$ rpki-client -vvf repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft File: BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft (raw, json) Hash identifier: ecVCiiEowCJ2e4vEVN7JkE1TsJFlSmPvw7f2XSF7/lo= Subject key identifier: 7F:84:96:6B:F9:3F:AC:7C:6C:4F:48:2E:3F:52:F6:C5:DB:E1:49:B5 Authority key identifier: BB:8E:14:FC:AD:3A:F2:EF:30:A8:F5:69:63:39:D6:F7:DF:5D:73:5B Certificate issuer: /CN=BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B Certificate serial: 44953087C0C64EDF47E1FBC7E6EF5C9A7D43DA16 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft Manifest number: 01C8 Signing time: Sat 26 Apr 2025 09:51:53 +0000 Manifest this update: Sat 26 Apr 2025 09:46:53 +0000 Manifest next update: Tue 29 Apr 2025 20:38:53 +0000 Files and hashes: 1: BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.crl (hash: qXwCckH22wSOfZqf5vjlIHT7xYgHoDKr5M+TnUsKzpA=) 2: 3130332e3133352e3135322e302f32322d3234203d3e203338333230.roa (hash: YAXBiP1Tn35BvKpuF6xhlnff/qb6fyDlzJRGhETAkV8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.crl rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 09:52:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:95:30:87:c0:c6:4e:df:47:e1:fb:c7:e6:ef:5c:9a:7d:43:da:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B Validity Not Before: Apr 26 09:46:53 2025 GMT Not After : Apr 29 20:38:53 2025 GMT Subject: CN=7F84966BF93FAC7C6C4F482E3F52F6C5DBE149B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:6a:78:3e:81:4a:ae:0a:3d:45:62:d1:07:b6: 30:a0:0e:21:d4:73:c8:33:60:3e:51:c0:e5:5a:41: 83:82:5d:e3:86:96:f4:d0:30:c2:eb:53:57:70:2f: e7:12:2f:2f:5a:74:4e:53:2f:3c:3c:75:25:fd:d1: df:ba:5a:7e:7b:c1:9e:1d:63:b1:fd:31:91:72:12: 50:83:44:05:ea:a5:e9:13:e1:70:dd:7a:2d:ea:ef: e5:9e:3b:fc:b4:bd:8c:c9:88:c6:d9:de:d9:57:0f: a6:dc:7e:1b:08:2f:b3:62:d8:64:2d:0d:b4:04:25: 1d:41:a8:17:36:db:c2:49:cc:a8:01:d9:e7:7b:e8: fb:4d:73:a2:e3:c5:12:cd:43:fe:1a:88:8d:51:7b: 2d:cf:d6:5d:57:f5:af:2b:16:37:b3:7d:27:e9:ac: 37:11:34:40:10:b1:c9:26:3d:79:22:2a:2f:36:28: 34:a8:37:22:36:09:97:b6:6a:30:92:ad:e1:95:50: 7b:7b:9f:29:24:62:89:09:bb:73:d8:d6:1c:eb:01: 7e:9e:01:af:65:93:2a:40:23:ae:7b:89:80:56:ff: b1:a1:3c:7b:fe:dc:53:bb:1b:31:ec:c6:17:b7:3f: ba:a1:6e:b3:71:6f:da:10:2d:84:c2:a6:6c:1e:7c: 36:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:84:96:6B:F9:3F:AC:7C:6C:4F:48:2E:3F:52:F6:C5:DB:E1:49:B5 X509v3 Authority Key Identifier: keyid:BB:8E:14:FC:AD:3A:F2:EF:30:A8:F5:69:63:39:D6:F7:DF:5D:73:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:dd:4e:b3:fe:86:b4:4e:a3:b7:16:ce:73:14:5c:c9:50:1b: a8:84:93:dd:f3:81:d0:76:d3:c2:a3:86:8a:15:1b:1c:1d:99: 5f:67:1d:c3:97:fc:f7:30:b0:72:a7:a4:8f:c8:eb:37:83:56: c1:c2:91:36:2b:ec:35:a5:ad:db:ff:6f:86:96:6c:82:a7:20: 37:77:d3:84:f8:ea:65:00:d5:12:9f:c7:b4:c9:d5:25:04:09: 4c:74:9d:73:4a:03:8f:1f:22:f2:3f:e6:ec:5f:60:cb:f5:67: 0c:6d:2b:bd:c8:c4:23:a9:6c:cf:31:9c:82:43:e9:79:0d:69: 3f:b1:51:c1:68:0f:5c:e6:f7:b4:8f:41:95:51:87:28:2d:7d: 95:23:0e:28:7d:95:60:0b:13:46:9b:19:10:22:fb:eb:f0:78: 96:55:51:a7:89:66:d9:fd:aa:f4:ae:da:c9:40:03:7b:ce:bb: 4e:b9:14:e5:1a:38:13:9f:b0:30:84:ff:60:e9:2b:20:d8:84: 6e:a6:f5:90:46:8a:88:1a:5c:d7:a4:2f:93:f4:9e:10:10:c5: df:17:35:2f:06:71:0e:82:c7:a9:f2:f3:8c:43:a1:9f:59:c2: e4:25:64:20:f8:99:64:ae:8c:1f:17:0f:34:10:17:e7:e3:5f: 88:ac:be:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURJUwh8DGTt9H4fvH5u9cmn1D2hYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI4RTE0RkNBRDNBRjJFRjMwQThGNTY5NjMzOUQ2RjdE RjVENzM1QjAeFw0yNTA0MjYwOTQ2NTNaFw0yNTA0MjkyMDM4NTNaMDMxMTAvBgNV BAMTKDdGODQ5NjZCRjkzRkFDN0M2QzRGNDgyRTNGNTJGNkM1REJFMTQ5QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqang+gUquCj1FYtEHtjCgDiHU c8gzYD5RwOVaQYOCXeOGlvTQMMLrU1dwL+cSLy9adE5TLzw8dSX90d+6Wn57wZ4d Y7H9MZFyElCDRAXqpekT4XDdei3q7+WeO/y0vYzJiMbZ3tlXD6bcfhsIL7Ni2GQt DbQEJR1BqBc228JJzKgB2ed76PtNc6LjxRLNQ/4aiI1Rey3P1l1X9a8rFjezfSfp rDcRNEAQsckmPXkiKi82KDSoNyI2CZe2ajCSreGVUHt7nykkYokJu3PY1hzrAX6e Aa9lkypAI657iYBW/7GhPHv+3FO7GzHsxhe3P7qhbrNxb9oQLYTCpmwefDb5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf4SWa/k/rHxsT0guP1L2xdvhSbUwHwYDVR0j BBgwFoAUu44U/K068u8wqPVpYznW999dc1swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZGE0ZWY3MS1mMGUwLTQyNTItODE2MC01MDUzMjFmYTUwODkvMC9CQjhFMTRGQ0FE M0FGMkVGMzBBOEY1Njk2MzM5RDZGN0RGNUQ3MzVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkI4RTE0RkNBRDNBRjJFRjMwQThGNTY5NjMzOUQ2RjdERjVE NzM1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWRhNGVmNzEtZjBlMC00MjUyLTgx NjAtNTA1MzIxZmE1MDg5LzAvQkI4RTE0RkNBRDNBRjJFRjMwQThGNTY5NjMzOUQ2 RjdERjVENzM1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA3dTrP+hrROo7cWznMUXMlQG6iEk93zgdB2 08KjhooVGxwdmV9nHcOX/PcwsHKnpI/I6zeDVsHCkTYr7DWlrdv/b4aWbIKnIDd3 04T46mUA1RKfx7TJ1SUECUx0nXNKA48fIvI/5uxfYMv1ZwxtK73IxCOpbM8xnIJD 6XkNaT+xUcFoD1zm97SPQZVRhygtfZUjDih9lWALE0abGRAi++vweJZVUaeJZtn9 qvSu2slAA3vOu065FOUaOBOfsDCE/2DpKyDYhG6m9ZBGiogaXNekL5P0nhAQxd8X NS8GcQ6Cx6ny84xDoZ9ZwuQlZCD4mWSujB8XDzQQF+fjX4isvsw= -----END CERTIFICATE-----Generated at Sat Apr 26 11:16:28 2025 by rpki-client on console.sobornost.net