$ rpki-client -vvf repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft File: 528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft (raw, json) Hash identifier: vY3sCxPr5kMzJy+2JyQoID6IM+5N6AqDGVgPGNHQsFQ= Subject key identifier: DE:E3:70:FA:4E:97:67:46:19:EF:CB:ED:3C:5D:7D:5E:73:65:C1:A6 Authority key identifier: 52:80:98:CF:FE:13:30:AD:3E:55:7B:CF:EC:2D:8B:46:92:F5:12:48 Certificate issuer: /CN=528098CFFE1330AD3E557BCFEC2D8B4692F51248 Certificate serial: 1EE778E50D5CD598CD88CD9161EA6CEC15B34111 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/528098CFFE1330AD3E557BCFEC2D8B4692F51248.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft Manifest number: AE Signing time: Wed 23 Apr 2025 22:22:18 +0000 Manifest this update: Wed 23 Apr 2025 22:17:18 +0000 Manifest next update: Sun 27 Apr 2025 01:06:18 +0000 Files and hashes: 1: 3135372e36362e35342e302f32342d3234203d3e20313431383932.roa (hash: Vo1kQIs1zoW5Jt8je7QhcYagX5zelAQNRLkr+gdh4UU=) 2: 3135372e36362e35352e302f32342d3234203d3e20313431383932.roa (hash: ZjoBkq4ow6fgfJmZ56kyF4NOmaewGLQwe65kbb2QNVY=) 3: 3135372e36362e35342e302f32332d3233203d3e20313431383932.roa (hash: O7he/ueLgA87HCSPJrqHHNBVHo9ekwFufTVOjMl9MdM=) 4: 528098CFFE1330AD3E557BCFEC2D8B4692F51248.crl (hash: QPEqkp3dPNNBCHF7S7rl0SdPLkmtPF5aixO7DIosRuk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.crl rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/528098CFFE1330AD3E557BCFEC2D8B4692F51248.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 18:38:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:e7:78:e5:0d:5c:d5:98:cd:88:cd:91:61:ea:6c:ec:15:b3:41:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=528098CFFE1330AD3E557BCFEC2D8B4692F51248 Validity Not Before: Apr 23 22:17:18 2025 GMT Not After : Apr 27 01:06:18 2025 GMT Subject: CN=DEE370FA4E97674619EFCBED3C5D7D5E7365C1A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:4f:b9:fe:24:ba:23:3e:2a:eb:4b:13:33:31: c0:e5:3b:d4:16:2d:e5:dc:c0:bb:b0:f0:ff:aa:0e: 99:b0:fd:96:37:30:a1:8a:a8:bc:69:16:db:72:c3: d9:9a:38:1c:f2:4e:8d:79:af:3c:fd:6a:d8:c6:d7: 31:89:6d:9f:a8:b8:80:9a:49:82:77:e9:93:19:37: 03:d3:7b:0a:41:e2:51:43:c8:a9:61:b8:1f:b1:ea: 25:f5:2d:3f:1c:17:88:90:b1:b1:43:b9:9d:4d:52: 35:85:fe:d6:10:03:3a:18:12:7c:08:a0:82:69:4d: 99:b2:a9:61:34:f2:bb:84:11:b2:93:06:e9:40:be: 6c:f0:9f:d2:92:26:11:81:4d:ff:d6:64:da:8c:cd: 79:82:77:0f:23:3c:e9:c2:42:d5:b7:37:71:36:5f: b1:74:08:cd:e2:f8:c0:91:24:bb:57:1c:8a:cf:d6: 3d:4c:86:c1:c6:57:ce:eb:0a:0b:18:73:78:53:71: b8:c2:53:73:c4:a4:ab:1d:c6:2f:88:45:8b:31:ee: 84:15:94:a1:c9:56:f8:dc:73:89:2a:fd:7b:ed:45: fd:0b:b7:56:e3:ac:b4:ba:bc:bc:ff:61:ce:25:ce: b3:26:a8:5e:7c:65:1b:4e:73:04:48:76:a9:3c:7e: d8:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:E3:70:FA:4E:97:67:46:19:EF:CB:ED:3C:5D:7D:5E:73:65:C1:A6 X509v3 Authority Key Identifier: keyid:52:80:98:CF:FE:13:30:AD:3E:55:7B:CF:EC:2D:8B:46:92:F5:12:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/528098CFFE1330AD3E557BCFEC2D8B4692F51248.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:5a:e1:8e:2e:05:e1:98:b6:5e:b0:07:95:68:c3:2c:08:a4: 3c:c9:49:af:d6:3c:bc:42:d3:04:d6:ab:94:22:3a:e5:93:c4: 62:5e:f4:0f:bd:0b:25:27:61:c7:37:3a:95:84:5e:65:d6:db: 38:a0:83:3d:ea:22:d6:d5:6c:67:5c:26:d0:29:80:85:f5:dd: e7:fc:fb:bd:81:e2:11:f4:52:bb:9a:d4:9a:d9:56:9b:1b:f4: 5e:06:3e:6e:ac:f3:54:8b:3f:40:80:23:a6:80:ad:63:ce:3f: 26:6d:08:0f:52:df:a4:35:be:e3:81:48:c7:66:26:8b:45:87: 3f:99:1b:b2:a2:0f:ef:67:b4:ab:7d:ae:46:83:27:a2:55:9a: c3:f9:d3:7b:a9:5e:45:c0:72:d5:90:b0:ea:d7:40:72:24:de: 3f:b4:df:dc:72:9b:1d:17:fa:44:88:50:9a:94:30:b4:1a:16: cd:c6:f1:7a:fb:a7:d2:d0:e4:f0:9f:d4:12:38:74:d7:60:0f: 58:8e:fb:8a:a8:3c:c2:d4:37:35:10:df:7f:57:02:a2:5a:52: 12:cb:40:b5:c0:67:29:83:7a:98:1e:17:bf:4c:af:b9:40:91: b3:a4:5e:0a:d3:e7:85:5c:8d:17:ee:68:a8:59:66:54:19:6f: db:e0:a0:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHud45Q1c1ZjNiM2RYeps7BWzQREwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI4MDk4Q0ZGRTEzMzBBRDNFNTU3QkNGRUMyRDhCNDY5 MkY1MTI0ODAeFw0yNTA0MjMyMjE3MThaFw0yNTA0MjcwMTA2MThaMDMxMTAvBgNV BAMTKERFRTM3MEZBNEU5NzY3NDYxOUVGQ0JFRDNDNUQ3RDVFNzM2NUMxQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRT7n+JLojPirrSxMzMcDlO9QW LeXcwLuw8P+qDpmw/ZY3MKGKqLxpFttyw9maOBzyTo15rzz9atjG1zGJbZ+ouICa SYJ36ZMZNwPTewpB4lFDyKlhuB+x6iX1LT8cF4iQsbFDuZ1NUjWF/tYQAzoYEnwI oIJpTZmyqWE08ruEEbKTBulAvmzwn9KSJhGBTf/WZNqMzXmCdw8jPOnCQtW3N3E2 X7F0CM3i+MCRJLtXHIrP1j1MhsHGV87rCgsYc3hTcbjCU3PEpKsdxi+IRYsx7oQV lKHJVvjcc4kq/XvtRf0Lt1bjrLS6vLz/Yc4lzrMmqF58ZRtOcwRIdqk8ftgdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3uNw+k6XZ0YZ78vtPF19XnNlwaYwHwYDVR0j BBgwFoAUUoCYz/4TMK0+VXvP7C2LRpL1EkgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OGRjMDg0OS04M2ZiLTRjYzgtOGMyMS1iZTZjYTdhMmVkODMvMC81MjgwOThDRkZF MTMzMEFEM0U1NTdCQ0ZFQzJEOEI0NjkyRjUxMjQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTI4MDk4Q0ZGRTEzMzBBRDNFNTU3QkNGRUMyRDhCNDY5MkY1 MTI0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjhkYzA4NDktODNmYi00Y2M4LThj MjEtYmU2Y2E3YTJlZDgzLzAvNTI4MDk4Q0ZGRTEzMzBBRDNFNTU3QkNGRUMyRDhC NDY5MkY1MTI0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACxa4Y4uBeGYtl6wB5VowywIpDzJSa/WPLxC 0wTWq5QiOuWTxGJe9A+9CyUnYcc3OpWEXmXW2ziggz3qItbVbGdcJtApgIX13ef8 +72B4hH0Urua1JrZVpsb9F4GPm6s81SLP0CAI6aArWPOPyZtCA9S36Q1vuOBSMdm JotFhz+ZG7KiD+9ntKt9rkaDJ6JVmsP503upXkXActWQsOrXQHIk3j+039xymx0X +kSIUJqUMLQaFs3G8Xr7p9LQ5PCf1BI4dNdgD1iO+4qoPMLUNzUQ339XAqJaUhLL QLXAZymDepgeF79Mr7lAkbOkXgrT54VcjRfuaKhZZlQZb9vgoJ4= -----END CERTIFICATE-----Generated at Thu Apr 24 01:45:25 2025 by rpki-client on console.sobornost.net