$ rpki-client -vvf repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.mft File: FF467F8613654288ED5F52ACB466941450FA5DF8.mft (raw, json) Hash identifier: J7BK3Qzhrf0ZsYWw4CN2PaQybKb7KtWuO6RUx/abdk8= Subject key identifier: F4:66:D6:82:80:72:27:5C:B6:25:78:9C:B2:5F:BC:C9:BF:2E:CD:EA Authority key identifier: FF:46:7F:86:13:65:42:88:ED:5F:52:AC:B4:66:94:14:50:FA:5D:F8 Certificate issuer: /CN=FF467F8613654288ED5F52ACB466941450FA5DF8 Certificate serial: 1E30D5A9EB249AFAF609173BF555FE641FFBDD78 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF467F8613654288ED5F52ACB466941450FA5DF8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.mft Manifest number: 01CA Signing time: Sat 26 Apr 2025 11:11:06 +0000 Manifest this update: Sat 26 Apr 2025 11:06:06 +0000 Manifest next update: Tue 29 Apr 2025 17:20:06 +0000 Files and hashes: 1: FF467F8613654288ED5F52ACB466941450FA5DF8.crl (hash: 2RxsDJra9dC5vZYnZIoUFhuUKYViqvR41MmZgukiqJk=) 2: 3130332e3136342e3137342e302f32332d3234203d3e203538383231.roa (hash: jzcCuMzgA2hFvogRgeLk2i1RvRvQmpOi1ucxBzHIX1A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.crl rsync://repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF467F8613654288ED5F52ACB466941450FA5DF8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 09:52:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:30:d5:a9:eb:24:9a:fa:f6:09:17:3b:f5:55:fe:64:1f:fb:dd:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF467F8613654288ED5F52ACB466941450FA5DF8 Validity Not Before: Apr 26 11:06:06 2025 GMT Not After : Apr 29 17:20:06 2025 GMT Subject: CN=F466D6828072275CB625789CB25FBCC9BF2ECDEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b6:98:d6:e9:90:c6:6f:ca:1a:c0:93:1a:93: e7:f5:84:f7:9b:c4:99:65:17:1c:28:dd:58:74:32: 52:0d:1a:10:e1:be:6f:5f:96:df:e7:10:19:f9:45: ca:73:e6:60:4e:1b:02:26:21:2b:87:2e:22:56:fc: da:9c:2e:af:ce:0f:15:64:6c:c0:59:cb:90:39:8e: 8c:8b:29:e1:4b:27:79:0d:56:10:92:36:e2:4a:e4: e9:14:a4:ec:78:78:f1:ba:ea:df:27:94:72:64:0c: c6:15:17:5d:a6:c2:e8:5a:c4:b7:da:a8:30:70:96: c3:9e:a4:f1:4f:01:64:94:8d:f9:c5:df:44:ed:e2: 74:40:c2:81:9e:be:79:2a:2d:ee:22:7c:9d:dd:86: 41:42:49:1b:5e:9c:e7:b3:fb:f2:1d:3f:bb:73:bb: b3:75:74:a8:ab:d4:97:4d:c8:9e:0e:e0:36:87:b5: 45:18:27:d4:cb:89:cc:a2:91:58:ca:f4:73:fe:50: 39:57:0f:a6:78:3d:f0:b9:2f:22:a1:26:48:64:53: 66:fc:b8:0c:bb:f6:ef:78:18:88:65:c2:d1:93:8b: a0:d4:5e:08:87:cb:6d:d4:97:85:bb:11:d3:97:f8: df:10:d6:15:aa:09:d2:52:44:2b:f5:09:5c:ad:df: 5d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:66:D6:82:80:72:27:5C:B6:25:78:9C:B2:5F:BC:C9:BF:2E:CD:EA X509v3 Authority Key Identifier: keyid:FF:46:7F:86:13:65:42:88:ED:5F:52:AC:B4:66:94:14:50:FA:5D:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF467F8613654288ED5F52ACB466941450FA5DF8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:27:88:89:59:21:f9:e5:28:fa:00:c8:36:74:e6:3e:69:b1: af:3a:ff:05:25:24:5b:15:97:a8:83:df:bf:9f:90:b6:97:07: cd:c0:7f:a2:b8:b4:dd:c6:d9:b1:89:d2:a3:e4:4f:98:91:0e: 37:a9:f4:23:4c:f3:83:be:1e:9c:fe:3f:9c:63:13:9b:c0:84: dd:00:5e:3d:25:83:cd:a3:74:95:53:fc:fa:df:66:74:71:9c: ca:0b:1f:7b:59:db:3a:c4:e5:60:4b:66:33:46:5a:80:35:44: 14:cc:41:f5:9d:d9:5d:a3:17:46:ec:95:69:fe:08:bc:8c:1d: cc:ac:8b:0e:10:23:d4:96:33:cb:d3:27:cf:3a:b2:0d:8c:e4: f2:cc:4b:ec:40:e4:7c:4c:39:14:6e:03:f2:97:26:6d:fb:16: cb:32:c9:28:56:d5:06:a1:fa:27:a8:f2:6c:94:65:fb:97:18: 38:ac:5b:99:26:85:4e:ce:19:b4:28:8f:a4:27:af:c0:47:86: d5:3b:2d:73:0b:7e:23:4a:51:23:f3:85:e9:eb:cc:08:52:97: 93:1a:b7:6f:97:63:79:b7:67:2c:c0:6c:08:48:b5:6d:04:33: b5:3f:30:f9:61:32:a1:58:17:03:d1:2c:3f:ea:30:c7:b6:5f: 7f:6c:43:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHjDVqeskmvr2CRc79VX+ZB/73XgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY0NjdGODYxMzY1NDI4OEVENUY1MkFDQjQ2Njk0MTQ1 MEZBNURGODAeFw0yNTA0MjYxMTA2MDZaFw0yNTA0MjkxNzIwMDZaMDMxMTAvBgNV BAMTKEY0NjZENjgyODA3MjI3NUNCNjI1Nzg5Q0IyNUZCQ0M5QkYyRUNERUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZtpjW6ZDGb8oawJMak+f1hPeb xJllFxwo3Vh0MlINGhDhvm9flt/nEBn5Rcpz5mBOGwImISuHLiJW/NqcLq/ODxVk bMBZy5A5joyLKeFLJ3kNVhCSNuJK5OkUpOx4ePG66t8nlHJkDMYVF12mwuhaxLfa qDBwlsOepPFPAWSUjfnF30Tt4nRAwoGevnkqLe4ifJ3dhkFCSRtenOez+/IdP7tz u7N1dKir1JdNyJ4O4DaHtUUYJ9TLicyikVjK9HP+UDlXD6Z4PfC5LyKhJkhkU2b8 uAy79u94GIhlwtGTi6DUXgiHy23Ul4W7EdOX+N8Q1hWqCdJSRCv1CVyt311dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9GbWgoByJ1y2JXicsl+8yb8uzeowHwYDVR0j BBgwFoAU/0Z/hhNlQojtX1KstGaUFFD6XfgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ODNhMWRiMi1iMTFlLTRjZGMtYTI1Yy0wZjEyNGNhZTcwZWUvMC9GRjQ2N0Y4NjEz NjU0Mjg4RUQ1RjUyQUNCNDY2OTQxNDUwRkE1REY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY0NjdGODYxMzY1NDI4OEVENUY1MkFDQjQ2Njk0MTQ1MEZB NURGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDgzYTFkYjItYjExZS00Y2RjLWEy NWMtMGYxMjRjYWU3MGVlLzAvRkY0NjdGODYxMzY1NDI4OEVENUY1MkFDQjQ2Njk0 MTQ1MEZBNURGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIEniIlZIfnlKPoAyDZ05j5psa86/wUlJFsV l6iD37+fkLaXB83Af6K4tN3G2bGJ0qPkT5iRDjep9CNM84O+Hpz+P5xjE5vAhN0A Xj0lg82jdJVT/PrfZnRxnMoLH3tZ2zrE5WBLZjNGWoA1RBTMQfWd2V2jF0bslWn+ CLyMHcysiw4QI9SWM8vTJ886sg2M5PLMS+xA5HxMORRuA/KXJm37FssyyShW1Qah +ieo8myUZfuXGDisW5kmhU7OGbQoj6Qnr8BHhtU7LXMLfiNKUSPzhenrzAhSl5Ma t2+XY3m3ZyzAbAhItW0EM7U/MPlhMqFYFwPRLD/qMMe2X39sQ9g= -----END CERTIFICATE-----Generated at Sat Apr 26 13:37:03 2025 by rpki-client on console.sobornost.net