$ rpki-client -vvf repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft File: F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft (raw, json) Hash identifier: 5olyMCGWkO1JAQqZQPYeUyxUry25QlxqmNsR/TYKWko= Subject key identifier: 6B:25:B6:1B:6A:E0:60:0B:1F:A2:6F:C4:B9:05:CB:2A:54:C6:05:10 Authority key identifier: F9:B3:A4:FD:20:9F:B6:DF:8B:DC:16:8B:15:C8:72:08:3A:34:95:A2 Certificate issuer: /CN=F9B3A4FD209FB6DF8BDC168B15C872083A3495A2 Certificate serial: 6ED5808A034D5EF8DC8214C568AD0E7CD0692452 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft Manifest number: 04CA Signing time: Sat 26 Apr 2025 21:21:05 +0000 Manifest this update: Sat 26 Apr 2025 21:16:05 +0000 Manifest next update: Wed 30 Apr 2025 01:08:05 +0000 Files and hashes: 1: 3130332e3130362e3134352e302f32342d3234203d3e203538333639.roa (hash: 9EQwN+mEUoStnc1hS+Hz3JRfkGKJjf8PG+0UqrXEwKQ=) 2: F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.crl (hash: uQs4oQSX+kNajQPIDCb3uOUIKvk0j6vOaS4V1Uheo8Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.crl rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 20:11:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:d5:80:8a:03:4d:5e:f8:dc:82:14:c5:68:ad:0e:7c:d0:69:24:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9B3A4FD209FB6DF8BDC168B15C872083A3495A2 Validity Not Before: Apr 26 21:16:05 2025 GMT Not After : Apr 30 01:08:05 2025 GMT Subject: CN=6B25B61B6AE0600B1FA26FC4B905CB2A54C60510 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:48:b3:b6:b6:5b:61:19:b4:a7:3c:13:b2:d3: aa:a9:98:c9:3c:62:e0:21:9a:1d:b2:21:2c:bb:b7: 10:13:24:d3:26:e2:f5:9f:cb:cf:b2:c4:2f:f5:51: 72:3e:b1:ba:42:38:d1:92:57:cd:71:29:68:67:3d: d9:c0:4e:1f:98:f6:fe:64:dc:ff:b3:af:80:b3:aa: e1:b1:90:be:6b:ee:57:ad:87:b7:b1:a6:dc:fd:9c: c9:92:e7:13:ef:fb:5a:b3:58:d0:77:b1:ff:54:f3: 5f:7a:66:a2:87:7a:46:3f:28:7e:55:a6:b3:ab:aa: 12:30:9b:ac:24:d5:8e:1b:1b:6e:04:a0:2b:d8:f1: 33:18:3f:50:12:16:ae:f5:f5:46:ad:8e:aa:56:ea: 1c:2b:36:f0:3b:a6:97:32:a4:e2:e3:78:48:0f:a6: a2:de:90:5e:c4:cb:64:94:78:8f:f4:2f:4f:9a:5c: 12:21:0c:b0:1a:07:d0:e1:1f:93:64:d9:27:4f:93: 48:22:5a:5d:39:eb:47:f7:79:e4:06:2d:fb:a5:7e: c5:4a:51:8d:88:66:51:b3:45:80:c0:65:94:0d:44: 46:ca:bf:19:dc:59:50:7d:ad:f0:ac:6c:48:e5:7c: c9:82:38:9f:d0:c5:07:09:79:cc:29:4c:6e:51:ab: ae:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:25:B6:1B:6A:E0:60:0B:1F:A2:6F:C4:B9:05:CB:2A:54:C6:05:10 X509v3 Authority Key Identifier: keyid:F9:B3:A4:FD:20:9F:B6:DF:8B:DC:16:8B:15:C8:72:08:3A:34:95:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:e9:cf:9a:5c:96:0b:8f:da:cb:3a:ae:27:21:98:f9:4a:21: f5:bb:6d:25:fd:3b:18:47:b7:9b:98:ab:1b:08:3d:d1:54:9b: 74:88:26:c2:79:44:0f:11:aa:97:8a:71:c6:2e:66:50:57:ca: 06:6a:5d:2a:ac:85:70:63:0e:4a:6c:3d:7a:97:86:b1:7c:33: f4:23:20:b9:45:e2:3e:0b:1b:df:13:02:0d:a8:72:c7:ff:e2: c7:fe:94:21:6c:82:88:6d:8e:ea:d5:e1:6f:1e:39:92:e7:10: e9:12:55:98:f3:0d:f4:ca:76:ec:aa:3b:86:0c:83:5e:c4:da: 63:9f:01:08:c9:09:00:e4:b8:4e:1b:3b:d6:31:4b:f4:39:1b: b6:39:9a:20:39:b6:7a:18:4a:b6:00:c7:95:e0:cc:e2:18:c6: 36:81:86:5e:26:28:7f:1a:22:56:6c:15:32:96:7f:e7:43:eb: b6:69:b0:f1:7a:64:f5:1f:8a:25:d2:18:50:83:85:60:54:54: 90:6a:91:39:da:bf:db:c0:30:d8:03:79:c5:f8:02:cf:79:2d: 7d:59:c2:43:65:6c:90:cd:21:81:1e:26:5b:2b:d1:be:0e:91: 02:3e:d9:32:3b:c9:a2:14:f5:0f:ab:64:2f:81:fc:1a:5f:c6: 8f:52:3e:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbtWAigNNXvjcghTFaK0OfNBpJFIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlCM0E0RkQyMDlGQjZERjhCREMxNjhCMTVDODcyMDgz QTM0OTVBMjAeFw0yNTA0MjYyMTE2MDVaFw0yNTA0MzAwMTA4MDVaMDMxMTAvBgNV BAMTKDZCMjVCNjFCNkFFMDYwMEIxRkEyNkZDNEI5MDVDQjJBNTRDNjA1MTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBSLO2tlthGbSnPBOy06qpmMk8 YuAhmh2yISy7txATJNMm4vWfy8+yxC/1UXI+sbpCONGSV81xKWhnPdnATh+Y9v5k 3P+zr4CzquGxkL5r7leth7exptz9nMmS5xPv+1qzWNB3sf9U8196ZqKHekY/KH5V prOrqhIwm6wk1Y4bG24EoCvY8TMYP1ASFq719UatjqpW6hwrNvA7ppcypOLjeEgP pqLekF7Ey2SUeI/0L0+aXBIhDLAaB9DhH5Nk2SdPk0giWl0560f3eeQGLfulfsVK UY2IZlGzRYDAZZQNREbKvxncWVB9rfCsbEjlfMmCOJ/QxQcJecwpTG5Rq65DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUayW2G2rgYAsfom/EuQXLKlTGBRAwHwYDVR0j BBgwFoAU+bOk/SCftt+L3BaLFchyCDo0laIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTc5MWI3My1iYjA4LTRhODMtYTE5Ny1iNjM2MGYxZDQ3ZGUvMC9GOUIzQTRGRDIw OUZCNkRGOEJEQzE2OEIxNUM4NzIwODNBMzQ5NUEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjlCM0E0RkQyMDlGQjZERjhCREMxNjhCMTVDODcyMDgzQTM0 OTVBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTE3OTFiNzMtYmIwOC00YTgzLWEx OTctYjYzNjBmMWQ0N2RlLzAvRjlCM0E0RkQyMDlGQjZERjhCREMxNjhCMTVDODcy MDgzQTM0OTVBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIDpz5pclguP2ss6richmPlKIfW7bSX9OxhH t5uYqxsIPdFUm3SIJsJ5RA8RqpeKccYuZlBXygZqXSqshXBjDkpsPXqXhrF8M/Qj ILlF4j4LG98TAg2ocsf/4sf+lCFsgohtjurV4W8eOZLnEOkSVZjzDfTKduyqO4YM g17E2mOfAQjJCQDkuE4bO9YxS/Q5G7Y5miA5tnoYSrYAx5XgzOIYxjaBhl4mKH8a IlZsFTKWf+dD67ZpsPF6ZPUfiiXSGFCDhWBUVJBqkTnav9vAMNgDecX4As95LX1Z wkNlbJDNIYEeJlsr0b4OkQI+2TI7yaIU9Q+rZC+B/Bpfxo9SPrI= -----END CERTIFICATE-----Generated at Sun Apr 27 00:13:02 2025 by rpki-client on console.sobornost.net