$ rpki-client -vvf repo-rpki.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/DEF44331E724964F28697DEABAF2313CDCEEFACE.mft File: DEF44331E724964F28697DEABAF2313CDCEEFACE.mft (raw, json) Hash identifier: DJ0Ks+ishKQ8qdERgr8WEde/rqeDJ9HxfI3taHseVzA= Subject key identifier: 90:D8:75:5A:80:D1:34:C3:BF:66:18:E9:16:F3:12:D4:BB:0B:A0:0A Authority key identifier: DE:F4:43:31:E7:24:96:4F:28:69:7D:EA:BA:F2:31:3C:DC:EE:FA:CE Certificate issuer: /CN=DEF44331E724964F28697DEABAF2313CDCEEFACE Certificate serial: 539CCF0EC6C5E7667C48E49D0023646A721397F4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEF44331E724964F28697DEABAF2313CDCEEFACE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/DEF44331E724964F28697DEABAF2313CDCEEFACE.mft Manifest number: 04C5 Signing time: Wed 23 Apr 2025 10:00:55 +0000 Manifest this update: Wed 23 Apr 2025 09:55:55 +0000 Manifest next update: Sat 26 Apr 2025 10:37:55 +0000 Files and hashes: 1: 323030313a6466343a316630303a3a2f34382d3438203d3e20313337333132.roa (hash: Y4VWHmgW9HZwKxSE/waNnU6ZuSrPKeVjHYVcm5B2tUE=) 2: 3130332e3130382e3139312e302f32342d3234203d3e20313337333132.roa (hash: KIBNFpdbg6BRQCIPOHqspYOBoezcUYWgmcH91SlD2KY=) 3: DEF44331E724964F28697DEABAF2313CDCEEFACE.crl (hash: P5CHE8Voo5U+lmQT2+bNad2276qw7PXO1L0U526XWxY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/DEF44331E724964F28697DEABAF2313CDCEEFACE.crl rsync://repo-rpki.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/DEF44331E724964F28697DEABAF2313CDCEEFACE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEF44331E724964F28697DEABAF2313CDCEEFACE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 10:37:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:9c:cf:0e:c6:c5:e7:66:7c:48:e4:9d:00:23:64:6a:72:13:97:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEF44331E724964F28697DEABAF2313CDCEEFACE Validity Not Before: Apr 23 09:55:55 2025 GMT Not After : Apr 26 10:37:55 2025 GMT Subject: CN=90D8755A80D134C3BF6618E916F312D4BB0BA00A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:81:47:6a:2a:0b:5d:79:04:21:49:8f:40:60: 25:4d:c1:e1:c5:78:38:2a:1d:67:0d:cc:fc:fd:52: ea:bf:af:9d:91:ec:e6:c7:22:73:a4:65:d5:38:e7: b9:66:af:b7:4c:8d:e2:73:58:e6:1e:09:b8:4c:0e: d2:c8:4e:4f:a0:fe:05:1b:79:bf:85:38:0e:43:0f: b3:7c:4a:83:ea:7d:5f:22:8d:d5:1d:d1:50:4d:3b: 06:d6:4b:05:a5:f3:d5:96:3a:b8:55:bc:3c:45:cd: f5:9e:7c:af:b0:49:5b:35:6a:44:f7:ea:67:01:a6: 41:57:c3:7d:a4:ea:93:21:41:e9:b9:a2:26:e8:f8: c0:7a:28:c8:a2:75:fb:25:e7:0c:14:b5:96:40:48: 61:18:34:49:a6:ad:6c:65:fd:b2:1f:fa:8a:ff:04: 74:f5:89:5c:cb:70:3f:48:bc:6f:e8:cc:62:6d:2f: 69:4a:e9:b8:c0:94:de:40:67:62:9f:f6:9c:ef:11: 09:92:31:e7:18:4d:9b:99:1a:31:37:ca:6b:a5:1a: 8f:9d:19:3b:10:39:64:06:55:f1:14:ca:1e:9a:e2: 3e:db:a9:b2:3e:78:cf:3d:22:f7:48:fa:d8:37:47: 78:a2:70:dc:c9:f5:80:da:25:82:fd:28:76:d4:3a: 22:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:D8:75:5A:80:D1:34:C3:BF:66:18:E9:16:F3:12:D4:BB:0B:A0:0A X509v3 Authority Key Identifier: keyid:DE:F4:43:31:E7:24:96:4F:28:69:7D:EA:BA:F2:31:3C:DC:EE:FA:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/DEF44331E724964F28697DEABAF2313CDCEEFACE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEF44331E724964F28697DEABAF2313CDCEEFACE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/DEF44331E724964F28697DEABAF2313CDCEEFACE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d7:2c:c4:93:c8:ea:16:cc:f0:cb:f0:0f:62:8a:eb:02:71:f9: 95:35:f4:25:55:b0:82:5e:41:a4:79:1a:6d:12:47:9f:d3:fa: 97:5e:ba:f6:4f:3f:a5:59:60:d4:ca:fd:14:3f:78:45:df:be: ec:69:29:e9:ee:0f:99:2a:2c:8a:55:89:82:39:83:ae:95:7b: b4:87:c2:3b:fb:54:8e:e0:80:d4:5c:63:31:3f:6c:c4:00:61: b1:90:d1:c7:ef:85:68:51:c3:8b:b6:2d:e4:f0:ef:b8:d4:b6: fc:4f:ab:90:0f:f0:57:27:9f:01:bf:37:96:99:94:1e:21:41: 0a:73:8c:98:18:15:e1:a5:e9:9b:01:f8:57:77:8a:aa:be:4b: da:9d:bf:73:a6:92:22:ff:d7:64:4b:c3:1b:0c:6d:58:a1:21: 40:ab:93:5f:6f:a1:2f:4d:75:73:8c:39:25:3e:64:3d:a1:76: a3:2e:06:de:b8:60:34:3d:03:e7:2e:01:e4:0e:28:4a:a6:57: 48:65:d0:ee:24:f8:9a:fd:01:80:13:1c:62:3a:66:41:89:c3: dd:53:09:c1:74:61:1e:7e:55:ed:7a:8b:73:a0:3a:f0:a6:b9: 14:5d:3b:cf:7d:75:08:0f:34:e6:00:16:b3:ce:79:28:f3:93: 99:62:ad:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU5zPDsbF52Z8SOSdACNkanITl/QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREVGNDQzMzFFNzI0OTY0RjI4Njk3REVBQkFGMjMxM0NE Q0VFRkFDRTAeFw0yNTA0MjMwOTU1NTVaFw0yNTA0MjYxMDM3NTVaMDMxMTAvBgNV BAMTKDkwRDg3NTVBODBEMTM0QzNCRjY2MThFOTE2RjMxMkQ0QkIwQkEwMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXgUdqKgtdeQQhSY9AYCVNweHF eDgqHWcNzPz9Uuq/r52R7ObHInOkZdU457lmr7dMjeJzWOYeCbhMDtLITk+g/gUb eb+FOA5DD7N8SoPqfV8ijdUd0VBNOwbWSwWl89WWOrhVvDxFzfWefK+wSVs1akT3 6mcBpkFXw32k6pMhQem5oibo+MB6KMiidfsl5wwUtZZASGEYNEmmrWxl/bIf+or/ BHT1iVzLcD9IvG/ozGJtL2lK6bjAlN5AZ2Kf9pzvEQmSMecYTZuZGjE3ymulGo+d GTsQOWQGVfEUyh6a4j7bqbI+eM89IvdI+tg3R3iicNzJ9YDaJYL9KHbUOiJ9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkNh1WoDRNMO/ZhjpFvMS1LsLoAowHwYDVR0j BBgwFoAU3vRDMecklk8oaX3quvIxPNzu+s4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MTkwYzM3ZS0yNjU1LTQyYjEtYmFmNy00MmVjMWNmMTkyYWEvMC9ERUY0NDMzMUU3 MjQ5NjRGMjg2OTdERUFCQUYyMzEzQ0RDRUVGQUNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREVGNDQzMzFFNzI0OTY0RjI4Njk3REVBQkFGMjMxM0NEQ0VF RkFDRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjE5MGMzN2UtMjY1NS00MmIxLWJh ZjctNDJlYzFjZjE5MmFhLzAvREVGNDQzMzFFNzI0OTY0RjI4Njk3REVBQkFGMjMx M0NEQ0VFRkFDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANcsxJPI6hbM8MvwD2KK6wJx+ZU19CVVsIJe QaR5Gm0SR5/T+pdeuvZPP6VZYNTK/RQ/eEXfvuxpKenuD5kqLIpViYI5g66Ve7SH wjv7VI7ggNRcYzE/bMQAYbGQ0cfvhWhRw4u2LeTw77jUtvxPq5AP8FcnnwG/N5aZ lB4hQQpzjJgYFeGl6ZsB+Fd3iqq+S9qdv3OmkiL/12RLwxsMbVihIUCrk19voS9N dXOMOSU+ZD2hdqMuBt64YDQ9A+cuAeQOKEqmV0hl0O4k+Jr9AYATHGI6ZkGJw91T CcF0YR5+Ve16i3OgOvCmuRRdO899dQgPNOYAFrPOeSjzk5lirRI= -----END CERTIFICATE-----Generated at Wed Apr 23 13:25:45 2025 by rpki-client on console.sobornost.net