$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft File: 8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft (raw, json) Hash identifier: 2gVFOWlbzz60a9sfltkJ3LfZPi9TfSJGQIxr0ldOMjw= Subject key identifier: 02:B0:1C:6D:D6:D9:2E:B0:57:DA:BF:66:2B:22:8D:9D:2F:B9:35:DB Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 273EBA05E18A7AF60400DBCF0E521D151F50D679 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft Manifest number: 0582 Signing time: Wed 23 Apr 2025 06:50:35 +0000 Manifest this update: Wed 23 Apr 2025 06:45:35 +0000 Manifest next update: Sat 26 Apr 2025 17:10:35 +0000 Files and hashes: 1: 3230322e37332e32342e302f32342d3234203d3e203535373031.roa (hash: 4zJcjhi99V9+23NjQKwrFy3Y4HQGoSDMxwY4qblbwdg=) 2: 3230322e37332e32352e302f32342d3234203d3e20313431383932.roa (hash: L3e7xhgbdKiD6xLSCC6o4EcC4VabYtoVoPe/Fd1r3p4=) 3: 34392e302e302e302f32322d3234203d3e203535373031.roa (hash: yzJFuCgJdtqHHRWns+YkV15nd/BuBUJW5VOi1zg7H6Q=) 4: 8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl (hash: gMZcWKXlWIFdJ3DxEudwhTNh8pbeUDlAlDRHrFmkZ44=) 5: 3230322e37332e32372e302f32342d3234203d3e203535373031.roa (hash: 7FX65tSRyznIseHKWjzPuHzH3CNvHvrWJempYLyB19A=) 6: 3230322e37332e32362e302f32342d3234203d3e20313431383932.roa (hash: QqG89TEZjAnI8K1IrPR29kJtDOMjh4sJXdy9wDe7GkQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 12:50:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:3e:ba:05:e1:8a:7a:f6:04:00:db:cf:0e:52:1d:15:1f:50:d6:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: Apr 23 06:45:35 2025 GMT Not After : Apr 26 17:10:35 2025 GMT Subject: CN=02B01C6DD6D92EB057DABF662B228D9D2FB935DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:97:a4:d4:a0:ca:ee:66:52:ba:8d:ef:a3:45: 5f:1e:6c:8b:d7:c5:dd:4f:7b:47:2e:90:11:65:a1: 0a:37:e7:50:b4:9e:eb:91:8e:78:c2:7f:7c:70:60: 23:53:80:08:be:d4:bc:1f:13:1d:3e:a0:72:76:86: cf:a8:d1:1d:ac:af:ee:4d:3d:ac:f6:5c:14:d4:d6: ce:e6:0d:c8:e1:1e:bd:f2:ff:e1:d7:5f:ba:ba:18: f8:dc:f4:91:78:fd:b3:e4:bf:d8:00:7e:55:57:d6: 83:7e:7c:51:bb:1b:10:e7:88:f8:f3:3b:a3:6e:12: dd:12:0d:58:f4:d0:b6:03:24:ec:49:bd:60:c1:41: 1e:6d:d7:74:06:1e:a2:32:fc:eb:d7:1d:cd:df:d0: 6d:b6:06:e2:8b:8d:c5:70:0f:97:ec:fb:84:d2:0f: 48:5d:e0:79:fa:ac:30:5d:18:f4:2a:3a:8c:e2:0b: 73:0c:0f:e3:56:16:df:0b:38:40:96:5c:fe:74:ca: 27:44:bc:95:bb:ac:2b:4d:0f:66:6d:5b:e0:50:44: 46:d7:3e:30:b5:45:6d:84:2e:45:e3:fc:5c:e5:45: e6:5a:9d:87:af:c4:c4:09:90:6e:9c:b9:e4:7f:c7: 6c:16:28:95:d2:54:b9:01:34:6c:f5:2a:e9:b9:ae: 45:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:B0:1C:6D:D6:D9:2E:B0:57:DA:BF:66:2B:22:8D:9D:2F:B9:35:DB X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:a4:c7:d5:87:ab:9a:2e:08:47:e3:13:1d:15:79:bb:1a:88: 25:f6:dd:dd:d9:d2:8e:ba:71:b9:12:11:d0:06:ef:60:d3:c8: c9:59:5f:23:94:44:ae:da:71:0b:a3:c4:cd:47:b9:a0:fb:f7: 9a:1a:a3:2e:3e:ff:dc:f8:ec:25:93:1b:e2:d9:1c:6b:49:df: 60:05:a0:a0:a0:01:70:e6:84:8d:e4:e5:30:8b:37:b5:b8:99: 30:b8:61:26:20:ba:39:5d:f4:36:f3:1b:b2:5c:92:ee:22:4a: f8:be:4c:db:d6:4c:b2:23:60:51:f4:e0:0c:cd:61:5f:09:b5: cc:ea:45:9f:0a:b8:04:6c:18:44:15:4b:9b:e9:04:00:28:d0: d4:e8:6b:e0:29:2b:88:80:e6:a4:96:72:b7:1d:f2:dc:60:08: bc:5d:ae:74:04:87:9c:98:d9:01:4e:6d:07:2c:4b:fb:70:c5: 37:2a:dc:72:42:fc:2d:f3:8c:6f:c4:0d:69:8f:3c:d3:89:c5: 7a:d3:c3:35:ae:4d:d9:95:fc:1b:3c:6a:6c:47:40:cb:75:d6: 13:e2:3f:9f:57:35:f4:f8:6d:60:7b:5f:bb:f0:e0:1a:72:61: a6:b1:82:18:37:ff:56:ef:87:c6:29:01:9c:0b:7c:d8:86:14: e4:df:9a:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJz66BeGKevYEANvPDlIdFR9Q1nkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yNTA0MjMwNjQ1MzVaFw0yNTA0MjYxNzEwMzVaMDMxMTAvBgNV BAMTKDAyQjAxQzZERDZEOTJFQjA1N0RBQkY2NjJCMjI4RDlEMkZCOTM1REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBl6TUoMruZlK6je+jRV8ebIvX xd1Pe0cukBFloQo351C0nuuRjnjCf3xwYCNTgAi+1LwfEx0+oHJ2hs+o0R2sr+5N Paz2XBTU1s7mDcjhHr3y/+HXX7q6GPjc9JF4/bPkv9gAflVX1oN+fFG7GxDniPjz O6NuEt0SDVj00LYDJOxJvWDBQR5t13QGHqIy/OvXHc3f0G22BuKLjcVwD5fs+4TS D0hd4Hn6rDBdGPQqOoziC3MMD+NWFt8LOECWXP50yidEvJW7rCtND2ZtW+BQREbX PjC1RW2ELkXj/FzlReZanYevxMQJkG6cueR/x2wWKJXSVLkBNGz1Kum5rkU5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUArAcbdbZLrBX2r9mKyKNnS+5NdswHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjdkOWY4NTEtN2U3My00Mzg0LTk1 MGUtOGJlOGUxNWZkM2VlLzAvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBC NzU4QkY1MEY2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACmkx9WHq5ouCEfjEx0VebsaiCX23d3Z0o66 cbkSEdAG72DTyMlZXyOURK7acQujxM1HuaD795oaoy4+/9z47CWTG+LZHGtJ32AF oKCgAXDmhI3k5TCLN7W4mTC4YSYgujld9DbzG7Jcku4iSvi+TNvWTLIjYFH04AzN YV8JtczqRZ8KuARsGEQVS5vpBAAo0NToa+ApK4iA5qSWcrcd8txgCLxdrnQEh5yY 2QFObQcsS/twxTcq3HJC/C3zjG/EDWmPPNOJxXrTwzWuTdmV/Bs8amxHQMt11hPi P59XNfT4bWB7X7vw4BpyYaaxghg3/1bvh8YpAZwLfNiGFOTfmlU= -----END CERTIFICATE-----Generated at Wed Apr 23 08:55:51 2025 by rpki-client on console.sobornost.net