$ rpki-client -vvf repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft File: B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft (raw, json) Hash identifier: mOYLYUPez/iK/WAFFKdMhEoFp8ZnMj4YX6SxkyQIL6o= Subject key identifier: FF:EC:23:9B:EC:2C:6E:F8:F5:AA:D3:77:4E:E6:D0:40:21:7E:7A:58 Authority key identifier: B6:84:7B:92:8C:30:80:02:82:D7:BA:8E:33:74:82:DF:F4:DE:C8:A5 Certificate issuer: /CN=B6847B928C30800282D7BA8E337482DFF4DEC8A5 Certificate serial: 4ED6B07FACB8FA4599B714632144FCFAF72F6B1A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6847B928C30800282D7BA8E337482DFF4DEC8A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft Manifest number: 04CA Signing time: Sat 26 Apr 2025 21:21:20 +0000 Manifest this update: Sat 26 Apr 2025 21:16:20 +0000 Manifest next update: Wed 30 Apr 2025 00:58:20 +0000 Files and hashes: 1: 323030313a6466363a343530303a3a2f34382d3438203d3e20313338303539.roa (hash: vTa9WiHuuMrTXw2GBDLjpniG/hjwO61GwgYQcgCJt2M=) 2: B6847B928C30800282D7BA8E337482DFF4DEC8A5.crl (hash: NSdYgI7Xu72Zu/mN9hHCZrsTHMOk523IbUizxHerWHE=) 3: 3130332e3132312e3132332e302f32342d3234203d3e20313338303539.roa (hash: l1fPLAUFtTJNdU6bqE1PdelWpd2VBBi10WlrLYglW7I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.crl rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6847B928C30800282D7BA8E337482DFF4DEC8A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 20:11:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:d6:b0:7f:ac:b8:fa:45:99:b7:14:63:21:44:fc:fa:f7:2f:6b:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6847B928C30800282D7BA8E337482DFF4DEC8A5 Validity Not Before: Apr 26 21:16:20 2025 GMT Not After : Apr 30 00:58:20 2025 GMT Subject: CN=FFEC239BEC2C6EF8F5AAD3774EE6D040217E7A58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:17:c0:75:04:13:8a:ce:c7:38:a4:94:35:e6: 6d:9e:6a:1e:89:fd:82:e6:57:eb:40:d0:ed:d1:27: a1:62:75:1c:37:63:29:c8:e3:5a:72:d1:70:1d:9c: 17:ae:b0:4b:83:da:99:12:b0:4e:9d:a8:6a:ad:fa: b8:fa:38:9c:a7:df:0e:f7:b5:03:16:1a:2d:07:ab: da:fb:8f:70:9e:c2:91:b1:2f:e5:de:b1:f6:7a:55: 33:8e:65:89:d4:53:35:2a:cd:43:db:57:3b:a6:4b: 2a:04:4b:f4:ba:9a:c3:72:f6:aa:4a:a4:54:12:04: 33:fa:e2:4d:7d:6a:35:15:7e:13:a1:f5:59:bb:57: 94:fa:79:e6:31:8f:b6:29:ed:ed:27:fc:ac:98:ec: da:7d:0f:f8:af:59:d1:12:6b:bf:49:6a:9f:2e:1f: fe:f3:19:e8:c6:f6:b3:b3:3c:99:5b:60:01:43:5e: 0e:e9:92:66:a2:b6:50:47:8f:5e:b4:59:c8:8d:a2: 4d:8f:16:e8:9e:0d:64:1a:43:8f:94:d5:2b:a0:3d: 17:ef:21:a8:14:54:cb:4f:e1:c0:34:9c:06:d2:87: f1:a3:5c:1b:95:ed:34:f5:d2:46:36:b7:27:7a:89: 24:17:90:c3:23:58:3d:93:f9:89:7b:f1:75:36:8a: 03:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:EC:23:9B:EC:2C:6E:F8:F5:AA:D3:77:4E:E6:D0:40:21:7E:7A:58 X509v3 Authority Key Identifier: keyid:B6:84:7B:92:8C:30:80:02:82:D7:BA:8E:33:74:82:DF:F4:DE:C8:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6847B928C30800282D7BA8E337482DFF4DEC8A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:ef:9a:06:d7:46:9e:d3:4d:cc:32:e8:44:c0:9f:2f:a5:00: 7e:fd:b3:e0:d2:ab:cb:38:28:99:ec:b8:8e:a1:4e:bd:ae:01: 07:6c:26:bf:4e:7a:e2:0a:73:2e:d6:a2:75:f7:b0:c2:2a:1a: 76:11:69:12:0d:3d:9c:b8:a9:e9:a6:5f:19:51:b3:74:32:3e: 76:6b:c2:ca:69:a3:ae:c8:f4:a9:07:b2:ff:7e:97:70:83:a3: 08:2c:6e:b3:9d:0a:29:94:73:14:72:15:b1:14:0e:5c:ba:68: 76:61:79:91:4b:69:5f:b2:1b:f3:da:f8:73:8e:c6:87:3c:51: 98:2a:76:c1:b6:63:68:79:94:af:a3:8c:42:d6:23:b1:30:dc: 5e:54:48:5a:ee:9b:58:9f:29:c2:e1:67:ae:09:ad:37:79:ee: 0e:15:31:10:2b:2e:6a:a9:4b:8c:70:4a:14:78:f8:ef:c4:98: 2c:2a:77:6d:b2:19:8c:1b:a3:5c:61:cf:49:9d:33:82:6b:09: 69:75:e4:87:f2:ad:5d:2a:a1:78:cb:1b:9a:4f:72:ba:f0:9d: a6:89:b2:8c:09:23:2c:c9:dc:37:88:60:0b:1d:0c:d2:a6:6c: f5:2d:28:0e:6d:18:cc:85:94:f2:43:d2:7a:5c:e4:27:0c:c1: be:dc:a8:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTtawf6y4+kWZtxRjIUT8+vcvaxowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY4NDdCOTI4QzMwODAwMjgyRDdCQThFMzM3NDgyREZG NERFQzhBNTAeFw0yNTA0MjYyMTE2MjBaFw0yNTA0MzAwMDU4MjBaMDMxMTAvBgNV BAMTKEZGRUMyMzlCRUMyQzZFRjhGNUFBRDM3NzRFRTZEMDQwMjE3RTdBNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfF8B1BBOKzsc4pJQ15m2eah6J /YLmV+tA0O3RJ6FidRw3YynI41py0XAdnBeusEuD2pkSsE6dqGqt+rj6OJyn3w73 tQMWGi0Hq9r7j3CewpGxL+XesfZ6VTOOZYnUUzUqzUPbVzumSyoES/S6msNy9qpK pFQSBDP64k19ajUVfhOh9Vm7V5T6eeYxj7Yp7e0n/KyY7Np9D/ivWdESa79Jap8u H/7zGejG9rOzPJlbYAFDXg7pkmaitlBHj160WciNok2PFuieDWQaQ4+U1SugPRfv IagUVMtP4cA0nAbSh/GjXBuV7TT10kY2tyd6iSQXkMMjWD2T+Yl78XU2igPhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/+wjm+wsbvj1qtN3TubQQCF+elgwHwYDVR0j BBgwFoAUtoR7kowwgAKC17qOM3SC3/TeyKUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w N2RlZGVkMS1kMTRlLTQxMjMtYjVjOS1jOTNhNTk5N2ZjMzAvMC9CNjg0N0I5MjhD MzA4MDAyODJEN0JBOEUzMzc0ODJERkY0REVDOEE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjY4NDdCOTI4QzMwODAwMjgyRDdCQThFMzM3NDgyREZGNERF QzhBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDdkZWRlZDEtZDE0ZS00MTIzLWI1 YzktYzkzYTU5OTdmYzMwLzAvQjY4NDdCOTI4QzMwODAwMjgyRDdCQThFMzM3NDgy REZGNERFQzhBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADnvmgbXRp7TTcwy6ETAny+lAH79s+DSq8s4 KJnsuI6hTr2uAQdsJr9OeuIKcy7WonX3sMIqGnYRaRINPZy4qemmXxlRs3QyPnZr wsppo67I9KkHsv9+l3CDowgsbrOdCimUcxRyFbEUDly6aHZheZFLaV+yG/Pa+HOO xoc8UZgqdsG2Y2h5lK+jjELWI7Ew3F5USFrum1ifKcLhZ64JrTd57g4VMRArLmqp S4xwShR4+O/EmCwqd22yGYwbo1xhz0mdM4JrCWl15IfyrV0qoXjLG5pPcrrwnaaJ sowJIyzJ3DeIYAsdDNKmbPUtKA5tGMyFlPJD0npc5CcMwb7cqGc= -----END CERTIFICATE-----Generated at Sun Apr 27 00:13:01 2025 by rpki-client on console.sobornost.net