$ rpki-client -vvf repo-rpki.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/8910B51FCAA7F54124A76AF839CE19F4055A1061.mft File: 8910B51FCAA7F54124A76AF839CE19F4055A1061.mft (raw, json) Hash identifier: 5Pmp4MTEIMNab+bPtt9KxaB1gVH88iMTbTrJoGVwnEI= Subject key identifier: 06:1E:2D:3D:A1:41:09:A9:80:67:8E:BF:42:B7:CF:0C:AC:47:61:EE Authority key identifier: 89:10:B5:1F:CA:A7:F5:41:24:A7:6A:F8:39:CE:19:F4:05:5A:10:61 Certificate issuer: /CN=8910B51FCAA7F54124A76AF839CE19F4055A1061 Certificate serial: 467BC4C3B26431E9B1CACF2EE767E049AA081CA8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8910B51FCAA7F54124A76AF839CE19F4055A1061.cer Subject info access: rsync://repo-rpki.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/8910B51FCAA7F54124A76AF839CE19F4055A1061.mft Manifest number: 88 Signing time: Fri 25 Apr 2025 15:01:38 +0000 Manifest this update: Fri 25 Apr 2025 14:56:38 +0000 Manifest next update: Mon 28 Apr 2025 23:19:38 +0000 Files and hashes: 1: 3136302e31392e31372e302f32342d3234203d3e20313532303733.roa (hash: qNZxxj3XGNYDcu0xzhnA7lMuAWUr43b7ggcT7jMPIzo=) 2: 3136302e31392e31362e302f32342d3234203d3e20313532303733.roa (hash: XzjqgLhjt+KjRzh9gA27Osih9S9xdw8kf+ykQQ4twEE=) 3: 8910B51FCAA7F54124A76AF839CE19F4055A1061.crl (hash: Tqw1KTx4B4nmy6aTalVajU8YxF2V+n0UDZWaiZfKUis=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/8910B51FCAA7F54124A76AF839CE19F4055A1061.crl rsync://repo-rpki.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/8910B51FCAA7F54124A76AF839CE19F4055A1061.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8910B51FCAA7F54124A76AF839CE19F4055A1061.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 19:57:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:7b:c4:c3:b2:64:31:e9:b1:ca:cf:2e:e7:67:e0:49:aa:08:1c:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8910B51FCAA7F54124A76AF839CE19F4055A1061 Validity Not Before: Apr 25 14:56:38 2025 GMT Not After : Apr 28 23:19:38 2025 GMT Subject: CN=061E2D3DA14109A980678EBF42B7CF0CAC4761EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:54:16:8b:ff:85:03:e3:79:c8:75:b7:71:1b: 2a:e7:be:6d:5a:b8:9c:9e:a5:e7:4a:2d:61:a7:e5: 07:e0:e4:c2:e0:35:48:1a:c5:b7:62:15:f6:64:bb: 77:ac:b7:cf:45:9f:34:b4:f1:21:b6:56:46:10:6d: 35:3b:64:7c:30:b3:40:51:9f:af:9c:3e:13:a2:9f: 65:6d:4f:7f:25:15:25:d3:3a:2a:4a:95:18:85:10: e5:9c:50:89:93:10:35:40:06:69:95:29:45:e4:51: d6:bf:8c:8b:b3:59:8e:bd:4a:2e:69:75:1e:0a:b3: bc:1d:5a:a1:48:bd:41:bb:2e:94:74:dd:5b:06:92: e4:44:2f:8c:ed:e9:67:dc:9d:5a:17:fd:85:4e:b8: f1:29:7b:79:a4:1e:4e:95:e6:a5:ba:79:bb:27:60: b0:7e:4e:ee:99:01:ed:89:2e:a2:f6:80:52:c0:d4: d5:f9:c4:07:41:71:a2:2f:dd:d7:ea:29:14:3b:b7: 52:40:2a:4f:6c:b3:5d:96:6e:a0:ea:a3:d9:55:24: e1:6c:b6:bb:4d:8d:31:f5:40:b0:56:6f:37:07:b6: 02:fb:03:a6:2e:27:d1:8a:b4:74:7f:99:6f:4c:40: 05:10:44:97:b1:6d:42:56:94:db:ae:a6:63:68:49: e1:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:1E:2D:3D:A1:41:09:A9:80:67:8E:BF:42:B7:CF:0C:AC:47:61:EE X509v3 Authority Key Identifier: keyid:89:10:B5:1F:CA:A7:F5:41:24:A7:6A:F8:39:CE:19:F4:05:5A:10:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/8910B51FCAA7F54124A76AF839CE19F4055A1061.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8910B51FCAA7F54124A76AF839CE19F4055A1061.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/8910B51FCAA7F54124A76AF839CE19F4055A1061.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:be:05:85:eb:f1:a3:7e:25:aa:95:2b:a6:25:86:96:1e:f6: 6e:53:04:3a:ad:e5:25:b2:11:bb:5c:f8:5f:6d:34:06:f5:9f: 30:64:aa:0f:e5:bb:22:13:89:85:12:fd:3f:c8:93:26:9d:fd: 25:be:27:41:3d:18:97:4a:b1:5a:8e:f2:e3:2b:df:57:7f:a6: bd:5e:ed:14:b5:47:7f:4c:af:07:23:c3:48:42:dd:63:c3:70: 32:a1:30:10:c7:94:f6:47:ca:50:0a:ab:8e:9a:59:a5:83:03: 7c:44:5f:28:21:01:5f:de:6b:94:90:51:e5:fd:c4:c0:1e:d3: b9:70:c1:a6:13:24:00:28:a0:59:ec:57:d6:52:ac:d1:9f:ba: 41:44:c4:8e:f7:28:54:fc:1c:5c:d2:22:09:44:be:dd:f8:57: 5a:45:03:75:54:b3:45:96:57:b4:2f:7d:56:38:36:92:b2:bc: d1:88:10:8a:42:ab:82:dd:fc:b8:01:40:0d:e7:db:32:44:90: 2d:5f:cc:5e:5a:6d:1b:bb:29:0d:81:a7:f2:eb:6a:ae:a4:9c: 59:b5:6e:dc:65:25:ef:ca:f2:63:ae:58:d1:a3:6c:76:3a:9a: 63:eb:a0:95:99:a4:bc:13:b7:0b:a9:27:95:79:54:1a:32:21: db:71:1a:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURnvEw7JkMemxys8u52fgSaoIHKgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkxMEI1MUZDQUE3RjU0MTI0QTc2QUY4MzlDRTE5RjQw NTVBMTA2MTAeFw0yNTA0MjUxNDU2MzhaFw0yNTA0MjgyMzE5MzhaMDMxMTAvBgNV BAMTKDA2MUUyRDNEQTE0MTA5QTk4MDY3OEVCRjQyQjdDRjBDQUM0NzYxRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCVBaL/4UD43nIdbdxGyrnvm1a uJyepedKLWGn5Qfg5MLgNUgaxbdiFfZku3est89FnzS08SG2VkYQbTU7ZHwws0BR n6+cPhOin2VtT38lFSXTOipKlRiFEOWcUImTEDVABmmVKUXkUda/jIuzWY69Si5p dR4Ks7wdWqFIvUG7LpR03VsGkuREL4zt6WfcnVoX/YVOuPEpe3mkHk6V5qW6ebsn YLB+Tu6ZAe2JLqL2gFLA1NX5xAdBcaIv3dfqKRQ7t1JAKk9ss12WbqDqo9lVJOFs trtNjTH1QLBWbzcHtgL7A6YuJ9GKtHR/mW9MQAUQRJexbUJWlNuupmNoSeEbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBh4tPaFBCamAZ46/QrfPDKxHYe4wHwYDVR0j BBgwFoAUiRC1H8qn9UEkp2r4Oc4Z9AVaEGEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MTQwMzQwOS1iZjA0LTQyZTktOTU2Ny1iMDZlYzgyM2Q5MDEvMC84OTEwQjUxRkNB QTdGNTQxMjRBNzZBRjgzOUNFMTlGNDA1NUExMDYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODkxMEI1MUZDQUE3RjU0MTI0QTc2QUY4MzlDRTE5RjQwNTVB MTA2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzE0MDM0MDktYmYwNC00MmU5LTk1 NjctYjA2ZWM4MjNkOTAxLzAvODkxMEI1MUZDQUE3RjU0MTI0QTc2QUY4MzlDRTE5 RjQwNTVBMTA2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF2+BYXr8aN+JaqVK6YlhpYe9m5TBDqt5SWy Ebtc+F9tNAb1nzBkqg/luyITiYUS/T/Ikyad/SW+J0E9GJdKsVqO8uMr31d/pr1e 7RS1R39Mrwcjw0hC3WPDcDKhMBDHlPZHylAKq46aWaWDA3xEXyghAV/ea5SQUeX9 xMAe07lwwaYTJAAooFnsV9ZSrNGfukFExI73KFT8HFzSIglEvt34V1pFA3VUs0WW V7QvfVY4NpKyvNGIEIpCq4Ld/LgBQA3n2zJEkC1fzF5abRu7KQ2Bp/Lraq6knFm1 btxlJe/K8mOuWNGjbHY6mmProJWZpLwTtwupJ5V5VBoyIdtxGnI= -----END CERTIFICATE-----Generated at Fri Apr 25 17:11:51 2025 by rpki-client on console.sobornost.net