$ rpki-client -vvf repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.mft File: 48FC0122D8C842BAC13711F1284D1D38DE36EA1B.mft (raw, json) Hash identifier: KZ+WYABBf7g/m6BaEESHEeE+J+z8Elph1XIrXabEc8U= Subject key identifier: 37:FC:53:A9:B7:81:21:97:26:E7:17:3E:C5:1F:DA:B9:9D:01:EA:8D Authority key identifier: 48:FC:01:22:D8:C8:42:BA:C1:37:11:F1:28:4D:1D:38:DE:36:EA:1B Certificate issuer: /CN=48FC0122D8C842BAC13711F1284D1D38DE36EA1B Certificate serial: 4230C7C99C533176EF365D56AF5619CCE0F9CC26 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.mft Manifest number: CA Signing time: Thu 24 Apr 2025 19:51:14 +0000 Manifest this update: Thu 24 Apr 2025 19:46:14 +0000 Manifest next update: Sun 27 Apr 2025 21:54:14 +0000 Files and hashes: 1: 3230332e3136392e35342e302f32342d3234203d3e20313532303831.roa (hash: 2z42X43Ea7u6xKcdMj3FxNdE9A6gxBVfBgTimjuLHeI=) 2: 3230332e3136392e35352e302f32342d3234203d3e20313532303831.roa (hash: VTVieA6u93MGGXcpw/BOIG2PPQw8gdCUs7g/agJ/hek=) 3: 48FC0122D8C842BAC13711F1284D1D38DE36EA1B.crl (hash: k6lR8ao7Rv46rCeGKovUc4MI4ObeX+3EIizodQGQLpI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.crl rsync://repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:30:c7:c9:9c:53:31:76:ef:36:5d:56:af:56:19:cc:e0:f9:cc:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48FC0122D8C842BAC13711F1284D1D38DE36EA1B Validity Not Before: Apr 24 19:46:14 2025 GMT Not After : Apr 27 21:54:14 2025 GMT Subject: CN=37FC53A9B781219726E7173EC51FDAB99D01EA8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:02:10:50:4c:25:45:bf:3c:69:a3:06:ba:6b: 81:8c:7d:56:71:52:f1:95:64:b2:a8:bc:79:0b:0d: 0e:ac:2e:f9:40:52:07:61:41:83:8b:1b:e8:54:73: 31:69:3a:1c:93:69:18:82:02:e4:2b:7f:88:af:e2: a5:44:ca:b7:05:1e:47:e8:6c:30:c7:aa:90:a1:e0: a9:de:b4:a1:b1:d8:a8:e8:91:1f:d7:ba:52:db:29: 2c:3b:dc:f5:bf:5e:4b:f8:36:11:9a:16:30:4d:88: c8:59:27:e9:21:ab:32:ce:9d:20:bc:6e:24:77:30: e5:52:d4:66:55:48:27:63:24:f3:b4:b8:78:58:3d: 92:fa:75:0c:36:4e:da:a9:06:09:05:24:59:42:22: 65:58:1d:fa:1c:32:f5:4a:7f:9f:57:5e:a9:35:79: f4:1c:16:96:4f:fd:1e:d3:42:8f:ff:84:fb:bb:80: 49:a5:99:5d:aa:d3:06:4f:b7:2c:06:ed:9a:aa:5f: 74:4b:a7:ba:e4:86:21:89:57:78:79:15:8b:51:bf: 50:72:87:0f:0d:e1:0c:b1:01:ef:78:4c:c5:93:a2: 9c:94:ae:b9:02:c6:2e:63:7e:ed:57:68:ff:3f:0d: 79:b8:c6:66:e6:c3:86:26:7e:c6:2b:65:ac:b2:4b: 38:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:FC:53:A9:B7:81:21:97:26:E7:17:3E:C5:1F:DA:B9:9D:01:EA:8D X509v3 Authority Key Identifier: keyid:48:FC:01:22:D8:C8:42:BA:C1:37:11:F1:28:4D:1D:38:DE:36:EA:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:25:9b:16:a4:03:1b:17:c7:6d:4d:fe:e2:92:9b:4a:cf:a0: f3:9e:7e:f7:d4:60:fc:0b:91:f2:d0:21:59:6f:73:98:b3:e1: ab:35:6f:29:92:eb:27:3e:1e:c4:62:9c:e1:e0:7a:6d:78:75: 2c:0f:3e:36:7d:9d:d7:34:3f:0a:9f:7b:dc:9b:10:07:2e:95: 75:d7:d1:49:bd:d7:db:41:54:70:73:c7:15:83:8d:b8:e7:a2: f3:58:09:62:f9:4f:a9:a6:1b:e1:db:5d:6a:99:3a:42:8c:8a: 54:47:d3:ff:52:18:5f:eb:5e:cf:4e:ae:9c:35:69:15:77:f1: 5b:87:c0:6b:51:a1:ed:3e:72:c0:63:e6:f2:5f:6d:bf:94:13: fe:d5:32:cc:5b:11:9e:b9:76:d7:64:91:77:4a:86:1a:03:4d: 53:34:ef:87:a7:50:06:14:50:3e:d7:e8:19:6b:34:ac:c2:3d: 9a:22:40:e0:4d:31:96:ca:3c:3a:c7:38:0a:1b:6d:ef:cb:c7: b5:d2:87:74:1b:46:31:eb:e8:b4:37:58:ac:32:c7:93:41:3d: d7:fe:03:9d:ab:c7:c1:8b:73:16:38:94:7e:a9:63:66:af:3a: a0:f2:d8:92:ce:37:cd:d7:83:a3:ba:65:43:23:bc:ca:e9:23: 31:8b:5f:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQjDHyZxTMXbvNl1Wr1YZzOD5zCYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDhGQzAxMjJEOEM4NDJCQUMxMzcxMUYxMjg0RDFEMzhE RTM2RUExQjAeFw0yNTA0MjQxOTQ2MTRaFw0yNTA0MjcyMTU0MTRaMDMxMTAvBgNV BAMTKDM3RkM1M0E5Qjc4MTIxOTcyNkU3MTczRUM1MUZEQUI5OUQwMUVBOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcAhBQTCVFvzxpowa6a4GMfVZx UvGVZLKovHkLDQ6sLvlAUgdhQYOLG+hUczFpOhyTaRiCAuQrf4iv4qVEyrcFHkfo bDDHqpCh4KnetKGx2KjokR/XulLbKSw73PW/Xkv4NhGaFjBNiMhZJ+khqzLOnSC8 biR3MOVS1GZVSCdjJPO0uHhYPZL6dQw2TtqpBgkFJFlCImVYHfocMvVKf59XXqk1 efQcFpZP/R7TQo//hPu7gEmlmV2q0wZPtywG7ZqqX3RLp7rkhiGJV3h5FYtRv1By hw8N4QyxAe94TMWTopyUrrkCxi5jfu1XaP8/DXm4xmbmw4YmfsYrZayySzj7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN/xTqbeBIZcm5xc+xR/auZ0B6o0wHwYDVR0j BBgwFoAUSPwBItjIQrrBNxHxKE0dON426hswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDg2YjBkYi0zMDUwLTQ3NTAtOGY2Ni01NzI2YTc5MmFkYWIvMC80OEZDMDEyMkQ4 Qzg0MkJBQzEzNzExRjEyODREMUQzOERFMzZFQTFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDhGQzAxMjJEOEM4NDJCQUMxMzcxMUYxMjg0RDFEMzhERTM2 RUExQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQ4NmIwZGItMzA1MC00NzUwLThm NjYtNTcyNmE3OTJhZGFiLzAvNDhGQzAxMjJEOEM4NDJCQUMxMzcxMUYxMjg0RDFE MzhERTM2RUExQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI8lmxakAxsXx21N/uKSm0rPoPOefvfUYPwL kfLQIVlvc5iz4as1bymS6yc+HsRinOHgem14dSwPPjZ9ndc0Pwqfe9ybEAculXXX 0Um919tBVHBzxxWDjbjnovNYCWL5T6mmG+HbXWqZOkKMilRH0/9SGF/rXs9Orpw1 aRV38VuHwGtRoe0+csBj5vJfbb+UE/7VMsxbEZ65dtdkkXdKhhoDTVM074enUAYU UD7X6BlrNKzCPZoiQOBNMZbKPDrHOAobbe/Lx7XSh3QbRjHr6LQ3WKwyx5NBPdf+ A52rx8GLcxY4lH6pY2avOqDy2JLON83Xg6O6ZUMjvMrpIzGLXy4= -----END CERTIFICATE-----Generated at Fri Apr 25 00:06:28 2025 by rpki-client on console.sobornost.net