$ rpki-client -vvf repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.mft File: 9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.mft (raw, json) Hash identifier: CgToGHkaOIDBRLTt5WRcjBmwCwYB37EAVUeHlr+WiAU= Subject key identifier: B1:1B:D4:F6:25:DF:12:89:EF:4E:79:47:6B:E8:FE:00:EC:C0:2C:54 Authority key identifier: 93:88:69:5C:CB:2D:CC:37:F2:AB:8A:3D:10:E4:FD:E0:C3:A9:75:A1 Certificate issuer: /CN=9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1 Certificate serial: 10CFCE101B06BB2A194D05A664976724AF402FC7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.mft Manifest number: 89 Signing time: Thu 24 Apr 2025 10:30:49 +0000 Manifest this update: Thu 24 Apr 2025 10:25:49 +0000 Manifest next update: Sun 27 Apr 2025 19:46:49 +0000 Files and hashes: 1: 3136302e32322e39372e302f32342d3234203d3e20313532383238.roa (hash: 1sHGMJeYdUu+9UwyVqFWZX/KMdYhWP8F/23aDldCPk8=) 2: 3136302e32322e39362e302f32342d3234203d3e20313532383238.roa (hash: KlFRCsDvqBxh6mAiXOERsszO0d+eekFAAKRE6fBTwjU=) 3: 9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.crl (hash: vBFEli+NoDRpSsut5L77znwde8RmN42e26qwesZFLic=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.crl rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 10:32:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:cf:ce:10:1b:06:bb:2a:19:4d:05:a6:64:97:67:24:af:40:2f:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1 Validity Not Before: Apr 24 10:25:49 2025 GMT Not After : Apr 27 19:46:49 2025 GMT Subject: CN=B11BD4F625DF1289EF4E79476BE8FE00ECC02C54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4d:91:f9:8d:7a:ee:f7:63:c8:68:74:e1:f2: 78:12:3c:18:c9:20:ef:20:33:fa:c6:eb:b4:c2:f7: 74:5f:5a:87:2f:38:ef:96:68:e4:36:ab:c9:67:4a: 83:3e:3e:7b:a7:be:55:eb:e7:c4:bd:1e:6e:22:d3: 4c:df:5a:4b:3b:bb:56:be:69:53:d4:e2:e1:2a:79: d7:52:9e:e7:b8:a4:75:c9:ec:15:2a:2a:0b:28:94: 8c:fd:f7:aa:a9:17:ea:4c:81:79:53:bb:83:d1:3f: d6:f0:f5:1e:83:0b:47:fa:c9:60:d6:59:c5:78:db: 32:80:b5:b9:b9:24:32:b0:2a:0e:92:ad:47:ea:a9: e7:ff:46:d1:60:91:3c:79:b8:48:06:b9:50:cc:58: 66:fc:04:29:37:ca:bd:75:a4:cd:d2:54:08:71:7d: e9:f5:12:ea:e5:40:18:58:97:12:b6:f4:11:52:26: b5:e8:c3:1f:36:02:de:3e:43:bf:55:c9:90:ac:71: ed:75:dd:a0:bb:5c:ee:11:3b:06:89:f8:21:ce:1f: 21:99:7b:9e:c8:9a:b6:4b:94:40:4a:82:4e:63:42: e9:a7:da:05:32:ee:79:f9:a6:a9:a5:34:dc:27:ab: 6a:d8:2e:79:c1:04:90:3c:1a:00:11:e1:51:f5:74: 59:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:1B:D4:F6:25:DF:12:89:EF:4E:79:47:6B:E8:FE:00:EC:C0:2C:54 X509v3 Authority Key Identifier: keyid:93:88:69:5C:CB:2D:CC:37:F2:AB:8A:3D:10:E4:FD:E0:C3:A9:75:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/83cbd67b-d190-4a4c-83b6-11887d7c2e99/0/9388695CCB2DCC37F2AB8A3D10E4FDE0C3A975A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:1f:bf:b4:8f:b9:43:ff:bc:4a:3a:70:0a:dd:87:6d:ad:b8: 88:86:2f:7f:3f:73:6d:21:ae:76:5b:87:63:3e:4b:9c:81:12: 72:cb:5c:08:80:28:50:16:f3:8a:23:cb:f6:ec:6b:44:46:64: 50:9d:88:e3:b8:08:ca:86:a2:87:bf:b4:43:3c:47:5e:99:9e: af:1b:45:95:6c:0d:b4:f5:15:c4:1e:13:34:08:74:b0:09:7e: 3c:97:2d:8c:6f:5f:4d:f0:80:86:fc:96:e5:73:b3:b6:3c:00: 7f:b3:76:d2:93:7e:40:d7:a2:99:f3:d8:01:cb:1e:c8:d0:bb: 40:c0:6b:49:26:88:66:d1:c8:ae:d5:e3:f7:78:42:82:03:cc: 6c:08:7a:c0:bd:d1:4b:30:03:74:82:5d:30:d9:b0:d2:a2:cf: 2f:a1:7a:f7:08:70:36:25:6f:af:e7:7e:35:7f:51:d5:3b:c5: 9f:d2:d1:25:1a:2b:28:94:0f:27:85:4d:4f:4b:bc:c4:fb:95: 91:34:83:41:44:9b:79:45:20:74:6b:95:15:29:6b:81:11:c8: e8:1a:0f:30:82:23:d0:a1:23:8b:ee:20:4b:a8:22:2d:83:07: 10:51:70:3d:fb:d1:29:1f:42:93:00:e4:92:88:e3:1c:8b:21: fd:20:e4:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEM/OEBsGuyoZTQWmZJdnJK9AL8cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTM4ODY5NUNDQjJEQ0MzN0YyQUI4QTNEMTBFNEZERTBD M0E5NzVBMTAeFw0yNTA0MjQxMDI1NDlaFw0yNTA0MjcxOTQ2NDlaMDMxMTAvBgNV BAMTKEIxMUJENEY2MjVERjEyODlFRjRFNzk0NzZCRThGRTAwRUNDMDJDNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyTZH5jXru92PIaHTh8ngSPBjJ IO8gM/rG67TC93RfWocvOO+WaOQ2q8lnSoM+PnunvlXr58S9Hm4i00zfWks7u1a+ aVPU4uEqeddSnue4pHXJ7BUqKgsolIz996qpF+pMgXlTu4PRP9bw9R6DC0f6yWDW WcV42zKAtbm5JDKwKg6SrUfqqef/RtFgkTx5uEgGuVDMWGb8BCk3yr11pM3SVAhx fen1EurlQBhYlxK29BFSJrXowx82At4+Q79VyZCsce113aC7XO4ROwaJ+CHOHyGZ e57ImrZLlEBKgk5jQumn2gUy7nn5pqmlNNwnq2rYLnnBBJA8GgAR4VH1dFkRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsRvU9iXfEonvTnlHa+j+AOzALFQwHwYDVR0j BBgwFoAUk4hpXMstzDfyq4o9EOT94MOpdaEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 M2NiZDY3Yi1kMTkwLTRhNGMtODNiNi0xMTg4N2Q3YzJlOTkvMC85Mzg4Njk1Q0NC MkRDQzM3RjJBQjhBM0QxMEU0RkRFMEMzQTk3NUExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTM4ODY5NUNDQjJEQ0MzN0YyQUI4QTNEMTBFNEZERTBDM0E5 NzVBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODNjYmQ2N2ItZDE5MC00YTRjLTgz YjYtMTE4ODdkN2MyZTk5LzAvOTM4ODY5NUNDQjJEQ0MzN0YyQUI4QTNEMTBFNEZE RTBDM0E5NzVBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAgfv7SPuUP/vEo6cArdh22tuIiGL38/c20h rnZbh2M+S5yBEnLLXAiAKFAW84ojy/bsa0RGZFCdiOO4CMqGooe/tEM8R16Znq8b RZVsDbT1FcQeEzQIdLAJfjyXLYxvX03wgIb8luVzs7Y8AH+zdtKTfkDXopnz2AHL HsjQu0DAa0kmiGbRyK7V4/d4QoIDzGwIesC90UswA3SCXTDZsNKizy+hevcIcDYl b6/nfjV/UdU7xZ/S0SUaKyiUDyeFTU9LvMT7lZE0g0FEm3lFIHRrlRUpa4ERyOga DzCCI9ChI4vuIEuoIi2DBxBRcD370SkfQpMA5JKI4xyLIf0g5Ko= -----END CERTIFICATE-----Generated at Thu Apr 24 13:38:49 2025 by rpki-client on console.sobornost.net