$ rpki-client -vvf repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.mft File: 0FA41B65D1881666013C9683E40575E68E5DC0A5.mft (raw, json) Hash identifier: ULrTetFXDCFpG2XM78HyNwX05B0/Qj/2T+QnpG6krRA= Subject key identifier: 75:4A:FB:BA:44:55:2C:7A:7E:8E:BC:BD:B6:A3:7D:EF:E7:49:94:CC Authority key identifier: 0F:A4:1B:65:D1:88:16:66:01:3C:96:83:E4:05:75:E6:8E:5D:C0:A5 Certificate issuer: /CN=0FA41B65D1881666013C9683E40575E68E5DC0A5 Certificate serial: 4EFBDCDD3B757303A96A81E844022CC8BD425AE2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FA41B65D1881666013C9683E40575E68E5DC0A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.mft Manifest number: 04D9 Signing time: Thu 24 Apr 2025 09:01:00 +0000 Manifest this update: Thu 24 Apr 2025 08:56:00 +0000 Manifest next update: Sun 27 Apr 2025 09:31:00 +0000 Files and hashes: 1: 0FA41B65D1881666013C9683E40575E68E5DC0A5.crl (hash: EKpCIhzAloaRe3rwCy7UMiK21y1CxkhBgPgKL7Kpm2c=) 2: 3130332e3232302e34372e302f32342d3234203d3e20313431313037.roa (hash: E/D2Cv8nys+Xw52/1AbUQ7ljKhbTpvG2KMsVr5WOMsA=) 3: 3130332e3231362e3138382e302f32342d3234203d3e20313431313037.roa (hash: VyhY07ev3HZs4lJdDII/xjr5IV8edk9Khb+3ZQ71QT4=) 4: 323030313a6466313a666530303a3a2f34382d3438203d3e20313431313037.roa (hash: 96iMJoj+cFMvtnyIVwYET8bE27HKdbaW3rJ7KX7hPqQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.crl rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FA41B65D1881666013C9683E40575E68E5DC0A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 09:31:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:fb:dc:dd:3b:75:73:03:a9:6a:81:e8:44:02:2c:c8:bd:42:5a:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FA41B65D1881666013C9683E40575E68E5DC0A5 Validity Not Before: Apr 24 08:56:00 2025 GMT Not After : Apr 27 09:31:00 2025 GMT Subject: CN=754AFBBA44552C7A7E8EBCBDB6A37DEFE74994CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fb:30:4d:16:ca:e3:b7:d1:bb:20:dd:8d:a5: 15:59:23:ed:5b:b2:f3:83:93:c2:a6:48:78:14:3f: 10:ae:f7:24:13:c2:ab:ae:a3:6b:31:ee:d3:e1:77: 11:8e:c8:58:62:42:ec:c4:eb:27:fa:07:2a:a9:37: cc:75:df:ac:f6:6b:97:81:51:64:a6:7d:15:bd:76: f7:8d:24:ea:42:83:c4:b2:a8:f4:ae:36:69:75:1d: 75:9c:10:4a:c1:c9:c3:7d:e3:31:44:ae:64:d5:7f: 98:78:ad:96:4a:0f:66:97:0c:cf:67:ee:77:d1:e2: a8:b4:30:59:dd:fe:10:61:83:2e:90:98:41:59:e7: 63:4c:d7:4e:98:0d:5d:51:2d:c5:fd:b4:23:d6:3b: 22:1d:e6:27:19:0d:6d:d3:13:3e:c4:7f:32:b6:4d: 5d:fa:80:53:8d:c6:4d:24:81:77:90:cc:cc:56:ec: a9:0b:44:cf:6a:a2:e8:77:67:6e:f1:57:14:af:2b: 5e:c8:db:6d:6a:17:8f:18:51:a6:ef:4a:98:c8:78: 58:71:3f:42:fa:77:f6:35:66:4c:aa:40:88:6b:6b: e3:90:69:d6:7d:1a:39:43:8c:e9:32:ec:7a:f0:65: df:af:20:90:98:1a:2e:af:c7:21:81:48:f6:0e:66: ba:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:4A:FB:BA:44:55:2C:7A:7E:8E:BC:BD:B6:A3:7D:EF:E7:49:94:CC X509v3 Authority Key Identifier: keyid:0F:A4:1B:65:D1:88:16:66:01:3C:96:83:E4:05:75:E6:8E:5D:C0:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FA41B65D1881666013C9683E40575E68E5DC0A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:7c:c5:87:0f:3c:4d:e4:1d:dc:69:dc:b7:9f:1b:25:24:a1: 36:0d:4a:e9:97:cc:01:ca:a6:63:58:69:07:fe:53:ed:8f:7a: 14:77:7d:0d:da:61:90:49:99:df:88:ea:cb:bc:53:90:b3:26: bb:78:59:e6:2f:44:16:b6:1b:fb:32:b4:91:20:92:50:99:f5: a8:82:cd:3b:5d:46:88:79:23:b0:c1:cc:9f:a6:17:63:7e:3f: fa:a5:01:18:be:6e:5b:e0:ac:97:44:e4:fe:e4:81:85:f0:20: 44:f9:6f:18:dc:65:df:ad:03:6a:1b:e3:fe:29:60:bb:c5:a7: 68:61:f5:cd:5f:a0:2b:80:ec:c0:d6:b0:6b:de:3c:56:57:6e: 1c:70:1d:87:f3:3d:fc:59:b3:73:88:f9:21:a8:04:5d:f4:0f: 3f:e8:22:ee:f5:25:96:48:28:99:aa:01:42:48:bc:7a:44:44: ed:7c:1c:6d:f5:16:c2:39:65:0f:03:00:c2:24:62:42:e9:c2: 17:b3:7d:0e:8c:e2:07:68:22:92:59:c8:c7:7c:2b:2e:5c:f9: 64:fb:f5:d3:af:32:e5:26:fe:cd:73:7d:c2:dc:e2:e8:1d:c3: c0:37:0a:bf:ae:5c:4e:44:d8:1a:55:85:fb:4d:c1:b1:56:7e: bd:af:df:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTvvc3Tt1cwOpaoHoRAIsyL1CWuIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZBNDFCNjVEMTg4MTY2NjAxM0M5NjgzRTQwNTc1RTY4 RTVEQzBBNTAeFw0yNTA0MjQwODU2MDBaFw0yNTA0MjcwOTMxMDBaMDMxMTAvBgNV BAMTKDc1NEFGQkJBNDQ1NTJDN0E3RThFQkNCREI2QTM3REVGRTc0OTk0Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4+zBNFsrjt9G7IN2NpRVZI+1b svODk8KmSHgUPxCu9yQTwquuo2sx7tPhdxGOyFhiQuzE6yf6ByqpN8x136z2a5eB UWSmfRW9dveNJOpCg8SyqPSuNml1HXWcEErBycN94zFErmTVf5h4rZZKD2aXDM9n 7nfR4qi0MFnd/hBhgy6QmEFZ52NM106YDV1RLcX9tCPWOyId5icZDW3TEz7EfzK2 TV36gFONxk0kgXeQzMxW7KkLRM9qouh3Z27xVxSvK17I221qF48YUabvSpjIeFhx P0L6d/Y1ZkyqQIhra+OQadZ9GjlDjOky7HrwZd+vIJCYGi6vxyGBSPYOZrptAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdUr7ukRVLHp+jry9tqN97+dJlMwwHwYDVR0j BBgwFoAUD6QbZdGIFmYBPJaD5AV15o5dwKUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OTk0ZDM3NS1mYzdkLTRkYzctYTFmMS1lMGIzYTU5ZmRmNzgvMC8wRkE0MUI2NUQx ODgxNjY2MDEzQzk2ODNFNDA1NzVFNjhFNURDMEE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEZBNDFCNjVEMTg4MTY2NjAxM0M5NjgzRTQwNTc1RTY4RTVE QzBBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzk5NGQzNzUtZmM3ZC00ZGM3LWEx ZjEtZTBiM2E1OWZkZjc4LzAvMEZBNDFCNjVEMTg4MTY2NjAxM0M5NjgzRTQwNTc1 RTY4RTVEQzBBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAV8xYcPPE3kHdxp3LefGyUkoTYNSumXzAHK pmNYaQf+U+2PehR3fQ3aYZBJmd+I6su8U5CzJrt4WeYvRBa2G/sytJEgklCZ9aiC zTtdRoh5I7DBzJ+mF2N+P/qlARi+blvgrJdE5P7kgYXwIET5bxjcZd+tA2ob4/4p YLvFp2hh9c1foCuA7MDWsGvePFZXbhxwHYfzPfxZs3OI+SGoBF30Dz/oIu71JZZI KJmqAUJIvHpERO18HG31FsI5ZQ8DAMIkYkLpwhezfQ6M4gdoIpJZyMd8Ky5c+WT7 9dOvMuUm/s1zfcLc4ugdw8A3Cr+uXE5E2BpVhftNwbFWfr2v3/I= -----END CERTIFICATE-----Generated at Thu Apr 24 11:25:12 2025 by rpki-client on console.sobornost.net