$ rpki-client -vvf repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.mft File: FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.mft (raw, json) Hash identifier: zv8Ujc4t6WJMRWwrKuA/1WeAs5rfzShGMg15neYogeU= Subject key identifier: 21:BC:5C:DD:45:14:46:CC:E5:3C:30:32:10:AD:3B:9A:B5:3F:65:EE Authority key identifier: FC:9D:A1:A7:62:5B:27:FD:B4:66:B1:D8:A6:90:37:7E:4C:7B:CE:72 Certificate issuer: /CN=FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72 Certificate serial: 1DF46B4FFF88FB3566823393A3BC363BD399E02C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.mft Manifest number: 04C8 Signing time: Thu 24 Apr 2025 18:01:07 +0000 Manifest this update: Thu 24 Apr 2025 17:56:07 +0000 Manifest next update: Mon 28 Apr 2025 02:21:07 +0000 Files and hashes: 1: FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.crl (hash: +WeV3e6KxEEi7n+j+7dZ/a2Fk1JbQ5RxGBZx5ZN6si4=) 2: 3130332e33312e3130392e302f32342d3234203d3e20313339343430.roa (hash: iRZXCDlLv0igia0Lk/WxM1oJP6cq9J+UPskJIy0xfv8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.crl rsync://repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:f4:6b:4f:ff:88:fb:35:66:82:33:93:a3:bc:36:3b:d3:99:e0:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72 Validity Not Before: Apr 24 17:56:07 2025 GMT Not After : Apr 28 02:21:07 2025 GMT Subject: CN=21BC5CDD451446CCE53C303210AD3B9AB53F65EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:0f:87:67:bc:b0:83:b4:35:f9:52:d3:02:ce: ba:a6:fd:c5:5d:dc:40:e2:cd:1e:a7:58:5e:96:37: 48:87:b9:15:07:1b:ef:6e:4e:b9:2c:e7:35:c5:de: ab:0a:c9:d4:65:29:3d:82:46:27:97:d6:93:0d:69: 9e:10:28:4f:f5:30:8a:c0:a2:78:b6:f0:52:5c:19: 1b:0d:14:fe:cc:8e:11:04:4f:4e:65:c5:b8:f4:a6: 64:e8:81:b0:00:ce:0e:db:21:79:cd:3f:d6:0b:66: d1:a4:e8:b2:fe:88:8c:39:7f:dd:1f:79:1b:be:e7: bd:25:dc:a8:c7:3e:ca:ea:f2:b7:c8:b8:98:13:17: f0:bb:98:1f:cd:6c:54:f0:73:71:3b:7c:dd:15:17: 00:77:1a:d8:a4:9f:79:bc:86:cb:fd:e5:54:70:0b: 73:ef:97:11:38:d8:9f:d6:d7:ca:76:87:5e:16:70: 1d:45:36:78:40:ee:73:fd:9a:45:92:67:41:31:bf: 80:84:47:c9:ac:22:e2:95:cf:35:fa:d2:1b:7a:27: f4:7e:1e:35:6a:20:6b:92:b3:47:d0:50:f2:61:76: ba:e0:7d:5e:ed:c2:c7:2d:9d:70:33:1a:98:f8:f4: 21:e4:17:22:7b:15:06:f5:5e:89:94:0c:c4:2d:41: ae:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:BC:5C:DD:45:14:46:CC:E5:3C:30:32:10:AD:3B:9A:B5:3F:65:EE X509v3 Authority Key Identifier: keyid:FC:9D:A1:A7:62:5B:27:FD:B4:66:B1:D8:A6:90:37:7E:4C:7B:CE:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:02:be:8c:d6:5d:08:c3:7f:9f:5c:9d:45:dd:74:d4:eb:6a: 49:6b:9f:8e:57:0e:c0:5b:a8:71:b6:2f:f6:e7:86:ac:85:3a: b8:b9:ab:45:cc:26:51:e7:71:de:3c:e0:cc:71:65:f3:28:75: 5f:ee:1b:71:1c:86:c6:a4:c6:f8:90:47:cb:40:bc:61:b3:44: 19:bf:c9:7f:fd:b7:81:03:0e:69:9f:5b:a1:31:8c:d1:10:18: 9b:ab:ee:d8:8a:73:e9:55:37:54:10:72:f1:4f:20:20:fb:35: 94:3c:9a:7f:be:87:49:a0:94:2d:0e:a6:fc:b5:4c:a5:7e:15: e8:4b:60:03:67:75:3f:c1:23:0e:94:67:6b:87:86:6f:63:69: 1d:b0:0f:a6:ff:53:ce:d2:ac:77:7f:f6:ed:50:8d:ca:81:d3: b5:2c:f7:a6:26:2b:07:81:31:44:71:90:e6:18:18:0a:2e:f7: f5:6c:51:d3:d4:7d:78:5b:0b:28:0f:f8:28:2c:26:ed:54:74: ea:51:f1:cd:c6:47:bd:8a:46:3d:fb:95:1f:a3:2b:5f:60:7f: 4b:5e:60:20:23:b1:1c:3f:f5:be:54:af:08:cb:3e:9b:0f:6a: b8:ca:1e:8b:08:27:4e:55:eb:41:f9:ca:89:50:53:04:de:52: 1e:38:55:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHfRrT/+I+zVmgjOTo7w2O9OZ4CwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkM5REExQTc2MjVCMjdGREI0NjZCMUQ4QTY5MDM3N0U0 QzdCQ0U3MjAeFw0yNTA0MjQxNzU2MDdaFw0yNTA0MjgwMjIxMDdaMDMxMTAvBgNV BAMTKDIxQkM1Q0RENDUxNDQ2Q0NFNTNDMzAzMjEwQUQzQjlBQjUzRjY1RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaD4dnvLCDtDX5UtMCzrqm/cVd 3EDizR6nWF6WN0iHuRUHG+9uTrks5zXF3qsKydRlKT2CRieX1pMNaZ4QKE/1MIrA oni28FJcGRsNFP7MjhEET05lxbj0pmTogbAAzg7bIXnNP9YLZtGk6LL+iIw5f90f eRu+570l3KjHPsrq8rfIuJgTF/C7mB/NbFTwc3E7fN0VFwB3Gtikn3m8hsv95VRw C3PvlxE42J/W18p2h14WcB1FNnhA7nP9mkWSZ0Exv4CER8msIuKVzzX60ht6J/R+ HjVqIGuSs0fQUPJhdrrgfV7twsctnXAzGpj49CHkFyJ7FQb1XomUDMQtQa7BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIbxc3UUURszlPDAyEK07mrU/Ze4wHwYDVR0j BBgwFoAU/J2hp2JbJ/20ZrHYppA3fkx7znIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZjZhYTMxYS1kZDBkLTRjMTAtYjVkZC1iMWE4M2ZhNTc3NjMvMC9GQzlEQTFBNzYy NUIyN0ZEQjQ2NkIxRDhBNjkwMzc3RTRDN0JDRTcyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkM5REExQTc2MjVCMjdGREI0NjZCMUQ4QTY5MDM3N0U0QzdC Q0U3Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGY2YWEzMWEtZGQwZC00YzEwLWI1 ZGQtYjFhODNmYTU3NzYzLzAvRkM5REExQTc2MjVCMjdGREI0NjZCMUQ4QTY5MDM3 N0U0QzdCQ0U3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHUCvozWXQjDf59cnUXddNTraklrn45XDsBb qHG2L/bnhqyFOri5q0XMJlHncd484MxxZfModV/uG3EchsakxviQR8tAvGGzRBm/ yX/9t4EDDmmfW6ExjNEQGJur7tiKc+lVN1QQcvFPICD7NZQ8mn++h0mglC0Opvy1 TKV+FehLYANndT/BIw6UZ2uHhm9jaR2wD6b/U87SrHd/9u1QjcqB07Us96YmKweB MURxkOYYGAou9/VsUdPUfXhbCygP+CgsJu1UdOpR8c3GR72KRj37lR+jK19gf0te YCAjsRw/9b5UrwjLPpsParjKHosIJ05V60H5yolQUwTeUh44VZY= -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:11 2025 by rpki-client on console.sobornost.net