$ rpki-client -vvf repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft File: 9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft (raw, json) Hash identifier: /DsG04d9Bl0XVi+3SO0o2E50h6Q0HjREe7FM4Z65a2k= Subject key identifier: 22:5E:5B:C4:17:2D:99:4D:6F:2D:20:68:D5:7A:48:FF:14:A4:13:1A Authority key identifier: 9C:94:8B:B5:F7:C6:53:9D:B5:D4:58:5D:BE:EA:F3:5A:E2:3D:DC:A5 Certificate issuer: /CN=9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5 Certificate serial: 2F5CD8952834ED9B5C5D15B3730DB1CF585F09CC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft Manifest number: 88 Signing time: Thu 24 Apr 2025 20:32:09 +0000 Manifest this update: Thu 24 Apr 2025 20:27:09 +0000 Manifest next update: Mon 28 Apr 2025 05:51:09 +0000 Files and hashes: 1: 9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.crl (hash: dNCWQ4nJmHyycTbX2DB6iK0OGwXhtHjK2O9jX3G6Ung=) 2: 3136302e32322e3230362e302f32342d3234203d3e20313532383235.roa (hash: MVPunuL0q7ij3NQ6Rm2ZsfoQMcIAKWrLDjcXzxD0ul4=) 3: 3136302e32322e3230372e302f32342d3234203d3e20313532383235.roa (hash: lnr1eFTyKT3/IcClpnjgEYV6r1LeIKEtWF2eCPYH2u8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.crl rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 19:57:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:5c:d8:95:28:34:ed:9b:5c:5d:15:b3:73:0d:b1:cf:58:5f:09:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5 Validity Not Before: Apr 24 20:27:09 2025 GMT Not After : Apr 28 05:51:09 2025 GMT Subject: CN=225E5BC4172D994D6F2D2068D57A48FF14A4131A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:cd:09:32:f4:96:f0:1e:c7:71:ce:62:78:86: 66:ae:be:fb:66:bc:6e:93:5c:c5:ec:bb:ab:b1:f8: b6:0a:cf:d1:81:c1:da:51:ca:c3:2b:6d:94:b5:fc: 63:33:3f:43:ec:ba:e0:48:56:dd:dc:d7:f6:f4:3a: 24:c2:eb:05:d6:13:db:f7:cc:57:f2:fd:a2:5f:01: 91:ca:07:94:2b:fa:8b:36:02:7b:b4:4b:51:1e:28: c9:9b:d5:fd:ff:0b:5e:67:a0:ba:eb:84:3c:9d:93: f3:da:67:f7:9f:c5:1b:3b:46:f7:5e:70:05:24:0c: 81:1a:3e:d1:64:b9:b1:5b:0b:d8:c3:09:3c:1b:d5: 07:09:e3:0f:be:42:b9:38:1a:2d:f6:19:4a:fb:2d: 7e:20:18:69:48:4d:85:56:cb:01:52:5b:25:de:a9: 8d:ff:90:54:ac:ca:f9:1a:8e:bf:22:7d:87:cd:f1: 20:29:8c:4c:68:e2:e0:62:0d:5b:a3:cc:6f:21:91: 33:ab:9f:3a:7d:18:db:58:66:4b:ce:bc:65:c2:79: ca:53:37:be:63:f0:7b:0f:45:40:ec:ce:94:93:43: 3e:3c:3b:24:58:aa:10:9c:8a:2a:7e:3d:88:8c:58: 08:c0:0f:70:37:b2:93:63:65:b3:a5:fa:08:ff:d2: 60:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:5E:5B:C4:17:2D:99:4D:6F:2D:20:68:D5:7A:48:FF:14:A4:13:1A X509v3 Authority Key Identifier: keyid:9C:94:8B:B5:F7:C6:53:9D:B5:D4:58:5D:BE:EA:F3:5A:E2:3D:DC:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:01:bc:b1:5d:2e:4c:09:71:09:62:b6:64:9f:46:9d:2f:22: 31:3c:d7:12:00:04:40:9c:a4:85:d4:d9:c7:cf:b3:35:e8:35: 81:6b:3c:50:7d:96:d5:d0:bf:14:b3:2a:d5:47:ea:3e:44:2f: 1b:e8:7c:76:a5:cf:86:a8:e0:79:66:7d:1f:4d:b1:10:f0:1e: 91:bf:6d:08:e6:89:39:c4:bb:11:fb:ef:22:e2:21:d7:96:c6: 2e:69:a2:7b:5b:e5:5c:df:90:23:c7:33:52:26:0f:a0:63:77: 26:34:da:1f:12:9f:eb:ff:2a:7a:63:d0:88:23:07:e8:f1:e2: d9:72:42:eb:56:df:11:71:7c:ed:e4:ed:1d:9e:03:d2:75:97: cc:02:7e:ae:23:98:ff:87:6a:59:d6:ed:1e:59:05:d2:89:ff: 87:3a:ad:c8:32:5b:8a:dc:63:e2:85:fc:c5:e8:82:5e:56:87: 57:38:d4:42:12:47:54:db:31:64:ae:98:18:90:3a:e2:81:e4: 96:6c:8a:00:55:3b:34:e9:ac:98:62:9b:ad:66:05:09:0e:49: 1b:f0:f6:24:4e:c1:38:40:17:9f:4c:3b:25:f5:51:e9:69:9b: 7b:42:6d:88:25:69:3f:cc:5d:5a:d5:e8:e0:e8:d2:71:60:85: 30:9a:c8:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL1zYlSg07ZtcXRWzcw2xz1hfCcwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUM5NDhCQjVGN0M2NTM5REI1RDQ1ODVEQkVFQUYzNUFF MjNERENBNTAeFw0yNTA0MjQyMDI3MDlaFw0yNTA0MjgwNTUxMDlaMDMxMTAvBgNV BAMTKDIyNUU1QkM0MTcyRDk5NEQ2RjJEMjA2OEQ1N0E0OEZGMTRBNDEzMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKzQky9JbwHsdxzmJ4hmauvvtm vG6TXMXsu6ux+LYKz9GBwdpRysMrbZS1/GMzP0PsuuBIVt3c1/b0OiTC6wXWE9v3 zFfy/aJfAZHKB5Qr+os2Anu0S1EeKMmb1f3/C15noLrrhDydk/PaZ/efxRs7Rvde cAUkDIEaPtFkubFbC9jDCTwb1QcJ4w++Qrk4Gi32GUr7LX4gGGlITYVWywFSWyXe qY3/kFSsyvkajr8ifYfN8SApjExo4uBiDVujzG8hkTOrnzp9GNtYZkvOvGXCecpT N75j8HsPRUDszpSTQz48OyRYqhCciip+PYiMWAjAD3A3spNjZbOl+gj/0mCBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIl5bxBctmU1vLSBo1XpI/xSkExowHwYDVR0j BBgwFoAUnJSLtffGU5211FhdvurzWuI93KUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NTZlNDJlNi1jNmNkLTRjY2QtYmRhNy01YWU5YTI0NjA0NGEvMC85Qzk0OEJCNUY3 QzY1MzlEQjVENDU4NURCRUVBRjM1QUUyM0REQ0E1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUM5NDhCQjVGN0M2NTM5REI1RDQ1ODVEQkVFQUYzNUFFMjNE RENBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzU2ZTQyZTYtYzZjZC00Y2NkLWJk YTctNWFlOWEyNDYwNDRhLzAvOUM5NDhCQjVGN0M2NTM5REI1RDQ1ODVEQkVFQUYz NUFFMjNERENBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ8BvLFdLkwJcQlitmSfRp0vIjE81xIABECc pIXU2cfPszXoNYFrPFB9ltXQvxSzKtVH6j5ELxvofHalz4ao4HlmfR9NsRDwHpG/ bQjmiTnEuxH77yLiIdeWxi5pontb5VzfkCPHM1ImD6BjdyY02h8Sn+v/Knpj0Igj B+jx4tlyQutW3xFxfO3k7R2eA9J1l8wCfq4jmP+HalnW7R5ZBdKJ/4c6rcgyW4rc Y+KF/MXogl5Wh1c41EISR1TbMWSumBiQOuKB5JZsigBVOzTprJhim61mBQkOSRvw 9iROwThAF59MOyX1Uelpm3tCbYglaT/MXVrV6ODo0nFghTCayIY= -----END CERTIFICATE-----Generated at Fri Apr 25 00:06:28 2025 by rpki-client on console.sobornost.net