$ rpki-client -vvf repo-rpki.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/821049BBD22C335A50850F16AB159C0C6BCC28E5.mft File: 821049BBD22C335A50850F16AB159C0C6BCC28E5.mft (raw, json) Hash identifier: qel96yjtT/wuiOxl+JEW0abiRLVaTjLHw6N9A1sC+7E= Subject key identifier: 99:4C:A5:80:63:C7:86:A9:16:82:E1:46:08:5B:20:8F:E7:7C:9F:58 Authority key identifier: 82:10:49:BB:D2:2C:33:5A:50:85:0F:16:AB:15:9C:0C:6B:CC:28:E5 Certificate issuer: /CN=821049BBD22C335A50850F16AB159C0C6BCC28E5 Certificate serial: 15229999A63EED7B7CF79FBAD666A6CCE3F92CA3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821049BBD22C335A50850F16AB159C0C6BCC28E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/821049BBD22C335A50850F16AB159C0C6BCC28E5.mft Manifest number: 01FE Signing time: Sat 26 Apr 2025 00:21:38 +0000 Manifest this update: Sat 26 Apr 2025 00:16:38 +0000 Manifest next update: Tue 29 Apr 2025 06:21:38 +0000 Files and hashes: 1: 821049BBD22C335A50850F16AB159C0C6BCC28E5.crl (hash: 8RNWgk9p/2yEzvuA/n22kf6Njwb0hl4ojsERzG9zpZg=) 2: 3130332e32312e39322e302f32342d3234203d3e20313331373338.roa (hash: ncuNmuDMRCz7XEGjG+8p/qjKUpvp2YtlNc4JXvP3iGg=) 3: 3130332e32312e39342e302f32342d3234203d3e20313331373338.roa (hash: YF6vJXMVtUVK6CmNTZeLfmthP1D0nB1ofgHbuXDKxvI=) 4: 3130332e32312e39332e302f32342d3234203d3e20313331373338.roa (hash: gJZ1sW5BxaKi4OlH0Ko1+AD9dXMVkojyx6OKsnKZ2JU=) 5: 3130332e32312e39352e302f32342d3234203d3e203435323935.roa (hash: O6mcNqFGUKoXPAXAaTNGJf2XpVfyBv0t3Gtn3V+6lKE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/821049BBD22C335A50850F16AB159C0C6BCC28E5.crl rsync://repo-rpki.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/821049BBD22C335A50850F16AB159C0C6BCC28E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821049BBD22C335A50850F16AB159C0C6BCC28E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 06:21:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:22:99:99:a6:3e:ed:7b:7c:f7:9f:ba:d6:66:a6:cc:e3:f9:2c:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821049BBD22C335A50850F16AB159C0C6BCC28E5 Validity Not Before: Apr 26 00:16:38 2025 GMT Not After : Apr 29 06:21:38 2025 GMT Subject: CN=994CA58063C786A91682E146085B208FE77C9F58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3e:28:7b:d5:99:7f:c0:e3:16:7b:e8:5f:db: 55:f1:a2:d3:be:43:12:ca:31:a4:f7:6c:91:93:41: 4c:d0:b9:34:6d:91:98:12:40:c2:a4:54:83:87:0a: 30:ab:b5:a3:e5:46:97:ae:2c:d4:7e:67:26:56:c8: 99:d5:43:0e:27:37:d7:62:c7:c0:d3:4c:2e:1e:f8: 50:1d:87:1c:cc:75:7b:f6:ca:4e:0f:03:c3:31:46: ba:c7:87:54:89:69:93:34:c2:e8:67:1e:8b:92:03: 73:02:c8:f4:c0:51:3a:0e:2c:41:32:cd:7d:a3:ad: 04:a3:d8:92:77:b8:6c:15:29:da:c8:e9:67:7f:cf: 10:fa:0e:66:b4:2a:b2:5b:8d:b7:28:53:c8:dd:66: 2e:e2:3f:04:cb:52:e0:3a:40:b6:55:63:73:e4:ab: 22:29:a9:11:5a:11:9d:d8:6d:5c:d2:f2:1d:6e:c4: 20:61:a3:5d:ee:5c:88:10:4c:7b:d9:80:0b:53:06: 7a:cf:52:c7:27:0d:c0:0f:8f:12:80:6e:a6:f6:70: d2:50:92:98:34:62:25:6a:f3:c5:88:6e:10:c6:3e: 14:9c:1d:44:41:dc:b1:d2:3c:6e:70:ec:5d:ef:38: fa:30:ef:24:af:ed:2e:aa:bb:25:6c:bc:e1:3e:a0: 8d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:4C:A5:80:63:C7:86:A9:16:82:E1:46:08:5B:20:8F:E7:7C:9F:58 X509v3 Authority Key Identifier: keyid:82:10:49:BB:D2:2C:33:5A:50:85:0F:16:AB:15:9C:0C:6B:CC:28:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/821049BBD22C335A50850F16AB159C0C6BCC28E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821049BBD22C335A50850F16AB159C0C6BCC28E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/821049BBD22C335A50850F16AB159C0C6BCC28E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:b6:e8:1b:d0:3c:39:cd:c4:79:ff:c1:b5:b1:12:53:dd:f9: ab:ec:fc:68:c8:96:c4:84:57:52:a8:be:de:af:e4:c0:30:f5: 77:8b:68:a5:41:5d:56:00:a1:ef:3c:56:d7:20:42:43:17:92: be:f6:4b:cc:8b:5f:5b:ca:e9:b6:9a:03:8f:fb:d3:dd:26:bc: b3:86:93:b4:d3:00:7b:13:f7:22:08:42:b1:de:6e:45:0c:02: 51:74:37:29:d6:84:89:81:7b:97:27:27:59:a4:a6:18:31:44: a1:fb:35:9d:7f:78:fa:bb:10:85:21:41:01:5f:a4:83:fc:cc: fc:4d:50:7e:ff:a1:30:01:30:5b:01:ff:43:70:54:89:ec:01: 0c:be:d1:f4:a2:68:f1:88:06:ee:d1:cd:cc:18:ac:1d:70:2e: bd:b0:d0:fa:98:14:4e:c8:12:d4:c4:4c:e0:8b:15:2c:97:76: 3f:e2:b9:5c:0a:b7:f4:20:a7:da:d1:98:26:51:b2:a6:bb:c9: 25:0e:36:49:a0:27:59:d0:e6:e7:d6:be:6a:1d:88:9d:56:9e: ad:b0:88:e5:2b:f2:e9:5e:b3:96:df:c0:6d:b5:7a:a8:cc:ec: dd:2a:4c:63:cb:db:e9:4d:e3:81:44:d2:bb:de:9e:77:16:98: 3c:d4:05:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFSKZmaY+7Xt895+61mamzOP5LKMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODIxMDQ5QkJEMjJDMzM1QTUwODUwRjE2QUIxNTlDMEM2 QkNDMjhFNTAeFw0yNTA0MjYwMDE2MzhaFw0yNTA0MjkwNjIxMzhaMDMxMTAvBgNV BAMTKDk5NENBNTgwNjNDNzg2QTkxNjgyRTE0NjA4NUIyMDhGRTc3QzlGNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDPih71Zl/wOMWe+hf21XxotO+ QxLKMaT3bJGTQUzQuTRtkZgSQMKkVIOHCjCrtaPlRpeuLNR+ZyZWyJnVQw4nN9di x8DTTC4e+FAdhxzMdXv2yk4PA8MxRrrHh1SJaZM0wuhnHouSA3MCyPTAUToOLEEy zX2jrQSj2JJ3uGwVKdrI6Wd/zxD6Dma0KrJbjbcoU8jdZi7iPwTLUuA6QLZVY3Pk qyIpqRFaEZ3YbVzS8h1uxCBho13uXIgQTHvZgAtTBnrPUscnDcAPjxKAbqb2cNJQ kpg0YiVq88WIbhDGPhScHURB3LHSPG5w7F3vOPow7ySv7S6quyVsvOE+oI1xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmUylgGPHhqkWguFGCFsgj+d8n1gwHwYDVR0j BBgwFoAUghBJu9IsM1pQhQ8WqxWcDGvMKOUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZGU4ZTE4ZC1hMDQ3LTQ1OTAtOWU1Ni00NjRhNzNlMjNjNmMvMC84MjEwNDlCQkQy MkMzMzVBNTA4NTBGMTZBQjE1OUMwQzZCQ0MyOEU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODIxMDQ5QkJEMjJDMzM1QTUwODUwRjE2QUIxNTlDMEM2QkND MjhFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWRlOGUxOGQtYTA0Ny00NTkwLTll NTYtNDY0YTczZTIzYzZjLzAvODIxMDQ5QkJEMjJDMzM1QTUwODUwRjE2QUIxNTlD MEM2QkNDMjhFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADG26BvQPDnNxHn/wbWxElPd+avs/GjIlsSE V1Kovt6v5MAw9XeLaKVBXVYAoe88VtcgQkMXkr72S8yLX1vK6baaA4/7090mvLOG k7TTAHsT9yIIQrHebkUMAlF0NynWhImBe5cnJ1mkphgxRKH7NZ1/ePq7EIUhQQFf pIP8zPxNUH7/oTABMFsB/0NwVInsAQy+0fSiaPGIBu7RzcwYrB1wLr2w0PqYFE7I EtTETOCLFSyXdj/iuVwKt/Qgp9rRmCZRsqa7ySUONkmgJ1nQ5ufWvmodiJ1Wnq2w iOUr8ules5bfwG21eqjM7N0qTGPL2+lN44FE0rvenncWmDzUBdE= -----END CERTIFICATE-----Generated at Sat Apr 26 06:13:45 2025 by rpki-client on console.sobornost.net