$ rpki-client -vvf repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.mft File: 84D5328962D0ADCA772ECA2A427E097F281CCEB4.mft (raw, json) Hash identifier: lKKh/3LFWSxCYT27gTKY+t9OBs3FtSLeDudC6GmIUIo= Subject key identifier: AB:D3:4A:EC:CA:E8:B5:54:0D:95:5E:51:67:38:40:8B:5B:C8:0C:ED Authority key identifier: 84:D5:32:89:62:D0:AD:CA:77:2E:CA:2A:42:7E:09:7F:28:1C:CE:B4 Certificate issuer: /CN=84D5328962D0ADCA772ECA2A427E097F281CCEB4 Certificate serial: 4BE44D50F99420C8BF16BC2E9CA57B794EBB8805 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/84D5328962D0ADCA772ECA2A427E097F281CCEB4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.mft Manifest number: 8E Signing time: Wed 23 Apr 2025 00:31:52 +0000 Manifest this update: Wed 23 Apr 2025 00:26:52 +0000 Manifest next update: Sat 26 Apr 2025 12:30:52 +0000 Files and hashes: 1: 84D5328962D0ADCA772ECA2A427E097F281CCEB4.crl (hash: YlF4ImlFdnwTQRV8rOSfafsyMBh/e1GgAcUIZbYD1ek=) 2: 3135372e36362e3133312e302f32342d3234203d3e20313339393337.roa (hash: dqeWLF8yPtXdR/2P9eR9lA9pFgZLicVoP0/MTtzNvb0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.crl rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/84D5328962D0ADCA772ECA2A427E097F281CCEB4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 01:36:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:e4:4d:50:f9:94:20:c8:bf:16:bc:2e:9c:a5:7b:79:4e:bb:88:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84D5328962D0ADCA772ECA2A427E097F281CCEB4 Validity Not Before: Apr 23 00:26:52 2025 GMT Not After : Apr 26 12:30:52 2025 GMT Subject: CN=ABD34AECCAE8B5540D955E516738408B5BC80CED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:30:ad:3e:46:34:7a:f2:0c:27:50:20:2c:e3: 8e:f8:bc:d9:85:4f:c3:a0:de:b8:56:e0:f5:06:08: 6a:32:b4:86:f3:84:7b:9e:9e:22:17:dc:ff:f9:63: ef:d5:47:51:bc:22:fd:79:db:d6:40:6d:86:11:f8: 45:1e:a6:dc:a4:a6:d7:65:43:68:8e:e8:ad:e8:c9: bf:52:d2:fc:a7:a0:98:87:df:4b:6d:ed:be:50:52: a3:5f:4f:09:dc:e8:14:01:91:c4:c7:7f:3c:18:5b: 39:0e:b0:54:b7:94:6c:17:c8:0b:61:25:7d:16:ff: 5e:52:60:cd:00:a2:f6:14:5f:15:fb:b1:c2:30:f1: 16:f7:ff:1d:13:20:98:90:14:23:22:96:66:88:7e: 87:ed:0f:06:b3:ec:0a:48:ee:89:64:3a:bb:8e:bb: 85:db:7d:70:2f:3c:b4:b9:b5:d6:e1:a8:6e:d9:9a: 17:3f:0e:47:50:7a:12:d8:1d:83:dd:f5:60:c3:12: 85:80:8e:f2:2e:a4:02:ff:56:07:bf:ac:8a:fc:c1: b5:44:f2:40:69:97:b6:08:ef:99:ce:69:ab:57:d7: 81:83:c0:a8:42:52:9f:9f:51:d9:8c:60:1f:de:67: 96:23:54:dd:78:4a:7d:cc:1b:ac:b4:e0:17:3a:f3: 25:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:D3:4A:EC:CA:E8:B5:54:0D:95:5E:51:67:38:40:8B:5B:C8:0C:ED X509v3 Authority Key Identifier: keyid:84:D5:32:89:62:D0:AD:CA:77:2E:CA:2A:42:7E:09:7F:28:1C:CE:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/84D5328962D0ADCA772ECA2A427E097F281CCEB4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:79:98:eb:0b:2b:a7:8f:66:5a:4f:cd:62:a2:35:a9:bc:d4: c5:c2:67:54:ae:67:a3:0b:45:ee:58:e9:ee:b9:54:bc:50:90: bd:77:8a:2a:22:ab:ce:25:8c:f2:f9:2c:7c:64:8a:0c:6c:fd: 24:ad:31:9f:3c:b4:47:07:51:ab:9a:64:4f:17:4d:ff:4c:ba: c8:bb:0b:88:fc:ac:bd:3e:be:12:b4:0b:3c:df:8c:20:a1:9f: e8:90:c2:a6:06:d7:e4:c9:a0:28:e0:81:14:f3:31:6e:10:c8: 4c:ec:d3:00:41:b0:f9:da:f2:2a:f7:71:bc:26:c5:11:d8:98: d6:d8:a1:6a:06:c3:06:2d:e1:f6:b2:a2:32:3c:f6:0b:43:4d: 9e:b5:c0:58:2a:6f:f1:f2:ab:1a:cf:b5:0f:b2:9e:39:5f:5b: 8b:f7:17:bb:9e:9e:0f:f7:28:3a:f3:0b:e1:fd:a3:2d:f3:7e: fa:9f:76:6b:f2:f9:e1:c9:ae:97:c1:aa:f9:e0:c1:03:89:9d: 5e:bd:0e:d2:59:52:35:af:70:db:04:44:3b:6c:2e:f9:7e:c1: fd:a6:21:c5:e6:8b:c6:c2:1d:bd:65:8c:98:fb:0a:66:cf:2a: 04:ad:75:34:f7:21:ac:aa:9d:41:53:25:1c:04:86:c2:8b:0f: 24:c8:9b:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS+RNUPmUIMi/FrwunKV7eU67iAUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODRENTMyODk2MkQwQURDQTc3MkVDQTJBNDI3RTA5N0Yy ODFDQ0VCNDAeFw0yNTA0MjMwMDI2NTJaFw0yNTA0MjYxMjMwNTJaMDMxMTAvBgNV BAMTKEFCRDM0QUVDQ0FFOEI1NTQwRDk1NUU1MTY3Mzg0MDhCNUJDODBDRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9MK0+RjR68gwnUCAs4474vNmF T8Og3rhW4PUGCGoytIbzhHueniIX3P/5Y+/VR1G8Iv1529ZAbYYR+EUeptykptdl Q2iO6K3oyb9S0vynoJiH30tt7b5QUqNfTwnc6BQBkcTHfzwYWzkOsFS3lGwXyAth JX0W/15SYM0AovYUXxX7scIw8Rb3/x0TIJiQFCMilmaIfoftDwaz7ApI7olkOruO u4XbfXAvPLS5tdbhqG7Zmhc/DkdQehLYHYPd9WDDEoWAjvIupAL/Vge/rIr8wbVE 8kBpl7YI75nOaatX14GDwKhCUp+fUdmMYB/eZ5YjVN14Sn3MG6y04Bc68yVzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq9NK7MrotVQNlV5RZzhAi1vIDO0wHwYDVR0j BBgwFoAUhNUyiWLQrcp3LsoqQn4JfygczrQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjhkODI0ZC1kNmExLTQ1NDMtOWNmMC1kOTkyNjgzMmYyOWYvMC84NEQ1MzI4OTYy RDBBRENBNzcyRUNBMkE0MjdFMDk3RjI4MUNDRUI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODRENTMyODk2MkQwQURDQTc3MkVDQTJBNDI3RTA5N0YyODFD Q0VCNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGY4ZDgyNGQtZDZhMS00NTQzLTlj ZjAtZDk5MjY4MzJmMjlmLzAvODRENTMyODk2MkQwQURDQTc3MkVDQTJBNDI3RTA5 N0YyODFDQ0VCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGR5mOsLK6ePZlpPzWKiNam81MXCZ1SuZ6ML Re5Y6e65VLxQkL13iioiq84ljPL5LHxkigxs/SStMZ88tEcHUauaZE8XTf9Musi7 C4j8rL0+vhK0CzzfjCChn+iQwqYG1+TJoCjggRTzMW4QyEzs0wBBsPna8ir3cbwm xRHYmNbYoWoGwwYt4fayojI89gtDTZ61wFgqb/HyqxrPtQ+ynjlfW4v3F7ueng/3 KDrzC+H9oy3zfvqfdmvy+eHJrpfBqvngwQOJnV69DtJZUjWvcNsERDtsLvl+wf2m IcXmi8bCHb1ljJj7CmbPKgStdTT3IayqnUFTJRwEhsKLDyTIm1Q= -----END CERTIFICATE-----Generated at Wed Apr 23 04:06:28 2025 by rpki-client on console.sobornost.net