$ rpki-client -vvf repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.mft File: BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.mft (raw, json) Hash identifier: gyZSNme2Y4/YsREQbXPc1maDvXv2wpDteaGjq9mP7sU= Subject key identifier: 19:7A:72:68:A9:EB:36:93:9F:4E:7C:23:B6:EA:52:B9:E7:16:8B:5F Authority key identifier: BA:C8:2A:4D:55:B3:68:F4:8D:80:BE:04:5E:0F:4A:84:18:C3:EA:73 Certificate issuer: /CN=BAC82A4D55B368F48D80BE045E0F4A8418C3EA73 Certificate serial: 672CC93F1C201F8C38F2D396E4EF8CDBC0E876E4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.cer Subject info access: rsync://repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.mft Manifest number: 01CE Signing time: Fri 25 Apr 2025 12:31:22 +0000 Manifest this update: Fri 25 Apr 2025 12:26:22 +0000 Manifest next update: Mon 28 Apr 2025 18:46:22 +0000 Files and hashes: 1: BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.crl (hash: q+NNuwsyWhW0OLlAs2WvFUkIZ6lzNESpsIFhDuMzpyQ=) 2: 3130332e3138392e3131392e302f32342d3234203d3e20313439383833.roa (hash: CeJsPXYZaSv3nt0/slveGAtFgQcdV+Sze89sGyxFRnw=) 3: 3130332e3138392e3131382e302f32332d3233203d3e20313439383833.roa (hash: /qWK0LcoSyBB17DKdn5S/rBbFGOn/HEahhhfy2Twaq4=) 4: 3130332e3138392e3131382e302f32342d3234203d3e20313439383833.roa (hash: D9RmffxIYaHEobvTe2y7ZZC1r4KqpQ5ll315JKMW8os=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.crl rsync://repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 18:46:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:2c:c9:3f:1c:20:1f:8c:38:f2:d3:96:e4:ef:8c:db:c0:e8:76:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAC82A4D55B368F48D80BE045E0F4A8418C3EA73 Validity Not Before: Apr 25 12:26:22 2025 GMT Not After : Apr 28 18:46:22 2025 GMT Subject: CN=197A7268A9EB36939F4E7C23B6EA52B9E7168B5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:6e:99:d8:09:e1:be:8c:57:1e:0b:90:f9:75: 6f:fc:71:7b:b8:76:3f:ec:af:30:d8:ee:e2:df:c9: be:fc:58:8a:31:0a:3c:1b:a2:19:fe:c8:de:1b:f1: 32:53:85:72:d2:bd:d2:7e:8b:f4:37:e5:42:a5:02: 62:bb:c3:c3:e6:35:29:82:4f:b6:62:b4:c6:d9:71: bb:d7:56:25:41:67:6a:47:ae:b7:f5:b3:24:13:f4: bc:0d:74:63:90:61:6f:51:af:04:19:0e:ee:76:82: 39:73:43:16:67:a8:48:81:dd:ae:10:14:41:ce:88: c8:2d:c7:e2:2a:87:12:84:df:33:0a:a3:7c:bb:89: ad:44:7c:52:5a:9b:fd:80:e2:76:b4:25:09:b4:05: 53:3c:b3:af:57:a5:c8:ab:87:fc:d3:63:03:a4:a0: a0:6f:1b:6c:bc:6a:32:ff:a2:3b:9c:b8:af:2b:54: 33:3a:67:6c:78:79:44:07:52:10:0b:16:1b:a7:26: 7c:28:da:f7:95:96:1f:7e:b5:55:c0:21:aa:a5:b1: 99:5e:56:21:aa:22:65:60:58:6c:56:bc:b4:73:7a: 01:16:67:3a:43:c3:7c:d5:f8:3b:ee:b6:bf:6a:8d: 95:60:c1:eb:8d:bd:17:a4:5e:6a:b5:cf:bc:cf:7e: 59:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:7A:72:68:A9:EB:36:93:9F:4E:7C:23:B6:EA:52:B9:E7:16:8B:5F X509v3 Authority Key Identifier: keyid:BA:C8:2A:4D:55:B3:68:F4:8D:80:BE:04:5E:0F:4A:84:18:C3:EA:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:fc:60:83:d9:16:cf:6f:7e:04:3e:88:83:71:cf:49:ea:71: d8:69:5c:d1:dd:a3:6a:3e:d5:5e:a3:39:c3:da:3f:2c:3d:ed: bb:a3:2d:32:65:0b:82:d7:a7:05:b3:7c:3e:ae:9f:4a:ee:07: 2a:8e:2d:14:72:6f:da:02:59:6b:fb:8b:f5:09:06:8b:69:71: ae:1a:48:86:ea:22:ff:d4:d9:9a:74:e6:5d:ec:e2:a8:c9:63: e6:59:c7:75:af:ed:76:f3:30:09:78:78:70:a7:fa:6a:a3:94: 39:e2:82:d2:21:ec:59:c6:37:4b:ac:a1:e9:3f:cc:b4:33:55: a4:ec:7e:87:90:d5:25:49:bd:ee:01:32:c2:a1:c0:b3:a2:9f: 90:19:da:b4:21:87:d7:b7:c1:db:79:a9:49:fc:c4:e5:a9:f8: 8d:99:90:4b:fa:3f:73:fc:5e:c7:2c:98:ec:e5:78:a6:f5:15: d3:b7:d8:39:a4:62:7d:ea:94:5c:49:0d:23:a1:92:16:63:ea: c5:e7:c6:6b:9c:a7:2b:eb:fa:13:ae:1a:7f:01:76:3e:2a:5f: 2a:59:cb:bb:2d:26:b2:58:55:db:f8:be:6b:00:63:15:e9:45: 47:1d:92:11:84:4d:3c:7b:89:f2:c6:2b:8a:56:87:cb:97:56: dc:23:1a:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZyzJPxwgH4w48tOW5O+M28DoduQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFDODJBNEQ1NUIzNjhGNDhEODBCRTA0NUUwRjRBODQx OEMzRUE3MzAeFw0yNTA0MjUxMjI2MjJaFw0yNTA0MjgxODQ2MjJaMDMxMTAvBgNV BAMTKDE5N0E3MjY4QTlFQjM2OTM5RjRFN0MyM0I2RUE1MkI5RTcxNjhCNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQbpnYCeG+jFceC5D5dW/8cXu4 dj/srzDY7uLfyb78WIoxCjwbohn+yN4b8TJThXLSvdJ+i/Q35UKlAmK7w8PmNSmC T7ZitMbZcbvXViVBZ2pHrrf1syQT9LwNdGOQYW9RrwQZDu52gjlzQxZnqEiB3a4Q FEHOiMgtx+IqhxKE3zMKo3y7ia1EfFJam/2A4na0JQm0BVM8s69Xpcirh/zTYwOk oKBvG2y8ajL/ojucuK8rVDM6Z2x4eUQHUhALFhunJnwo2veVlh9+tVXAIaqlsZle ViGqImVgWGxWvLRzegEWZzpDw3zV+Dvutr9qjZVgweuNvRekXmq1z7zPfll7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGXpyaKnrNpOfTnwjtupSuecWi18wHwYDVR0j BBgwFoAUusgqTVWzaPSNgL4EXg9KhBjD6nMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 M2FkNTIyNi02NTZkLTQ2MWQtOWNmZi1jODNhYzA3NDJmMjAvMC9CQUM4MkE0RDU1 QjM2OEY0OEQ4MEJFMDQ1RTBGNEE4NDE4QzNFQTczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkFDODJBNEQ1NUIzNjhGNDhEODBCRTA0NUUwRjRBODQxOEMz RUE3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDNhZDUyMjYtNjU2ZC00NjFkLTlj ZmYtYzgzYWMwNzQyZjIwLzAvQkFDODJBNEQ1NUIzNjhGNDhEODBCRTA0NUUwRjRB ODQxOEMzRUE3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB38YIPZFs9vfgQ+iINxz0nqcdhpXNHdo2o+ 1V6jOcPaPyw97bujLTJlC4LXpwWzfD6un0ruByqOLRRyb9oCWWv7i/UJBotpca4a SIbqIv/U2Zp05l3s4qjJY+ZZx3Wv7XbzMAl4eHCn+mqjlDnigtIh7FnGN0usoek/ zLQzVaTsfoeQ1SVJve4BMsKhwLOin5AZ2rQhh9e3wdt5qUn8xOWp+I2ZkEv6P3P8 XscsmOzleKb1FdO32DmkYn3qlFxJDSOhkhZj6sXnxmucpyvr+hOuGn8Bdj4qXypZ y7stJrJYVdv4vmsAYxXpRUcdkhGETTx7ifLGK4pWh8uXVtwjGlg= -----END CERTIFICATE-----Generated at Fri Apr 25 17:11:50 2025 by rpki-client on console.sobornost.net