$ rpki-client -vvf repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft File: 8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft (raw, json) Hash identifier: SfyxYPlD3MFS0zB0XsQXhBexjEpFxeU7HsIy3NSEoKE= Subject key identifier: 1D:DF:F8:9C:5C:49:4E:E1:7B:F0:16:6F:9C:99:FB:03:07:22:C2:5F Authority key identifier: 87:14:17:2B:5D:3F:C9:C3:6A:83:EB:A2:7A:B9:46:FC:69:A4:F8:21 Certificate issuer: /CN=8714172B5D3FC9C36A83EBA27AB946FC69A4F821 Certificate serial: 2CB98B1D7970B5EBBC4EC49BB0C2766E707B94A2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.cer Subject info access: rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft Manifest number: 01B3 Signing time: Wed 23 Apr 2025 21:02:16 +0000 Manifest this update: Wed 23 Apr 2025 20:57:16 +0000 Manifest next update: Sun 27 Apr 2025 00:10:16 +0000 Files and hashes: 1: 8714172B5D3FC9C36A83EBA27AB946FC69A4F821.crl (hash: +MK5AicB8EylRUe9tPbc5PEqNXCZR9dCCMJC6m4Uhuw=) 2: 3130332e32302e31362e302f32342d3234203d3e20313439393633.roa (hash: /oTxpeHjPJYhl6hW+GlWq1U1CfO/JzPNZlsGo0jZga0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.crl rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 00:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:b9:8b:1d:79:70:b5:eb:bc:4e:c4:9b:b0:c2:76:6e:70:7b:94:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8714172B5D3FC9C36A83EBA27AB946FC69A4F821 Validity Not Before: Apr 23 20:57:16 2025 GMT Not After : Apr 27 00:10:16 2025 GMT Subject: CN=1DDFF89C5C494EE17BF0166F9C99FB030722C25F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8b:0b:33:36:5b:69:54:fd:0b:96:87:dd:3f: 74:6c:6e:19:fd:04:4b:d9:0e:24:bd:af:60:26:1b: 58:39:df:f0:25:df:f1:67:04:1c:17:88:97:c8:66: b9:0d:5c:7f:82:11:69:e8:d1:0f:f6:e0:c9:e9:e4: 61:23:e0:00:60:9a:cd:08:a1:64:bd:24:21:38:80: e7:36:89:c6:2a:10:4c:95:2b:21:a4:9d:f3:64:86: 92:20:25:d9:08:84:d3:88:22:58:1e:0b:ac:aa:8b: 50:65:11:e6:04:3a:6b:70:54:a9:01:e4:72:81:e9: fe:f8:0e:27:26:8a:16:b0:64:48:7a:a0:20:61:55: 89:df:9a:2b:17:94:ca:63:40:88:c9:d3:2e:04:d7: c7:86:11:af:0d:f2:a6:fb:3e:7e:fc:34:98:f6:2d: c8:4b:65:1e:8f:15:01:d9:0a:45:3b:6a:2b:87:7e: 9c:0d:22:06:f1:f1:40:44:4b:c0:5f:04:e4:80:19: 06:72:6a:0c:cc:15:e9:66:69:05:7d:7a:9d:a8:35: e5:8d:2e:80:5e:76:1e:2d:46:1f:7c:14:8b:b7:92: 4c:07:4e:92:d0:c6:48:55:72:14:f0:c0:bf:c0:70: 94:8d:3c:26:56:a2:2d:f0:f9:5a:50:0f:2b:21:9c: 3d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:DF:F8:9C:5C:49:4E:E1:7B:F0:16:6F:9C:99:FB:03:07:22:C2:5F X509v3 Authority Key Identifier: keyid:87:14:17:2B:5D:3F:C9:C3:6A:83:EB:A2:7A:B9:46:FC:69:A4:F8:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:14:13:7e:5e:81:87:85:c3:ea:f2:7b:af:b7:47:80:60:54: 49:95:8b:48:e9:e3:5f:9a:42:e3:17:a3:b1:21:d0:c5:87:9e: fb:88:c7:70:83:52:8d:fc:50:b7:59:93:64:88:b0:40:24:e5: e9:cd:5f:a5:da:22:00:69:60:34:f9:b7:c9:37:05:84:10:57: 51:57:77:08:de:c7:80:f9:94:d7:e3:4d:9a:06:f2:b5:67:42: 01:81:91:d8:64:b5:03:ab:d3:70:3d:13:d7:dd:1a:37:2c:ef: 4a:3f:21:3f:c2:00:61:7e:b5:bd:ee:60:35:93:e6:f5:55:3b: c7:17:d4:06:3d:13:b4:29:7b:8a:61:e3:66:08:94:b7:54:2a: ac:b3:a8:83:f6:37:29:f3:76:57:1b:74:27:44:31:dc:d0:41: 15:2f:a3:cf:66:a0:42:33:3b:86:97:d6:85:41:38:62:ac:f4: 79:b6:6e:a6:94:5c:5a:4d:c4:21:f4:9e:15:88:bf:8a:b2:06: 20:f4:9c:ed:ae:25:df:76:6e:58:b2:a6:25:dc:16:80:5b:8a: 7a:8e:c3:2e:aa:5a:50:e9:c5:e8:e7:99:5e:79:3e:19:c1:11: 65:e9:1e:3a:dc:e5:e0:2c:29:8f:08:99:58:52:94:e9:8a:1d: 79:76:9e:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULLmLHXlwteu8TsSbsMJ2bnB7lKIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcxNDE3MkI1RDNGQzlDMzZBODNFQkEyN0FCOTQ2RkM2 OUE0RjgyMTAeFw0yNTA0MjMyMDU3MTZaFw0yNTA0MjcwMDEwMTZaMDMxMTAvBgNV BAMTKDFEREZGODlDNUM0OTRFRTE3QkYwMTY2RjlDOTlGQjAzMDcyMkMyNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEiwszNltpVP0LlofdP3Rsbhn9 BEvZDiS9r2AmG1g53/Al3/FnBBwXiJfIZrkNXH+CEWno0Q/24Mnp5GEj4ABgms0I oWS9JCE4gOc2icYqEEyVKyGknfNkhpIgJdkIhNOIIlgeC6yqi1BlEeYEOmtwVKkB 5HKB6f74DicmihawZEh6oCBhVYnfmisXlMpjQIjJ0y4E18eGEa8N8qb7Pn78NJj2 LchLZR6PFQHZCkU7aiuHfpwNIgbx8UBES8BfBOSAGQZyagzMFelmaQV9ep2oNeWN LoBedh4tRh98FIu3kkwHTpLQxkhVchTwwL/AcJSNPCZWoi3w+VpQDyshnD1vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHd/4nFxJTuF78BZvnJn7Awciwl8wHwYDVR0j BBgwFoAUhxQXK10/ycNqg+uierlG/Gmk+CEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NDNkYjdkMi1iM2ZkLTQyMTQtYjZhNC1kMDE2MmY5NWU3MmUvMC84NzE0MTcyQjVE M0ZDOUMzNkE4M0VCQTI3QUI5NDZGQzY5QTRGODIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODcxNDE3MkI1RDNGQzlDMzZBODNFQkEyN0FCOTQ2RkM2OUE0 RjgyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjQzZGI3ZDItYjNmZC00MjE0LWI2 YTQtZDAxNjJmOTVlNzJlLzAvODcxNDE3MkI1RDNGQzlDMzZBODNFQkEyN0FCOTQ2 RkM2OUE0RjgyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIIUE35egYeFw+rye6+3R4BgVEmVi0jp41+a QuMXo7Eh0MWHnvuIx3CDUo38ULdZk2SIsEAk5enNX6XaIgBpYDT5t8k3BYQQV1FX dwjex4D5lNfjTZoG8rVnQgGBkdhktQOr03A9E9fdGjcs70o/IT/CAGF+tb3uYDWT 5vVVO8cX1AY9E7Qpe4ph42YIlLdUKqyzqIP2NynzdlcbdCdEMdzQQRUvo89moEIz O4aX1oVBOGKs9Hm2bqaUXFpNxCH0nhWIv4qyBiD0nO2uJd92bliypiXcFoBbinqO wy6qWlDpxejnmV55PhnBEWXpHjrc5eAsKY8ImVhSlOmKHXl2nsE= -----END CERTIFICATE-----Generated at Thu Apr 24 01:45:11 2025 by rpki-client on console.sobornost.net