$ rpki-client -vvf repo-rpki.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/BCA31953B92C5FC452EDA87B90CBD98E207FA337.mft File: BCA31953B92C5FC452EDA87B90CBD98E207FA337.mft (raw, json) Hash identifier: uwCu5EuZkbwQeAtqk/SiAg9ZxnkgMO4J/PFrhfkvcMU= Subject key identifier: 35:4E:F2:59:19:8A:94:E2:4F:22:E9:C0:C1:D6:63:60:2C:CF:9A:FB Authority key identifier: BC:A3:19:53:B9:2C:5F:C4:52:ED:A8:7B:90:CB:D9:8E:20:7F:A3:37 Certificate issuer: /CN=BCA31953B92C5FC452EDA87B90CBD98E207FA337 Certificate serial: 182763BC6C0B3648ED091A09751D704B8F6816A8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCA31953B92C5FC452EDA87B90CBD98E207FA337.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/BCA31953B92C5FC452EDA87B90CBD98E207FA337.mft Manifest number: 04CE Signing time: Wed 23 Apr 2025 04:41:18 +0000 Manifest this update: Wed 23 Apr 2025 04:36:18 +0000 Manifest next update: Sat 26 Apr 2025 13:15:18 +0000 Files and hashes: 1: 323430363a366434303a3a2f33322d3332203d3e20313431303536.roa (hash: vPGDL5Uz+m1Ri6z0hdVmq01za5aH2UUg8pKyvgRNgpw=) 2: BCA31953B92C5FC452EDA87B90CBD98E207FA337.crl (hash: Fg91cNcaZV87KybpHGGof2cBJZoiSjCa333yYbMrQyM=) 3: 323430363a366434303a3131363a3a2f34382d3438203d3e20313431303536.roa (hash: 7PxedSipsNTZyiV9fxG1frgwTkAEJ+zZ1V+jTL4oKzQ=) 4: 323430363a366434303a313431303a3a2f34382d3438203d3e20313431303536.roa (hash: BlERiRMKFqkgyqTsj7YKl6ODg1kHmptUNWRLGRCZ1OE=) 5: 323430363a366434303a3131373a3a2f34382d3438203d3e20313431303536.roa (hash: v92EWX5PrX2ocfEiVVqNZStsTUP7VHqvGQh9Jsm+CN4=) 6: 323430363a366434303a656165613a3a2f34382d3438203d3e20313431303536.roa (hash: pbhhW/T4QYFpANmSbko4Pn15Hrxc5CLsjrjH+moakkM=) 7: 3130332e3135352e3131372e302f32342d3234203d3e20313431303536.roa (hash: /TQ9lPnPYqONrVYXhhohcl7UP563J9mX/0O81vxmXto=) 8: 3130332e3135352e3131362e302f32342d3234203d3e20313431303536.roa (hash: fLXVT7lGT6QWujn3tIusyMzrLDKrWbnN+mifeaCOu/U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/BCA31953B92C5FC452EDA87B90CBD98E207FA337.crl rsync://repo-rpki.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/BCA31953B92C5FC452EDA87B90CBD98E207FA337.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCA31953B92C5FC452EDA87B90CBD98E207FA337.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 12:50:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:27:63:bc:6c:0b:36:48:ed:09:1a:09:75:1d:70:4b:8f:68:16:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCA31953B92C5FC452EDA87B90CBD98E207FA337 Validity Not Before: Apr 23 04:36:18 2025 GMT Not After : Apr 26 13:15:18 2025 GMT Subject: CN=354EF259198A94E24F22E9C0C1D663602CCF9AFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:96:e1:44:68:e1:05:a2:4a:ec:8e:59:8c:4f: 9f:82:d8:8f:a5:e5:d5:e1:3b:a6:ef:87:0f:3f:36: 5b:84:0d:e5:0d:49:9c:84:2d:6e:00:20:c5:04:9f: f0:7f:b0:8c:ac:f5:b5:e0:69:bb:9d:5e:a7:ee:1a: 0d:df:e1:84:53:e6:3c:68:09:90:ba:da:c7:e8:9a: 18:bb:a6:7c:a9:b5:7c:c2:77:07:64:09:2b:f9:97: c5:81:2e:6c:4b:32:f2:b4:d0:75:e6:ed:bb:36:2f: e5:ce:c8:66:2b:58:91:6f:ca:bf:96:7e:8a:82:36: f2:69:53:af:79:a6:98:90:90:2f:4a:08:09:84:d0: d8:ac:e4:dd:f4:f1:30:67:77:ae:92:2e:ec:67:2a: aa:66:eb:b9:d4:89:0d:bd:7b:63:02:61:40:61:4c: f4:b8:df:13:fb:a1:95:56:11:20:5c:57:50:cf:34: 61:9d:be:7b:3d:11:e8:5f:c5:33:b3:2c:6a:a6:d4: dc:07:e1:08:46:b5:56:65:f5:72:40:31:79:51:51: 80:49:6f:fe:22:09:9c:41:9a:06:39:38:3b:0d:80: b5:e2:71:37:c3:c8:ba:40:11:63:12:e9:d1:11:a8: 35:7c:cf:3f:a4:46:c3:3f:c5:6f:02:3a:27:e6:c9: ad:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:4E:F2:59:19:8A:94:E2:4F:22:E9:C0:C1:D6:63:60:2C:CF:9A:FB X509v3 Authority Key Identifier: keyid:BC:A3:19:53:B9:2C:5F:C4:52:ED:A8:7B:90:CB:D9:8E:20:7F:A3:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/BCA31953B92C5FC452EDA87B90CBD98E207FA337.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCA31953B92C5FC452EDA87B90CBD98E207FA337.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/BCA31953B92C5FC452EDA87B90CBD98E207FA337.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:02:3d:74:2c:ad:8b:51:6d:37:58:d5:e0:e4:52:49:57:02: 1b:e7:5d:91:51:39:70:b7:c9:8e:90:2e:77:21:8b:5d:3f:4b: 04:bf:b6:0a:a8:dd:4f:ac:0b:fb:2c:e4:e0:0a:86:c0:99:a2: 01:73:a4:5f:d2:99:94:c8:ec:1e:cc:93:74:47:ef:c0:30:7e: c4:ae:d1:fc:41:0c:03:07:66:d7:cd:f7:44:09:7b:01:54:36: cf:29:01:98:9b:71:a3:6e:00:e6:e3:0b:8b:b1:11:12:7b:c8: d8:8a:1b:c3:7c:f8:1d:7a:f5:73:77:cc:e2:a2:f4:5b:8c:e5: 29:94:be:7d:b0:c9:0f:ff:05:92:83:49:3f:38:44:ff:1e:13: 6d:6e:bd:2a:c0:0d:a0:c2:3c:47:c9:fc:cf:8d:f9:72:cb:a5: d1:67:8d:2c:0f:56:a7:38:57:33:9e:eb:1d:ac:de:d6:13:2e: a0:2b:75:9d:6f:16:6c:fa:35:6d:b4:fb:6b:d5:dd:6b:b5:45: 16:df:a6:ed:57:d2:2d:da:d1:f8:7d:75:50:69:0b:5a:5b:7a: 5a:d7:77:c4:2f:55:29:7c:fc:e2:52:87:e8:55:2e:05:de:5e: 4e:56:62:f1:4b:f8:1e:70:ac:16:4d:ec:6a:93:51:f7:53:1a: 59:13:66:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGCdjvGwLNkjtCRoJdR1wS49oFqgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNBMzE5NTNCOTJDNUZDNDUyRURBODdCOTBDQkQ5OEUy MDdGQTMzNzAeFw0yNTA0MjMwNDM2MThaFw0yNTA0MjYxMzE1MThaMDMxMTAvBgNV BAMTKDM1NEVGMjU5MTk4QTk0RTI0RjIyRTlDMEMxRDY2MzYwMkNDRjlBRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXluFEaOEFokrsjlmMT5+C2I+l 5dXhO6bvhw8/NluEDeUNSZyELW4AIMUEn/B/sIys9bXgabudXqfuGg3f4YRT5jxo CZC62sfomhi7pnyptXzCdwdkCSv5l8WBLmxLMvK00HXm7bs2L+XOyGYrWJFvyr+W foqCNvJpU695ppiQkC9KCAmE0Nis5N308TBnd66SLuxnKqpm67nUiQ29e2MCYUBh TPS43xP7oZVWESBcV1DPNGGdvns9EehfxTOzLGqm1NwH4QhGtVZl9XJAMXlRUYBJ b/4iCZxBmgY5ODsNgLXicTfDyLpAEWMS6dERqDV8zz+kRsM/xW8COifmya33AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNU7yWRmKlOJPIunAwdZjYCzPmvswHwYDVR0j BBgwFoAUvKMZU7ksX8RS7ah7kMvZjiB/ozcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTJjNDgxNS1iMmRhLTRjMjAtYmMzMS01MDNhZGY0OWI0OTAvMC9CQ0EzMTk1M0I5 MkM1RkM0NTJFREE4N0I5MENCRDk4RTIwN0ZBMzM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkNBMzE5NTNCOTJDNUZDNDUyRURBODdCOTBDQkQ5OEUyMDdG QTMzNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2UyYzQ4MTUtYjJkYS00YzIwLWJj MzEtNTAzYWRmNDliNDkwLzAvQkNBMzE5NTNCOTJDNUZDNDUyRURBODdCOTBDQkQ5 OEUyMDdGQTMzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGwCPXQsrYtRbTdY1eDkUklXAhvnXZFROXC3 yY6QLnchi10/SwS/tgqo3U+sC/ss5OAKhsCZogFzpF/SmZTI7B7Mk3RH78AwfsSu 0fxBDAMHZtfN90QJewFUNs8pAZibcaNuAObjC4uxERJ7yNiKG8N8+B169XN3zOKi 9FuM5SmUvn2wyQ//BZKDST84RP8eE21uvSrADaDCPEfJ/M+N+XLLpdFnjSwPVqc4 VzOe6x2s3tYTLqArdZ1vFmz6NW20+2vV3Wu1RRbfpu1X0i3a0fh9dVBpC1pbelrX d8QvVSl8/OJSh+hVLgXeXk5WYvFL+B5wrBZN7GqTUfdTGlkTZrA= -----END CERTIFICATE-----Generated at Wed Apr 23 06:31:50 2025 by rpki-client on console.sobornost.net