$ rpki-client -vvf repo-rpki.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.mft File: 986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.mft (raw, json) Hash identifier: Q7QxGTBy4rJ6h3EGkQMbEMRb56VR+o5Tt0C9j5Yua1w= Subject key identifier: B3:5B:14:AA:9D:F2:79:28:C6:30:A3:AA:CE:78:18:8C:14:31:B7:37 Authority key identifier: 98:6E:FE:1C:2B:B8:B0:E4:E1:47:2E:9D:AA:5B:77:5A:A4:F6:68:9F Certificate issuer: /CN=986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F Certificate serial: 3A50B8700E5E057089435AA215960EB9C08B1399 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.mft Manifest number: 04C9 Signing time: Sun 27 Apr 2025 02:11:34 +0000 Manifest this update: Sun 27 Apr 2025 02:06:34 +0000 Manifest next update: Wed 30 Apr 2025 08:40:34 +0000 Files and hashes: 1: 986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.crl (hash: LD5vlYqBu4bFL58KVJmY2o2qCwQDZT7PsU779uHMiiY=) 2: 3130332e3132362e35362e302f32322d3234203d3e20313338313037.roa (hash: kLTlxWEFNfnVHoct9vSIbW94LzE1qa0ElrbO/1tRpX4=) 3: 323030313a6466373a336230303a3a2f34382d3438203d3e20313338313037.roa (hash: iArmdB6Xmwne1qM2afDTqVSj06uD3mLVfN37VycmReA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.crl rsync://repo-rpki.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 05:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:50:b8:70:0e:5e:05:70:89:43:5a:a2:15:96:0e:b9:c0:8b:13:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F Validity Not Before: Apr 27 02:06:34 2025 GMT Not After : Apr 30 08:40:34 2025 GMT Subject: CN=B35B14AA9DF27928C630A3AACE78188C1431B737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:8b:1f:5e:93:a2:79:8a:b8:70:ed:29:80:dc: 55:ee:b9:af:7b:a0:8b:55:25:2f:7e:fb:70:07:b4: cc:be:98:90:e4:0d:65:53:a3:6f:05:ef:3c:d7:1c: 41:6b:b9:f5:d9:30:43:f2:ad:51:7e:51:aa:3c:14: 70:c3:1e:ce:f2:c7:64:10:4e:3f:3b:72:80:b9:7c: 27:5b:69:26:89:ee:17:34:61:9e:f6:fb:53:a0:b0: 0f:6d:f8:08:89:17:d1:0e:d4:65:09:ec:31:ab:11: 67:5a:f8:2a:84:65:10:1d:19:6b:d1:df:16:15:1d: 28:61:79:30:80:55:7c:cc:27:e6:02:ac:9b:6d:1e: 8a:3e:43:53:23:64:29:b4:02:82:92:6e:32:61:17: 13:3d:02:42:2f:17:5b:56:26:ee:34:25:f1:5b:16: 8f:3f:87:7c:62:d1:a3:79:6f:a6:bc:a8:d5:0d:9a: cd:58:2b:1e:1b:d0:3f:f5:ba:d8:70:4b:ea:60:20: b9:2c:33:e6:17:83:ad:9a:a3:07:dd:c3:82:1a:7a: 3b:bf:00:f0:9f:7a:fa:15:12:ee:f7:52:0a:4c:e6: 64:69:48:3a:b6:90:fb:6d:84:ab:36:3a:e8:87:f8: 2a:e0:73:49:1f:0f:28:18:d4:c1:f9:3f:df:ed:35: 0c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:5B:14:AA:9D:F2:79:28:C6:30:A3:AA:CE:78:18:8C:14:31:B7:37 X509v3 Authority Key Identifier: keyid:98:6E:FE:1C:2B:B8:B0:E4:E1:47:2E:9D:AA:5B:77:5A:A4:F6:68:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:ec:10:11:f0:ff:36:9f:ef:ae:9b:c0:26:4d:34:07:98:d8: 03:62:30:2d:d4:39:66:44:91:e5:3f:22:63:7d:81:09:4e:95: 1a:94:fa:60:d7:26:13:6f:48:6c:1c:93:48:5d:b2:56:0c:72: 20:4a:67:8c:50:ac:f7:f6:ee:7a:25:df:5f:1f:1b:2c:39:42: 3b:99:71:62:13:0c:2b:7a:d5:60:f4:e1:31:d6:48:ee:e1:c1: c8:d7:cf:6c:ca:c0:dd:96:2d:8e:2e:9b:40:0e:8c:97:f6:92: b6:28:b5:8a:fe:dc:a9:42:b4:6d:cf:4e:1a:69:e5:b7:dd:c2: a1:7a:68:0c:46:65:20:a8:ed:13:25:e7:c0:46:63:43:31:a1: d1:8e:3d:77:5b:a4:c3:96:1c:96:a4:0e:27:22:d7:eb:de:f2: 4f:2f:3c:2b:41:76:64:41:b0:b0:49:8e:18:e1:72:de:24:25: 50:28:ee:46:b7:dd:03:5e:76:57:38:43:67:e5:6a:9f:e8:0c: b8:18:82:16:37:b1:3e:96:23:40:03:cc:09:93:b4:1c:17:e7: 82:77:34:70:9d:61:94:81:ef:f3:40:bb:f4:2b:61:b9:38:7c: 14:e2:f6:7e:a9:dc:00:5e:e7:1e:a9:83:1e:ae:9e:6f:4a:1c: e5:f8:6f:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOlC4cA5eBXCJQ1qiFZYOucCLE5kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg2RUZFMUMyQkI4QjBFNEUxNDcyRTlEQUE1Qjc3NUFB NEY2Njg5RjAeFw0yNTA0MjcwMjA2MzRaFw0yNTA0MzAwODQwMzRaMDMxMTAvBgNV BAMTKEIzNUIxNEFBOURGMjc5MjhDNjMwQTNBQUNFNzgxODhDMTQzMUI3MzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbix9ek6J5irhw7SmA3FXuua97 oItVJS9++3AHtMy+mJDkDWVTo28F7zzXHEFrufXZMEPyrVF+Uao8FHDDHs7yx2QQ Tj87coC5fCdbaSaJ7hc0YZ72+1OgsA9t+AiJF9EO1GUJ7DGrEWda+CqEZRAdGWvR 3xYVHShheTCAVXzMJ+YCrJttHoo+Q1MjZCm0AoKSbjJhFxM9AkIvF1tWJu40JfFb Fo8/h3xi0aN5b6a8qNUNms1YKx4b0D/1uthwS+pgILksM+YXg62aowfdw4Iaeju/ APCfevoVEu73UgpM5mRpSDq2kPtthKs2OuiH+Crgc0kfDygY1MH5P9/tNQyfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs1sUqp3yeSjGMKOqzngYjBQxtzcwHwYDVR0j BBgwFoAUmG7+HCu4sOThRy6dqlt3WqT2aJ8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MTYyZDE1Yi0xMDJiLTQzMWYtYTUzOS0wYTkzMmIzMTM2NmMvMC85ODZFRkUxQzJC QjhCMEU0RTE0NzJFOURBQTVCNzc1QUE0RjY2ODlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg2RUZFMUMyQkI4QjBFNEUxNDcyRTlEQUE1Qjc3NUFBNEY2 Njg5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzE2MmQxNWItMTAyYi00MzFmLWE1 MzktMGE5MzJiMzEzNjZjLzAvOTg2RUZFMUMyQkI4QjBFNEUxNDcyRTlEQUE1Qjc3 NUFBNEY2Njg5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADjsEBHw/zaf766bwCZNNAeY2ANiMC3UOWZE keU/ImN9gQlOlRqU+mDXJhNvSGwck0hdslYMciBKZ4xQrPf27nol318fGyw5QjuZ cWITDCt61WD04THWSO7hwcjXz2zKwN2WLY4um0AOjJf2krYotYr+3KlCtG3PThpp 5bfdwqF6aAxGZSCo7RMl58BGY0MxodGOPXdbpMOWHJakDici1+ve8k8vPCtBdmRB sLBJjhjhct4kJVAo7ka33QNedlc4Q2flap/oDLgYghY3sT6WI0ADzAmTtBwX54J3 NHCdYZSB7/NAu/QrYbk4fBTi9n6p3ABe5x6pgx6unm9KHOX4bzo= -----END CERTIFICATE-----Generated at Sun Apr 27 05:32:54 2025 by rpki-client on console.sobornost.net