$ rpki-client -vvf repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.mft File: F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.mft (raw, json) Hash identifier: PBIEadhrmtN81+aO4CeBi+ZdxqEr5zURN1SfeS6rynM= Subject key identifier: 5E:0F:A9:FA:83:B9:95:28:35:F3:53:04:84:BE:99:D3:33:CC:79:85 Authority key identifier: F8:B7:C8:E5:DD:BD:D0:36:51:3F:10:B8:7F:39:A9:4B:E1:DB:3D:CA Certificate issuer: /CN=F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA Certificate serial: 71FB26CBF69073B361527BE23EFBF960066AF012 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.mft Manifest number: 01CF Signing time: Thu 24 Apr 2025 13:30:35 +0000 Manifest this update: Thu 24 Apr 2025 13:25:35 +0000 Manifest next update: Mon 28 Apr 2025 01:10:35 +0000 Files and hashes: 1: F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.crl (hash: 74a0KLK77Yw3ojT8Cjuup3tsWAOmDs+cXJTlnIX/ABU=) 2: 3130332e3138392e3131362e302f32342d3234203d3e20313439383738.roa (hash: KqXfnSM3Zf6qKcNW2AyH6vBJa4OplROJDu965qDaJhk=) 3: 3130332e3138392e3131372e302f32342d3234203d3e20313439383738.roa (hash: DOr4kkGYLGRSmLcOevTF3B7Hy6DQ86EG8bZ/AC5agXc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.crl rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 17:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:fb:26:cb:f6:90:73:b3:61:52:7b:e2:3e:fb:f9:60:06:6a:f0:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA Validity Not Before: Apr 24 13:25:35 2025 GMT Not After : Apr 28 01:10:35 2025 GMT Subject: CN=5E0FA9FA83B9952835F3530484BE99D333CC7985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2b:d7:22:c4:2a:d5:db:fa:c1:82:50:b1:d1: 63:1e:8d:dc:78:3f:d7:4f:43:56:cd:31:cb:10:af: fa:b6:e1:7b:aa:b8:85:3b:5b:94:ae:ca:df:e9:74: 02:79:fe:e0:7c:4b:a4:2e:42:3e:96:17:0c:fe:33: a3:54:2f:4c:f3:92:6b:b9:7a:bd:d7:d6:cd:6f:d3: 88:f8:17:e5:e4:4e:87:6b:84:76:9e:05:1e:ae:d5: 94:8c:70:6b:aa:93:04:8a:54:38:2f:88:14:16:dc: bc:1c:4d:0b:c6:7b:12:36:46:19:d0:86:05:bf:09: ce:04:1d:1e:b3:b3:7c:3b:f3:41:41:cb:43:ca:81: d0:18:07:87:04:0d:ab:bb:ce:2a:db:e2:73:bf:65: a2:23:bb:9a:85:7a:29:a7:7c:6f:0d:1f:c5:71:d2: d3:4b:36:66:c9:c8:c5:28:3a:27:ee:81:11:64:6d: 3b:fe:c0:ad:93:2f:8a:53:43:8b:0f:a1:6a:e5:19: 46:59:21:f2:61:87:ad:e7:57:a5:df:f4:d2:60:e3: c6:4b:fa:ea:84:96:2c:7f:b9:a6:b9:22:7a:c3:1a: 7c:58:89:73:af:69:0d:a2:3d:b1:6c:35:a9:1e:cd: ad:ee:23:77:85:b5:63:86:8c:2b:be:34:13:61:2b: 05:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:0F:A9:FA:83:B9:95:28:35:F3:53:04:84:BE:99:D3:33:CC:79:85 X509v3 Authority Key Identifier: keyid:F8:B7:C8:E5:DD:BD:D0:36:51:3F:10:B8:7F:39:A9:4B:E1:DB:3D:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:e5:21:1a:32:78:be:87:18:c4:87:87:bc:c3:3b:e2:a1:05: de:cb:95:67:8c:68:8d:96:bd:a1:10:b3:46:cf:4a:95:ad:e7: a3:f6:72:bc:7e:a6:64:0f:b5:76:a6:99:28:dc:3c:69:d9:21: d7:e4:3a:70:ed:07:a3:db:a6:05:55:91:fe:0f:f6:fe:f5:0b: 1f:3c:9a:52:73:29:a0:31:34:92:0d:52:07:49:81:ca:d4:c3: b0:e0:a5:cf:fb:81:2b:a7:71:de:87:cf:30:1e:c9:07:6b:1c: 6d:86:8f:b7:81:f0:10:e3:81:01:64:7a:0f:59:c5:c5:a7:ec: de:0b:1f:e0:0c:c7:03:58:3e:f2:f3:17:a5:04:78:cc:d4:cf: d8:85:84:3b:9e:a7:e8:54:40:59:43:bd:00:9f:28:d4:d6:76: 47:10:b6:c7:73:06:58:89:39:fa:6b:1b:57:b4:5a:55:fb:bd: 52:61:cf:5b:3e:50:97:9f:cc:f6:01:f1:12:ab:4b:48:16:bc: bf:53:f0:cb:39:fd:6f:40:ab:81:d6:c5:52:a3:41:6c:93:58: 59:a5:a0:8d:95:38:d2:23:f0:09:b7:d4:80:af:01:d7:2a:36: 20:23:43:45:b2:c1:b9:25:27:05:de:92:20:d2:b7:b0:8d:7f: 36:cd:3b:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcfsmy/aQc7NhUnviPvv5YAZq8BIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhCN0M4RTVEREJERDAzNjUxM0YxMEI4N0YzOUE5NEJF MURCM0RDQTAeFw0yNTA0MjQxMzI1MzVaFw0yNTA0MjgwMTEwMzVaMDMxMTAvBgNV BAMTKDVFMEZBOUZBODNCOTk1MjgzNUYzNTMwNDg0QkU5OUQzMzNDQzc5ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpK9cixCrV2/rBglCx0WMejdx4 P9dPQ1bNMcsQr/q24XuquIU7W5Suyt/pdAJ5/uB8S6QuQj6WFwz+M6NUL0zzkmu5 er3X1s1v04j4F+XkTodrhHaeBR6u1ZSMcGuqkwSKVDgviBQW3LwcTQvGexI2RhnQ hgW/Cc4EHR6zs3w780FBy0PKgdAYB4cEDau7zirb4nO/ZaIju5qFeimnfG8NH8Vx 0tNLNmbJyMUoOifugRFkbTv+wK2TL4pTQ4sPoWrlGUZZIfJhh63nV6Xf9NJg48ZL +uqElix/uaa5InrDGnxYiXOvaQ2iPbFsNakeza3uI3eFtWOGjCu+NBNhKwVfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXg+p+oO5lSg181MEhL6Z0zPMeYUwHwYDVR0j BBgwFoAU+LfI5d290DZRPxC4fzmpS+HbPcowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MzA1YWIzMC01NjUzLTQyYmMtOWMzZi1hYWY1NjdlYWU3MDEvMC9GOEI3QzhFNURE QkREMDM2NTEzRjEwQjg3RjM5QTk0QkUxREIzRENBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjhCN0M4RTVEREJERDAzNjUxM0YxMEI4N0YzOUE5NEJFMURC M0RDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzMwNWFiMzAtNTY1My00MmJjLTlj M2YtYWFmNTY3ZWFlNzAxLzAvRjhCN0M4RTVEREJERDAzNjUxM0YxMEI4N0YzOUE5 NEJFMURCM0RDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIjlIRoyeL6HGMSHh7zDO+KhBd7LlWeMaI2W vaEQs0bPSpWt56P2crx+pmQPtXammSjcPGnZIdfkOnDtB6PbpgVVkf4P9v71Cx88 mlJzKaAxNJINUgdJgcrUw7Dgpc/7gSuncd6HzzAeyQdrHG2Gj7eB8BDjgQFkeg9Z xcWn7N4LH+AMxwNYPvLzF6UEeMzUz9iFhDuep+hUQFlDvQCfKNTWdkcQtsdzBliJ OfprG1e0WlX7vVJhz1s+UJefzPYB8RKrS0gWvL9T8Ms5/W9Aq4HWxVKjQWyTWFml oI2VONIj8Am31ICvAdcqNiAjQ0WywbklJwXekiDSt7CNfzbNO8U= -----END CERTIFICATE-----Generated at Thu Apr 24 15:50:03 2025 by rpki-client on console.sobornost.net