$ rpki-client -vvf repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft File: 889933E416F356762F7F72858168C9C8A2E241C7.mft (raw, json) Hash identifier: foSlq4lgSo9WMTbSCRAYkOcQqZ86jm8aP+3abMHjURY= Subject key identifier: DB:FE:2A:52:B9:33:CB:F3:D2:53:7C:A3:21:DE:2B:CE:36:B1:3B:CD Authority key identifier: 88:99:33:E4:16:F3:56:76:2F:7F:72:85:81:68:C9:C8:A2:E2:41:C7 Certificate issuer: /CN=889933E416F356762F7F72858168C9C8A2E241C7 Certificate serial: 2A9A15AC4BC0775432246D35ABAA8F1B802EAAFD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/889933E416F356762F7F72858168C9C8A2E241C7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft Manifest number: 01A4 Signing time: Fri 25 Apr 2025 11:10:35 +0000 Manifest this update: Fri 25 Apr 2025 11:05:35 +0000 Manifest next update: Mon 28 Apr 2025 19:29:35 +0000 Files and hashes: 1: 3130332e3136372e3233362e302f32342d3234203d3e20313432333038.roa (hash: uTvbyRMa3JtSusZO5ZSoZ1ULN8brLrTNIGs82j6nGCw=) 2: 889933E416F356762F7F72858168C9C8A2E241C7.crl (hash: H27VbVJ5eyodt6KkVuj0PX3Qga4nB4zVq2r8mpDLHhg=) 3: 3130332e3136372e3233372e302f32342d3234203d3e20313432333038.roa (hash: 0nr9gPQw5gg7weyVjVjmP4Ms0ouXxZyEGyyMhhjUA3E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.crl rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/889933E416F356762F7F72858168C9C8A2E241C7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 14:02:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:9a:15:ac:4b:c0:77:54:32:24:6d:35:ab:aa:8f:1b:80:2e:aa:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=889933E416F356762F7F72858168C9C8A2E241C7 Validity Not Before: Apr 25 11:05:35 2025 GMT Not After : Apr 28 19:29:35 2025 GMT Subject: CN=DBFE2A52B933CBF3D2537CA321DE2BCE36B13BCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:13:4d:7e:c0:a0:fc:a9:b5:6e:5a:06:42:fc: f4:7f:dc:e2:39:55:01:eb:ca:cf:3e:84:d1:e2:bf: a5:54:0a:89:ad:66:2e:df:75:98:c6:ee:66:46:80: b3:98:d7:d2:aa:03:84:eb:f0:4c:7e:0d:a6:4c:d3: 7f:66:bd:f4:cd:b1:a7:53:34:df:ba:d5:4b:63:e9: 23:c4:67:94:18:c7:96:0e:f7:0f:fd:42:70:f7:2a: 40:cd:01:cc:17:ee:51:16:b1:ed:56:22:cf:3e:0f: 0d:e6:5f:cf:72:cf:fe:27:cb:46:7c:5c:2a:47:01: 64:e1:a1:2d:ad:1b:81:a0:b8:46:d4:1e:45:27:6a: be:3e:1f:7b:f2:52:f2:49:fb:c0:d9:e0:21:45:2a: c7:46:63:34:fa:e3:34:1c:7b:eb:ce:53:84:1a:c6: ed:23:b8:b3:80:59:a1:69:6b:67:20:90:5d:17:26: 61:e6:c8:01:17:cf:88:6d:68:6e:bb:76:30:50:6b: fb:b5:1b:c1:ff:1c:37:fb:85:f8:bb:29:3e:f7:a1: f6:b3:52:6f:c0:9b:c5:b8:be:14:d6:0a:ca:25:83: d6:7b:b3:23:ad:b3:bf:29:5f:14:b5:03:99:bb:fa: be:71:56:3a:9b:5a:20:79:3c:4c:df:b2:8f:0a:bf: 46:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:FE:2A:52:B9:33:CB:F3:D2:53:7C:A3:21:DE:2B:CE:36:B1:3B:CD X509v3 Authority Key Identifier: keyid:88:99:33:E4:16:F3:56:76:2F:7F:72:85:81:68:C9:C8:A2:E2:41:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/889933E416F356762F7F72858168C9C8A2E241C7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e0:bc:f4:0b:f3:93:9a:3c:11:c5:63:bd:4b:2a:16:8f:9f:6a: 64:a5:bc:3d:d1:3e:f4:c1:d5:f3:b7:96:71:0d:55:73:36:94: d5:93:c1:01:07:f5:1a:eb:e1:09:3f:3e:3a:7c:be:6b:c4:39: 92:96:ea:ca:b7:11:37:16:bb:25:c3:b9:65:dc:6d:74:ef:c3: 8e:7a:00:a4:ff:8b:73:43:e4:16:cf:74:d1:81:87:22:63:48: 05:7e:8e:08:d4:8f:8e:62:fe:a4:9c:90:46:25:39:5a:71:d3: d9:b6:5f:58:93:5c:c8:41:1c:6e:bd:96:41:0c:78:b7:2c:f8: bb:bd:4e:95:6b:ae:a2:62:91:5c:12:22:dc:f2:31:b0:81:38: bc:73:12:38:60:a1:cc:a6:3e:9c:22:08:6c:b0:a2:98:a6:15: bf:c5:90:60:81:36:eb:ba:43:b7:e3:2f:c2:52:ff:83:b6:85: a0:5a:aa:b7:0c:86:e3:ae:06:72:a1:dd:b8:2f:38:83:55:73: f2:39:2f:a6:d4:bd:17:69:b2:b7:f9:e5:43:57:de:d0:44:e5: a8:4a:81:05:fc:17:fb:07:30:21:80:4e:38:05:80:ac:6d:cb: ed:0c:81:48:b7:c8:ca:63:84:a2:49:58:5d:b7:09:0a:1c:79: e0:0e:37:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKpoVrEvAd1QyJG01q6qPG4Auqv0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg5OTMzRTQxNkYzNTY3NjJGN0Y3Mjg1ODE2OEM5QzhB MkUyNDFDNzAeFw0yNTA0MjUxMTA1MzVaFw0yNTA0MjgxOTI5MzVaMDMxMTAvBgNV BAMTKERCRkUyQTUyQjkzM0NCRjNEMjUzN0NBMzIxREUyQkNFMzZCMTNCQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFE01+wKD8qbVuWgZC/PR/3OI5 VQHrys8+hNHiv6VUComtZi7fdZjG7mZGgLOY19KqA4Tr8Ex+DaZM039mvfTNsadT NN+61Utj6SPEZ5QYx5YO9w/9QnD3KkDNAcwX7lEWse1WIs8+Dw3mX89yz/4ny0Z8 XCpHAWThoS2tG4GguEbUHkUnar4+H3vyUvJJ+8DZ4CFFKsdGYzT64zQce+vOU4Qa xu0juLOAWaFpa2cgkF0XJmHmyAEXz4htaG67djBQa/u1G8H/HDf7hfi7KT73ofaz Um/Am8W4vhTWCsolg9Z7syOts78pXxS1A5m7+r5xVjqbWiB5PEzfso8Kv0Y7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2/4qUrkzy/PSU3yjId4rzjaxO80wHwYDVR0j BBgwFoAUiJkz5BbzVnYvf3KFgWjJyKLiQccwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZWNmZDNmNS04NWRhLTQ4YTctYjUwMi1mNjFhNTk3OTZjMzMvMC84ODk5MzNFNDE2 RjM1Njc2MkY3RjcyODU4MTY4QzlDOEEyRTI0MUM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODg5OTMzRTQxNkYzNTY3NjJGN0Y3Mjg1ODE2OEM5QzhBMkUy NDFDNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWVjZmQzZjUtODVkYS00OGE3LWI1 MDItZjYxYTU5Nzk2YzMzLzAvODg5OTMzRTQxNkYzNTY3NjJGN0Y3Mjg1ODE2OEM5 QzhBMkUyNDFDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOC89Avzk5o8EcVjvUsqFo+famSlvD3RPvTB 1fO3lnENVXM2lNWTwQEH9Rrr4Qk/Pjp8vmvEOZKW6sq3ETcWuyXDuWXcbXTvw456 AKT/i3ND5BbPdNGBhyJjSAV+jgjUj45i/qSckEYlOVpx09m2X1iTXMhBHG69lkEM eLcs+Lu9TpVrrqJikVwSItzyMbCBOLxzEjhgocymPpwiCGywopimFb/FkGCBNuu6 Q7fjL8JS/4O2haBaqrcMhuOuBnKh3bgvOINVc/I5L6bUvRdpsrf55UNX3tBE5ahK gQX8F/sHMCGATjgFgKxty+0MgUi3yMpjhKJJWF23CQoceeAON9E= -----END CERTIFICATE-----Generated at Fri Apr 25 12:54:05 2025 by rpki-client on console.sobornost.net