$ rpki-client -vvf repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft File: 1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft (raw, json) Hash identifier: MFUeJQfj+5da4AVchCbdBsmw7NnbtYdl4AaefIP+1kc= Subject key identifier: 05:E7:A2:12:85:59:B9:2D:36:34:7C:4C:6A:E1:A9:DB:D0:7D:15:23 Authority key identifier: 1F:CD:47:FB:4B:D7:29:E2:2E:4F:EE:FC:E5:B6:1B:4E:1C:7F:E9:46 Certificate issuer: /CN=1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946 Certificate serial: 704C099F3EDAAFE2CDC46AC550AB76D56E33C751 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft Manifest number: 0491 Signing time: Thu 24 Apr 2025 21:50:38 +0000 Manifest this update: Thu 24 Apr 2025 21:45:38 +0000 Manifest next update: Mon 28 Apr 2025 02:32:38 +0000 Files and hashes: 1: 3131382e39312e3134302e302f32322d3234203d3e203633353032.roa (hash: eICFPX1ffRHHlODjPDwkCsraQZYn70z4zLEPXC3PC0M=) 2: 323430313a343230303a3a2f33322d3438203d3e203234313935.roa (hash: 09pTyAPGkDhkuez65QhC+JUUx/+DkLuWQ1gGTLu7lyc=) 3: 1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.crl (hash: MKecoUBksmIMWJPWlL4nKScXtJ7nX/dPfHvWso97YUw=) 4: 3131382e39312e3132382e302f32312d3234203d3e203234313935.roa (hash: KvQlUIt+O8XkzXwyaibxzHplxyBpRPScmdyCJyB/bbo=) 5: 3230322e36372e382e302f32312d3234203d3e203234313935.roa (hash: fgSOFTmHBsm+tHxB6f309xDzUMsP9VUt4jQONOxHUT0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.crl rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:4c:09:9f:3e:da:af:e2:cd:c4:6a:c5:50:ab:76:d5:6e:33:c7:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946 Validity Not Before: Apr 24 21:45:38 2025 GMT Not After : Apr 28 02:32:38 2025 GMT Subject: CN=05E7A2128559B92D36347C4C6AE1A9DBD07D1523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:c4:d6:77:d1:d6:df:26:55:70:aa:c4:ba:6a: dd:e7:9b:a9:ef:c3:1d:f6:53:30:da:8b:7e:76:be: 44:98:97:d5:ef:9e:9e:81:7e:a6:d9:4c:ed:63:62: 25:fe:e8:43:d7:8d:12:6f:b2:21:02:08:08:e3:1b: 98:79:13:ba:ba:f1:69:be:13:72:a7:b0:13:c9:3d: 71:eb:6c:70:2b:19:b0:94:e0:e2:b2:92:7d:d4:ee: a8:b5:7a:76:41:eb:81:be:21:ba:d2:fe:23:08:6d: cc:f7:5e:36:45:df:6b:ec:a1:c0:19:f9:9b:71:3d: b6:84:02:f2:5f:6e:1a:2e:82:fe:fe:32:d9:cb:d0: 1d:f9:4d:08:ee:69:fc:6e:36:e6:ca:87:34:cf:23: 7d:ed:75:a1:67:e8:9d:bf:74:3a:f2:70:5d:84:0f: ee:83:23:f1:82:f4:06:27:a3:c8:46:75:ac:35:10: 25:c2:b4:d7:da:2a:03:4c:b5:d7:aa:b4:f8:b3:fc: 31:12:13:dd:84:29:85:89:cb:e6:3f:93:e1:ba:37: 46:1d:eb:9b:0a:27:0b:4f:1f:e8:d2:8e:d8:c0:a0: f1:9d:20:ec:19:dd:f4:4c:c9:58:32:2d:37:e9:31: d0:b6:50:5d:76:9b:b4:98:03:4b:f6:26:28:11:05: e7:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:E7:A2:12:85:59:B9:2D:36:34:7C:4C:6A:E1:A9:DB:D0:7D:15:23 X509v3 Authority Key Identifier: keyid:1F:CD:47:FB:4B:D7:29:E2:2E:4F:EE:FC:E5:B6:1B:4E:1C:7F:E9:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:6d:93:18:d2:45:05:a0:4f:f9:e2:58:0f:57:9a:52:3d:c2: a5:c8:f2:e2:e7:29:c5:f2:3b:33:0b:01:0d:0a:e2:f2:8d:54: bc:e6:6b:d6:ba:cf:bf:1e:b5:73:90:a0:70:40:ff:10:b6:e0: bf:b8:bd:18:be:b3:32:97:23:9e:3a:3b:c7:28:37:f3:e0:e5: 4d:fe:35:96:9d:f9:05:75:6a:45:cf:cd:a1:32:01:56:07:97: 53:8c:3f:0d:19:e3:fe:ac:41:10:cb:8c:d6:69:4b:ba:69:fe: 73:19:d5:27:ad:bb:0e:56:22:3d:11:db:3c:64:63:97:81:59: 24:2f:79:58:78:8f:4f:50:f2:f9:9d:5a:15:4a:5b:e5:be:02: de:03:31:d8:73:33:96:33:ce:28:15:24:24:e1:80:37:0f:a8: 2f:c2:ae:83:2e:9b:86:5f:49:e0:16:da:d6:4b:35:88:24:80: 86:6a:da:0b:bf:8a:3e:03:6e:17:cc:ad:57:0a:b5:3d:44:fa: 54:c7:63:bd:26:46:1b:85:d3:7b:70:dc:ae:42:2f:f9:8f:d0: d6:3f:99:21:e5:c8:d2:17:b5:6c:15:ef:a5:59:11:3b:33:6b: d7:d0:1e:12:42:9c:88:54:0d:80:1e:0c:df:bb:cc:ed:c8:b0: 48:af:db:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcEwJnz7ar+LNxGrFUKt21W4zx1EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZDRDQ3RkI0QkQ3MjlFMjJFNEZFRUZDRTVCNjFCNEUx QzdGRTk0NjAeFw0yNTA0MjQyMTQ1MzhaFw0yNTA0MjgwMjMyMzhaMDMxMTAvBgNV BAMTKDA1RTdBMjEyODU1OUI5MkQzNjM0N0M0QzZBRTFBOURCRDA3RDE1MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtxNZ30dbfJlVwqsS6at3nm6nv wx32UzDai352vkSYl9Xvnp6BfqbZTO1jYiX+6EPXjRJvsiECCAjjG5h5E7q68Wm+ E3KnsBPJPXHrbHArGbCU4OKykn3U7qi1enZB64G+IbrS/iMIbcz3XjZF32vsocAZ +ZtxPbaEAvJfbhougv7+MtnL0B35TQjuafxuNubKhzTPI33tdaFn6J2/dDrycF2E D+6DI/GC9AYno8hGdaw1ECXCtNfaKgNMtdeqtPiz/DESE92EKYWJy+Y/k+G6N0Yd 65sKJwtPH+jSjtjAoPGdIOwZ3fRMyVgyLTfpMdC2UF12m7SYA0v2JigRBef/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBeeiEoVZuS02NHxMauGp29B9FSMwHwYDVR0j BBgwFoAUH81H+0vXKeIuT+785bYbThx/6UYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NzkyYTRjZC1kYmFjLTQzYWMtODA2MC0yZThkNDJlYWU2NTUvMC8xRkNENDdGQjRC RDcyOUUyMkU0RkVFRkNFNUI2MUI0RTFDN0ZFOTQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZDRDQ3RkI0QkQ3MjlFMjJFNEZFRUZDRTVCNjFCNEUxQzdG RTk0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODc5MmE0Y2QtZGJhYy00M2FjLTgw NjAtMmU4ZDQyZWFlNjU1LzAvMUZDRDQ3RkI0QkQ3MjlFMjJFNEZFRUZDRTVCNjFC NEUxQzdGRTk0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAVtkxjSRQWgT/niWA9XmlI9wqXI8uLnKcXy OzMLAQ0K4vKNVLzma9a6z78etXOQoHBA/xC24L+4vRi+szKXI546O8coN/Pg5U3+ NZad+QV1akXPzaEyAVYHl1OMPw0Z4/6sQRDLjNZpS7pp/nMZ1Setuw5WIj0R2zxk Y5eBWSQveVh4j09Q8vmdWhVKW+W+At4DMdhzM5YzzigVJCThgDcPqC/CroMum4Zf SeAW2tZLNYgkgIZq2gu/ij4DbhfMrVcKtT1E+lTHY70mRhuF03tw3K5CL/mP0NY/ mSHlyNIXtWwV76VZETsza9fQHhJCnIhUDYAeDN+7zO3IsEiv29I= -----END CERTIFICATE-----Generated at Fri Apr 25 03:46:17 2025 by rpki-client on console.sobornost.net