$ rpki-client -vvf repo-rpki.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/BCDF6D8F5670257F852914E87D552983AA37A3A3.mft File: BCDF6D8F5670257F852914E87D552983AA37A3A3.mft (raw, json) Hash identifier: wlfUAfzilVXZg9+TmwaVFMW4UdNEirvpJRvR+7g51RM= Subject key identifier: 7F:68:F0:C2:6A:47:7E:5F:64:17:0C:55:00:EF:03:E1:44:84:81:3A Authority key identifier: BC:DF:6D:8F:56:70:25:7F:85:29:14:E8:7D:55:29:83:AA:37:A3:A3 Certificate issuer: /CN=BCDF6D8F5670257F852914E87D552983AA37A3A3 Certificate serial: 12430BF8242CE3779AE02694F361677CB1378CCE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCDF6D8F5670257F852914E87D552983AA37A3A3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/BCDF6D8F5670257F852914E87D552983AA37A3A3.mft Manifest number: 0420 Signing time: Wed 23 Apr 2025 22:40:56 +0000 Manifest this update: Wed 23 Apr 2025 22:35:56 +0000 Manifest next update: Sun 27 Apr 2025 04:41:56 +0000 Files and hashes: 1: 3130332e3134372e37362e302f32342d3234203d3e20313339393532.roa (hash: bwkHoMcFkTxg1cprLBeFyt3e6yMZZa8kwMNQMpEMTkk=) 2: BCDF6D8F5670257F852914E87D552983AA37A3A3.crl (hash: yrOyZ1rUoDp+u0nbAqHtzxcEo5VgmL9/DhRBTPi7BpA=) 3: 3130332e3134372e37362e302f32332d3233203d3e20313339393532.roa (hash: wXlkmxwi7/34ddrk854GfkHymHTZJQyn7AeLJRM2mj8=) 4: 3130332e3134372e37372e302f32342d3234203d3e20313339393532.roa (hash: 0N5j+ZERhxA6Ar8dT9/oyVhTL5hECc6nE7wFownHGuo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/BCDF6D8F5670257F852914E87D552983AA37A3A3.crl rsync://repo-rpki.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/BCDF6D8F5670257F852914E87D552983AA37A3A3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCDF6D8F5670257F852914E87D552983AA37A3A3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 02:40:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:43:0b:f8:24:2c:e3:77:9a:e0:26:94:f3:61:67:7c:b1:37:8c:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCDF6D8F5670257F852914E87D552983AA37A3A3 Validity Not Before: Apr 23 22:35:56 2025 GMT Not After : Apr 27 04:41:56 2025 GMT Subject: CN=7F68F0C26A477E5F64170C5500EF03E14484813A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:bc:bd:ff:83:36:09:fd:ad:2f:97:3e:b1:00: f0:85:a7:48:93:04:2c:f4:ab:f3:40:f4:b9:cd:92: e4:dc:ef:c2:0e:fc:0d:a9:dc:78:02:2f:4d:89:24: 69:c1:d2:9f:23:42:d2:a6:4d:99:be:fa:ac:a6:d8: e8:6b:84:b8:93:ca:0a:a0:c4:82:f8:95:61:35:ed: 0c:b2:e4:cd:82:e3:d5:2a:0b:a9:b1:22:5f:12:fa: f6:14:74:b3:95:6a:f5:a9:40:60:2b:45:ce:d2:ab: d1:b6:53:be:88:a6:fe:af:f1:44:6b:46:1c:35:c3: 09:55:9c:04:26:11:d6:42:89:29:54:16:c9:7f:54: 27:b0:46:07:f4:91:77:8c:80:25:36:04:81:0c:23: 9d:0b:11:d4:62:65:7e:1e:78:08:fb:d5:c6:73:46: 41:bb:42:eb:f6:0e:88:b5:70:06:e3:57:d5:db:4b: 7c:49:9c:12:94:7b:45:a9:c5:91:fa:70:71:b6:8b: af:72:05:17:13:02:ec:c0:ff:0b:a5:fa:00:38:57: 6b:9d:b0:f6:2d:33:b2:0b:eb:b9:13:33:51:45:5d: 08:95:8d:20:f6:15:e7:a7:c2:4b:73:17:22:f6:1a: 19:32:cb:a1:e3:88:f5:7a:33:d6:de:e9:47:ba:fc: f0:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:68:F0:C2:6A:47:7E:5F:64:17:0C:55:00:EF:03:E1:44:84:81:3A X509v3 Authority Key Identifier: keyid:BC:DF:6D:8F:56:70:25:7F:85:29:14:E8:7D:55:29:83:AA:37:A3:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/BCDF6D8F5670257F852914E87D552983AA37A3A3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCDF6D8F5670257F852914E87D552983AA37A3A3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/BCDF6D8F5670257F852914E87D552983AA37A3A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:d8:c1:04:62:f7:66:42:cb:60:63:14:68:5e:92:9a:84:cc: 5e:1a:2b:70:9e:78:c5:07:22:10:37:bc:28:c3:50:8d:5e:5f: 33:22:23:22:4b:94:47:f3:f4:8b:a2:79:bb:40:86:cc:82:ae: bc:a9:b7:3a:8d:f5:05:9c:2a:82:a0:70:c7:30:8a:da:23:43: ad:77:b6:14:e2:ea:8d:43:c3:7a:c1:a6:48:a3:70:9d:cd:e1: d1:ab:4c:a3:0a:52:26:31:2b:59:ae:90:b4:a8:69:97:74:cd: 45:23:2e:56:a7:24:32:68:01:1f:75:79:cd:6f:28:af:64:c1: 57:05:45:9a:18:f0:ed:ba:5f:24:8a:71:c7:0f:46:c5:76:b4: f0:d2:c1:c2:b4:a0:50:44:4d:3f:be:e4:84:3d:22:d0:a7:7d: b5:74:83:6a:d7:a5:9b:b2:a6:e0:00:55:c8:c1:ee:54:46:c0: e8:fc:c9:24:c4:5f:98:d2:56:4d:9a:4d:61:b8:1b:d7:2b:5e: 73:0a:b5:6b:e5:6f:37:28:7e:1d:44:93:21:72:9a:98:f5:0f: 6a:53:a1:3f:6e:1b:8c:85:c0:56:9b:5f:d6:ae:7f:1d:76:a6: ba:04:8b:62:fc:72:93:f0:43:d7:ba:9e:99:8b:b5:dd:de:c3: b6:3c:4e:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEkML+CQs43ea4CaU82FnfLE3jM4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNERjZEOEY1NjcwMjU3Rjg1MjkxNEU4N0Q1NTI5ODNB QTM3QTNBMzAeFw0yNTA0MjMyMjM1NTZaFw0yNTA0MjcwNDQxNTZaMDMxMTAvBgNV BAMTKDdGNjhGMEMyNkE0NzdFNUY2NDE3MEM1NTAwRUYwM0UxNDQ4NDgxM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwvL3/gzYJ/a0vlz6xAPCFp0iT BCz0q/NA9LnNkuTc78IO/A2p3HgCL02JJGnB0p8jQtKmTZm++qym2OhrhLiTygqg xIL4lWE17Qyy5M2C49UqC6mxIl8S+vYUdLOVavWpQGArRc7Sq9G2U76Ipv6v8URr Rhw1wwlVnAQmEdZCiSlUFsl/VCewRgf0kXeMgCU2BIEMI50LEdRiZX4eeAj71cZz RkG7Quv2Doi1cAbjV9XbS3xJnBKUe0WpxZH6cHG2i69yBRcTAuzA/wul+gA4V2ud sPYtM7IL67kTM1FFXQiVjSD2FeenwktzFyL2Ghkyy6HjiPV6M9be6Ue6/PALAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf2jwwmpHfl9kFwxVAO8D4USEgTowHwYDVR0j BBgwFoAUvN9tj1ZwJX+FKRTofVUpg6o3o6MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NzdiMDFjZi1iMWM5LTQ1MGYtODU1MS00ZGNiNGNiZDQyNjIvMC9CQ0RGNkQ4RjU2 NzAyNTdGODUyOTE0RTg3RDU1Mjk4M0FBMzdBM0EzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkNERjZEOEY1NjcwMjU3Rjg1MjkxNEU4N0Q1NTI5ODNBQTM3 QTNBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODc3YjAxY2YtYjFjOS00NTBmLTg1 NTEtNGRjYjRjYmQ0MjYyLzAvQkNERjZEOEY1NjcwMjU3Rjg1MjkxNEU4N0Q1NTI5 ODNBQTM3QTNBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAvYwQRi92ZCy2BjFGhekpqEzF4aK3CeeMUH IhA3vCjDUI1eXzMiIyJLlEfz9IuiebtAhsyCrryptzqN9QWcKoKgcMcwitojQ613 thTi6o1Dw3rBpkijcJ3N4dGrTKMKUiYxK1mukLSoaZd0zUUjLlanJDJoAR91ec1v KK9kwVcFRZoY8O26XySKcccPRsV2tPDSwcK0oFBETT++5IQ9ItCnfbV0g2rXpZuy puAAVcjB7lRGwOj8ySTEX5jSVk2aTWG4G9crXnMKtWvlbzcofh1EkyFympj1D2pT oT9uG4yFwFabX9aufx12proEi2L8cpPwQ9e6npmLtd3ew7Y8ThU= -----END CERTIFICATE-----Generated at Thu Apr 24 01:45:15 2025 by rpki-client on console.sobornost.net