$ rpki-client -vvf repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/B88116E180F32C03362804A81CB0CF2EB0C261B6.mft File: B88116E180F32C03362804A81CB0CF2EB0C261B6.mft (raw, json) Hash identifier: h8zqAUSVew/5drg8yB+ySfONkAi5/kNt1aELCrnZIiM= Subject key identifier: F8:3B:74:4A:E9:49:A5:4A:97:BF:91:FF:9A:CE:16:A8:4C:0E:4E:2E Authority key identifier: B8:81:16:E1:80:F3:2C:03:36:28:04:A8:1C:B0:CF:2E:B0:C2:61:B6 Certificate issuer: /CN=B88116E180F32C03362804A81CB0CF2EB0C261B6 Certificate serial: 5B9A47DAA02AB3E26E636E77BFDF9368F36ED8F2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B88116E180F32C03362804A81CB0CF2EB0C261B6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/B88116E180F32C03362804A81CB0CF2EB0C261B6.mft Manifest number: 0128 Signing time: Fri 25 Apr 2025 05:42:00 +0000 Manifest this update: Fri 25 Apr 2025 05:37:00 +0000 Manifest next update: Mon 28 Apr 2025 11:05:00 +0000 Files and hashes: 1: 3130332e3133322e35322e302f32322d3234203d3e20313338313233.roa (hash: HYCKwx3IG/dczvioVZHxcsNJV00q43UghIpeJjHa0wI=) 2: B88116E180F32C03362804A81CB0CF2EB0C261B6.crl (hash: 2VPnqBQKT5OQts1jsUvKaGRLz1V8GaeaZHmOSRz3Ddg=) 3: 3130332e3133322e35352e302f32342d3234203d3e20313338313233.roa (hash: j5dLe4U4oqUporg+5QJA709E7qGKmvlc3Ph5mSsJNAU=) 4: 3130332e3133322e35322e302f32342d3234203d3e20313338313233.roa (hash: m0DDzRC3feSj6y45osqkbsLYsylOgOeCyWwC8Yi0XgQ=) 5: 3130332e3133322e35332e302f32342d3234203d3e20313338313233.roa (hash: p+/h9MXViUgdvqKar8a7ZYmhF5uuksAfPwAUFOcCGsw=) 6: 3130332e3133322e35342e302f32342d3234203d3e20313338313233.roa (hash: 34w073LUEq9nsLM2Xto4bF6wwVQlM7TY0IeHCYFMlPE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/B88116E180F32C03362804A81CB0CF2EB0C261B6.crl rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/B88116E180F32C03362804A81CB0CF2EB0C261B6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B88116E180F32C03362804A81CB0CF2EB0C261B6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:9a:47:da:a0:2a:b3:e2:6e:63:6e:77:bf:df:93:68:f3:6e:d8:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B88116E180F32C03362804A81CB0CF2EB0C261B6 Validity Not Before: Apr 25 05:37:00 2025 GMT Not After : Apr 28 11:05:00 2025 GMT Subject: CN=F83B744AE949A54A97BF91FF9ACE16A84C0E4E2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ff:a3:0c:c5:fa:08:06:6b:4f:e2:b9:1f:8b: 2c:3b:7d:7e:32:71:65:84:7e:12:f2:83:cf:9e:ca: 76:21:81:89:23:a8:4d:67:ec:67:d5:5d:41:77:a7: 4c:59:59:c8:8f:a3:a4:85:97:b3:bd:b3:84:4e:fc: 46:26:fa:0e:af:5e:54:8b:7a:3b:6e:79:2c:4c:17: ed:d7:1c:87:88:0d:8d:02:c6:cd:11:7f:26:26:c0: 01:ad:11:4a:b6:f3:34:5a:1f:33:7a:3c:11:f3:7b: dc:0a:d6:b3:04:ee:94:1e:0d:d1:d4:29:d3:fc:c9: cf:5f:d4:83:67:81:3d:66:71:8a:c6:f2:a7:0a:9f: 91:fd:7e:f9:40:b2:21:2f:3f:44:9d:e4:bd:a8:d6: c8:55:5d:06:25:d1:3f:1d:13:55:15:a8:a7:0d:84: 19:3b:82:6d:23:47:db:8a:02:89:ed:e0:f8:d6:11: 36:5f:d1:6a:ae:70:c0:d7:7f:6a:02:50:31:52:a1: cc:23:45:02:12:f1:57:ce:fa:83:d5:a2:9a:43:6d: 0e:d9:1c:d5:ae:90:59:3a:83:0c:1b:7e:0f:5c:76: e1:5d:21:ee:9e:10:ff:c2:52:b5:a2:ee:e0:eb:a5: f0:19:fd:2a:88:6b:47:14:3c:b9:6c:aa:58:8d:bf: 13:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:3B:74:4A:E9:49:A5:4A:97:BF:91:FF:9A:CE:16:A8:4C:0E:4E:2E X509v3 Authority Key Identifier: keyid:B8:81:16:E1:80:F3:2C:03:36:28:04:A8:1C:B0:CF:2E:B0:C2:61:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/B88116E180F32C03362804A81CB0CF2EB0C261B6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B88116E180F32C03362804A81CB0CF2EB0C261B6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/B88116E180F32C03362804A81CB0CF2EB0C261B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:bb:0e:9c:01:24:f3:b2:41:a0:3b:11:b9:94:10:c1:5b:6a: d4:60:5c:d7:52:fa:95:d1:aa:db:31:73:c9:8c:e8:77:a1:a2: be:f0:c6:e8:1e:bc:1b:64:31:00:fe:cb:84:07:0c:96:5a:60: 9d:ec:e1:c5:42:51:29:92:c1:29:83:e6:2e:75:05:74:65:f2: 8b:b5:a6:34:5f:6c:79:d9:e0:b6:3c:ce:ed:d2:a6:98:1d:31: df:6e:6b:bc:fa:e2:33:a8:52:c7:ae:55:ee:10:9d:4e:1c:2a: ef:9a:33:cc:91:d4:cb:20:cb:a4:f6:58:18:0c:05:66:6f:2f: fb:f3:ad:92:b5:54:67:08:92:6c:e0:ea:f8:bd:f0:68:0c:61: a9:8d:7f:12:40:15:20:8f:65:4b:63:62:18:83:52:df:2a:df: 16:cb:a0:0c:00:22:e3:08:8f:3d:29:01:54:a0:27:4a:2a:ac: fe:49:53:8c:b7:fc:6b:7e:49:5e:20:fd:d1:68:e2:66:33:d0: 39:2d:8b:30:d5:52:53:d3:84:71:4f:63:a4:bf:c6:2b:68:ae: f7:67:1c:b2:68:95:4f:0b:8f:af:d6:e6:a7:82:45:74:9c:5d: fa:fb:6a:01:33:46:f0:93:1b:8a:fc:1f:33:53:2a:d9:fd:b3: 97:9e:52:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW5pH2qAqs+JuY253v9+TaPNu2PIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg4MTE2RTE4MEYzMkMwMzM2MjgwNEE4MUNCMENGMkVC MEMyNjFCNjAeFw0yNTA0MjUwNTM3MDBaFw0yNTA0MjgxMTA1MDBaMDMxMTAvBgNV BAMTKEY4M0I3NDRBRTk0OUE1NEE5N0JGOTFGRjlBQ0UxNkE4NEMwRTRFMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5/6MMxfoIBmtP4rkfiyw7fX4y cWWEfhLyg8+eynYhgYkjqE1n7GfVXUF3p0xZWciPo6SFl7O9s4RO/EYm+g6vXlSL ejtueSxMF+3XHIeIDY0Cxs0RfyYmwAGtEUq28zRaHzN6PBHze9wK1rME7pQeDdHU KdP8yc9f1INngT1mcYrG8qcKn5H9fvlAsiEvP0Sd5L2o1shVXQYl0T8dE1UVqKcN hBk7gm0jR9uKAont4PjWETZf0WqucMDXf2oCUDFSocwjRQIS8VfO+oPVoppDbQ7Z HNWukFk6gwwbfg9cduFdIe6eEP/CUrWi7uDrpfAZ/SqIa0cUPLlsqliNvxO1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+Dt0SulJpUqXv5H/ms4WqEwOTi4wHwYDVR0j BBgwFoAUuIEW4YDzLAM2KASoHLDPLrDCYbYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZTk2ZWQ4OS0yYTE2LTQxNTEtYmY4My01OWRjZTU2MTQ2MGMvMC9CODgxMTZFMTgw RjMyQzAzMzYyODA0QTgxQ0IwQ0YyRUIwQzI2MUI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjg4MTE2RTE4MEYzMkMwMzM2MjgwNEE4MUNCMENGMkVCMEMy NjFCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGU5NmVkODktMmExNi00MTUxLWJm ODMtNTlkY2U1NjE0NjBjLzAvQjg4MTE2RTE4MEYzMkMwMzM2MjgwNEE4MUNCMENG MkVCMEMyNjFCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD+7DpwBJPOyQaA7EbmUEMFbatRgXNdS+pXR qtsxc8mM6Hehor7wxugevBtkMQD+y4QHDJZaYJ3s4cVCUSmSwSmD5i51BXRl8ou1 pjRfbHnZ4LY8zu3SppgdMd9ua7z64jOoUseuVe4QnU4cKu+aM8yR1Msgy6T2WBgM BWZvL/vzrZK1VGcIkmzg6vi98GgMYamNfxJAFSCPZUtjYhiDUt8q3xbLoAwAIuMI jz0pAVSgJ0oqrP5JU4y3/Gt+SV4g/dFo4mYz0DktizDVUlPThHFPY6S/xitorvdn HLJolU8Lj6/W5qeCRXScXfr7agEzRvCTG4r8HzNTKtn9s5eeUmw= -----END CERTIFICATE-----Generated at Fri Apr 25 08:21:08 2025 by rpki-client on console.sobornost.net