$ rpki-client -vvf repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft File: B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft (raw, json) Hash identifier: SK8Uu41RBGUA03K9v03je4GY+75F8oPWImDPrvE+iac= Subject key identifier: 7C:79:AF:F4:34:FC:54:1B:22:4E:F4:20:80:80:AD:98:B0:4F:BC:F1 Authority key identifier: B1:44:E4:EB:28:F6:9D:9B:76:C0:C2:49:9B:FD:7B:3E:C5:03:EF:3E Certificate issuer: /CN=B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E Certificate serial: 1F849EFCADAE6AC58EF28DC089ECDC92092BC07A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft Manifest number: 04C7 Signing time: Wed 23 Apr 2025 21:20:46 +0000 Manifest this update: Wed 23 Apr 2025 21:15:46 +0000 Manifest next update: Sun 27 Apr 2025 06:14:46 +0000 Files and hashes: 1: B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.crl (hash: kBDnRW6BUiM3Ai1jH5PQXWFQytxBDeMqLuO/wbLR8Fo=) 2: 3130332e37322e3131302e302f32342d3234203d3e203538343736.roa (hash: r7rkQmAorpaA2HQiF7v1k+siSmXYdSBe2smRZcsSuIo=) 3: 3130332e32382e3130372e302f32342d3234203d3e203538343736.roa (hash: P7RUWY6qH7oEO1y5dEH1xpvQBN+949irjZIivcgB6do=) 4: 34332e3234322e3133322e302f32342d3234203d3e203538343736.roa (hash: htS/mOXNz8fNjrYCraLvtDOWNvj77Vu5R0ubwkx6Y70=) 5: 3130332e37322e3131312e302f32342d3234203d3e203538343736.roa (hash: v/wNC11/mGa67gP20vk9bZW53k2FAuEzkngEjF9WCOs=) 6: 323030313a6466303a3236663a3a2f34382d3438203d3e203538343736.roa (hash: sckkCjMHs7WsRB95RCqI2G0Z8CclzEEJ3tVAHrA+aMM=) 7: 3130332e32382e3130362e302f32342d3234203d3e203538343736.roa (hash: 7J0oFyysipA3qHhTtoXbnDFHuiZkIxXPeZGfLnkl0e4=) 8: 34332e3234322e3133332e302f32342d3234203d3e203538343736.roa (hash: R0NLF4Ov1wAGeHFAFhKyGtvsypexoChl/jl0cHH5TqA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.crl rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 02:40:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:84:9e:fc:ad:ae:6a:c5:8e:f2:8d:c0:89:ec:dc:92:09:2b:c0:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E Validity Not Before: Apr 23 21:15:46 2025 GMT Not After : Apr 27 06:14:46 2025 GMT Subject: CN=7C79AFF434FC541B224EF4208080AD98B04FBCF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:04:66:ea:69:bf:c1:22:e2:c1:09:f7:80:ec: 80:c1:35:8c:94:cc:ef:cf:e7:e0:49:e3:dc:da:07: 7a:08:2e:5c:33:f4:40:4c:1e:c4:30:bf:e3:49:6d: 3e:a0:c2:23:d7:13:88:55:04:1b:67:79:ce:8f:ff: 4e:4a:10:68:40:20:13:6e:62:f2:53:99:bb:cc:57: d6:8a:b1:6c:3e:10:f1:8e:5b:f8:f9:82:67:9f:80: e0:c4:9a:fc:d9:68:5c:c2:a4:f1:9e:1f:74:8f:a4: 77:47:d9:c7:9e:01:a5:c2:33:ed:ac:fa:ae:ce:5e: 40:e5:4d:fd:d8:44:7c:c2:b9:e4:ab:a1:b4:97:15: 9d:2b:dc:9e:d1:0f:88:66:96:fa:80:72:89:59:62: 0e:c9:99:9b:85:2a:27:79:48:fb:71:46:ba:26:b3: ea:e1:15:2e:fb:ce:fe:af:da:e8:9b:d9:db:90:cb: 2b:a0:85:16:97:48:0a:e3:90:6b:5f:92:11:01:a1: e2:f5:17:6b:e2:75:92:83:58:20:79:bd:73:71:c2: c6:25:cd:c8:ea:4b:5d:93:b3:7f:36:78:16:df:62: fb:b2:d5:4d:18:f7:f1:1d:44:e9:a9:a8:cf:b8:44: c9:1d:4c:58:a0:87:bc:0b:f7:38:40:ce:6c:d1:c0: ef:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:79:AF:F4:34:FC:54:1B:22:4E:F4:20:80:80:AD:98:B0:4F:BC:F1 X509v3 Authority Key Identifier: keyid:B1:44:E4:EB:28:F6:9D:9B:76:C0:C2:49:9B:FD:7B:3E:C5:03:EF:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:87:5b:15:7d:b7:b0:5c:96:66:51:cc:83:49:65:8a:db:a3: 18:b9:cd:fd:0d:3d:a3:8a:c4:1a:f7:15:39:66:42:a5:45:79: a9:0d:e3:de:95:32:d4:5e:18:2a:a1:20:10:1f:1f:a2:93:18: 4e:f5:44:49:39:d7:60:70:ec:dc:f7:75:40:55:4c:f9:74:36: c1:de:b7:e5:a6:73:3f:63:ae:21:70:dc:90:9c:48:80:e2:d3: e4:a3:cc:2d:e1:2f:df:7b:4a:7c:86:91:9b:d2:17:82:eb:76: 2d:84:f9:a8:13:b6:c2:f2:af:d0:2b:cc:78:64:e9:38:54:40: 8a:d0:65:67:71:83:e3:be:05:56:32:fa:6d:c3:8a:05:f8:81: 61:2f:0d:30:7c:83:fc:a4:36:a3:0b:c3:e8:95:b8:ff:16:d3: 8f:18:48:49:d3:8a:8b:ff:1f:2d:1e:a8:fa:2a:3d:87:1c:c7: 8b:1e:b6:16:f1:01:02:a1:51:09:a0:a6:3c:ab:1a:92:d0:44: 69:28:9d:82:07:f3:87:a9:06:de:93:62:51:85:58:66:df:d8: b8:3b:95:8b:52:1e:08:2d:a4:c8:6f:b0:b1:9b:2a:ed:eb:33: 9f:00:f3:ec:d4:8a:49:23:a3:91:7f:a2:9c:55:94:5e:9e:fb: 79:58:f8:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH4Se/K2uasWO8o3AiezckgkrwHowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE0NEU0RUIyOEY2OUQ5Qjc2QzBDMjQ5OUJGRDdCM0VD NTAzRUYzRTAeFw0yNTA0MjMyMTE1NDZaFw0yNTA0MjcwNjE0NDZaMDMxMTAvBgNV BAMTKDdDNzlBRkY0MzRGQzU0MUIyMjRFRjQyMDgwODBBRDk4QjA0RkJDRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGBGbqab/BIuLBCfeA7IDBNYyU zO/P5+BJ49zaB3oILlwz9EBMHsQwv+NJbT6gwiPXE4hVBBtnec6P/05KEGhAIBNu YvJTmbvMV9aKsWw+EPGOW/j5gmefgODEmvzZaFzCpPGeH3SPpHdH2ceeAaXCM+2s +q7OXkDlTf3YRHzCueSrobSXFZ0r3J7RD4hmlvqAcolZYg7JmZuFKid5SPtxRrom s+rhFS77zv6v2uib2duQyyughRaXSArjkGtfkhEBoeL1F2vidZKDWCB5vXNxwsYl zcjqS12Ts382eBbfYvuy1U0Y9/EdROmpqM+4RMkdTFigh7wL9zhAzmzRwO+bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfHmv9DT8VBsiTvQggICtmLBPvPEwHwYDVR0j BBgwFoAUsUTk6yj2nZt2wMJJm/17PsUD7z4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m N2Y0OTA2OC1jMGNhLTRhMjEtOWE4YS1lZWQyNmZjZGQxYWEvMC9CMTQ0RTRFQjI4 RjY5RDlCNzZDMEMyNDk5QkZEN0IzRUM1MDNFRjNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjE0NEU0RUIyOEY2OUQ5Qjc2QzBDMjQ5OUJGRDdCM0VDNTAz RUYzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjdmNDkwNjgtYzBjYS00YTIxLTlh OGEtZWVkMjZmY2RkMWFhLzAvQjE0NEU0RUIyOEY2OUQ5Qjc2QzBDMjQ5OUJGRDdC M0VDNTAzRUYzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADaHWxV9t7BclmZRzINJZYrboxi5zf0NPaOK xBr3FTlmQqVFeakN496VMtReGCqhIBAfH6KTGE71REk512Bw7Nz3dUBVTPl0NsHe t+Wmcz9jriFw3JCcSIDi0+SjzC3hL997SnyGkZvSF4Lrdi2E+agTtsLyr9ArzHhk 6ThUQIrQZWdxg+O+BVYy+m3DigX4gWEvDTB8g/ykNqMLw+iVuP8W048YSEnTiov/ Hy0eqPoqPYccx4sethbxAQKhUQmgpjyrGpLQRGkonYIH84epBt6TYlGFWGbf2Lg7 lYtSHggtpMhvsLGbKu3rM58A8+zUikkjo5F/opxVlF6e+3lY+KU= -----END CERTIFICATE-----Generated at Thu Apr 24 01:45:25 2025 by rpki-client on console.sobornost.net