$ rpki-client -vvf repo-rpki.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/871B4235DFC56C482416E7BBA192562092FFE055.mft File: 871B4235DFC56C482416E7BBA192562092FFE055.mft (raw, json) Hash identifier: d5lXnTK0bXX91rVO/x2GbqnO0Bazf0RKxAXKWd8YIYo= Subject key identifier: CB:8F:2E:FF:2C:23:52:FA:F8:62:46:F8:B8:87:19:64:3F:B5:41:45 Authority key identifier: 87:1B:42:35:DF:C5:6C:48:24:16:E7:BB:A1:92:56:20:92:FF:E0:55 Certificate issuer: /CN=871B4235DFC56C482416E7BBA192562092FFE055 Certificate serial: 160DF02E255D160BF07C8B968D6C4911C5201C77 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/871B4235DFC56C482416E7BBA192562092FFE055.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/871B4235DFC56C482416E7BBA192562092FFE055.mft Manifest number: B3 Signing time: Wed 23 Apr 2025 18:02:06 +0000 Manifest this update: Wed 23 Apr 2025 17:57:06 +0000 Manifest next update: Sat 26 Apr 2025 18:55:06 +0000 Files and hashes: 1: 3135372e32302e39322e302f32332d3234203d3e20313532343037.roa (hash: dOMygz5zltbqlA4IY/6P2zi8X+0Vf9OQi3HjL4HaSVo=) 2: 871B4235DFC56C482416E7BBA192562092FFE055.crl (hash: rSKjk1EE0jlpWDpvsAtO/gzMpFjBH7pgIEnBWArlRD4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/871B4235DFC56C482416E7BBA192562092FFE055.crl rsync://repo-rpki.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/871B4235DFC56C482416E7BBA192562092FFE055.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/871B4235DFC56C482416E7BBA192562092FFE055.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 18:38:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:0d:f0:2e:25:5d:16:0b:f0:7c:8b:96:8d:6c:49:11:c5:20:1c:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871B4235DFC56C482416E7BBA192562092FFE055 Validity Not Before: Apr 23 17:57:06 2025 GMT Not After : Apr 26 18:55:06 2025 GMT Subject: CN=CB8F2EFF2C2352FAF86246F8B88719643FB54145 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:64:46:70:2a:b0:11:3a:76:24:12:ad:72:db: 02:d7:60:cd:cd:5a:18:49:17:28:3b:d9:10:40:1a: b6:9f:82:59:ef:52:cb:6a:3d:b3:dc:77:d7:38:ba: 47:bc:2e:ed:eb:9e:c0:18:44:24:bc:cd:3a:40:3f: a8:29:af:62:b8:db:56:3c:8b:b7:71:e0:fb:fb:76: 94:28:6c:ef:bb:e0:4e:4c:75:2e:43:bd:0d:30:85: 9d:29:a0:df:88:56:1b:f7:41:02:03:43:74:29:ca: a1:01:3e:ed:a4:7a:01:00:cf:11:03:6c:73:35:9a: 1a:bb:71:8a:b9:3a:2d:3b:b5:bc:53:9e:c3:43:a5: 5b:95:3c:66:95:bd:f0:66:70:86:28:b2:7a:b3:03: c6:84:4e:c1:bc:a5:23:3f:8e:c2:30:f7:a6:a1:4e: 76:a1:2d:49:a0:bc:7d:40:b4:1f:c8:3c:96:dc:11: a0:0f:a8:73:23:51:7f:55:9e:12:af:44:ac:e8:9d: 20:b6:6c:ba:82:4d:ae:4c:e4:62:6b:f6:87:b8:ee: 65:05:78:95:83:5d:45:6c:62:14:63:03:ad:d8:37: a3:e3:41:69:15:12:23:67:38:f0:2f:67:7e:5d:c6: 55:2c:c1:63:db:67:ae:da:20:7f:9e:42:b5:e7:d2: 8f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:8F:2E:FF:2C:23:52:FA:F8:62:46:F8:B8:87:19:64:3F:B5:41:45 X509v3 Authority Key Identifier: keyid:87:1B:42:35:DF:C5:6C:48:24:16:E7:BB:A1:92:56:20:92:FF:E0:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/871B4235DFC56C482416E7BBA192562092FFE055.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/871B4235DFC56C482416E7BBA192562092FFE055.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/871B4235DFC56C482416E7BBA192562092FFE055.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:71:16:9a:28:4d:a2:6c:91:ee:37:cb:a4:10:e6:9d:eb:da: e5:8b:8c:3a:c9:38:b0:c8:4e:d5:81:4d:0d:a7:e3:67:27:b9: 31:e1:76:d1:ce:b6:9f:aa:59:12:d8:2d:4f:ee:bf:37:71:de: ff:6d:cf:31:79:0a:8c:1c:ca:5d:36:1f:b8:ef:9f:9a:bc:ff: 47:56:b7:8a:55:a6:f3:a9:41:6b:aa:66:97:f4:6a:7c:fc:f6: af:90:8b:34:01:7f:c0:a3:f7:db:71:83:21:15:8e:90:a7:8f: 24:a8:ae:fb:d7:4d:1f:fe:c8:fe:65:2f:d5:56:67:36:18:6a: 5b:05:1f:79:d1:48:39:d4:69:03:fd:61:91:78:7d:30:98:af: 79:53:2f:37:ae:65:53:fc:cf:47:36:fe:4f:5b:a8:cb:5b:ff: ea:63:b9:06:37:5f:bb:32:95:15:32:b3:74:94:45:b8:6c:8a: 0f:4c:30:30:e9:36:e5:aa:d4:7b:eb:e8:60:d4:83:8d:49:b1: 00:14:c2:01:44:44:e3:9f:6d:75:8f:73:8f:1e:0e:a4:57:97: 77:56:b9:4f:65:e0:bb:c3:5e:c4:c5:76:e5:5d:84:83:7a:28: c5:61:5a:eb:78:7a:1e:33:26:19:a2:2b:cb:f7:dc:0d:b7:b6: 22:ca:0e:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFg3wLiVdFgvwfIuWjWxJEcUgHHcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcxQjQyMzVERkM1NkM0ODI0MTZFN0JCQTE5MjU2MjA5 MkZGRTA1NTAeFw0yNTA0MjMxNzU3MDZaFw0yNTA0MjYxODU1MDZaMDMxMTAvBgNV BAMTKENCOEYyRUZGMkMyMzUyRkFGODYyNDZGOEI4ODcxOTY0M0ZCNTQxNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCZEZwKrAROnYkEq1y2wLXYM3N WhhJFyg72RBAGrafglnvUstqPbPcd9c4uke8Lu3rnsAYRCS8zTpAP6gpr2K421Y8 i7dx4Pv7dpQobO+74E5MdS5DvQ0whZ0poN+IVhv3QQIDQ3QpyqEBPu2kegEAzxED bHM1mhq7cYq5Oi07tbxTnsNDpVuVPGaVvfBmcIYosnqzA8aETsG8pSM/jsIw96ah TnahLUmgvH1AtB/IPJbcEaAPqHMjUX9VnhKvRKzonSC2bLqCTa5M5GJr9oe47mUF eJWDXUVsYhRjA63YN6PjQWkVEiNnOPAvZ35dxlUswWPbZ67aIH+eQrXn0o/tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy48u/ywjUvr4Ykb4uIcZZD+1QUUwHwYDVR0j BBgwFoAUhxtCNd/FbEgkFue7oZJWIJL/4FUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YTg5NmZkYy01NjM4LTQxZDItOGE5OS02OGNlODE2YmQzY2YvMC84NzFCNDIzNURG QzU2QzQ4MjQxNkU3QkJBMTkyNTYyMDkyRkZFMDU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODcxQjQyMzVERkM1NkM0ODI0MTZFN0JCQTE5MjU2MjA5MkZG RTA1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmE4OTZmZGMtNTYzOC00MWQyLThh OTktNjhjZTgxNmJkM2NmLzAvODcxQjQyMzVERkM1NkM0ODI0MTZFN0JCQTE5MjU2 MjA5MkZGRTA1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADhxFpooTaJske43y6QQ5p3r2uWLjDrJOLDI TtWBTQ2n42cnuTHhdtHOtp+qWRLYLU/uvzdx3v9tzzF5Cowcyl02H7jvn5q8/0dW t4pVpvOpQWuqZpf0anz89q+QizQBf8Cj99txgyEVjpCnjySorvvXTR/+yP5lL9VW ZzYYalsFH3nRSDnUaQP9YZF4fTCYr3lTLzeuZVP8z0c2/k9bqMtb/+pjuQY3X7sy lRUys3SURbhsig9MMDDpNuWq1Hvr6GDUg41JsQAUwgFEROOfbXWPc48eDqRXl3dW uU9l4LvDXsTFduVdhIN6KMVhWut4eh4zJhmiK8v33A23tiLKDpU= -----END CERTIFICATE-----Generated at Wed Apr 23 19:50:41 2025 by rpki-client on console.sobornost.net