$ rpki-client -vvf repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft File: 89402655017312B8CFCB367BA82966AA21E11F90.mft (raw, json) Hash identifier: cF30O4QrHrPUPHsczGmx2qI6ug43bWKPPvvm8TNv4LU= Subject key identifier: 23:2B:9F:00:8B:EE:87:5A:A9:DF:0A:FF:5B:67:F1:5A:E0:68:E5:F4 Authority key identifier: 89:40:26:55:01:73:12:B8:CF:CB:36:7B:A8:29:66:AA:21:E1:1F:90 Certificate issuer: /CN=89402655017312B8CFCB367BA82966AA21E11F90 Certificate serial: 556D886A1787A987396FCF6005917B52553ECF11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89402655017312B8CFCB367BA82966AA21E11F90.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft Manifest number: 04A0 Signing time: Fri 25 Apr 2025 16:51:48 +0000 Manifest this update: Fri 25 Apr 2025 16:46:48 +0000 Manifest next update: Mon 28 Apr 2025 23:17:48 +0000 Files and hashes: 1: 3130332e3231332e3132382e302f32322d3234203d3e203137363730.roa (hash: FYvSh1st1IicJh9tmsJCC36iwumwIFXZHMkoJwqA8Qw=) 2: 89402655017312B8CFCB367BA82966AA21E11F90.crl (hash: psogaqeMexPXUUNxqhoWqUzc/hV5d+g/NxfSGCYC5qc=) 3: 3131302e35302e38302e302f32312d3234203d3e203137363730.roa (hash: PwE45jFMLVz2aKNWwjQc8HudCo64xhteJbVEjdFpgd8=) 4: 3132332e3235332e3233322e302f32322d3234203d3e203137363730.roa (hash: 3kwk4UMF9iNYpMSf21W/eUwvYsmaPApbmHcViGehMaU=) 5: 323430303a313838303a3a2f33322d3438203d3e203137363730.roa (hash: tPobItRGD2Vk5fK4/Oz2ojiatmX4ZdcXGBSqbeWy7Ng=) 6: 323430343a623238303a3a2f33322d3438203d3e203137363730.roa (hash: aiifXcdy2AXRocJRKbN8Cd9UOvAE9erAu5vyFTkl88c=) 7: 3230322e3134372e3139322e302f32302d3234203d3e203137363730.roa (hash: DO7ogbI2UpcST5Do0xfAryknKNzHKoFL4YPFX4NOgG8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.crl rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89402655017312B8CFCB367BA82966AA21E11F90.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 23:17:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:6d:88:6a:17:87:a9:87:39:6f:cf:60:05:91:7b:52:55:3e:cf:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89402655017312B8CFCB367BA82966AA21E11F90 Validity Not Before: Apr 25 16:46:48 2025 GMT Not After : Apr 28 23:17:48 2025 GMT Subject: CN=232B9F008BEE875AA9DF0AFF5B67F15AE068E5F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:35:0a:8a:1a:a7:b0:00:8b:4a:f1:d8:ee:17: 12:66:d7:03:14:8c:b7:52:e6:5c:5d:2a:cc:f1:b0: 55:af:b0:fc:49:d7:cb:ad:54:32:59:cd:1f:2f:b2: 97:85:15:19:aa:7b:ec:bc:6e:7f:50:06:c3:f7:f6: b1:ca:c4:90:50:01:bb:fd:3e:7f:85:1e:62:c8:16: 0c:fc:ba:19:62:5b:c6:45:25:c6:21:06:56:db:c3: ff:8a:b8:ba:c8:ea:05:04:0e:18:74:c3:f9:13:a8: f8:cf:9e:48:c0:0b:b5:d1:42:e3:a5:8c:b8:71:ff: 9e:77:e8:94:bb:0d:48:f2:95:43:0c:c3:8b:c3:ff: 97:0c:c6:67:97:46:2f:ed:9b:9d:cf:e5:ba:db:6c: bf:67:42:b2:c1:e3:9b:eb:8a:79:b5:98:16:86:45: ae:cd:d5:82:bd:2d:98:bb:ea:0e:a8:49:48:8e:d1: bb:9d:db:34:d5:ec:b8:83:96:b1:8e:6d:6b:04:bf: a2:2a:d3:03:ec:1f:6f:23:a0:61:df:3e:47:18:4d: b4:18:1d:f1:e0:53:9f:c2:da:6c:d8:c7:52:19:1f: 16:c2:53:0a:42:dd:99:ed:d5:41:b6:eb:b4:0d:d3: 2a:e1:2f:f2:f4:fe:b1:c1:f3:74:22:7f:40:f2:78: 04:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:2B:9F:00:8B:EE:87:5A:A9:DF:0A:FF:5B:67:F1:5A:E0:68:E5:F4 X509v3 Authority Key Identifier: keyid:89:40:26:55:01:73:12:B8:CF:CB:36:7B:A8:29:66:AA:21:E1:1F:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89402655017312B8CFCB367BA82966AA21E11F90.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:5c:4b:9a:13:60:49:d6:f3:0e:5e:71:32:a5:15:4f:db:d7: 03:65:96:24:6e:58:45:86:83:1d:20:4d:00:a9:62:49:81:28: 1b:04:9e:67:05:f1:6a:0c:64:08:34:0f:8d:bb:81:ec:79:60: ce:96:7f:43:71:c0:07:58:1c:a7:df:73:a4:7e:57:5d:03:2e: 39:fe:d3:d9:19:e0:9c:a4:1d:ca:6b:e5:29:2e:39:d5:e7:ad: 1e:9f:50:8d:c6:46:53:c7:48:e0:8a:a7:08:78:14:f3:4a:2c: 31:55:18:ca:ad:9c:e7:9c:b8:b6:ca:3e:34:d8:e0:db:90:f2: 1e:d6:a3:30:d2:e0:93:f3:a7:58:9c:b6:61:a3:50:ac:d4:f0: 93:42:20:a2:ed:6d:23:35:ea:47:80:b5:7e:3e:a7:95:03:67: a7:7c:ed:4c:2a:c1:85:65:41:4d:c9:d9:60:37:7d:41:74:6e: c3:74:82:e7:99:7f:bc:52:93:2e:b9:93:8a:ae:4f:49:1f:83: 33:b1:75:60:ca:ba:fe:6a:f5:82:43:62:43:56:fd:32:be:3b: d4:ec:72:c4:60:3e:c5:5b:dc:37:7a:7f:3b:d2:6c:c0:be:03: d8:db:78:17:16:c8:34:57:af:f3:4a:ec:b1:82:fa:16:a5:b1: d3:9c:d2:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVW2IaheHqYc5b89gBZF7UlU+zxEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk0MDI2NTUwMTczMTJCOENGQ0IzNjdCQTgyOTY2QUEy MUUxMUY5MDAeFw0yNTA0MjUxNjQ2NDhaFw0yNTA0MjgyMzE3NDhaMDMxMTAvBgNV BAMTKDIzMkI5RjAwOEJFRTg3NUFBOURGMEFGRjVCNjdGMTVBRTA2OEU1RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCNQqKGqewAItK8djuFxJm1wMU jLdS5lxdKszxsFWvsPxJ18utVDJZzR8vspeFFRmqe+y8bn9QBsP39rHKxJBQAbv9 Pn+FHmLIFgz8uhliW8ZFJcYhBlbbw/+KuLrI6gUEDhh0w/kTqPjPnkjAC7XRQuOl jLhx/5536JS7DUjylUMMw4vD/5cMxmeXRi/tm53P5brbbL9nQrLB45vrinm1mBaG Ra7N1YK9LZi76g6oSUiO0bud2zTV7LiDlrGObWsEv6Iq0wPsH28joGHfPkcYTbQY HfHgU5/C2mzYx1IZHxbCUwpC3Znt1UG267QN0yrhL/L0/rHB83Qif0DyeATvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIyufAIvuh1qp3wr/W2fxWuBo5fQwHwYDVR0j BBgwFoAUiUAmVQFzErjPyzZ7qClmqiHhH5AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZmIxYzgwYy00ZDZjLTQ0MDgtODk0Ny1mYmE2ZTdjNGJlN2MvMC84OTQwMjY1NTAx NzMxMkI4Q0ZDQjM2N0JBODI5NjZBQTIxRTExRjkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODk0MDI2NTUwMTczMTJCOENGQ0IzNjdCQTgyOTY2QUEyMUUx MUY5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWZiMWM4MGMtNGQ2Yy00NDA4LTg5 NDctZmJhNmU3YzRiZTdjLzAvODk0MDI2NTUwMTczMTJCOENGQ0IzNjdCQTgyOTY2 QUEyMUUxMUY5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABlcS5oTYEnW8w5ecTKlFU/b1wNlliRuWEWG gx0gTQCpYkmBKBsEnmcF8WoMZAg0D427gex5YM6Wf0NxwAdYHKffc6R+V10DLjn+ 09kZ4JykHcpr5SkuOdXnrR6fUI3GRlPHSOCKpwh4FPNKLDFVGMqtnOecuLbKPjTY 4NuQ8h7WozDS4JPzp1ictmGjUKzU8JNCIKLtbSM16keAtX4+p5UDZ6d87UwqwYVl QU3J2WA3fUF0bsN0gueZf7xSky65k4quT0kfgzOxdWDKuv5q9YJDYkNW/TK+O9Ts csRgPsVb3Dd6fzvSbMC+A9jbeBcWyDRXr/NK7LGC+halsdOc0j8= -----END CERTIFICATE-----Generated at Fri Apr 25 19:23:49 2025 by rpki-client on console.sobornost.net