$ rpki-client -vvf repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft File: BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft (raw, json) Hash identifier: XrY9gQ7lgG25NcfiB2mFtU8kc6+1MN+9SHctGhHv1L0= Subject key identifier: BA:BE:B3:C7:DA:C0:EE:E2:0D:1E:55:5D:4E:3F:A7:0A:28:22:4C:A3 Authority key identifier: BF:38:DD:D5:DA:2A:BF:08:EB:1D:D8:D8:7B:56:6F:36:EE:73:F3:07 Certificate issuer: /CN=BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307 Certificate serial: 112F7A4658DA877ADF2395F733410B7AA66A704A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft Manifest number: 01CA Signing time: Wed 23 Apr 2025 12:01:22 +0000 Manifest this update: Wed 23 Apr 2025 11:56:22 +0000 Manifest next update: Sat 26 Apr 2025 12:05:22 +0000 Files and hashes: 1: 3130332e3138392e36332e302f32342d3234203d3e20313439373436.roa (hash: Qh5iXUaLz085YiAao5lIIV9guQY+sWYceEeZZ6zBDJs=) 2: 3130332e3138392e36322e302f32342d3234203d3e20313439373436.roa (hash: 48e011jsIhGivkdBp8Labkdz5aYvN7kU5niI+PWaloc=) 3: BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.crl (hash: fI4wkYF1vAxfueFeVKjfohWe+nLejM+W5E+HUZChCFo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.crl rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 12:05:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:2f:7a:46:58:da:87:7a:df:23:95:f7:33:41:0b:7a:a6:6a:70:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307 Validity Not Before: Apr 23 11:56:22 2025 GMT Not After : Apr 26 12:05:22 2025 GMT Subject: CN=BABEB3C7DAC0EEE20D1E555D4E3FA70A28224CA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:3e:2d:f1:c3:ed:61:9e:aa:3a:c2:cf:5e:78: 3f:97:e8:d1:29:fe:e2:92:58:0d:c4:be:11:02:5e: 33:25:1d:9c:06:99:4e:da:0d:71:b4:17:e6:66:04: 02:0e:2d:a7:f4:7f:d5:0c:25:94:3c:09:c0:85:8d: b2:ff:0f:0d:d8:5f:d6:ea:86:44:0d:5a:86:b4:a7: 7e:ec:df:24:9f:22:36:e1:8f:36:12:f6:f3:c8:59: c5:42:4f:be:72:16:1f:bf:1c:5d:fb:9f:99:68:53: d0:a9:af:be:5e:1a:75:9c:4f:05:60:34:3d:bf:be: 27:55:46:e0:65:57:a6:45:07:ac:3c:1d:03:c8:45: bb:4c:a5:5b:93:21:4f:88:20:e9:1b:1b:8c:90:63: 84:35:79:a2:66:eb:ce:97:24:e9:61:1d:9b:ac:9f: 16:58:a1:19:b4:8d:b3:9a:be:b6:0b:7c:db:9a:37: 8c:55:e1:43:97:db:c1:fa:08:7e:9e:46:80:0f:50: 19:97:c2:09:7d:b6:b2:23:0b:fe:af:41:3f:7c:90: b3:0b:a7:f3:68:d2:9c:7c:a5:f8:ac:e7:3d:70:05: 4a:ae:2e:b8:10:23:fe:2c:99:21:13:52:34:e1:11: 27:f1:00:78:4f:cc:d7:00:e2:77:95:09:5b:17:66: db:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:BE:B3:C7:DA:C0:EE:E2:0D:1E:55:5D:4E:3F:A7:0A:28:22:4C:A3 X509v3 Authority Key Identifier: keyid:BF:38:DD:D5:DA:2A:BF:08:EB:1D:D8:D8:7B:56:6F:36:EE:73:F3:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:46:e4:d7:30:b1:b8:0b:b2:ec:56:0c:2e:7e:89:7f:37:7e: 92:0d:92:7c:0c:3a:5a:90:0e:f1:38:e6:a1:20:ca:df:1d:10: 36:44:03:e4:c5:8b:c9:39:ac:fa:d3:10:50:e1:f7:82:bc:13: a9:d2:3b:65:71:20:f6:e7:49:ab:90:8f:6a:44:48:3f:9d:37: 21:ed:a4:06:26:96:94:a2:b6:37:59:70:fb:b6:3b:19:6e:20: 43:9e:6a:2f:e0:ed:d5:78:5a:96:8a:3e:89:03:a4:68:6d:98: 17:fd:4a:14:48:1a:62:1c:f4:d7:18:44:69:93:86:d1:a8:da: b3:74:f6:fe:7d:e5:b6:00:22:25:2c:cc:65:66:92:8b:5d:53: fc:42:20:3b:99:87:45:ad:99:e0:65:92:7b:6d:b7:8f:de:f8: b0:57:14:70:82:5c:41:e6:96:66:f2:bc:7e:a2:ca:fb:57:1f: 94:f7:c5:48:00:45:35:46:99:4f:d3:a6:ab:b4:22:db:f9:30: 3f:18:6f:98:10:69:9a:2e:e6:97:9c:6d:10:13:20:5a:a3:ed: 82:49:4d:28:0e:8a:f6:61:00:b6:67:94:43:29:8d:6f:40:3f: 8d:a7:bc:a6:fc:99:9c:46:b7:08:80:ae:df:7c:32:ff:72:62: ee:f7:5d:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUES96Rljah3rfI5X3M0ELeqZqcEowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkYzOERERDVEQTJBQkYwOEVCMUREOEQ4N0I1NjZGMzZF RTczRjMwNzAeFw0yNTA0MjMxMTU2MjJaFw0yNTA0MjYxMjA1MjJaMDMxMTAvBgNV BAMTKEJBQkVCM0M3REFDMEVFRTIwRDFFNTU1RDRFM0ZBNzBBMjgyMjRDQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaPi3xw+1hnqo6ws9eeD+X6NEp /uKSWA3EvhECXjMlHZwGmU7aDXG0F+ZmBAIOLaf0f9UMJZQ8CcCFjbL/Dw3YX9bq hkQNWoa0p37s3ySfIjbhjzYS9vPIWcVCT75yFh+/HF37n5loU9Cpr75eGnWcTwVg ND2/vidVRuBlV6ZFB6w8HQPIRbtMpVuTIU+IIOkbG4yQY4Q1eaJm686XJOlhHZus nxZYoRm0jbOavrYLfNuaN4xV4UOX28H6CH6eRoAPUBmXwgl9trIjC/6vQT98kLML p/No0px8pfis5z1wBUquLrgQI/4smSETUjThESfxAHhPzNcA4neVCVsXZtvZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUur6zx9rA7uINHlVdTj+nCigiTKMwHwYDVR0j BBgwFoAUvzjd1doqvwjrHdjYe1ZvNu5z8wcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjM0ZWYxZC03MzRkLTRjNzEtOGJhNy1kMzFlMTY4YjYzMmMvMC9CRjM4RERENURB MkFCRjA4RUIxREQ4RDg3QjU2NkYzNkVFNzNGMzA3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkYzOERERDVEQTJBQkYwOEVCMUREOEQ4N0I1NjZGMzZFRTcz RjMwNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDIzNGVmMWQtNzM0ZC00YzcxLThi YTctZDMxZTE2OGI2MzJjLzAvQkYzOERERDVEQTJBQkYwOEVCMUREOEQ4N0I1NjZG MzZFRTczRjMwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKhG5NcwsbgLsuxWDC5+iX83fpINknwMOlqQ DvE45qEgyt8dEDZEA+TFi8k5rPrTEFDh94K8E6nSO2VxIPbnSauQj2pESD+dNyHt pAYmlpSitjdZcPu2OxluIEOeai/g7dV4WpaKPokDpGhtmBf9ShRIGmIc9NcYRGmT htGo2rN09v595bYAIiUszGVmkotdU/xCIDuZh0WtmeBlknttt4/e+LBXFHCCXEHm lmbyvH6iyvtXH5T3xUgARTVGmU/Tpqu0Itv5MD8Yb5gQaZou5pecbRATIFqj7YJJ TSgOivZhALZnlEMpjW9AP42nvKb8mZxGtwiArt98Mv9yYu73XX0= -----END CERTIFICATE-----Generated at Wed Apr 23 13:25:32 2025 by rpki-client on console.sobornost.net