$ rpki-client -vvf repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.mft File: 8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.mft (raw, json) Hash identifier: QuyM+9aNghZcP93HSdQrikh97JkxsLfq/CiJAmCSQh4= Subject key identifier: 17:AF:FD:45:F9:6B:DA:8D:29:EB:B5:EA:A6:28:0E:16:D1:3B:02:F9 Authority key identifier: 8C:5F:A2:EB:D7:AF:40:39:38:83:FB:08:E7:1B:DF:41:AA:E2:0F:57 Certificate issuer: /CN=8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57 Certificate serial: 45FA6066CB3B8D0B8694697B2FFCD25F06DD7867 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.mft Manifest number: 0474 Signing time: Thu 24 Apr 2025 14:01:23 +0000 Manifest this update: Thu 24 Apr 2025 13:56:23 +0000 Manifest next update: Sun 27 Apr 2025 22:13:23 +0000 Files and hashes: 1: 3130332e3131382e3132342e302f32322d3234203d3e20313337333736.roa (hash: GgQGIVctlCvNlOfS2rEwMFV2kj5ohQAxfF74xcz3/1E=) 2: 323430333a333163303a3a2f33322d3332203d3e20313337333736.roa (hash: ZFgZf5/tUMHm0Xvm8MvmyqUsY/m95WPUFwA/Bk3NXco=) 3: 8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.crl (hash: pce2ZwBx+F8uT5Woftkr0v5uoEWjR+/dB/ewTNYOKuo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.crl rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 17:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:fa:60:66:cb:3b:8d:0b:86:94:69:7b:2f:fc:d2:5f:06:dd:78:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57 Validity Not Before: Apr 24 13:56:23 2025 GMT Not After : Apr 27 22:13:23 2025 GMT Subject: CN=17AFFD45F96BDA8D29EBB5EAA6280E16D13B02F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:08:7c:a7:df:41:82:b4:22:9b:68:e7:d4:66: 0b:f3:98:d9:e7:1f:71:db:19:d0:c7:f5:0e:27:b7: 09:33:a2:86:1a:29:71:96:7e:ad:b3:6d:2b:c3:a7: eb:12:15:20:2e:7b:84:55:88:92:5a:c2:c7:6e:8f: 5e:1f:17:6e:57:44:1c:73:af:bb:36:00:92:e6:45: c7:ac:83:86:2f:d1:cf:f2:97:f8:d3:10:3f:72:21: ac:9a:6c:98:0b:bc:09:af:bf:99:df:75:bf:66:84: 4b:c5:02:72:12:b1:26:4c:e4:bc:60:9e:7e:b0:7c: 06:11:06:17:7d:58:83:ce:5a:1f:53:48:40:ac:2e: db:da:e1:d2:dd:e7:10:6b:e3:b2:13:75:b9:12:79: d3:3f:28:48:b2:45:28:e5:5f:34:20:ce:6e:c8:24: ab:3a:c9:ec:1b:be:c8:61:9c:e7:9d:56:cb:d8:cc: 30:70:22:2d:f6:63:b7:8e:b3:f5:15:13:28:51:da: 81:db:84:09:b1:fb:73:7d:50:7d:13:1c:79:90:07: 36:37:ea:eb:52:1e:34:0d:59:dd:29:48:35:34:25: b5:48:ab:ef:6d:ad:ec:a0:60:2b:ac:e2:bf:48:73: b2:bb:92:ec:67:04:11:97:a9:14:7b:90:cf:d6:68: ea:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:AF:FD:45:F9:6B:DA:8D:29:EB:B5:EA:A6:28:0E:16:D1:3B:02:F9 X509v3 Authority Key Identifier: keyid:8C:5F:A2:EB:D7:AF:40:39:38:83:FB:08:E7:1B:DF:41:AA:E2:0F:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:ae:0d:7a:a1:84:2f:68:df:95:b6:46:ca:1f:55:ec:b6:8c: 96:69:9c:f0:ad:67:36:30:8b:f8:d3:07:92:f4:6d:b1:a5:14: 7a:4a:9d:f8:d3:91:b1:0a:37:84:07:c8:63:ac:1b:11:44:42: 6a:25:80:5d:79:05:12:41:ae:6a:70:31:b2:e1:3c:c7:5d:04: d6:0a:3f:8a:5b:ce:42:e6:cf:a9:85:ec:79:35:6a:1b:64:b9: cf:9c:98:5c:ec:de:79:95:33:f3:c3:04:d1:73:29:0d:e2:81: 8b:91:e7:ef:6b:44:ca:af:a3:49:73:5f:62:65:f3:64:5f:53: 85:ae:e0:0d:f7:14:b5:44:e2:fc:9f:ab:68:dc:33:0a:f7:f5: 58:c9:38:78:e7:3d:cf:33:f8:f2:e4:82:b0:99:6e:6c:e2:45: d9:09:54:92:26:08:c6:00:0e:52:f0:9b:5f:95:90:e0:d1:66: 6c:c0:5a:3d:1c:dd:84:85:08:86:98:65:c5:91:c8:64:74:2a: 85:99:01:63:0e:86:69:3c:25:17:33:16:37:c5:39:b4:cd:c5: fd:87:9a:fb:a1:6f:f9:f6:1a:92:05:14:0b:53:2c:8b:20:2d: c6:e0:18:b9:57:ee:26:83:3f:46:6d:7d:12:58:2b:9b:7a:0d: a3:64:f0:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURfpgZss7jQuGlGl7L/zSXwbdeGcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM1RkEyRUJEN0FGNDAzOTM4ODNGQjA4RTcxQkRGNDFB QUUyMEY1NzAeFw0yNTA0MjQxMzU2MjNaFw0yNTA0MjcyMjEzMjNaMDMxMTAvBgNV BAMTKDE3QUZGRDQ1Rjk2QkRBOEQyOUVCQjVFQUE2MjgwRTE2RDEzQjAyRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVCHyn30GCtCKbaOfUZgvzmNnn H3HbGdDH9Q4ntwkzooYaKXGWfq2zbSvDp+sSFSAue4RViJJawsduj14fF25XRBxz r7s2AJLmRcesg4Yv0c/yl/jTED9yIayabJgLvAmvv5nfdb9mhEvFAnISsSZM5Lxg nn6wfAYRBhd9WIPOWh9TSECsLtva4dLd5xBr47ITdbkSedM/KEiyRSjlXzQgzm7I JKs6yewbvshhnOedVsvYzDBwIi32Y7eOs/UVEyhR2oHbhAmx+3N9UH0THHmQBzY3 6utSHjQNWd0pSDU0JbVIq+9treygYCus4r9Ic7K7kuxnBBGXqRR7kM/WaOpFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF6/9Rflr2o0p67XqpigOFtE7AvkwHwYDVR0j BBgwFoAUjF+i69evQDk4g/sI5xvfQariD1cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDJhNWI1MS1iYzAwLTRkNmItODc2MS1jN2QwZDNmNmRlMTIvMC84QzVGQTJFQkQ3 QUY0MDM5Mzg4M0ZCMDhFNzFCREY0MUFBRTIwRjU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEM1RkEyRUJEN0FGNDAzOTM4ODNGQjA4RTcxQkRGNDFBQUUy MEY1Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQyYTViNTEtYmMwMC00ZDZiLTg3 NjEtYzdkMGQzZjZkZTEyLzAvOEM1RkEyRUJEN0FGNDAzOTM4ODNGQjA4RTcxQkRG NDFBQUUyMEY1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH6uDXqhhC9o35W2RsofVey2jJZpnPCtZzYw i/jTB5L0bbGlFHpKnfjTkbEKN4QHyGOsGxFEQmolgF15BRJBrmpwMbLhPMddBNYK P4pbzkLmz6mF7Hk1ahtkuc+cmFzs3nmVM/PDBNFzKQ3igYuR5+9rRMqvo0lzX2Jl 82RfU4Wu4A33FLVE4vyfq2jcMwr39VjJOHjnPc8z+PLkgrCZbmziRdkJVJImCMYA DlLwm1+VkODRZmzAWj0c3YSFCIaYZcWRyGR0KoWZAWMOhmk8JRczFjfFObTNxf2H mvuhb/n2GpIFFAtTLIsgLcbgGLlX7iaDP0ZtfRJYK5t6DaNk8Io= -----END CERTIFICATE-----Generated at Thu Apr 24 15:50:03 2025 by rpki-client on console.sobornost.net