$ rpki-client -vvf repo-rpki.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.mft File: 215FC7E5E22B8C46910D4D7CA214C923A096B2FE.mft (raw, json) Hash identifier: nK6C8lWIQnITIyiH4HEMGCMGlnKOJs1OpCR/m278v6g= Subject key identifier: 14:B1:B6:90:97:9E:49:0F:93:FD:32:7D:1F:CD:66:68:87:A3:8A:B9 Authority key identifier: 21:5F:C7:E5:E2:2B:8C:46:91:0D:4D:7C:A2:14:C9:23:A0:96:B2:FE Certificate issuer: /CN=215FC7E5E22B8C46910D4D7CA214C923A096B2FE Certificate serial: 08076AE70D2D86D71A5F90842F57B60E0D70E98F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.mft Manifest number: 044A Signing time: Sat 26 Apr 2025 14:30:52 +0000 Manifest this update: Sat 26 Apr 2025 14:25:52 +0000 Manifest next update: Tue 29 Apr 2025 21:28:52 +0000 Files and hashes: 1: 215FC7E5E22B8C46910D4D7CA214C923A096B2FE.crl (hash: ld/EfI3k9uVrvfb/xst6afxTKzrDapK8rqg8MCDTYPI=) 2: 3130332e3136312e3138352e302f32342d3234203d3e20313431363233.roa (hash: 2zgmqTCIaPAHYWPftqkFjb0hZ28cJ5grf2c4LX9qqic=) 3: 3130332e3136312e3138342e302f32342d3234203d3e20313431363233.roa (hash: mH+1VpWMh2xbaDJyAbOAhzGNCfmvCkGbF0WpIR3b6Fo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.crl rsync://repo-rpki.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 20:11:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:07:6a:e7:0d:2d:86:d7:1a:5f:90:84:2f:57:b6:0e:0d:70:e9:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=215FC7E5E22B8C46910D4D7CA214C923A096B2FE Validity Not Before: Apr 26 14:25:52 2025 GMT Not After : Apr 29 21:28:52 2025 GMT Subject: CN=14B1B690979E490F93FD327D1FCD666887A38AB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f2:48:c6:b2:1a:2b:91:79:1c:ad:5a:3e:3b: 7c:68:7e:b1:fb:89:61:93:32:40:66:54:5f:fd:b0: 3b:48:96:c1:85:e0:2f:09:ff:3f:79:15:ae:cb:77: b1:f5:80:54:1f:d8:9f:bb:6f:d8:21:cf:05:40:bb: f8:af:dc:6f:7d:ce:e0:a7:50:13:10:ff:c6:31:28: fb:b7:47:e2:e8:08:b2:6a:58:ab:c0:19:a8:25:8e: 3c:d5:ab:2d:eb:2e:80:7a:20:0b:7d:ab:97:9e:ff: 15:cc:0a:f9:73:6e:c7:b3:6d:44:e9:27:78:89:a2: 95:76:b9:09:52:a1:30:cc:81:13:3f:e2:fb:85:15: 7b:6d:1a:5e:03:21:7a:46:73:87:ab:e3:9b:d5:a2: 93:68:4f:54:42:c2:ad:e2:c9:d1:a3:cc:27:e7:c0: 52:32:36:f8:26:7a:45:47:53:a1:e6:99:35:65:1b: c7:36:82:d2:44:44:78:eb:1d:59:75:7c:d2:32:fd: 9c:56:07:55:8d:15:09:8c:ab:83:a8:67:70:6a:08: 24:c8:59:41:e3:65:2f:d4:ec:e3:53:c5:70:b9:cc: 01:89:5f:0e:d7:14:54:a7:ea:86:2c:74:26:49:82: a6:a8:1b:a7:7e:44:3f:36:9e:02:52:6f:52:59:0c: ab:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:B1:B6:90:97:9E:49:0F:93:FD:32:7D:1F:CD:66:68:87:A3:8A:B9 X509v3 Authority Key Identifier: keyid:21:5F:C7:E5:E2:2B:8C:46:91:0D:4D:7C:A2:14:C9:23:A0:96:B2:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:d8:68:7c:df:fc:b7:96:bb:50:66:31:20:d2:db:26:d4:de: f3:45:28:08:9a:17:2f:f9:60:cb:c1:da:d2:00:46:98:61:27: 17:10:24:62:f7:ac:90:09:91:bc:9a:46:73:2c:8e:77:ff:3d: 8a:86:42:03:ea:da:30:e5:ad:62:97:c0:d6:a1:b5:41:c4:23: c8:da:15:93:82:73:fd:d8:fc:51:cf:ab:1c:1e:13:0f:bb:75: 17:8b:79:52:49:ef:94:04:0d:4c:af:51:ae:77:48:8e:81:8a: 81:e8:f3:27:25:76:88:f1:3c:e1:f3:5d:f8:82:83:70:b1:d5: 4b:94:be:b9:f8:be:e1:46:d1:1a:41:f6:74:ce:8e:25:f6:7a: bf:ab:6e:3d:a7:1a:aa:fc:ac:24:d6:5d:4a:c1:fe:ed:41:f6: 3c:2f:91:a1:21:99:8b:f0:3f:5d:a9:73:b3:09:8e:cd:21:bc: f2:c7:9a:0e:a5:46:29:3b:84:d6:a2:5c:9d:cb:a4:a6:81:93: 19:fa:66:45:25:e7:9d:b1:53:7c:20:09:dd:34:8e:bc:8f:ce: c3:53:c1:3c:be:ac:d5:4d:6c:1c:8c:74:89:57:d5:1a:d6:5d: 00:c3:63:62:34:ad:a2:3d:a2:07:bd:9c:3c:0e:05:4d:f0:e0: 36:d4:79:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCAdq5w0thtcaX5CEL1e2Dg1w6Y8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE1RkM3RTVFMjJCOEM0NjkxMEQ0RDdDQTIxNEM5MjNB MDk2QjJGRTAeFw0yNTA0MjYxNDI1NTJaFw0yNTA0MjkyMTI4NTJaMDMxMTAvBgNV BAMTKDE0QjFCNjkwOTc5RTQ5MEY5M0ZEMzI3RDFGQ0Q2NjY4ODdBMzhBQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS8kjGshorkXkcrVo+O3xofrH7 iWGTMkBmVF/9sDtIlsGF4C8J/z95Fa7Ld7H1gFQf2J+7b9ghzwVAu/iv3G99zuCn UBMQ/8YxKPu3R+LoCLJqWKvAGagljjzVqy3rLoB6IAt9q5ee/xXMCvlzbsezbUTp J3iJopV2uQlSoTDMgRM/4vuFFXttGl4DIXpGc4er45vVopNoT1RCwq3iydGjzCfn wFIyNvgmekVHU6HmmTVlG8c2gtJERHjrHVl1fNIy/ZxWB1WNFQmMq4OoZ3BqCCTI WUHjZS/U7ONTxXC5zAGJXw7XFFSn6oYsdCZJgqaoG6d+RD82ngJSb1JZDKvfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFLG2kJeeSQ+T/TJ9H81maIejirkwHwYDVR0j BBgwFoAUIV/H5eIrjEaRDU18ohTJI6CWsv4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m M2VhYzljMC1kZTFiLTQ2ZGQtYmYzNy0xOGZlM2E4ZDVmYmYvMC8yMTVGQzdFNUUy MkI4QzQ2OTEwRDREN0NBMjE0QzkyM0EwOTZCMkZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjE1RkM3RTVFMjJCOEM0NjkxMEQ0RDdDQTIxNEM5MjNBMDk2 QjJGRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjNlYWM5YzAtZGUxYi00NmRkLWJm MzctMThmZTNhOGQ1ZmJmLzAvMjE1RkM3RTVFMjJCOEM0NjkxMEQ0RDdDQTIxNEM5 MjNBMDk2QjJGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALHYaHzf/LeWu1BmMSDS2ybU3vNFKAiaFy/5 YMvB2tIARphhJxcQJGL3rJAJkbyaRnMsjnf/PYqGQgPq2jDlrWKXwNahtUHEI8ja FZOCc/3Y/FHPqxweEw+7dReLeVJJ75QEDUyvUa53SI6BioHo8ycldojxPOHzXfiC g3Cx1UuUvrn4vuFG0RpB9nTOjiX2er+rbj2nGqr8rCTWXUrB/u1B9jwvkaEhmYvw P12pc7MJjs0hvPLHmg6lRik7hNaiXJ3LpKaBkxn6ZkUl552xU3wgCd00jryPzsNT wTy+rNVNbByMdIlX1RrWXQDDY2I0raI9oge9nDwOBU3w4DbUeYs= -----END CERTIFICATE-----Generated at Sat Apr 26 15:54:09 2025 by rpki-client on console.sobornost.net