$ rpki-client -vvf repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft File: 9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft (raw, json) Hash identifier: ewID4BYvdBs8kP13p4fPoHGnP0LGBaNDBtOQSVtLWf8= Subject key identifier: 4C:60:BC:BA:D5:AC:D1:BB:90:1E:EB:D8:CD:4D:45:77:BF:96:2A:99 Authority key identifier: 9C:E1:4E:1A:AA:05:8B:35:B9:AD:5B:97:41:2E:4E:1A:0D:B2:FD:8E Certificate issuer: /CN=9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E Certificate serial: 175BDC9DB95AEE69ED13B9C3FAF5DC06BFB86F8F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft Manifest number: 0176 Signing time: Sun 27 Apr 2025 11:51:26 +0000 Manifest this update: Sun 27 Apr 2025 11:46:26 +0000 Manifest next update: Wed 30 Apr 2025 12:50:26 +0000 Files and hashes: 1: 3130332e3137312e3234352e302f32342d3234203d3e20313431363734.roa (hash: Xx9TrbaHobThVYmfOd0G2wltK72lp3YblnpiAJFGb1g=) 2: 3130332e3137312e3234342e302f32342d3234203d3e20313431363734.roa (hash: ZCncyUtwIpBS65LybNlORs5EBtiNYGD9cKnDOLXWoEY=) 3: 9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.crl (hash: waMlAJVBXAdKmgg1bhPhLOPfTQbnM7klQHGatZg4p6w=) 4: 3130332e3137312e3234342e302f32332d3233203d3e20313431363734.roa (hash: Onu18k9bkI/QpIHEFgXL53rkk7oGwVMpnmchVwvY9Ag=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.crl rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 12:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:5b:dc:9d:b9:5a:ee:69:ed:13:b9:c3:fa:f5:dc:06:bf:b8:6f:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E Validity Not Before: Apr 27 11:46:26 2025 GMT Not After : Apr 30 12:50:26 2025 GMT Subject: CN=4C60BCBAD5ACD1BB901EEBD8CD4D4577BF962A99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6c:1c:b4:2b:0a:ae:b4:32:e3:84:04:7a:df: ff:f4:a7:58:92:cc:45:03:cd:76:e0:ae:31:6f:f4: 49:e4:bb:f0:ce:9a:45:fe:05:8a:ec:29:6d:34:64: ca:33:3b:aa:0c:21:14:12:a2:91:dd:6e:0f:00:42: 58:36:21:f7:70:2a:fe:97:f3:bf:a9:56:02:71:d8: 4e:af:ad:4f:25:57:4f:f2:29:38:89:81:af:c2:fc: bb:04:73:c3:5e:c0:e6:38:0f:a4:41:93:c8:25:27: a2:fd:1f:14:25:3d:ad:b4:97:e0:35:3a:09:2b:8b: 20:15:ec:0e:d3:91:9d:b7:e3:7b:3b:2c:5d:fd:9d: 7d:21:73:7d:45:87:89:85:e3:29:e3:f7:9d:09:66: 3b:58:8f:a0:df:62:5d:d8:b2:5f:6d:af:c1:5a:f0: 6b:99:5d:38:2b:da:f5:dd:bc:f6:ee:ae:ef:12:60: 5c:e4:d5:70:04:52:87:8b:f3:0a:3b:86:93:49:01: e6:4c:2c:22:55:b3:f0:10:f0:09:cd:a4:b6:9a:75: 9d:49:39:e6:db:b2:bf:a1:c3:b4:ec:e2:1b:1d:ab: e9:a0:23:90:a8:11:b0:e8:38:e5:7e:fa:14:db:ca: 70:3a:12:7c:95:f1:51:00:10:c2:b7:f8:51:8a:37: 25:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:60:BC:BA:D5:AC:D1:BB:90:1E:EB:D8:CD:4D:45:77:BF:96:2A:99 X509v3 Authority Key Identifier: keyid:9C:E1:4E:1A:AA:05:8B:35:B9:AD:5B:97:41:2E:4E:1A:0D:B2:FD:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:b1:64:73:26:8e:e3:70:f4:05:f4:23:92:9f:13:ad:5a:21: 61:57:fe:f0:99:53:95:cc:92:60:fa:4c:48:e3:61:04:9d:d4: 43:a5:25:b5:91:bf:9e:1a:51:76:74:3b:ab:0f:c3:9f:2e:6e: 9a:4f:b3:8b:e3:40:32:8f:6a:25:dc:0a:a5:fe:95:3b:b5:6a: e3:9e:e8:2d:c2:a8:4c:8a:a0:e0:07:06:06:4c:a8:46:8a:cc: ea:a6:c2:f8:60:76:47:d5:79:43:1a:a0:0d:ef:a9:b1:0d:c5: 22:bc:04:64:01:2a:33:a5:59:bd:e1:a1:48:8c:c7:2d:39:67: 56:bb:48:57:dd:25:d2:a1:73:c8:bc:18:8b:5f:b5:2b:3c:2a: 0a:a2:6c:cc:e0:e1:51:fd:71:c7:35:db:58:cc:1d:24:89:0a: 98:20:b6:78:52:77:38:5f:d3:cc:99:eb:8e:0d:29:2d:1a:15: 60:7e:70:c6:f4:55:9e:aa:8f:36:5d:43:5f:4b:23:f3:b6:52: 1f:79:b1:ac:c4:24:e0:00:a6:46:83:06:46:a2:28:22:d7:c7: da:b4:0a:25:cc:28:b5:75:b7:98:b1:e1:cc:aa:08:d7:cd:1e: ff:24:ae:5d:da:16:11:e7:53:7f:a9:d3:74:97:fa:57:60:ea: ba:cc:9d:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF1vcnbla7mntE7nD+vXcBr+4b48wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNFMTRFMUFBQTA1OEIzNUI5QUQ1Qjk3NDEyRTRFMUEw REIyRkQ4RTAeFw0yNTA0MjcxMTQ2MjZaFw0yNTA0MzAxMjUwMjZaMDMxMTAvBgNV BAMTKDRDNjBCQ0JBRDVBQ0QxQkI5MDFFRUJEOENENEQ0NTc3QkY5NjJBOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwbBy0KwqutDLjhAR63//0p1iS zEUDzXbgrjFv9Enku/DOmkX+BYrsKW00ZMozO6oMIRQSopHdbg8AQlg2IfdwKv6X 87+pVgJx2E6vrU8lV0/yKTiJga/C/LsEc8NewOY4D6RBk8glJ6L9HxQlPa20l+A1 OgkriyAV7A7TkZ2343s7LF39nX0hc31Fh4mF4ynj950JZjtYj6DfYl3Ysl9tr8Fa 8GuZXTgr2vXdvPburu8SYFzk1XAEUoeL8wo7hpNJAeZMLCJVs/AQ8AnNpLaadZ1J Oebbsr+hw7Ts4hsdq+mgI5CoEbDoOOV++hTbynA6EnyV8VEAEMK3+FGKNyWfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTGC8utWs0buQHuvYzU1Fd7+WKpkwHwYDVR0j BBgwFoAUnOFOGqoFizW5rVuXQS5OGg2y/Y4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YWFjMWJiOS00NWY2LTQ2NjctYjE5NC05YTY5YTRhNGQ3NTUvMC85Q0UxNEUxQUFB MDU4QjM1QjlBRDVCOTc0MTJFNEUxQTBEQjJGRDhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUNFMTRFMUFBQTA1OEIzNUI5QUQ1Qjk3NDEyRTRFMUEwREIy RkQ4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWFhYzFiYjktNDVmNi00NjY3LWIx OTQtOWE2OWE0YTRkNzU1LzAvOUNFMTRFMUFBQTA1OEIzNUI5QUQ1Qjk3NDEyRTRF MUEwREIyRkQ4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABixZHMmjuNw9AX0I5KfE61aIWFX/vCZU5XM kmD6TEjjYQSd1EOlJbWRv54aUXZ0O6sPw58ubppPs4vjQDKPaiXcCqX+lTu1auOe 6C3CqEyKoOAHBgZMqEaKzOqmwvhgdkfVeUMaoA3vqbENxSK8BGQBKjOlWb3hoUiM xy05Z1a7SFfdJdKhc8i8GItftSs8KgqibMzg4VH9ccc121jMHSSJCpggtnhSdzhf 08yZ644NKS0aFWB+cMb0VZ6qjzZdQ19LI/O2Uh95sazEJOAApkaDBkaiKCLXx9q0 CiXMKLV1t5ix4cyqCNfNHv8krl3aFhHnU3+p03SX+ldg6rrMnes= -----END CERTIFICATE-----Generated at Sun Apr 27 14:50:33 2025 by rpki-client on console.sobornost.net