$ rpki-client -vvf repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft File: B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft (raw, json) Hash identifier: nj5uTaI8Lt9RbDv8HVx4kQ6VPLFfbE2cC3HC12A6ahU= Subject key identifier: B4:22:53:35:7A:6E:9A:D3:07:DD:1B:F0:FF:E0:D6:58:A7:D4:9B:B4 Authority key identifier: B8:D4:44:C5:B3:18:4A:4F:8C:8F:19:9A:43:22:42:C4:4E:19:EA:CB Certificate issuer: /CN=B8D444C5B3184A4F8C8F199A432242C44E19EACB Certificate serial: 5D57B90D7B77D54CC1BCFADA52E79819A31BF3E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B8D444C5B3184A4F8C8F199A432242C44E19EACB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft Manifest number: 81 Signing time: Wed 23 Apr 2025 19:01:56 +0000 Manifest this update: Wed 23 Apr 2025 18:56:56 +0000 Manifest next update: Sun 27 Apr 2025 01:45:56 +0000 Files and hashes: 1: 3136302e32352e33362e302f32332d3234203d3e20313532383332.roa (hash: 0s3rWLKkoef0LRd26YLEPlEN62q6VM66IYGFVdLCLsM=) 2: 3136302e32352e33362e302f32342d3234203d3e20313532383332.roa (hash: le0N09QJH4rB2Cs8/+qGf8BVJE6y94DB31o5gUkZnZI=) 3: B8D444C5B3184A4F8C8F199A432242C44E19EACB.crl (hash: 64xjkafDqFHH0KkM/tzgc4W8Lbzth9eIHabJM0NfEGQ=) 4: 3136302e32352e33372e302f32342d3234203d3e20313532383332.roa (hash: M7PLTShc17cNHbAkZ/Aq1Y/sFTRdm7Sh5vz/cqQ2zg0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.crl rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B8D444C5B3184A4F8C8F199A432242C44E19EACB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 18:38:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:57:b9:0d:7b:77:d5:4c:c1:bc:fa:da:52:e7:98:19:a3:1b:f3:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8D444C5B3184A4F8C8F199A432242C44E19EACB Validity Not Before: Apr 23 18:56:56 2025 GMT Not After : Apr 27 01:45:56 2025 GMT Subject: CN=B42253357A6E9AD307DD1BF0FFE0D658A7D49BB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:27:09:ec:41:2c:99:52:43:f6:4a:d4:0c:15: 57:b3:78:49:e7:ac:ad:6c:14:e5:42:1f:49:a0:2e: 79:9a:51:5d:1d:10:3d:14:18:60:63:22:6a:8d:3d: 1f:49:13:61:5c:bf:8e:e1:fd:c4:29:00:cc:7c:bf: f0:bd:1a:9d:45:d8:da:16:95:33:6d:24:86:8e:c6: 0b:77:da:83:31:d0:65:2d:54:07:97:c6:4d:ad:42: 24:30:44:d8:9c:fe:46:5a:1b:a6:7f:59:71:fa:de: d5:1f:29:4a:02:90:ca:53:96:1c:75:bd:30:ba:57: 49:4e:0d:44:f2:9a:40:8e:72:a7:d6:a4:d8:27:d8: 7a:f5:00:d5:29:f2:fd:1e:9c:9f:20:41:d9:57:a6: 1c:75:8a:13:0a:db:7f:14:92:2d:41:94:9a:5f:e2: 1c:d5:30:d9:e9:d0:5b:b0:ca:ea:2d:8e:61:0e:8d: 75:63:97:29:f9:c2:a2:56:27:80:b7:4a:a3:99:b4: f6:3c:c9:89:d8:f9:e8:e7:78:99:c5:6b:2f:12:89: fd:9d:79:71:34:ef:69:16:7e:c8:70:77:e9:8d:9c: 02:ee:7b:47:ca:0c:34:f6:90:cb:46:83:3d:88:bf: 36:0c:a2:b1:0b:b7:fc:b0:ff:c7:8f:fd:92:31:e0: 95:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:22:53:35:7A:6E:9A:D3:07:DD:1B:F0:FF:E0:D6:58:A7:D4:9B:B4 X509v3 Authority Key Identifier: keyid:B8:D4:44:C5:B3:18:4A:4F:8C:8F:19:9A:43:22:42:C4:4E:19:EA:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B8D444C5B3184A4F8C8F199A432242C44E19EACB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:4e:f9:6a:ca:e8:f8:80:ea:ec:db:73:df:96:44:33:8a:4b: c8:25:e4:c2:05:d1:6b:13:9e:f5:ff:70:4f:db:b6:b3:b6:5c: 06:8d:7e:cf:30:94:75:ca:09:e0:8a:26:61:f3:22:e0:82:a1: df:c5:71:d6:09:62:58:85:fa:3b:5d:ab:c9:49:6e:88:ea:ad: e8:fa:33:39:ab:56:a2:3a:e7:85:84:a3:97:85:07:cf:f7:ce: 74:0e:fa:f1:9f:fb:52:2f:a1:f0:11:29:7b:3c:99:55:59:88: 67:07:f1:e9:aa:7c:f9:96:bc:0f:ba:f9:59:8b:23:f4:8f:8c: 65:cb:b5:39:f5:40:c4:83:9c:a4:3a:ad:71:11:09:90:90:eb: b2:a9:97:db:46:c6:b2:ce:5b:e2:a5:f8:17:13:bb:94:49:3b: b8:e9:64:90:e9:ba:99:ec:85:83:53:ff:7e:ee:48:9c:96:f3: 24:3b:cb:4b:c4:1b:3d:64:65:09:8a:78:da:36:2e:f5:69:54: 3a:31:be:a8:78:de:8e:55:9a:3e:3b:13:68:d2:b6:1e:d4:b2: a7:60:d2:1d:9f:f5:f1:4e:84:79:21:01:0a:61:72:84:6c:8e: d3:22:7e:65:61:f5:7a:68:e1:3b:54:90:94:40:7e:20:fb:a1: 6f:37:1c:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXVe5DXt31UzBvPraUueYGaMb8+EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhENDQ0QzVCMzE4NEE0RjhDOEYxOTlBNDMyMjQyQzQ0 RTE5RUFDQjAeFw0yNTA0MjMxODU2NTZaFw0yNTA0MjcwMTQ1NTZaMDMxMTAvBgNV BAMTKEI0MjI1MzM1N0E2RTlBRDMwN0REMUJGMEZGRTBENjU4QTdENDlCQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGJwnsQSyZUkP2StQMFVezeEnn rK1sFOVCH0mgLnmaUV0dED0UGGBjImqNPR9JE2Fcv47h/cQpAMx8v/C9Gp1F2NoW lTNtJIaOxgt32oMx0GUtVAeXxk2tQiQwRNic/kZaG6Z/WXH63tUfKUoCkMpTlhx1 vTC6V0lODUTymkCOcqfWpNgn2Hr1ANUp8v0enJ8gQdlXphx1ihMK238Uki1BlJpf 4hzVMNnp0FuwyuotjmEOjXVjlyn5wqJWJ4C3SqOZtPY8yYnY+ejneJnFay8Sif2d eXE072kWfshwd+mNnALue0fKDDT2kMtGgz2IvzYMorELt/yw/8eP/ZIx4JUtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtCJTNXpumtMH3Rvw/+DWWKfUm7QwHwYDVR0j BBgwFoAUuNRExbMYSk+MjxmaQyJCxE4Z6sswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZjRiNTNkOC1iMmZmLTQ5NzMtYjFhYy02Zjg1ZmFlYWRiZTUvMC9COEQ0NDRDNUIz MTg0QTRGOEM4RjE5OUE0MzIyNDJDNDRFMTlFQUNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjhENDQ0QzVCMzE4NEE0RjhDOEYxOTlBNDMyMjQyQzQ0RTE5 RUFDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Y0YjUzZDgtYjJmZi00OTczLWIx YWMtNmY4NWZhZWFkYmU1LzAvQjhENDQ0QzVCMzE4NEE0RjhDOEYxOTlBNDMyMjQy QzQ0RTE5RUFDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKBO+WrK6PiA6uzbc9+WRDOKS8gl5MIF0WsT nvX/cE/btrO2XAaNfs8wlHXKCeCKJmHzIuCCod/FcdYJYliF+jtdq8lJbojqrej6 MzmrVqI654WEo5eFB8/3znQO+vGf+1IvofARKXs8mVVZiGcH8emqfPmWvA+6+VmL I/SPjGXLtTn1QMSDnKQ6rXERCZCQ67Kpl9tGxrLOW+Kl+BcTu5RJO7jpZJDpupns hYNT/37uSJyW8yQ7y0vEGz1kZQmKeNo2LvVpVDoxvqh43o5Vmj47E2jSth7Usqdg 0h2f9fFOhHkhAQphcoRsjtMifmVh9Xpo4TtUkJRAfiD7oW83HDI= -----END CERTIFICATE-----Generated at Wed Apr 23 22:12:04 2025 by rpki-client on console.sobornost.net