$ rpki-client -vvf repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft File: 846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft (raw, json) Hash identifier: kHCSn+Z1pEFHBQEHqfIupMwPQij+P9XMw6gmSXRrcTE= Subject key identifier: BB:DE:2F:44:E1:86:DC:12:A8:5B:2B:9B:48:D3:12:AB:57:72:26:A2 Authority key identifier: 84:6B:CB:85:C1:E1:AA:59:03:7B:0A:2A:C5:9E:D1:E8:E7:42:0E:D0 Certificate issuer: /CN=846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0 Certificate serial: 0FDC0192C8628D19B0CD83A505FACC39A5B4EBA7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft Manifest number: 032E Signing time: Fri 25 Apr 2025 00:01:47 +0000 Manifest this update: Thu 24 Apr 2025 23:56:47 +0000 Manifest next update: Mon 28 Apr 2025 10:54:47 +0000 Files and hashes: 1: 846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.crl (hash: qFFwDVsNkNICSOubPxWR9+O6JMkvg8QbU/iGsjQmaIo=) 2: 3130332e3136392e3133382e302f32332d3234203d3e20313432333433.roa (hash: VrU1SwTl8NTtyMThFSf4hTGqANokx1m/tgJCu2ItF4k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.crl rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:dc:01:92:c8:62:8d:19:b0:cd:83:a5:05:fa:cc:39:a5:b4:eb:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0 Validity Not Before: Apr 24 23:56:47 2025 GMT Not After : Apr 28 10:54:47 2025 GMT Subject: CN=BBDE2F44E186DC12A85B2B9B48D312AB577226A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:66:d6:d3:48:eb:a9:62:7b:d0:60:de:7d:7b: d0:a5:88:bf:c8:18:8f:a9:ca:b0:da:bc:63:11:5a: d7:af:3c:0b:35:b9:ec:be:53:5e:dc:a8:8b:7f:20: 8a:9f:27:9b:15:81:d5:b7:76:b7:c8:16:0b:01:c8: b8:b7:93:9d:60:59:0b:fe:f3:2a:de:12:5b:8f:b3: 09:0f:4f:f7:6d:e7:d3:d6:57:05:32:0a:51:05:13: 0b:e8:b7:68:2e:79:98:3a:a7:f8:d3:a5:d1:6c:88: e7:34:31:da:f8:2f:d7:d1:7d:6f:55:43:37:3b:ec: c8:90:61:3b:25:cd:51:1b:62:72:d4:2e:8b:6a:be: e2:48:40:91:a3:89:96:28:42:05:49:be:40:97:31: 36:8f:d5:3c:8f:25:b4:fc:ce:6f:b8:c6:01:f5:12: 67:c5:58:93:dd:42:23:ea:01:eb:66:cd:33:94:ec: 75:d2:88:65:42:73:46:dd:8a:5b:2f:11:77:12:f2: f6:f0:27:b2:5f:ed:26:ad:e9:e5:bc:3a:4d:de:e0: bf:52:06:6d:c4:33:2c:01:ba:02:d3:81:1c:5f:bf: b6:fb:d6:48:17:9a:d0:65:d2:b4:4b:69:37:d5:77: 77:1e:09:95:fa:ed:ea:49:e7:30:84:8f:80:c4:ff: 20:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:DE:2F:44:E1:86:DC:12:A8:5B:2B:9B:48:D3:12:AB:57:72:26:A2 X509v3 Authority Key Identifier: keyid:84:6B:CB:85:C1:E1:AA:59:03:7B:0A:2A:C5:9E:D1:E8:E7:42:0E:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:78:01:26:fb:e6:fe:08:76:13:2d:27:77:6c:4e:25:21:89: e7:af:ed:de:48:8f:4b:56:c5:74:d5:9c:aa:3e:86:d2:7c:83: 30:a4:85:f8:ea:2d:e8:02:28:29:af:3e:eb:8a:d8:8d:78:d3: 4f:b0:40:7a:5e:13:05:11:86:d7:88:38:8f:7e:8e:ee:b6:db: 11:6f:f5:9a:1a:dc:e6:40:4e:99:51:83:70:ce:89:e7:e1:8b: 65:40:0a:4e:ab:2d:d7:dc:f0:3a:cb:55:84:f3:69:e5:90:79: f3:12:a1:25:f3:2b:99:65:78:e3:52:3a:05:aa:55:e6:90:02: 17:a2:29:91:c4:95:b3:77:12:1c:5a:81:6c:74:cf:b5:b0:71: 54:ff:c9:52:ec:26:8c:1b:36:8d:77:f3:8b:6c:b1:d9:1b:52: e0:44:a3:8f:23:92:10:3a:7a:7e:64:79:cb:0e:c2:d2:cb:9e: dd:61:c7:fe:4c:b0:48:1c:23:ff:42:22:9e:31:35:f3:d9:4e: 7f:78:01:4a:78:61:ec:ee:22:ca:81:14:14:7f:52:dd:1c:09: 7e:4a:19:7a:22:0a:ab:d7:dd:5b:f8:71:22:9e:96:47:04:a8: a8:83:1c:1a:75:3d:4a:f2:ff:39:d9:f3:13:68:08:e5:58:4a: 68:b2:dd:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD9wBkshijRmwzYOlBfrMOaW066cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ2QkNCODVDMUUxQUE1OTAzN0IwQTJBQzU5RUQxRThF NzQyMEVEMDAeFw0yNTA0MjQyMzU2NDdaFw0yNTA0MjgxMDU0NDdaMDMxMTAvBgNV BAMTKEJCREUyRjQ0RTE4NkRDMTJBODVCMkI5QjQ4RDMxMkFCNTc3MjI2QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTZtbTSOupYnvQYN59e9CliL/I GI+pyrDavGMRWtevPAs1uey+U17cqIt/IIqfJ5sVgdW3drfIFgsByLi3k51gWQv+ 8yreEluPswkPT/dt59PWVwUyClEFEwvot2gueZg6p/jTpdFsiOc0Mdr4L9fRfW9V Qzc77MiQYTslzVEbYnLULotqvuJIQJGjiZYoQgVJvkCXMTaP1TyPJbT8zm+4xgH1 EmfFWJPdQiPqAetmzTOU7HXSiGVCc0bdilsvEXcS8vbwJ7Jf7Sat6eW8Ok3e4L9S Bm3EMywBugLTgRxfv7b71kgXmtBl0rRLaTfVd3ceCZX67epJ5zCEj4DE/yCPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu94vROGG3BKoWyubSNMSq1dyJqIwHwYDVR0j BBgwFoAUhGvLhcHhqlkDewoqxZ7R6OdCDtAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NGNhNTg2OC01N2U5LTQ5YjktYmZlMS00OGQ3ODMzNGExOGMvMC84NDZCQ0I4NUMx RTFBQTU5MDM3QjBBMkFDNTlFRDFFOEU3NDIwRUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ2QkNCODVDMUUxQUE1OTAzN0IwQTJBQzU5RUQxRThFNzQy MEVEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDRjYTU4NjgtNTdlOS00OWI5LWJm ZTEtNDhkNzgzMzRhMThjLzAvODQ2QkNCODVDMUUxQUE1OTAzN0IwQTJBQzU5RUQx RThFNzQyMEVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIx4ASb75v4IdhMtJ3dsTiUhieev7d5Ij0tW xXTVnKo+htJ8gzCkhfjqLegCKCmvPuuK2I1400+wQHpeEwURhteIOI9+ju622xFv 9Zoa3OZATplRg3DOiefhi2VACk6rLdfc8DrLVYTzaeWQefMSoSXzK5lleONSOgWq VeaQAheiKZHElbN3EhxagWx0z7WwcVT/yVLsJowbNo1384tssdkbUuBEo48jkhA6 en5kecsOwtLLnt1hx/5MsEgcI/9CIp4xNfPZTn94AUp4YezuIsqBFBR/Ut0cCX5K GXoiCqvX3Vv4cSKelkcEqKiDHBp1PUry/znZ8xNoCOVYSmiy3dw= -----END CERTIFICATE-----Generated at Fri Apr 25 03:46:16 2025 by rpki-client on console.sobornost.net