$ rpki-client -vvf repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.mft File: 88D56B9372987974D75D5FEB6C48FA491B771DE6.mft (raw, json) Hash identifier: a9gYLa6eCQwWnifPh/m9nPNW4RbSzOJ0Evgr4zbE/Oo= Subject key identifier: C4:1A:69:E8:0A:45:40:16:32:CE:30:E8:F4:70:29:81:FD:1C:94:86 Authority key identifier: 88:D5:6B:93:72:98:79:74:D7:5D:5F:EB:6C:48:FA:49:1B:77:1D:E6 Certificate issuer: /CN=88D56B9372987974D75D5FEB6C48FA491B771DE6 Certificate serial: 43A30A397F3EC9B3B8EB4DE3406B9EF4D70FD45A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88D56B9372987974D75D5FEB6C48FA491B771DE6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.mft Manifest number: CF Signing time: Wed 23 Apr 2025 09:41:58 +0000 Manifest this update: Wed 23 Apr 2025 09:36:58 +0000 Manifest next update: Sat 26 Apr 2025 15:50:58 +0000 Files and hashes: 1: 3130332e3133392e39382e302f32332d3234203d3e20313338383632.roa (hash: d0zP4gpEpMGDqRwrrELVhm3gEjbXDj5VKEiqUue8+NI=) 2: 88D56B9372987974D75D5FEB6C48FA491B771DE6.crl (hash: 47f/84ATPjBEmLUG/NXGaSjaUDkRUjn+KWeRAKhXvSs=) 3: 323430343a653134303a3a2f33322d3438203d3e20313338383632.roa (hash: trDhhOMcGCRtpJzdR088aSo/+A0xOipuKhnFjYcx0HA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.crl rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88D56B9372987974D75D5FEB6C48FA491B771DE6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 09:26:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:a3:0a:39:7f:3e:c9:b3:b8:eb:4d:e3:40:6b:9e:f4:d7:0f:d4:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88D56B9372987974D75D5FEB6C48FA491B771DE6 Validity Not Before: Apr 23 09:36:58 2025 GMT Not After : Apr 26 15:50:58 2025 GMT Subject: CN=C41A69E80A45401632CE30E8F4702981FD1C9486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bf:e8:b4:d2:28:47:cb:8a:be:c9:62:14:6e: 43:37:d4:08:22:e9:f1:78:aa:a4:63:52:81:d4:c2: 17:53:c2:e6:03:33:36:0e:dd:37:a6:3c:f1:98:44: 1e:a4:1b:c4:40:08:9e:08:d1:57:4f:f0:53:3a:49: 4e:33:ef:0b:e2:a0:16:6a:4c:8d:ce:cb:26:c3:45: 2e:55:c2:e2:ba:8f:99:72:50:3f:ac:a1:2d:c2:d4: c7:eb:63:9b:e4:0f:cc:8b:df:f5:79:aa:60:4f:cc: 65:25:57:1e:0c:62:32:67:1c:20:cd:26:a8:d5:49: 46:85:c2:a2:a4:cf:f8:c5:58:33:e8:af:2a:d6:71: 10:31:44:50:66:c0:50:43:16:e9:be:94:e2:1c:41: 03:ab:28:d8:d9:e1:0d:1d:e5:49:40:08:25:bf:64: a6:fe:ed:25:16:c2:61:dc:41:5d:70:50:60:7f:20: 7f:0a:5e:b9:70:da:5b:c5:c3:ef:02:e8:9c:5c:81: 9d:fd:de:82:68:e4:7b:45:43:0e:2d:4e:96:8f:b5: 71:c2:45:39:6e:18:5a:51:c5:8d:85:ca:f4:a3:4d: 0e:d6:9a:84:8d:19:1a:d3:a1:57:54:1a:5d:5c:14: 1f:5e:b1:1f:ed:e6:00:78:ff:27:19:f2:14:9a:9e: f5:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:1A:69:E8:0A:45:40:16:32:CE:30:E8:F4:70:29:81:FD:1C:94:86 X509v3 Authority Key Identifier: keyid:88:D5:6B:93:72:98:79:74:D7:5D:5F:EB:6C:48:FA:49:1B:77:1D:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88D56B9372987974D75D5FEB6C48FA491B771DE6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ee:fc:f8:d7:c9:bf:a4:5d:e7:63:ac:24:b9:ef:f2:7a:32:c9: 98:a8:2c:4c:a5:c2:94:d5:6b:fd:b8:42:8e:39:1b:17:9a:da: 5c:1e:01:a9:ae:77:1e:e9:16:68:e4:61:76:57:5f:1a:cb:9a: 9a:69:86:9e:f4:23:9d:8d:42:89:70:92:6a:91:28:3e:a0:2e: e5:81:78:db:4b:5f:60:c7:82:c2:40:7d:a0:93:2b:d7:02:04: 82:56:54:85:60:cc:c2:a2:ff:96:e3:b4:49:74:6c:ee:49:71: de:80:d1:96:9c:6c:a8:a4:9e:b7:ac:8c:9e:ea:e5:cd:d0:03: e5:30:d0:24:99:13:8d:52:86:bb:43:4e:1a:2e:c8:f8:50:6b: 56:59:ea:c2:0a:e8:71:94:18:46:0d:88:f5:a6:38:f3:a2:a7: 40:73:f1:5f:09:99:73:d5:b1:8c:85:81:3f:50:9a:89:5e:48: fa:b3:c4:9b:7b:fb:5e:b1:39:5b:a4:92:79:b2:10:13:01:cf: 3f:14:15:7b:ff:e0:fb:a9:a2:1f:2c:e9:11:74:1f:9c:99:c1: c0:f2:8a:61:e8:39:a4:99:90:78:b8:0d:4e:ac:24:4e:b8:a3: 87:46:3f:ef:c5:70:3d:33:e2:10:96:02:fd:a7:15:b6:9e:59: 36:3c:c0:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ6MKOX8+ybO4603jQGue9NcP1FowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhENTZCOTM3Mjk4Nzk3NEQ3NUQ1RkVCNkM0OEZBNDkx Qjc3MURFNjAeFw0yNTA0MjMwOTM2NThaFw0yNTA0MjYxNTUwNThaMDMxMTAvBgNV BAMTKEM0MUE2OUU4MEE0NTQwMTYzMkNFMzBFOEY0NzAyOTgxRkQxQzk0ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9v+i00ihHy4q+yWIUbkM31Agi 6fF4qqRjUoHUwhdTwuYDMzYO3TemPPGYRB6kG8RACJ4I0VdP8FM6SU4z7wvioBZq TI3OyybDRS5VwuK6j5lyUD+soS3C1MfrY5vkD8yL3/V5qmBPzGUlVx4MYjJnHCDN JqjVSUaFwqKkz/jFWDPoryrWcRAxRFBmwFBDFum+lOIcQQOrKNjZ4Q0d5UlACCW/ ZKb+7SUWwmHcQV1wUGB/IH8KXrlw2lvFw+8C6JxcgZ393oJo5HtFQw4tTpaPtXHC RTluGFpRxY2FyvSjTQ7WmoSNGRrToVdUGl1cFB9esR/t5gB4/ycZ8hSanvWjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxBpp6ApFQBYyzjDo9HApgf0clIYwHwYDVR0j BBgwFoAUiNVrk3KYeXTXXV/rbEj6SRt3HeYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NTA2MzNmYy1mZTIzLTRkODItYmE2NC1iYjdlZTZkZDZlMDYvMC84OEQ1NkI5Mzcy OTg3OTc0RDc1RDVGRUI2QzQ4RkE0OTFCNzcxREU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODhENTZCOTM3Mjk4Nzk3NEQ3NUQ1RkVCNkM0OEZBNDkxQjc3 MURFNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDUwNjMzZmMtZmUyMy00ZDgyLWJh NjQtYmI3ZWU2ZGQ2ZTA2LzAvODhENTZCOTM3Mjk4Nzk3NEQ3NUQ1RkVCNkM0OEZB NDkxQjc3MURFNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAO78+NfJv6Rd52OsJLnv8noyyZioLEylwpTV a/24Qo45Gxea2lweAamudx7pFmjkYXZXXxrLmppphp70I52NQolwkmqRKD6gLuWB eNtLX2DHgsJAfaCTK9cCBIJWVIVgzMKi/5bjtEl0bO5Jcd6A0ZacbKiknresjJ7q 5c3QA+Uw0CSZE41ShrtDThouyPhQa1ZZ6sIK6HGUGEYNiPWmOPOip0Bz8V8JmXPV sYyFgT9QmoleSPqzxJt7+16xOVukknmyEBMBzz8UFXv/4Pupoh8s6RF0H5yZwcDy imHoOaSZkHi4DU6sJE64o4dGP+/FcD0z4hCWAv2nFbaeWTY8wGs= -----END CERTIFICATE-----Generated at Wed Apr 23 11:12:11 2025 by rpki-client on console.sobornost.net