$ rpki-client -vvf repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.mft File: BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.mft (raw, json) Hash identifier: Kw8RCbYB51Tg243lILkaWlF/tM6XdzTFZfVhL8dsQIE= Subject key identifier: 54:0F:8B:A5:9A:A9:F8:88:80:77:B4:5F:1D:5E:9B:55:81:3D:FC:F2 Authority key identifier: BD:0C:A7:BB:7E:E1:45:97:A1:71:F1:B1:E3:E3:12:7A:79:DF:FF:D0 Certificate issuer: /CN=BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0 Certificate serial: 7E88645D2B66AA0FCD648748E9FD6E27C345A705 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.mft Manifest number: 019E Signing time: Thu 24 Apr 2025 00:20:49 +0000 Manifest this update: Thu 24 Apr 2025 00:15:49 +0000 Manifest next update: Sun 27 Apr 2025 11:22:49 +0000 Files and hashes: 1: 3130332e32302e38342e302f32342d3234203d3e20313530323337.roa (hash: 1cGJCBtgT1/NMznXhjOAyubxZil1/dRuPKJqMQpqjDY=) 2: BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.crl (hash: lvSGfiaxy/aiVo7qHmWEl2CsZkxnsGPFp0CuEirgU+o=) 3: 3130332e32302e38352e302f32342d3234203d3e20313530323337.roa (hash: xoLxa0LoHLD0+7I86yIRegh8/X09LbX3E+d8Q3rf5aA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.crl rsync://repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 08:10:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:88:64:5d:2b:66:aa:0f:cd:64:87:48:e9:fd:6e:27:c3:45:a7:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0 Validity Not Before: Apr 24 00:15:49 2025 GMT Not After : Apr 27 11:22:49 2025 GMT Subject: CN=540F8BA59AA9F8888077B45F1D5E9B55813DFCF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:31:35:bc:d7:07:a1:1e:6b:ec:97:dc:d3:75: 6b:95:b9:5f:f4:75:6d:64:1f:06:d0:4a:24:00:2d: 7c:98:53:70:70:04:b2:f9:8f:37:d5:4f:52:a0:43: c0:65:33:39:85:85:f3:5b:96:06:7e:25:98:d4:6f: 43:f6:4c:e8:d0:5f:cb:d4:0c:86:b9:5f:28:10:6a: 60:03:5b:f1:3a:07:cc:67:31:72:f1:81:51:26:87: b1:af:9c:8f:87:8e:af:78:cb:1a:ca:5a:c5:78:89: 34:e9:d9:1f:b6:58:a7:46:5e:56:0b:c9:d3:f0:4d: bb:00:31:f8:f1:34:88:80:fe:ce:83:4b:56:da:e5: ca:d8:ca:c7:c3:ca:3c:3f:91:7e:c1:75:dd:45:bc: 95:1f:32:56:c5:45:fd:fa:b5:3a:7c:1d:29:a4:a4: 7e:62:5f:6e:56:33:e3:bd:21:fe:09:f1:52:5f:c5: e5:22:76:4e:1b:c2:b6:24:47:e3:87:a7:a2:90:7b: bd:84:6e:04:bd:51:bd:8c:27:41:7f:fb:5f:f2:6e: 87:6c:a8:1c:ab:81:b8:d3:4b:69:e4:68:b3:a3:a8: 4a:f3:4a:72:62:22:ff:bc:80:8c:ba:5e:fa:98:c6: 17:71:38:c4:b2:9e:21:22:8d:9c:35:50:6e:4b:eb: 70:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:0F:8B:A5:9A:A9:F8:88:80:77:B4:5F:1D:5E:9B:55:81:3D:FC:F2 X509v3 Authority Key Identifier: keyid:BD:0C:A7:BB:7E:E1:45:97:A1:71:F1:B1:E3:E3:12:7A:79:DF:FF:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:7e:4e:c2:2b:5f:9b:fb:43:ba:fc:28:49:7b:57:a1:f5:f2: f0:89:9a:95:c4:fc:17:6d:c4:7a:54:d9:7a:7f:83:c0:37:95: 46:90:f3:f8:e9:61:c7:8b:5e:3a:8d:99:69:8f:e6:49:73:6e: 9d:b7:2c:55:92:94:3e:45:de:59:dd:bf:5f:cb:25:70:de:60: 2c:96:90:34:2e:63:95:fa:46:52:b6:cc:b7:66:bd:06:2b:41: ab:7e:ca:43:c4:6c:02:81:3a:5d:94:3f:67:1f:87:e7:b6:02: dd:93:ba:e2:25:7e:48:94:bf:7c:9a:a1:e4:99:f7:57:49:79: 00:4c:3b:f0:f0:cf:59:66:4a:54:68:d4:59:db:a1:71:39:bd: a2:70:01:92:6c:b2:2f:0f:26:f1:4c:5d:c4:b8:7d:df:96:07: 50:7b:a0:f1:e2:d5:58:44:30:e1:f3:25:ce:6e:5b:5f:6d:51: a5:c4:6c:a8:bb:fc:71:8e:47:ef:65:eb:7a:c2:6a:4e:3b:c2: f6:24:ab:0b:0f:19:05:e2:3f:2c:9f:e3:f2:2b:dc:e1:79:e4: 16:47:c9:82:c6:68:ae:ab:e9:56:69:66:d0:73:c4:bf:2a:48: da:f7:d3:d4:8f:f7:e6:51:92:5d:9c:f1:dd:08:16:c0:d3:83: cd:91:c3:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfohkXStmqg/NZIdI6f1uJ8NFpwUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQwQ0E3QkI3RUUxNDU5N0ExNzFGMUIxRTNFMzEyN0E3 OURGRkZEMDAeFw0yNTA0MjQwMDE1NDlaFw0yNTA0MjcxMTIyNDlaMDMxMTAvBgNV BAMTKDU0MEY4QkE1OUFBOUY4ODg4MDc3QjQ1RjFENUU5QjU1ODEzREZDRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQMTW81wehHmvsl9zTdWuVuV/0 dW1kHwbQSiQALXyYU3BwBLL5jzfVT1KgQ8BlMzmFhfNblgZ+JZjUb0P2TOjQX8vU DIa5XygQamADW/E6B8xnMXLxgVEmh7GvnI+Hjq94yxrKWsV4iTTp2R+2WKdGXlYL ydPwTbsAMfjxNIiA/s6DS1ba5crYysfDyjw/kX7Bdd1FvJUfMlbFRf36tTp8HSmk pH5iX25WM+O9If4J8VJfxeUidk4bwrYkR+OHp6KQe72EbgS9Ub2MJ0F/+1/ybods qByrgbjTS2nkaLOjqErzSnJiIv+8gIy6XvqYxhdxOMSyniEijZw1UG5L63BrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVA+LpZqp+IiAd7RfHV6bVYE9/PIwHwYDVR0j BBgwFoAUvQynu37hRZehcfGx4+MSennf/9AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZDdhNzFiYy1mOTEwLTRiOGMtOWNmZi0wODU3ZDVmMmQzN2YvMC9CRDBDQTdCQjdF RTE0NTk3QTE3MUYxQjFFM0UzMTI3QTc5REZGRkQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQwQ0E3QkI3RUUxNDU5N0ExNzFGMUIxRTNFMzEyN0E3OURG RkZEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2Q3YTcxYmMtZjkxMC00YjhjLTlj ZmYtMDg1N2Q1ZjJkMzdmLzAvQkQwQ0E3QkI3RUUxNDU5N0ExNzFGMUIxRTNFMzEy N0E3OURGRkZEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEd+TsIrX5v7Q7r8KEl7V6H18vCJmpXE/Bdt xHpU2Xp/g8A3lUaQ8/jpYceLXjqNmWmP5klzbp23LFWSlD5F3lndv1/LJXDeYCyW kDQuY5X6RlK2zLdmvQYrQat+ykPEbAKBOl2UP2cfh+e2At2TuuIlfkiUv3yaoeSZ 91dJeQBMO/Dwz1lmSlRo1FnboXE5vaJwAZJssi8PJvFMXcS4fd+WB1B7oPHi1VhE MOHzJc5uW19tUaXEbKi7/HGOR+9l63rCak47wvYkqwsPGQXiPyyf4/Ir3OF55BZH yYLGaK6r6VZpZtBzxL8qSNr309SP9+ZRkl2c8d0IFsDTg82Rw5g= -----END CERTIFICATE-----Generated at Thu Apr 24 04:31:37 2025 by rpki-client on console.sobornost.net