$ rpki-client -vvf repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft File: BF3B675AEBEE64D00B323056545D1F630F1C489E.mft (raw, json) Hash identifier: zAsNejXKL+kssmuXu3C3cwBwkzgtVsccsmy7kgr9e5w= Subject key identifier: DB:BA:8E:D7:F1:38:E5:FE:AD:25:20:75:92:A7:92:E0:71:2E:AA:04 Authority key identifier: BF:3B:67:5A:EB:EE:64:D0:0B:32:30:56:54:5D:1F:63:0F:1C:48:9E Certificate issuer: /CN=BF3B675AEBEE64D00B323056545D1F630F1C489E Certificate serial: 372F884CF4904F55DC3D79D35B447AD3F138EC68 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft Manifest number: 04CA Signing time: Fri 25 Apr 2025 00:00:46 +0000 Manifest this update: Thu 24 Apr 2025 23:55:46 +0000 Manifest next update: Mon 28 Apr 2025 04:22:46 +0000 Files and hashes: 1: 3131362e3231332e34382e302f32302d3234203d3e2039373835.roa (hash: Nk5ck1AseyuNcjCEwHjdfNpidrWP95VM7DoxprfK5Rc=) 2: 323430333a373230303a3a2f33322d3438203d3e2039373835.roa (hash: WEOUyrjdm5MHLBlul4TfoQsPYZiEC6VkTMRCL8M+beg=) 3: 3230322e3135312e382e302f32322d3234203d3e2039373835.roa (hash: 2eHMbsun56NqfmKlpFAG+zy53c2fesECLK8xZvpMLw8=) 4: 3230322e36392e39362e302f32302d3234203d3e2039373835.roa (hash: A23I7fqnPXhBPRczLk5QNBh0X32BPlyjicsamPzFLkk=) 5: 3232302e3135372e39362e302f32302d3234203d3e2039373835.roa (hash: v/nBtfCY9D5aSZNWsWdccc/TtDC4JCIjqRl1Ud4KShs=) 6: 3230322e36392e39362e302f32302d3234203d3e20313331363931.roa (hash: /FTJH83n1O+sA+h8d06AOroKOys3mJRpg/2stcCOsIU=) 7: 3232332e3136342e302e302f31362d3234203d3e2039373835.roa (hash: LrjOipA7XUKqMLrdnSSirCwj9idRRnzkNFyMQLbNrPk=) 8: 3131362e3231332e34382e302f32302d3234203d3e20313331363931.roa (hash: PtxhHnbHahSgXHX4WjRf6JTV3tPCUK/OtTNHPmWKrxo=) 9: BF3B675AEBEE64D00B323056545D1F630F1C489E.crl (hash: UvO7a8Wb20/7sqYKOR71hRnOXWL/Dr7ZX8EauEpQXU0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.crl rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:2f:88:4c:f4:90:4f:55:dc:3d:79:d3:5b:44:7a:d3:f1:38:ec:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF3B675AEBEE64D00B323056545D1F630F1C489E Validity Not Before: Apr 24 23:55:46 2025 GMT Not After : Apr 28 04:22:46 2025 GMT Subject: CN=DBBA8ED7F138E5FEAD25207592A792E0712EAA04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:e2:08:ed:54:80:b5:7a:73:3f:89:b1:7d:fa: fb:31:a0:fa:89:0a:27:16:25:c6:20:33:37:8f:6b: 1c:a0:fe:30:55:bc:e1:31:c3:48:37:f3:b1:da:3d: 9c:ea:4e:df:10:2e:fe:06:3f:fa:6f:19:3b:7a:62: dc:06:25:1c:da:7a:81:eb:6d:e2:f5:de:3d:be:58: 04:70:d8:0e:9c:69:b3:55:74:5a:64:d6:57:cc:f7: 80:39:c4:66:99:7e:ca:26:0d:29:b4:d9:96:37:ac: 76:18:e2:67:1a:eb:dd:70:c7:df:5b:e3:f5:54:58: 86:4a:5b:08:e4:c5:41:6b:98:59:c0:fb:11:3a:59: 17:85:6a:9f:d7:2e:5d:40:ff:f6:a1:d8:cf:ec:a5: c6:19:2e:1f:04:b4:ac:a5:7d:f3:5f:bd:db:57:fb: a7:65:49:73:9c:b0:b0:34:c8:50:48:f2:5f:23:01: 7a:2b:40:a6:12:db:a4:df:cd:b1:2e:ad:95:a4:13: f8:64:2a:21:d3:cc:ae:60:f3:d0:3c:fd:71:90:87: af:03:22:b8:fc:80:c3:96:ea:3a:77:dc:f4:fd:fe: e2:16:1b:f8:02:88:a5:b1:c1:44:4f:0c:54:3c:65: ce:49:9d:2c:30:ac:bf:04:19:a2:29:1c:66:f4:f5: c1:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:BA:8E:D7:F1:38:E5:FE:AD:25:20:75:92:A7:92:E0:71:2E:AA:04 X509v3 Authority Key Identifier: keyid:BF:3B:67:5A:EB:EE:64:D0:0B:32:30:56:54:5D:1F:63:0F:1C:48:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:e6:26:5b:7e:73:15:85:8a:24:4b:12:00:c8:a6:a3:10:11: 58:21:82:b1:05:d3:b2:9c:13:20:62:c9:85:92:34:8e:57:cb: 4b:e2:c3:7e:86:3f:2a:2b:92:41:27:ec:a7:96:5e:87:94:3c: 19:c6:ec:55:a2:74:6b:be:3b:a8:ca:82:36:27:72:af:bd:e2: 93:9d:26:22:76:af:6b:4a:ec:57:84:af:51:34:38:5e:7a:b0: f2:93:f2:29:0c:83:3e:90:cd:d5:b5:bf:97:70:47:1f:c9:04: 9b:50:2d:36:d5:fd:d9:8d:60:c5:99:a5:0e:26:5d:44:89:82: 3d:02:1e:39:af:d9:bc:09:8e:3d:cf:bd:aa:71:62:a5:aa:20: 02:4f:3e:43:d6:03:03:1e:ca:2a:32:e5:20:d4:5e:9a:13:50: 16:db:dd:d1:41:01:8d:85:6e:65:5c:96:dc:6d:c0:05:d2:cc: f6:9e:b5:57:f8:33:77:bc:bc:62:9c:1e:c9:70:7d:49:52:7f: 36:e0:02:5d:4a:2e:4f:6c:09:7a:9b:62:1e:2b:71:e1:cb:b0: 7f:0e:6e:86:87:54:f0:c3:8d:ad:19:3f:a2:88:75:96:8d:7f: dc:9d:8a:c3:38:af:9c:7b:71:f4:26:80:4d:e1:85:05:c3:ed: 3b:99:46:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNy+ITPSQT1XcPXnTW0R60/E47GgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkYzQjY3NUFFQkVFNjREMDBCMzIzMDU2NTQ1RDFGNjMw RjFDNDg5RTAeFw0yNTA0MjQyMzU1NDZaFw0yNTA0MjgwNDIyNDZaMDMxMTAvBgNV BAMTKERCQkE4RUQ3RjEzOEU1RkVBRDI1MjA3NTkyQTc5MkUwNzEyRUFBMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj4gjtVIC1enM/ibF9+vsxoPqJ CicWJcYgMzePaxyg/jBVvOExw0g387HaPZzqTt8QLv4GP/pvGTt6YtwGJRzaeoHr beL13j2+WARw2A6cabNVdFpk1lfM94A5xGaZfsomDSm02ZY3rHYY4mca691wx99b 4/VUWIZKWwjkxUFrmFnA+xE6WReFap/XLl1A//ah2M/spcYZLh8EtKylffNfvdtX +6dlSXOcsLA0yFBI8l8jAXorQKYS26TfzbEurZWkE/hkKiHTzK5g89A8/XGQh68D Irj8gMOW6jp33PT9/uIWG/gCiKWxwURPDFQ8Zc5JnSwwrL8EGaIpHGb09cHrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU27qO1/E45f6tJSB1kqeS4HEuqgQwHwYDVR0j BBgwFoAUvztnWuvuZNALMjBWVF0fYw8cSJ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OTBjOTAwOS1hZDUzLTRmYTYtYTE4My0zNGIzNDU3YmVhMDMvMC9CRjNCNjc1QUVC RUU2NEQwMEIzMjMwNTY1NDVEMUY2MzBGMUM0ODlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkYzQjY3NUFFQkVFNjREMDBCMzIzMDU2NTQ1RDFGNjMwRjFD NDg5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjkwYzkwMDktYWQ1My00ZmE2LWEx ODMtMzRiMzQ1N2JlYTAzLzAvQkYzQjY3NUFFQkVFNjREMDBCMzIzMDU2NTQ1RDFG NjMwRjFDNDg5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFHmJlt+cxWFiiRLEgDIpqMQEVghgrEF07Kc EyBiyYWSNI5Xy0viw36GPyorkkEn7KeWXoeUPBnG7FWidGu+O6jKgjYncq+94pOd JiJ2r2tK7FeEr1E0OF56sPKT8ikMgz6QzdW1v5dwRx/JBJtQLTbV/dmNYMWZpQ4m XUSJgj0CHjmv2bwJjj3PvapxYqWqIAJPPkPWAwMeyioy5SDUXpoTUBbb3dFBAY2F bmVcltxtwAXSzPaetVf4M3e8vGKcHslwfUlSfzbgAl1KLk9sCXqbYh4rceHLsH8O boaHVPDDja0ZP6KIdZaNf9ydisM4r5x7cfQmgE3hhQXD7TuZRqg= -----END CERTIFICATE-----Generated at Fri Apr 25 03:46:17 2025 by rpki-client on console.sobornost.net