$ rpki-client -vvf repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft File: B9A55DD123C2F224C4E245856905F78F2F354D92.mft (raw, json) Hash identifier: qjT+9M80EVBhpC/yV40ePiQfYanMCx1bHT62QRXjHQk= Subject key identifier: 06:DE:70:28:80:EA:23:3A:06:C9:08:A4:88:99:C2:9D:F4:95:62:11 Authority key identifier: B9:A5:5D:D1:23:C2:F2:24:C4:E2:45:85:69:05:F7:8F:2F:35:4D:92 Certificate issuer: /CN=B9A55DD123C2F224C4E245856905F78F2F354D92 Certificate serial: 36BBF0F3BEB5DB74BEED2248A0A9E88F55D6EAF6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B9A55DD123C2F224C4E245856905F78F2F354D92.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft Manifest number: 98 Signing time: Thu 24 Apr 2025 00:10:57 +0000 Manifest this update: Thu 24 Apr 2025 00:05:57 +0000 Manifest next update: Sun 27 Apr 2025 04:29:57 +0000 Files and hashes: 1: 3135372e31302e39372e302f32342d3234203d3e203538383231.roa (hash: ruDlvZxwzH98WABBPfx4jUikFQHB1Z32f5yF+Dmn3Ng=) 2: B9A55DD123C2F224C4E245856905F78F2F354D92.crl (hash: T30n1rBFUuzeg4I1PXaBTYfUntiovnuK1g0Gwlmfxl8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.crl rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B9A55DD123C2F224C4E245856905F78F2F354D92.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 18:38:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:bb:f0:f3:be:b5:db:74:be:ed:22:48:a0:a9:e8:8f:55:d6:ea:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9A55DD123C2F224C4E245856905F78F2F354D92 Validity Not Before: Apr 24 00:05:57 2025 GMT Not After : Apr 27 04:29:57 2025 GMT Subject: CN=06DE702880EA233A06C908A48899C29DF4956211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2b:65:e1:14:08:fd:45:a0:3e:20:62:dc:8b: 01:07:22:0b:38:81:6a:ce:d6:16:69:c4:f8:db:03: 06:84:a2:c4:ad:78:da:bc:91:c8:9c:5b:80:a7:03: a9:30:66:e3:e6:43:aa:de:76:a7:62:e8:30:b4:5e: 6d:d7:4c:de:c0:be:9e:45:4c:48:31:71:a1:c8:49: 35:de:69:be:5a:2e:47:d6:ae:55:f1:84:2b:81:1b: 4f:d0:0e:89:4c:e4:25:33:b8:39:12:ad:6a:c8:6a: d6:1b:af:65:07:e5:04:0c:d2:3e:fe:ab:cb:b6:10: 8c:c3:c2:62:d8:0c:64:f8:a2:b2:3b:0c:ce:b6:de: 5c:51:69:bc:e2:c7:64:56:ba:78:be:86:b3:2e:e3: 16:7f:62:11:fa:7e:0a:0c:80:2a:fd:d4:03:12:ea: 75:9b:2d:89:ee:08:5b:5f:02:f0:57:4a:16:53:56: 6c:c7:54:41:b4:5a:40:55:ca:fd:04:67:57:6c:57: e4:91:76:f9:2e:bf:3a:77:7a:99:0c:71:4b:06:be: 01:25:11:51:5f:1c:ca:ba:f7:62:1e:29:7e:34:be: 89:ca:b7:c2:30:b4:a7:80:38:e9:c1:df:3e:20:ac: 26:df:0e:83:8e:b0:34:58:32:7d:97:cd:3d:4e:70: e3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:DE:70:28:80:EA:23:3A:06:C9:08:A4:88:99:C2:9D:F4:95:62:11 X509v3 Authority Key Identifier: keyid:B9:A5:5D:D1:23:C2:F2:24:C4:E2:45:85:69:05:F7:8F:2F:35:4D:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B9A55DD123C2F224C4E245856905F78F2F354D92.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:ce:b5:0d:69:79:0c:ae:83:cc:f7:40:a0:b2:83:ba:e0:aa: 13:30:2f:61:51:15:60:e8:45:f2:58:02:d5:93:2a:ae:4a:8a: 5f:7a:c5:96:50:ce:f7:91:36:6c:4e:c2:65:b6:5e:14:43:c5: 6c:9e:65:3f:a2:f3:0c:46:db:20:49:3c:c6:de:31:1d:a3:76: 17:b6:66:28:d1:07:de:f5:be:c0:e3:78:bf:71:21:1d:1e:43: 6b:f8:9f:3b:69:28:e1:10:23:01:a5:08:b3:0d:8b:62:64:06: 26:2e:79:41:32:0f:95:d9:94:ab:b2:0d:a0:ae:90:2e:52:09: 03:94:aa:c2:cb:6d:c2:a2:12:2f:71:5b:9a:38:48:72:f5:f9: e8:d9:a7:99:5d:8b:08:f5:41:e1:5c:50:50:46:f5:ae:a5:9c: 85:1f:7b:00:29:7a:04:ce:1c:e5:99:fd:4c:b7:57:11:4c:65: 01:5b:f0:4b:f1:cc:cc:26:a8:f6:f5:b7:d5:d7:65:30:bf:9c: 96:a3:c1:d5:f0:6b:aa:d4:0d:7c:42:37:35:72:85:94:65:d3: 6d:01:d7:37:22:e1:d0:1a:18:c6:da:c3:14:ab:f2:c1:f1:d8: ad:8f:37:69:93:58:2f:92:0b:9e:9f:87:a0:eb:43:eb:1d:51: 2a:4e:8d:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNrvw876123S+7SJIoKnoj1XW6vYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlBNTVERDEyM0MyRjIyNEM0RTI0NTg1NjkwNUY3OEYy RjM1NEQ5MjAeFw0yNTA0MjQwMDA1NTdaFw0yNTA0MjcwNDI5NTdaMDMxMTAvBgNV BAMTKDA2REU3MDI4ODBFQTIzM0EwNkM5MDhBNDg4OTlDMjlERjQ5NTYyMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5K2XhFAj9RaA+IGLciwEHIgs4 gWrO1hZpxPjbAwaEosSteNq8kcicW4CnA6kwZuPmQ6redqdi6DC0Xm3XTN7Avp5F TEgxcaHISTXeab5aLkfWrlXxhCuBG0/QDolM5CUzuDkSrWrIatYbr2UH5QQM0j7+ q8u2EIzDwmLYDGT4orI7DM623lxRabzix2RWuni+hrMu4xZ/YhH6fgoMgCr91AMS 6nWbLYnuCFtfAvBXShZTVmzHVEG0WkBVyv0EZ1dsV+SRdvkuvzp3epkMcUsGvgEl EVFfHMq692IeKX40vonKt8IwtKeAOOnB3z4grCbfDoOOsDRYMn2XzT1OcOMDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBt5wKIDqIzoGyQikiJnCnfSVYhEwHwYDVR0j BBgwFoAUuaVd0SPC8iTE4kWFaQX3jy81TZIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZjJmNjRjYS1mYTU0LTQ5OWUtYmMzMy00ODYyZGNhNzk0ZjcvMC9COUE1NUREMTIz QzJGMjI0QzRFMjQ1ODU2OTA1Rjc4RjJGMzU0RDkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjlBNTVERDEyM0MyRjIyNEM0RTI0NTg1NjkwNUY3OEYyRjM1 NEQ5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWYyZjY0Y2EtZmE1NC00OTllLWJj MzMtNDg2MmRjYTc5NGY3LzAvQjlBNTVERDEyM0MyRjIyNEM0RTI0NTg1NjkwNUY3 OEYyRjM1NEQ5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALTOtQ1peQyug8z3QKCyg7rgqhMwL2FRFWDo RfJYAtWTKq5Kil96xZZQzveRNmxOwmW2XhRDxWyeZT+i8wxG2yBJPMbeMR2jdhe2 ZijRB971vsDjeL9xIR0eQ2v4nztpKOEQIwGlCLMNi2JkBiYueUEyD5XZlKuyDaCu kC5SCQOUqsLLbcKiEi9xW5o4SHL1+ejZp5ldiwj1QeFcUFBG9a6lnIUfewApegTO HOWZ/Uy3VxFMZQFb8EvxzMwmqPb1t9XXZTC/nJajwdXwa6rUDXxCNzVyhZRl020B 1zci4dAaGMbawxSr8sHx2K2PN2mTWC+SC56fh6DrQ+sdUSpOjTQ= -----END CERTIFICATE-----Generated at Thu Apr 24 04:31:37 2025 by rpki-client on console.sobornost.net