$ rpki-client -vvf repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft File: 8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft (raw, json) Hash identifier: yF1ZTyZA1Slsj28Z9UMghnFz8nFXeVmTwIiD/c5hZ1c= Subject key identifier: E5:00:28:28:E2:9E:EA:2B:0F:93:97:5A:B2:B3:C6:72:61:D7:BC:CC Authority key identifier: 89:58:EB:1E:A0:02:2D:EF:78:3D:17:F1:C5:B6:F0:C5:4B:0F:5F:1E Certificate issuer: /CN=8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E Certificate serial: 27536E978A05E31EBB4B9DA9489658CD92AB7369 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft Manifest number: CC Signing time: Fri 25 Apr 2025 09:10:03 +0000 Manifest this update: Fri 25 Apr 2025 09:05:03 +0000 Manifest next update: Mon 28 Apr 2025 16:58:03 +0000 Files and hashes: 1: 8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.crl (hash: Ud3Z4vU+oK98HAHEftYM4znsw7DBb/G4XHZTWuutNuw=) 2: 3230322e34372e3136302e302f32342d3234203d3e20313532303736.roa (hash: 7kwTbSO1puRUOTojUVn3A2nZmKPBj1Yf1FR09LrPep4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.crl rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 14:02:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:53:6e:97:8a:05:e3:1e:bb:4b:9d:a9:48:96:58:cd:92:ab:73:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E Validity Not Before: Apr 25 09:05:03 2025 GMT Not After : Apr 28 16:58:03 2025 GMT Subject: CN=E5002828E29EEA2B0F93975AB2B3C67261D7BCCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:20:22:02:02:97:45:d8:a4:ef:15:67:0d:ad: 16:2a:c9:e4:19:f5:d4:cf:db:29:e8:5a:7d:03:39: 33:a5:37:91:5a:d7:41:34:4c:65:fe:ef:2b:d6:bd: d2:0b:35:9a:d3:70:63:13:95:40:59:52:a3:da:37: dc:ba:8c:d8:1a:1a:64:d8:8b:0b:49:a9:7f:69:0f: 5c:34:89:6f:fb:ea:ef:62:fd:0e:a3:64:61:a1:ab: e3:fe:ed:98:06:36:81:3c:a9:eb:18:e6:5b:1d:d1: 80:d6:94:f1:0a:35:b7:b9:20:09:f6:e0:d2:61:6e: 72:c2:2d:07:4a:d5:81:82:89:91:fe:cc:16:44:99: 4b:4f:3f:c2:6b:65:32:87:5d:34:fe:8c:c2:75:60: bd:67:b0:6c:47:71:27:d7:fc:57:ae:3e:7c:87:d3: 02:b2:24:d3:84:38:15:8e:44:ec:e7:b0:62:e0:0f: 80:19:96:a0:26:1b:84:9c:e7:39:93:d3:c4:50:b0: a4:3c:34:e3:54:d2:13:5b:f2:2b:40:59:b5:64:58: bb:ea:d0:15:65:4c:e4:15:a8:29:26:e8:e5:d2:49: f1:7e:e2:43:88:a4:a2:2b:5c:e5:75:99:a9:b3:99: a3:0e:a8:91:e4:e0:4a:f3:11:51:21:7e:bf:39:98: 2b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:00:28:28:E2:9E:EA:2B:0F:93:97:5A:B2:B3:C6:72:61:D7:BC:CC X509v3 Authority Key Identifier: keyid:89:58:EB:1E:A0:02:2D:EF:78:3D:17:F1:C5:B6:F0:C5:4B:0F:5F:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:d2:ef:b5:76:2c:55:17:c7:17:3a:32:f0:aa:57:26:6b:c4: e0:53:56:f4:17:37:02:af:66:28:91:df:88:90:7f:fb:e5:9f: f0:d3:da:e4:71:cc:0b:d6:8d:1c:de:28:41:97:f9:b8:ca:c1: dc:72:94:fd:49:ff:ba:de:7b:15:15:f4:0e:2c:92:12:f9:f4: 91:b5:b1:82:8f:c6:32:47:d4:e6:12:0f:93:6d:61:9c:86:d6: 4f:ec:c2:4c:07:a6:d0:fa:91:a0:1e:a1:6d:5b:d0:be:01:a1: f4:b8:0d:46:5c:07:20:de:4e:4c:d3:d7:0e:3e:60:00:54:6b: 82:a2:03:d0:b0:36:92:a9:14:b9:da:eb:51:1a:dd:16:39:3f: 50:69:fa:d4:c6:6a:18:48:01:60:5e:3a:25:f3:76:a8:c4:1c: 00:46:9e:7e:99:9b:04:bc:f6:74:50:12:a5:25:c3:dd:66:e1: 0c:2b:12:c9:db:2a:6b:57:3c:ab:1d:c8:86:5c:0a:e5:69:df: e4:ed:79:c0:e2:53:89:8f:5b:f1:35:73:2f:66:b7:7b:d8:02: 66:a2:6f:a4:70:2a:2e:f0:48:47:42:1e:aa:98:89:d2:66:d7: 3c:9a:c3:92:06:51:4d:d0:7e:0e:ad:32:71:27:56:f9:e0:3e: e3:e4:f8:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ1Nul4oF4x67S52pSJZYzZKrc2kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk1OEVCMUVBMDAyMkRFRjc4M0QxN0YxQzVCNkYwQzU0 QjBGNUYxRTAeFw0yNTA0MjUwOTA1MDNaFw0yNTA0MjgxNjU4MDNaMDMxMTAvBgNV BAMTKEU1MDAyODI4RTI5RUVBMkIwRjkzOTc1QUIyQjNDNjcyNjFEN0JDQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRICICApdF2KTvFWcNrRYqyeQZ 9dTP2ynoWn0DOTOlN5Fa10E0TGX+7yvWvdILNZrTcGMTlUBZUqPaN9y6jNgaGmTY iwtJqX9pD1w0iW/76u9i/Q6jZGGhq+P+7ZgGNoE8qesY5lsd0YDWlPEKNbe5IAn2 4NJhbnLCLQdK1YGCiZH+zBZEmUtPP8JrZTKHXTT+jMJ1YL1nsGxHcSfX/FeuPnyH 0wKyJNOEOBWOROznsGLgD4AZlqAmG4Sc5zmT08RQsKQ8NONU0hNb8itAWbVkWLvq 0BVlTOQVqCkm6OXSSfF+4kOIpKIrXOV1mamzmaMOqJHk4ErzEVEhfr85mCvzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5QAoKOKe6isPk5dasrPGcmHXvMwwHwYDVR0j BBgwFoAUiVjrHqACLe94PRfxxbbwxUsPXx4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 Mjg4NzYyYy0zZmM1LTQ5Y2MtOTQ5YS01OTRiMzMxYTEzYTEvMC84OTU4RUIxRUEw MDIyREVGNzgzRDE3RjFDNUI2RjBDNTRCMEY1RjFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODk1OEVCMUVBMDAyMkRFRjc4M0QxN0YxQzVCNkYwQzU0QjBG NUYxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDI4ODc2MmMtM2ZjNS00OWNjLTk0 OWEtNTk0YjMzMWExM2ExLzAvODk1OEVCMUVBMDAyMkRFRjc4M0QxN0YxQzVCNkYw QzU0QjBGNUYxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAXS77V2LFUXxxc6MvCqVyZrxOBTVvQXNwKv ZiiR34iQf/vln/DT2uRxzAvWjRzeKEGX+bjKwdxylP1J/7reexUV9A4skhL59JG1 sYKPxjJH1OYSD5NtYZyG1k/swkwHptD6kaAeoW1b0L4BofS4DUZcByDeTkzT1w4+ YABUa4KiA9CwNpKpFLna61Ea3RY5P1Bp+tTGahhIAWBeOiXzdqjEHABGnn6ZmwS8 9nRQEqUlw91m4QwrEsnbKmtXPKsdyIZcCuVp3+TtecDiU4mPW/E1cy9mt3vYAmai b6RwKi7wSEdCHqqYidJm1zyaw5IGUU3Qfg6tMnEnVvngPuPk+JU= -----END CERTIFICATE-----Generated at Fri Apr 25 12:54:06 2025 by rpki-client on console.sobornost.net