$ rpki-client -vvf repo-rpki.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.mft File: 9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.mft (raw, json) Hash identifier: 1MVnktdry3XbZ0roJD1a5TzHT7SdqnSvqZZjQZ6Gj5o= Subject key identifier: 05:9E:86:4B:38:59:0E:32:0F:B8:FE:9C:68:54:9C:9E:BD:34:01:55 Authority key identifier: 9B:F7:2C:8B:B7:CA:35:9B:E4:67:41:AB:CE:4E:B6:9F:05:6D:F0:94 Certificate issuer: /CN=9BF72C8BB7CA359BE46741ABCE4EB69F056DF094 Certificate serial: 70ABE1E1867D9DF8FF41F771B7784B1FF0BD29BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.cer Subject info access: rsync://repo-rpki.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.mft Manifest number: 02D0 Signing time: Fri 25 Apr 2025 14:11:41 +0000 Manifest this update: Fri 25 Apr 2025 14:06:41 +0000 Manifest next update: Mon 28 Apr 2025 16:05:41 +0000 Files and hashes: 1: 9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.crl (hash: XWueVLtB4w5m8o+j4ItBuCehBsNwb2p+A741VQGoJ64=) 2: 3130332e3137322e3137312e302f32342d3234203d3e20313432333936.roa (hash: mLpG+Ebaxu7VmgybbNggsrQpRLSxQf3knk2BCycnQVs=) 3: 3130332e3137322e3137302e302f32342d3234203d3e20313432333936.roa (hash: vqKRXz1Z+D53aNx6JJbbcFdSy7WexJ3003sbBpFgitw=) 4: 3130332e3137322e3137302e302f32332d3233203d3e20313432333936.roa (hash: 3PhwNeSYDAcIik5pnRDMCcA0nHd3sCf3a5FivQ6ylJw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.crl rsync://repo-rpki.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 16:05:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:ab:e1:e1:86:7d:9d:f8:ff:41:f7:71:b7:78:4b:1f:f0:bd:29:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BF72C8BB7CA359BE46741ABCE4EB69F056DF094 Validity Not Before: Apr 25 14:06:41 2025 GMT Not After : Apr 28 16:05:41 2025 GMT Subject: CN=059E864B38590E320FB8FE9C68549C9EBD340155 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b6:26:f0:a7:db:3e:70:48:b1:83:ff:d5:26: 67:07:74:1d:c7:72:fb:99:55:28:ac:04:ad:95:c1: 7d:26:10:35:4f:50:dc:54:c8:da:ac:6b:48:22:5b: d1:29:a2:23:85:88:0b:d8:30:b5:5e:83:7b:92:19: 79:0d:21:ce:c7:61:fd:70:7c:82:3a:2f:43:bd:43: 9f:86:aa:5a:10:36:3c:9d:b0:5e:72:59:0e:95:ca: 95:a1:44:97:f4:b2:df:59:d7:2e:6e:85:69:fc:1e: 04:4e:73:ba:3a:2c:42:4b:c4:27:35:80:c7:1e:b9: e2:09:15:4b:99:26:79:3e:63:4c:aa:d3:52:f4:e4: 4e:bb:46:48:5b:f3:be:b7:40:7e:c1:d1:08:24:b0: 9a:2b:2e:43:34:1c:a1:16:fb:dd:ea:5f:42:37:3b: 64:ab:c9:0e:a7:2d:f3:df:51:e7:cc:49:9a:0b:aa: e7:d6:f2:be:db:bc:02:cf:6a:01:04:49:d7:b6:88: 65:9d:d0:a1:8f:20:ca:0e:ed:a6:8d:2f:76:11:84: 55:c8:10:18:f1:62:cf:09:28:e8:71:53:8d:ca:45: f5:0f:10:6b:a1:6c:a5:b1:52:bd:38:f5:04:0b:b8: db:62:6a:f2:3c:68:b7:46:48:dc:d0:4a:ae:a1:8e: c2:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:9E:86:4B:38:59:0E:32:0F:B8:FE:9C:68:54:9C:9E:BD:34:01:55 X509v3 Authority Key Identifier: keyid:9B:F7:2C:8B:B7:CA:35:9B:E4:67:41:AB:CE:4E:B6:9F:05:6D:F0:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:ef:c9:c5:83:35:ed:45:e9:8f:75:20:41:df:e5:e4:8e:47: 38:7e:8e:fc:0c:65:fa:24:72:07:cb:8f:af:6a:b9:35:1c:cc: 10:93:a0:01:0f:f1:a7:af:0f:15:ee:01:61:68:cb:c2:cb:2c: 6e:11:f7:2a:c7:92:ac:b7:e4:b1:0e:eb:33:47:ea:04:ad:2d: e9:ce:e7:87:2c:2e:8b:97:c7:05:94:11:7b:1f:b0:02:47:57: ce:63:31:15:63:47:7b:8f:44:ac:33:da:cb:47:42:f8:fa:bc: 0f:e9:fe:7c:04:a3:68:3f:fa:3f:e3:30:e8:17:d2:15:4d:14: 23:25:e5:27:ca:9a:50:83:8c:13:ac:11:fb:20:2f:8a:52:0f: 3a:e4:b4:3f:8a:3a:bb:13:65:f7:f5:4e:10:de:a6:83:51:49: 8e:23:9c:06:dd:2c:b6:83:20:31:55:4a:41:a8:21:c5:72:ab: 7a:55:53:a6:c4:ee:92:16:61:67:49:ec:e9:f0:7e:1e:57:c9: 7e:be:69:23:ec:d8:af:58:66:22:d6:de:44:fc:94:7d:a7:92: 14:fc:ee:8e:e9:c7:39:21:8b:b0:fa:e5:cb:f4:50:36:88:7a: d0:63:dc:ba:4f:34:d8:e7:fb:ff:bd:92:9b:9e:4f:87:bc:a3: 57:1a:19:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcKvh4YZ9nfj/Qfdxt3hLH/C9Kb0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGNzJDOEJCN0NBMzU5QkU0Njc0MUFCQ0U0RUI2OUYw NTZERjA5NDAeFw0yNTA0MjUxNDA2NDFaFw0yNTA0MjgxNjA1NDFaMDMxMTAvBgNV BAMTKDA1OUU4NjRCMzg1OTBFMzIwRkI4RkU5QzY4NTQ5QzlFQkQzNDAxNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0tibwp9s+cEixg//VJmcHdB3H cvuZVSisBK2VwX0mEDVPUNxUyNqsa0giW9EpoiOFiAvYMLVeg3uSGXkNIc7HYf1w fII6L0O9Q5+GqloQNjydsF5yWQ6VypWhRJf0st9Z1y5uhWn8HgROc7o6LEJLxCc1 gMceueIJFUuZJnk+Y0yq01L05E67Rkhb8763QH7B0QgksJorLkM0HKEW+93qX0I3 O2SryQ6nLfPfUefMSZoLqufW8r7bvALPagEESde2iGWd0KGPIMoO7aaNL3YRhFXI EBjxYs8JKOhxU43KRfUPEGuhbKWxUr049QQLuNtiavI8aLdGSNzQSq6hjsIlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBZ6GSzhZDjIPuP6caFScnr00AVUwHwYDVR0j BBgwFoAUm/csi7fKNZvkZ0Grzk62nwVt8JQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MWRiNmM5Yi1kOGZjLTRkOGMtODBjYi1mZDIyNDEyMDhkZGUvMC85QkY3MkM4QkI3 Q0EzNTlCRTQ2NzQxQUJDRTRFQjY5RjA1NkRGMDk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUJGNzJDOEJCN0NBMzU5QkU0Njc0MUFCQ0U0RUI2OUYwNTZE RjA5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjFkYjZjOWItZDhmYy00ZDhjLTgw Y2ItZmQyMjQxMjA4ZGRlLzAvOUJGNzJDOEJCN0NBMzU5QkU0Njc0MUFCQ0U0RUI2 OUYwNTZERjA5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEnvycWDNe1F6Y91IEHf5eSORzh+jvwMZfok cgfLj69quTUczBCToAEP8aevDxXuAWFoy8LLLG4R9yrHkqy35LEO6zNH6gStLenO 54csLouXxwWUEXsfsAJHV85jMRVjR3uPRKwz2stHQvj6vA/p/nwEo2g/+j/jMOgX 0hVNFCMl5SfKmlCDjBOsEfsgL4pSDzrktD+KOrsTZff1ThDepoNRSY4jnAbdLLaD IDFVSkGoIcVyq3pVU6bE7pIWYWdJ7Onwfh5XyX6+aSPs2K9YZiLW3kT8lH2nkhT8 7o7pxzkhi7D65cv0UDaIetBj3LpPNNjn+/+9kpueT4e8o1caGRs= -----END CERTIFICATE-----Generated at Fri Apr 25 17:11:50 2025 by rpki-client on console.sobornost.net