$ rpki-client -vvf repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.mft File: B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.mft (raw, json) Hash identifier: VdXe4RifYCcSJ/iMvG7RdjDCpsRZDHxNr8A3M9ZYals= Subject key identifier: F6:72:A9:E5:30:EA:D6:2C:33:E3:B5:FF:76:B4:E7:00:72:DF:41:A1 Authority key identifier: B2:FA:6D:D6:2C:0D:60:EA:AD:64:F6:B4:71:D2:2D:29:44:32:B7:B8 Certificate issuer: /CN=B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8 Certificate serial: 10C2D16DC8C58DC50E60028430F758A1499BB280 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.mft Manifest number: 04CA Signing time: Wed 23 Apr 2025 05:10:39 +0000 Manifest this update: Wed 23 Apr 2025 05:05:39 +0000 Manifest next update: Sat 26 Apr 2025 14:09:39 +0000 Files and hashes: 1: 3130332e3130362e3137322e302f32332d3234203d3e20313336383838.roa (hash: 14jGGBn2Kt0co6w/+KEhuzlWDhDnoT2pTYw5uk4snHY=) 2: B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.crl (hash: NgEgmJ8bWahOzlx3FPcYzf2bwI8TljcG2KK5OI+F4Hg=) 3: 3130332e3130362e3137342e302f32342d3234203d3e20313336383838.roa (hash: x4cc1kbGeyzVURkk65Vy/+5L5MwnZDAtlAl9vg2PUts=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.crl rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 12:50:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:c2:d1:6d:c8:c5:8d:c5:0e:60:02:84:30:f7:58:a1:49:9b:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8 Validity Not Before: Apr 23 05:05:39 2025 GMT Not After : Apr 26 14:09:39 2025 GMT Subject: CN=F672A9E530EAD62C33E3B5FF76B4E70072DF41A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:71:0a:8f:92:2f:f7:ae:4f:39:a8:d7:c2:5c: a7:76:39:d1:cc:f4:74:23:ba:b5:09:2e:70:75:c6: ac:1c:2a:97:07:37:ce:a1:70:11:9f:67:c9:7e:dc: 85:87:16:6f:e3:fb:d4:21:99:9d:f3:cc:75:89:83: 05:db:65:d8:66:3d:cd:0c:ef:97:cf:6d:5c:35:30: 69:c1:0e:ef:cb:0c:3d:41:ef:d3:6f:67:e2:94:18: a8:1b:56:a0:47:07:c7:3f:ae:11:b7:a4:d3:53:a5: e4:77:26:70:0e:af:ec:f7:13:14:04:22:bf:d4:fe: 30:4d:2d:3d:61:4a:d5:96:e5:b9:0d:a8:62:b1:bf: 17:8f:6b:fc:31:ce:c1:2f:a7:10:55:16:82:68:28: 1a:6d:d4:a5:83:50:a1:a5:19:82:fc:42:32:95:21: 8a:31:17:55:92:d1:e3:e3:f1:6f:f5:ba:9e:38:a0: ea:b1:84:9a:97:af:c8:61:79:04:70:6d:fa:ad:8d: 85:7e:5c:1f:07:62:ce:1f:93:5d:4d:1e:93:49:ab: cd:e7:12:fe:01:6a:b4:c7:fa:51:d1:60:dc:6f:b2: 44:8a:3f:4d:60:40:b0:ef:83:1a:f5:e3:47:95:0e: 8a:a8:1f:7d:af:32:88:63:8e:f5:cb:5f:a3:6d:dd: a5:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:72:A9:E5:30:EA:D6:2C:33:E3:B5:FF:76:B4:E7:00:72:DF:41:A1 X509v3 Authority Key Identifier: keyid:B2:FA:6D:D6:2C:0D:60:EA:AD:64:F6:B4:71:D2:2D:29:44:32:B7:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:50:3e:37:85:3f:2e:14:9b:e3:35:6e:a9:df:54:0b:c3:f3: 07:fb:ed:64:a9:c3:59:bf:66:ec:36:d5:d1:5a:4b:08:2a:b0: d6:c5:4e:7c:0c:fa:b2:dc:b1:f1:f2:a2:ea:e5:da:3e:b3:94: 77:c9:cb:be:06:8e:3e:6e:33:61:2d:8b:ea:94:c1:90:26:36: 0e:d0:d6:02:6d:b7:c6:8f:b9:dc:e7:54:0b:6b:b4:72:4e:c4: 28:3d:ce:58:59:cc:2a:27:1e:fc:71:b7:52:df:e6:c4:52:74: 87:04:77:a7:fd:1e:8e:8a:28:36:72:ee:52:b6:a0:46:43:fc: dd:05:17:91:b6:b4:01:a4:93:06:3a:4f:ba:d0:fe:69:6d:55: fe:af:bf:e5:39:85:c4:bf:a3:1d:f9:9f:f5:58:55:34:84:08: c2:c1:06:d2:27:64:f5:00:1d:b0:fe:4d:cf:c2:0f:cd:61:7c: 96:ca:c8:cc:be:01:58:d6:82:1f:f1:88:6e:8d:d5:98:e1:6d: 7e:8c:5e:6a:ed:61:b5:9f:f8:60:ca:ca:bc:a6:f2:23:87:4a: 45:77:fc:c6:d5:40:78:20:67:08:df:40:24:68:10:ec:d4:62: ea:a6:f1:48:77:fb:03:8b:9a:0b:ee:9a:04:62:cb:ac:6f:6e: 94:63:fb:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEMLRbcjFjcUOYAKEMPdYoUmbsoAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJGQTZERDYyQzBENjBFQUFENjRGNkI0NzFEMjJEMjk0 NDMyQjdCODAeFw0yNTA0MjMwNTA1MzlaFw0yNTA0MjYxNDA5MzlaMDMxMTAvBgNV BAMTKEY2NzJBOUU1MzBFQUQ2MkMzM0UzQjVGRjc2QjRFNzAwNzJERjQxQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXcQqPki/3rk85qNfCXKd2OdHM 9HQjurUJLnB1xqwcKpcHN86hcBGfZ8l+3IWHFm/j+9QhmZ3zzHWJgwXbZdhmPc0M 75fPbVw1MGnBDu/LDD1B79NvZ+KUGKgbVqBHB8c/rhG3pNNTpeR3JnAOr+z3ExQE Ir/U/jBNLT1hStWW5bkNqGKxvxePa/wxzsEvpxBVFoJoKBpt1KWDUKGlGYL8QjKV IYoxF1WS0ePj8W/1up44oOqxhJqXr8hheQRwbfqtjYV+XB8HYs4fk11NHpNJq83n Ev4BarTH+lHRYNxvskSKP01gQLDvgxr140eVDoqoH32vMohjjvXLX6Nt3aUpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9nKp5TDq1iwz47X/drTnAHLfQaEwHwYDVR0j BBgwFoAUsvpt1iwNYOqtZPa0cdItKUQyt7gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZmJkN2NmNi1mNTVhLTRiNzgtYTU4OC1kOTI2MWYxNWY3NjMvMC9CMkZBNkRENjJD MEQ2MEVBQUQ2NEY2QjQ3MUQyMkQyOTQ0MzJCN0I4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjJGQTZERDYyQzBENjBFQUFENjRGNkI0NzFEMjJEMjk0NDMy QjdCOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmZiZDdjZjYtZjU1YS00Yjc4LWE1 ODgtZDkyNjFmMTVmNzYzLzAvQjJGQTZERDYyQzBENjBFQUFENjRGNkI0NzFEMjJE Mjk0NDMyQjdCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAxQPjeFPy4Um+M1bqnfVAvD8wf77WSpw1m/ Zuw21dFaSwgqsNbFTnwM+rLcsfHyourl2j6zlHfJy74Gjj5uM2Eti+qUwZAmNg7Q 1gJtt8aPudznVAtrtHJOxCg9zlhZzConHvxxt1Lf5sRSdIcEd6f9Ho6KKDZy7lK2 oEZD/N0FF5G2tAGkkwY6T7rQ/mltVf6vv+U5hcS/ox35n/VYVTSECMLBBtInZPUA HbD+Tc/CD81hfJbKyMy+AVjWgh/xiG6N1ZjhbX6MXmrtYbWf+GDKyrym8iOHSkV3 /MbVQHggZwjfQCRoEOzUYuqm8Uh3+wOLmgvumgRiy6xvbpRj+0o= -----END CERTIFICATE-----Generated at Wed Apr 23 06:31:50 2025 by rpki-client on console.sobornost.net