$ rpki-client -vvf repo-rpki.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.mft File: 85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.mft (raw, json) Hash identifier: 9XkJ0VjE8W4en7AZduJ4X0FdtIyRh5xbxHgauZLzHew= Subject key identifier: 43:3F:28:4B:46:E7:44:0E:BC:E3:94:25:CA:CC:61:E4:0E:77:D0:52 Authority key identifier: 85:E8:DE:B3:87:42:E3:90:C7:BF:B3:4B:1E:4A:BA:C3:1D:33:7A:C3 Certificate issuer: /CN=85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3 Certificate serial: 57F757F71A4E08DB46D8F99376C5203DF1FC0227 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.mft Manifest number: 025F Signing time: Thu 24 Apr 2025 23:01:34 +0000 Manifest this update: Thu 24 Apr 2025 22:56:33 +0000 Manifest next update: Mon 28 Apr 2025 01:10:33 +0000 Files and hashes: 1: 85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.crl (hash: LaiLsmRQ50vkSDqXxoMIYHTPDl5WAxX3/fM1QYcoKn4=) 2: 3130332e3137382e3137342e302f32332d3234203d3e20313337333331.roa (hash: K+UHygo4qrap0HRp21an4Bv2wYIc+LITQ2V+cthKQG0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.crl rsync://repo-rpki.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:f7:57:f7:1a:4e:08:db:46:d8:f9:93:76:c5:20:3d:f1:fc:02:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3 Validity Not Before: Apr 24 22:56:33 2025 GMT Not After : Apr 28 01:10:33 2025 GMT Subject: CN=433F284B46E7440EBCE39425CACC61E40E77D052 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:1c:fc:13:eb:60:37:df:df:a7:f9:97:75:d2: 26:bc:48:20:b9:49:36:ec:3b:11:8d:f6:b0:bb:80: ed:52:46:3c:9f:ed:70:d0:66:ff:f7:47:2a:81:69: 8e:1a:c6:2f:c7:10:11:93:b0:3c:d7:78:6d:e7:a3: 8f:c4:74:8c:c3:9b:9b:1a:0c:d4:20:11:63:05:86: da:78:4f:51:f0:34:a8:17:9b:de:fe:62:7f:0d:66: 05:f0:a4:8e:e8:0b:c8:72:fe:db:c9:a6:77:21:47: 14:b4:75:3f:29:33:f0:3c:e6:85:12:26:b8:fd:55: 3f:39:c0:fb:49:fb:d5:87:70:60:9d:4f:27:ff:a8: 06:14:9c:e6:06:24:a5:e1:a4:e7:90:92:8a:47:ef: 8b:d1:78:ac:9f:5f:30:ef:fb:76:e2:04:4a:f5:e7: a5:fb:5a:fc:9f:03:e9:4a:38:f2:8e:fb:97:d6:e8: 2a:51:5b:8e:cc:f7:0e:8c:45:58:2b:f3:6c:a8:49: ea:99:b8:f6:bf:e9:ba:fa:eb:99:00:60:26:20:62: 01:b0:bf:03:d3:24:bf:f4:8e:d0:9f:0a:69:2a:03: 87:08:a3:6a:1d:19:71:dc:27:28:0b:1b:71:2e:57: 19:d4:e5:27:90:3d:b8:98:7f:f0:53:42:be:f8:8b: c4:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:3F:28:4B:46:E7:44:0E:BC:E3:94:25:CA:CC:61:E4:0E:77:D0:52 X509v3 Authority Key Identifier: keyid:85:E8:DE:B3:87:42:E3:90:C7:BF:B3:4B:1E:4A:BA:C3:1D:33:7A:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:3c:6c:6e:fa:9b:bc:3d:3c:68:20:2e:f4:cd:20:13:00:a3: 47:70:14:b8:09:ea:86:69:24:d8:76:54:89:6d:86:65:0d:97: db:9b:d4:2e:ad:dc:50:9e:7d:84:df:48:c6:30:f1:43:32:2c: bb:dc:b4:92:c1:84:99:ba:08:90:23:c7:90:97:cf:7b:9a:23: ea:c4:28:43:dc:c0:ac:a1:f7:2c:43:ce:29:ce:11:73:82:ee: 8c:73:ce:1d:1b:81:e8:c7:ec:2d:b2:97:9e:8e:a6:c5:f3:38: 8b:a0:1a:8a:88:5a:3c:0d:cc:a6:f8:34:b8:a0:64:27:1b:e7: 41:89:b8:ef:f9:8f:5c:a9:3e:35:64:7b:02:82:31:78:c7:5a: fc:23:27:7c:25:06:6a:cd:b3:d2:00:a2:0e:58:a2:c9:bc:7a: 8a:4c:5e:db:c3:2b:ec:49:a7:df:9c:0d:81:be:26:2e:57:5e: 86:9e:b6:b3:6d:72:3d:c4:87:2b:df:c5:6c:8f:03:21:4b:08: 02:f6:0a:53:39:e6:23:f7:46:ad:ea:22:5c:f6:48:3b:b4:ab: d1:bf:f2:bb:a9:39:fd:44:45:f8:09:7b:57:93:02:b1:ca:a8: 9c:de:c9:c7:45:1a:32:57:64:1c:20:1d:e1:87:1b:7c:23:80: 46:cb:1d:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV/dX9xpOCNtG2PmTdsUgPfH8AicwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODVFOERFQjM4NzQyRTM5MEM3QkZCMzRCMUU0QUJBQzMx RDMzN0FDMzAeFw0yNTA0MjQyMjU2MzNaFw0yNTA0MjgwMTEwMzNaMDMxMTAvBgNV BAMTKDQzM0YyODRCNDZFNzQ0MEVCQ0UzOTQyNUNBQ0M2MUU0MEU3N0QwNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3HPwT62A339+n+Zd10ia8SCC5 STbsOxGN9rC7gO1SRjyf7XDQZv/3RyqBaY4axi/HEBGTsDzXeG3no4/EdIzDm5sa DNQgEWMFhtp4T1HwNKgXm97+Yn8NZgXwpI7oC8hy/tvJpnchRxS0dT8pM/A85oUS Jrj9VT85wPtJ+9WHcGCdTyf/qAYUnOYGJKXhpOeQkopH74vReKyfXzDv+3biBEr1 56X7WvyfA+lKOPKO+5fW6CpRW47M9w6MRVgr82yoSeqZuPa/6br665kAYCYgYgGw vwPTJL/0jtCfCmkqA4cIo2odGXHcJygLG3EuVxnU5SeQPbiYf/BTQr74i8TbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQz8oS0bnRA6845Qlysxh5A530FIwHwYDVR0j BBgwFoAUhejes4dC45DHv7NLHkq6wx0zesMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZDdmOWVmNC1mOTlmLTQ0ZmYtYjk2OC03MGQ0NTI0ZDcyMDcvMC84NUU4REVCMzg3 NDJFMzkwQzdCRkIzNEIxRTRBQkFDMzFEMzM3QUMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODVFOERFQjM4NzQyRTM5MEM3QkZCMzRCMUU0QUJBQzMxRDMz N0FDMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmQ3ZjllZjQtZjk5Zi00NGZmLWI5 NjgtNzBkNDUyNGQ3MjA3LzAvODVFOERFQjM4NzQyRTM5MEM3QkZCMzRCMUU0QUJB QzMxRDMzN0FDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM88bG76m7w9PGggLvTNIBMAo0dwFLgJ6oZp JNh2VIlthmUNl9ub1C6t3FCefYTfSMYw8UMyLLvctJLBhJm6CJAjx5CXz3uaI+rE KEPcwKyh9yxDzinOEXOC7oxzzh0bgejH7C2yl56OpsXzOIugGoqIWjwNzKb4NLig ZCcb50GJuO/5j1ypPjVkewKCMXjHWvwjJ3wlBmrNs9IAog5Yosm8eopMXtvDK+xJ p9+cDYG+Ji5XXoaetrNtcj3EhyvfxWyPAyFLCAL2ClM55iP3Rq3qIlz2SDu0q9G/ 8rupOf1ERfgJe1eTArHKqJzeycdFGjJXZBwgHeGHG3wjgEbLHXM= -----END CERTIFICATE-----Generated at Fri Apr 25 03:46:17 2025 by rpki-client on console.sobornost.net