$ rpki-client -vvf repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft File: 8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft (raw, json) Hash identifier: jc9tGfA7rTNE010k0FIFY/qc0JS/+UeNrpnwKOQbP88= Subject key identifier: D7:1D:89:F6:9A:B6:68:E9:87:67:30:EF:7D:E4:EF:7A:75:75:F4:20 Authority key identifier: 8F:58:89:3B:1C:E1:DB:85:55:D7:BE:CB:63:DE:34:2D:23:8B:67:79 Certificate issuer: /CN=8F58893B1CE1DB8555D7BECB63DE342D238B6779 Certificate serial: 4E774F1F8D6228EEF41A95A6792DABA95195A99E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F58893B1CE1DB8555D7BECB63DE342D238B6779.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft Manifest number: 0447 Signing time: Wed 23 Apr 2025 15:40:48 +0000 Manifest this update: Wed 23 Apr 2025 15:35:48 +0000 Manifest next update: Sat 26 Apr 2025 23:47:48 +0000 Files and hashes: 1: 3130332e3135302e3134392e302f32342d3234203d3e203438343635.roa (hash: ummcd32J2PfVvp+R69LzxbIEO8p+ckqksmqTcY62DdQ=) 2: 3130332e3135302e3134382e302f32342d3234203d3e203438343635.roa (hash: cbpmkM6PwYV6RY6q2yehaxTDDfvHXmTxn5hBermc51M=) 3: 3130332e3135302e3134382e302f32332d3233203d3e20313430333932.roa (hash: q3D0gokLtaoTWGXZ65FjjWiIlEBRw2BR2w0tZwoughw=) 4: 8F58893B1CE1DB8555D7BECB63DE342D238B6779.crl (hash: 13v5q8Xs19vmazzbBb9BR3kTix6hVzgIbolNAbs0im4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.crl rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F58893B1CE1DB8555D7BECB63DE342D238B6779.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 12:29:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:77:4f:1f:8d:62:28:ee:f4:1a:95:a6:79:2d:ab:a9:51:95:a9:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F58893B1CE1DB8555D7BECB63DE342D238B6779 Validity Not Before: Apr 23 15:35:48 2025 GMT Not After : Apr 26 23:47:48 2025 GMT Subject: CN=D71D89F69AB668E9876730EF7DE4EF7A7575F420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:8d:89:a0:f8:d5:81:e7:be:d4:81:f0:98:69: 98:58:d5:61:23:2f:29:c1:81:28:e5:2e:cc:2f:7e: 9a:ea:8d:b1:27:b5:0d:e4:3f:a2:d8:39:f5:f7:83: 0b:07:5e:7f:40:dd:dd:16:a2:7d:89:0a:71:b9:bd: 95:1a:90:ea:77:33:8b:69:73:b1:dc:9a:63:3b:c2: 63:1d:25:35:1c:db:85:f6:65:03:27:a8:83:f9:5c: 20:83:c2:f6:89:a3:83:4f:b7:f2:1f:8f:9f:ec:22: af:aa:16:5a:22:c6:c4:78:14:85:bd:12:f8:0b:18: 4b:c6:39:a7:d1:9a:ba:ea:55:21:55:fe:f4:1a:1f: 5d:d7:d9:23:b6:98:ce:ca:0b:41:46:ef:b9:24:db: 4c:8d:86:20:fe:2a:25:9d:cb:90:ff:7f:9c:88:39: 17:fc:5a:aa:38:09:5d:41:23:ad:0f:9c:8a:48:c2: c5:54:ea:6a:a7:2e:49:8e:57:bf:f6:a2:53:8f:44: 4a:0f:0b:a2:e7:45:39:0a:88:30:da:5f:f0:2f:67: 07:d2:97:40:4b:81:97:19:1c:23:e2:37:42:99:be: c6:6c:74:bf:67:48:16:fc:cd:b1:ba:b7:0a:12:a5: cc:2c:0c:9e:96:2f:fe:b0:b7:bc:82:b0:92:60:3d: a9:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:1D:89:F6:9A:B6:68:E9:87:67:30:EF:7D:E4:EF:7A:75:75:F4:20 X509v3 Authority Key Identifier: keyid:8F:58:89:3B:1C:E1:DB:85:55:D7:BE:CB:63:DE:34:2D:23:8B:67:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F58893B1CE1DB8555D7BECB63DE342D238B6779.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:64:d8:e8:c5:3e:29:80:5c:15:5c:03:ad:89:e9:3e:b9:06: 4f:f8:5d:25:f3:fa:f4:c8:86:85:f3:2f:e1:19:5b:28:0b:28: 4f:d5:d2:ef:d5:1d:5a:93:d5:13:58:78:cb:7c:0f:7c:87:bd: cb:dd:07:62:e8:c2:b7:0e:14:e3:ad:28:8b:99:d1:62:51:25: fa:11:3a:44:1d:0d:d1:7d:e2:9d:b2:2a:a5:3f:a1:e7:22:99: bf:9f:4e:2a:32:13:8c:d6:9d:f5:26:27:be:9c:c7:53:20:2c: 2e:d5:55:8b:10:1a:96:42:4f:c1:23:29:b0:dd:d3:bb:26:f3: b0:91:ea:b4:bb:15:94:19:04:90:9d:9b:d2:53:0a:52:5e:d5: f6:88:63:60:75:de:ff:09:5c:92:0e:ae:f3:08:84:b5:a5:1b: ad:2f:0c:e2:2b:df:2d:b4:f9:d6:b6:57:85:29:e7:45:0d:76: a4:4c:b8:9d:97:d2:47:d4:b7:af:ff:42:35:cf:19:03:d4:bb: be:5b:17:b2:25:bc:37:46:2f:2e:41:5a:fa:19:94:d9:2b:2f: de:56:6b:0c:38:55:ca:21:59:13:7b:49:43:3c:6f:ea:8f:a9: 07:a2:76:72:1d:b1:4d:60:7c:06:d8:5c:77:9b:ab:13:73:f1: 95:72:aa:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTndPH41iKO70GpWmeS2rqVGVqZ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY1ODg5M0IxQ0UxREI4NTU1RDdCRUNCNjNERTM0MkQy MzhCNjc3OTAeFw0yNTA0MjMxNTM1NDhaFw0yNTA0MjYyMzQ3NDhaMDMxMTAvBgNV BAMTKEQ3MUQ4OUY2OUFCNjY4RTk4NzY3MzBFRjdERTRFRjdBNzU3NUY0MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmjYmg+NWB577UgfCYaZhY1WEj LynBgSjlLswvfprqjbEntQ3kP6LYOfX3gwsHXn9A3d0Won2JCnG5vZUakOp3M4tp c7HcmmM7wmMdJTUc24X2ZQMnqIP5XCCDwvaJo4NPt/Ifj5/sIq+qFloixsR4FIW9 EvgLGEvGOafRmrrqVSFV/vQaH13X2SO2mM7KC0FG77kk20yNhiD+KiWdy5D/f5yI ORf8Wqo4CV1BI60PnIpIwsVU6mqnLkmOV7/2olOPREoPC6LnRTkKiDDaX/AvZwfS l0BLgZcZHCPiN0KZvsZsdL9nSBb8zbG6twoSpcwsDJ6WL/6wt7yCsJJgPalJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1x2J9pq2aOmHZzDvfeTvenV19CAwHwYDVR0j BBgwFoAUj1iJOxzh24VV177LY940LSOLZ3kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmRlOTM2Yi01M2NmLTRiMDgtYjVmNy0yYjkwZGUyMWZlOTQvMC84RjU4ODkzQjFD RTFEQjg1NTVEN0JFQ0I2M0RFMzQyRDIzOEI2Nzc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY1ODg5M0IxQ0UxREI4NTU1RDdCRUNCNjNERTM0MkQyMzhC Njc3OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkZTkzNmItNTNjZi00YjA4LWI1 ZjctMmI5MGRlMjFmZTk0LzAvOEY1ODg5M0IxQ0UxREI4NTU1RDdCRUNCNjNERTM0 MkQyMzhCNjc3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADxk2OjFPimAXBVcA62J6T65Bk/4XSXz+vTI hoXzL+EZWygLKE/V0u/VHVqT1RNYeMt8D3yHvcvdB2LowrcOFOOtKIuZ0WJRJfoR OkQdDdF94p2yKqU/oecimb+fTioyE4zWnfUmJ76cx1MgLC7VVYsQGpZCT8EjKbDd 07sm87CR6rS7FZQZBJCdm9JTClJe1faIY2B13v8JXJIOrvMIhLWlG60vDOIr3y20 +da2V4Up50UNdqRMuJ2X0kfUt6//QjXPGQPUu75bF7IlvDdGLy5BWvoZlNkrL95W aww4VcohWRN7SUM8b+qPqQeidnIdsU1gfAbYXHebqxNz8ZVyqgs= -----END CERTIFICATE-----Generated at Wed Apr 23 17:38:30 2025 by rpki-client on console.sobornost.net