a:e4:84:a1:be:68:fa:df:74:bc:be:ce:48: 0a:0f:a4:a8:7a:67:7b:a0:17:81:21:8c:48:3c:26: 27:17:4c:3e:6e:60:96:5c:40:3f:c4:45:ea:17:a5: 64:17:57:8b:fd:61:31:d7:7b:f1:bf:5b:6f:47:fc: 59:2c:d3:83:c5:2d:e8:27:1d:87:e9:74:27:a5:ca: 32:62:6c:e5:a6:65:71:5b:81:e9:b4:fd:d8:89:7f: e4:17:44:31:b6:c8:1d:41:9c:84:2f:c5:f9:56:52: a1:03:48:73:a6:ee:fd:a5:ef:99:a7:c7:7a:2c:84: ca:34:89:5d:84:93:3c:8e:f9:24:91:39:18:63:17: 35:56:07:6d:74:21:61:8d:cb:52:1d:d3:0d:e2:80: e5:f2:42:5c:f4:9a:65:09:b6:2a:64:c8:90:3a:04: e8:d1:97:65:e6:b3:f1:eb:66:53:4e:97:e0:23:90: f4:b7:3b:fb:f3:f7:87:1e:26:c9:41:d6:d3:11:4d: 0b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:ED:CA:7B:D3:5B:03:77:EE:83:72:DD:05:84:4E:F9:90:23:28:49 X509v3 Authority Key Identifier: keyid:4A:24:3A:1E:C4:99:1C:40:D3:A6:14:85:15:E3:C5:19:81:B4:25:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A243A1EC4991C40D3A6148515E3C51981B425F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:d5:99:20:64:e1:2d:b8:9e:18:16:67:6b:d2:65:32:43:1b: 63:7e:43:1e:01:a5:f3:7d:ac:ed:87:80:e7:cc:79:64:a9:e2: ca:eb:75:4b:51:e4:7a:03:6f:23:42:0e:ea:34:6c:88:d9:d2: c5:d9:12:ca:6a:1f:a7:2f:ab:03:37:c8:25:bc:9c:c2:c2:04: 01:5c:b6:89:3f:dd:d3:9e:84:a8:c6:d3:23:f4:41:fe:f7:65: e6:0f:84:35:42:4c:ac:29:f2:ca:a5:c0:08:3e:bf:b4:2e:ff: 57:7e:07:f3:71:90:b9:63:cc:2d:14:c0:41:40:2f:8c:ac:ce: 00:e0:dc:7e:91:dd:85:0e:46:f1:1e:9e:2f:cb:f1:bf:15:55: f9:ed:1f:7d:0c:51:88:05:20:43:a5:42:8e:02:80:c4:d7:13: 6e:b5:8c:dc:e4:2c:fd:e1:dd:06:fb:a1:3c:3f:de:fe:ca:6f: 64:bc:0e:61:4a:c2:69:a7:19:b1:bb:9b:f5:50:e4:e6:fa:cd: bd:cc:48:98:39:90:e7:6c:75:02:5c:59:9f:31:83:e7:86:80: ae:75:11:b1:39:ec:d2:21:31:e0:2d:30:6c:5d:b0:96:18:3f: 42:04:58:a4:3e:c9:9c:fd:a0:f4:c0:40:dd:ec:43:91:d1:df: 71:c7:08:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHtI+WV1fpswpQ9fmXAQ2pECQN3IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEEyNDNBMUVDNDk5MUM0MEQzQTYxNDg1MTVFM0M1MTk4 MUI0MjVGNzAeFw0yNTA0MjMwNTU1NThaFw0yNTA0MjYwODA0NThaMDMxMTAvBgNV BAMTKEMwRURDQTdCRDM1QjAzNzdFRTgzNzJERDA1ODQ0RUY5OTAyMzI4NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPKEOUpCPuZmTD8Ho/vqVH0Dwv kSPNNzJMrlMDbhFtuPfXjARLmTSgHrZkqsZSG44W+SipUbWwLLT58imqWuSEob5o +t90vL7OSAoPpKh6Z3ugF4EhjEg8JicXTD5uYJZcQD/EReoXpWQXV4v9YTHXe/G/ W29H/Fks04PFLegnHYfpdCelyjJibOWmZXFbgem0/diJf+QXRDG2yB1BnIQvxflW UqEDSHOm7v2l75mnx3oshMo0iV2EkzyO+SSRORhjFzVWB210IWGNy1Id0w3igOXy Qlz0mmUJtipkyJA6BOjRl2Xms/HrZlNOl+AjkPS3O/vz94ceJslB1tMRTQvpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwO3Ke9NbA3fug3LdBYRO+ZAjKEkwHwYDVR0j BBgwFoAUSiQ6HsSZHEDTphSFFePFGYG0JfcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Yzg4OTJlYi1kZGMwLTRjYjYtOTU3Yy1iNjUzZjI4YmJmMzkvMC80QTI0M0ExRUM0 OTkxQzQwRDNBNjE0ODUxNUUzQzUxOTgxQjQyNUY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEEyNDNBMUVDNDk5MUM0MEQzQTYxNDg1MTVFM0M1MTk4MUI0 MjVGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWM4ODkyZWItZGRjMC00Y2I2LTk1 N2MtYjY1M2YyOGJiZjM5LzAvNEEyNDNBMUVDNDk5MUM0MEQzQTYxNDg1MTVFM0M1 MTk4MUI0MjVGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFTVmSBk4S24nhgWZ2vSZTJDG2N+Qx4BpfN9 rO2HgOfMeWSp4srrdUtR5HoDbyNCDuo0bIjZ0sXZEspqH6cvqwM3yCW8nMLCBAFc tok/3dOehKjG0yP0Qf73ZeYPhDVCTKwp8sqlwAg+v7Qu/1d+B/NxkLljzC0UwEFA L4yszgDg3H6R3YUORvEeni/L8b8VVfntH30MUYgFIEOlQo4CgMTXE261jNzkLP3h 3Qb7oTw/3v7Kb2S8DmFKwmmnGbG7m/VQ5Ob6zb3MSJg5kOdsdQJcWZ8xg+eGgK51 EbE57NIhMeAtMGxdsJYYP0IEWKQ+yZz9oPTAQN3sQ5HR33HHCBg= -----END CERTIFICATE-----Generated at Wed Apr 23 08:55:52 2025 by rpki-client on console.sobornost.net