$ rpki-client -vvf repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft File: 210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft (raw, json) Hash identifier: PPb66YzQJ3XWOlojMnAjk+IMIQlc0GQoUQSOHh9J2Yg= Subject key identifier: 04:4D:43:C4:F2:4A:98:62:5C:AF:54:39:78:CA:09:4B:FC:8E:77:09 Authority key identifier: 21:0F:D9:8E:B4:D9:A4:D8:D0:FC:B9:B2:F3:BB:BC:7F:B8:8A:32:A9 Certificate issuer: /CN=210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9 Certificate serial: 398441C370BCDB38BE79BFF88C3F9040022E9860 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft Manifest number: 04CF Signing time: Thu 24 Apr 2025 21:52:17 +0000 Manifest this update: Thu 24 Apr 2025 21:47:17 +0000 Manifest next update: Mon 28 Apr 2025 06:18:17 +0000 Files and hashes: 1: 3130332e37332e3233352e302f32342d3234203d3e20313335343733.roa (hash: M3KMvxcWP6uML+3fbIDyzsZ9kLYdSiylqLgxMFpzBFk=) 2: 3130332e38322e362e302f32342d3234203d3e20313335343733.roa (hash: L655Pa2AKy6YZM0th27qWmB7TfJ9SN35VJAKKFbO9qA=) 3: 210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.crl (hash: uC0CngUqL1CIQ8lA1xl3Z9Q63bb7qPGhaWzG4sU4OE0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.crl rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:84:41:c3:70:bc:db:38:be:79:bf:f8:8c:3f:90:40:02:2e:98:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9 Validity Not Before: Apr 24 21:47:17 2025 GMT Not After : Apr 28 06:18:17 2025 GMT Subject: CN=044D43C4F24A98625CAF543978CA094BFC8E7709 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c6:0f:0f:ba:ca:57:23:fa:a5:3e:c4:14:b7: d8:3d:08:cd:98:66:b2:5e:7e:43:e5:92:26:07:57: 79:10:c2:75:85:96:93:84:09:ad:36:e5:6a:0d:95: 7d:e1:3f:2d:81:ef:4a:52:d6:5b:dc:42:91:e3:8d: ba:b7:26:4f:ac:97:04:97:a5:20:3d:42:88:2b:cc: 70:60:13:d9:e4:2a:be:de:db:ca:e5:3d:2e:71:de: 2f:90:4e:3c:d4:04:f7:18:c8:48:80:15:af:bf:bd: 88:ec:19:23:63:98:d6:87:d6:d2:fe:1d:d1:d7:49: 85:13:6e:c4:ca:77:11:0f:6b:36:02:1a:b4:13:3c: ad:62:e1:f4:06:df:47:1f:4f:6e:63:a2:8c:2d:5b: 95:91:da:e4:a7:2d:4d:0a:18:f2:06:86:45:3f:9f: c6:97:19:e1:c8:15:d7:41:30:ea:00:e5:db:19:1b: f8:2e:99:5a:b8:97:5f:3f:db:3a:8c:99:0e:46:ea: ca:7c:5f:83:20:89:cd:6b:d5:2d:6e:54:63:cc:cc: ae:bf:8a:69:84:7e:34:7f:f6:ea:29:ae:52:b3:f4: 6d:c1:80:82:35:64:69:b4:c1:4a:a4:0f:a7:f6:86: ef:79:b7:e4:46:04:35:59:b1:45:82:a0:2e:77:1f: 05:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:4D:43:C4:F2:4A:98:62:5C:AF:54:39:78:CA:09:4B:FC:8E:77:09 X509v3 Authority Key Identifier: keyid:21:0F:D9:8E:B4:D9:A4:D8:D0:FC:B9:B2:F3:BB:BC:7F:B8:8A:32:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:cd:66:d3:7b:35:60:81:3a:a9:ae:6c:9e:4b:6b:06:32:1e: 40:52:0b:47:ff:75:0b:47:47:13:f2:be:15:bc:67:1f:ab:1b: c8:e3:1a:53:aa:a4:15:72:17:54:71:50:21:cb:76:aa:8b:f7: d9:82:22:d3:54:bd:ad:ac:8b:12:c5:1d:df:9b:0c:14:16:74: 0b:60:68:1e:9d:f2:2d:76:99:36:7c:52:f2:96:2d:87:c4:e0: 83:b9:27:75:98:b3:cc:d5:97:f6:c7:f3:f1:ce:e5:71:28:a5: 80:ce:67:53:31:f0:cc:a8:c3:21:dc:28:a9:9f:86:33:2d:20: 06:f6:ff:59:c7:2c:f3:52:ce:c6:c6:66:d0:25:fc:d2:79:02: d3:84:52:f9:26:da:3c:a2:c6:89:7f:74:72:38:71:d0:30:5c: b0:b1:6a:28:3b:9b:ae:e6:10:fa:93:13:d9:bd:4a:7f:88:f0: 20:66:b7:de:dd:8b:61:73:68:36:eb:05:5c:dc:19:4c:4f:c3: d8:2a:82:02:67:e4:e2:45:2a:d8:8d:c8:93:47:9f:05:04:c8: b7:53:0b:36:ae:6f:6b:b2:53:39:e6:3b:00:29:3d:36:d5:70: 72:2b:93:f0:5a:c2:60:4a:fc:e1:13:32:72:1a:54:51:cf:c2: a7:7e:00:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOYRBw3C82zi+eb/4jD+QQAIumGAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjEwRkQ5OEVCNEQ5QTREOEQwRkNCOUIyRjNCQkJDN0ZC ODhBMzJBOTAeFw0yNTA0MjQyMTQ3MTdaFw0yNTA0MjgwNjE4MTdaMDMxMTAvBgNV BAMTKDA0NEQ0M0M0RjI0QTk4NjI1Q0FGNTQzOTc4Q0EwOTRCRkM4RTc3MDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXxg8PuspXI/qlPsQUt9g9CM2Y ZrJefkPlkiYHV3kQwnWFlpOECa025WoNlX3hPy2B70pS1lvcQpHjjbq3Jk+slwSX pSA9QogrzHBgE9nkKr7e28rlPS5x3i+QTjzUBPcYyEiAFa+/vYjsGSNjmNaH1tL+ HdHXSYUTbsTKdxEPazYCGrQTPK1i4fQG30cfT25joowtW5WR2uSnLU0KGPIGhkU/ n8aXGeHIFddBMOoA5dsZG/gumVq4l18/2zqMmQ5G6sp8X4Mgic1r1S1uVGPMzK6/ immEfjR/9uoprlKz9G3BgII1ZGm0wUqkD6f2hu95t+RGBDVZsUWCoC53HwWtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBE1DxPJKmGJcr1Q5eMoJS/yOdwkwHwYDVR0j BBgwFoAUIQ/ZjrTZpNjQ/Lmy87u8f7iKMqkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Mjc4OGM4OC1jYTJjLTRmYTAtYTM1Zi0zZTdhMTA4ODcyMjgvMC8yMTBGRDk4RUI0 RDlBNEQ4RDBGQ0I5QjJGM0JCQkM3RkI4OEEzMkE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjEwRkQ5OEVCNEQ5QTREOEQwRkNCOUIyRjNCQkJDN0ZCODhB MzJBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjI3ODhjODgtY2EyYy00ZmEwLWEz NWYtM2U3YTEwODg3MjI4LzAvMjEwRkQ5OEVCNEQ5QTREOEQwRkNCOUIyRjNCQkJD N0ZCODhBMzJBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJXNZtN7NWCBOqmubJ5LawYyHkBSC0f/dQtH RxPyvhW8Zx+rG8jjGlOqpBVyF1RxUCHLdqqL99mCItNUva2sixLFHd+bDBQWdAtg aB6d8i12mTZ8UvKWLYfE4IO5J3WYs8zVl/bH8/HO5XEopYDOZ1Mx8MyowyHcKKmf hjMtIAb2/1nHLPNSzsbGZtAl/NJ5AtOEUvkm2jyixol/dHI4cdAwXLCxaig7m67m EPqTE9m9Sn+I8CBmt97di2FzaDbrBVzcGUxPw9gqggJn5OJFKtiNyJNHnwUEyLdT Czaub2uyUznmOwApPTbVcHIrk/BawmBK/OETMnIaVFHPwqd+AKM= -----END CERTIFICATE-----Generated at Fri Apr 25 06:02:24 2025 by rpki-client on console.sobornost.net