$ rpki-client -vvf repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft File: 9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft (raw, json) Hash identifier: tTutstf8oR17Xihdtnere0IL87MMHI0MbHw20Yaxaf8= Subject key identifier: EE:88:35:C0:CF:9C:1F:13:BA:E1:92:E5:52:4A:3F:70:2E:DF:4C:9A Authority key identifier: 98:52:AB:B8:50:8D:E5:51:F1:72:3B:C9:AC:5E:C3:9B:35:05:6A:E2 Certificate issuer: /CN=9852ABB8508DE551F1723BC9AC5EC39B35056AE2 Certificate serial: 2ECB27C0FDE83D4AA0819958586B798BA6783B8F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft Manifest number: 04CB Signing time: Thu 24 Apr 2025 12:01:54 +0000 Manifest this update: Thu 24 Apr 2025 11:56:54 +0000 Manifest next update: Sun 27 Apr 2025 19:52:54 +0000 Files and hashes: 1: 9852ABB8508DE551F1723BC9AC5EC39B35056AE2.crl (hash: h8v7ne9vSP2hZHlvELpxJrqXsAGLwStZMr319TA+MoU=) 2: 323030313a6466343a366430303a3a2f34382d3438203d3e20313337333734.roa (hash: neCvjYj4OGxzsARs2VAX0fQB/pQLEakmCBDGYrtFesk=) 3: 3130332e3131302e3138342e302f32332d3234203d3e20313337333734.roa (hash: diSJtF4pncDv3TYDAQkVNDujeOW0TndNL50eRWU9t2k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.crl rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 17:17:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:cb:27:c0:fd:e8:3d:4a:a0:81:99:58:58:6b:79:8b:a6:78:3b:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9852ABB8508DE551F1723BC9AC5EC39B35056AE2 Validity Not Before: Apr 24 11:56:54 2025 GMT Not After : Apr 27 19:52:54 2025 GMT Subject: CN=EE8835C0CF9C1F13BAE192E5524A3F702EDF4C9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8f:64:a3:1f:a0:76:96:07:2d:72:c3:18:e3: ca:af:b8:f8:cc:d6:5c:03:af:18:5f:50:63:28:a8: 63:5a:5b:92:1f:28:cc:3a:c1:74:11:d7:f2:d7:31: fd:56:43:2d:fd:33:38:10:b5:b1:ee:f9:f2:03:d7: 5d:8b:9d:77:2d:62:15:29:04:87:11:fc:f3:1c:72: 0f:1c:5c:05:f6:96:59:e0:d7:cc:87:79:86:40:23: bb:b3:28:9f:31:43:4e:65:10:9b:ee:3c:d2:e1:42: a6:af:54:0a:9e:7b:09:75:7c:d8:82:dc:5f:cd:8b: 09:00:75:c3:c6:68:b9:33:45:a9:14:c2:b5:a3:3c: be:da:e9:5e:11:cd:50:01:b9:c9:dd:ab:c0:c1:23: 51:1a:6a:38:d4:8c:03:c7:40:d7:24:d5:9c:d2:6b: 75:1c:ae:87:87:29:3c:65:b7:8f:22:69:2c:82:04: 6a:e8:20:17:08:64:9e:43:13:e7:0b:56:40:e8:48: 22:44:76:51:7f:06:45:04:8a:8b:af:2b:6f:79:11: ea:fb:23:34:33:36:50:a4:46:4f:31:1f:36:68:0d: 0b:2d:50:80:bd:af:6e:70:b2:fe:5c:49:18:8d:a7: 59:23:4d:26:7f:5d:65:45:7d:90:ba:23:d9:47:2a: ea:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:88:35:C0:CF:9C:1F:13:BA:E1:92:E5:52:4A:3F:70:2E:DF:4C:9A X509v3 Authority Key Identifier: keyid:98:52:AB:B8:50:8D:E5:51:F1:72:3B:C9:AC:5E:C3:9B:35:05:6A:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:3c:5a:e6:60:af:a4:76:dd:d8:69:02:e0:61:63:fa:ef:a2: 98:0b:11:0d:86:6b:3c:41:f7:7a:3b:f2:9c:78:b8:ce:e9:ff: 31:db:14:a0:c6:8d:d0:6d:82:7f:ea:c3:ee:e0:fd:77:1b:81: 90:1f:16:f0:8d:d3:0e:fc:60:92:b1:67:f9:10:d8:47:b7:37: 3a:5b:6a:b6:1d:3a:5b:9b:06:18:f9:0c:0c:7a:70:0d:f5:a3: 15:42:c9:01:06:40:4c:e7:bb:06:02:bc:a8:c8:04:c5:25:38: a2:25:f3:a3:5d:98:a0:13:51:77:8a:ca:b2:65:07:0b:70:79: 5e:65:a3:6c:a1:ed:c9:60:3a:99:c0:af:68:36:69:33:4b:08: 54:9b:a3:74:ed:f6:98:f7:79:b7:11:bc:20:3c:9a:14:65:47: 9e:51:63:63:4c:1a:ac:b3:0d:6c:9f:33:16:16:e0:65:ef:4f: 47:ba:c4:e0:fa:e1:de:16:c4:40:ca:f7:67:4b:e0:e4:f6:95: ad:7c:0f:28:60:83:2e:ce:c5:18:8b:51:69:8c:ee:9f:89:e6: d3:c4:e7:32:b5:43:06:24:88:65:77:e5:2a:e4:29:d4:0a:82: 7a:4d:0c:5e:cd:9d:71:ef:be:a3:bc:30:35:6a:03:75:05:82: bf:29:bc:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULssnwP3oPUqggZlYWGt5i6Z4O48wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg1MkFCQjg1MDhERTU1MUYxNzIzQkM5QUM1RUMzOUIz NTA1NkFFMjAeFw0yNTA0MjQxMTU2NTRaFw0yNTA0MjcxOTUyNTRaMDMxMTAvBgNV BAMTKEVFODgzNUMwQ0Y5QzFGMTNCQUUxOTJFNTUyNEEzRjcwMkVERjRDOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqj2SjH6B2lgctcsMY48qvuPjM 1lwDrxhfUGMoqGNaW5IfKMw6wXQR1/LXMf1WQy39MzgQtbHu+fID112LnXctYhUp BIcR/PMccg8cXAX2llng18yHeYZAI7uzKJ8xQ05lEJvuPNLhQqavVAqeewl1fNiC 3F/NiwkAdcPGaLkzRakUwrWjPL7a6V4RzVABucndq8DBI1EaajjUjAPHQNck1ZzS a3UcroeHKTxlt48iaSyCBGroIBcIZJ5DE+cLVkDoSCJEdlF/BkUEiouvK295Eer7 IzQzNlCkRk8xHzZoDQstUIC9r25wsv5cSRiNp1kjTSZ/XWVFfZC6I9lHKuopAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7og1wM+cHxO64ZLlUko/cC7fTJowHwYDVR0j BBgwFoAUmFKruFCN5VHxcjvJrF7DmzUFauIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YTY2ZjM1MC1lNjQyLTQwMmYtOGFjMy02YWVmN2UxMWFhYzMvMC85ODUyQUJCODUw OERFNTUxRjE3MjNCQzlBQzVFQzM5QjM1MDU2QUUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg1MkFCQjg1MDhERTU1MUYxNzIzQkM5QUM1RUMzOUIzNTA1 NkFFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGE2NmYzNTAtZTY0Mi00MDJmLThh YzMtNmFlZjdlMTFhYWMzLzAvOTg1MkFCQjg1MDhERTU1MUYxNzIzQkM5QUM1RUMz OUIzNTA1NkFFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIg8WuZgr6R23dhpAuBhY/rvopgLEQ2GazxB 93o78px4uM7p/zHbFKDGjdBtgn/qw+7g/XcbgZAfFvCN0w78YJKxZ/kQ2Ee3Nzpb arYdOlubBhj5DAx6cA31oxVCyQEGQEznuwYCvKjIBMUlOKIl86NdmKATUXeKyrJl BwtweV5lo2yh7clgOpnAr2g2aTNLCFSbo3Tt9pj3ebcRvCA8mhRlR55RY2NMGqyz DWyfMxYW4GXvT0e6xOD64d4WxEDK92dL4OT2la18Dyhggy7OxRiLUWmM7p+J5tPE 5zK1QwYkiGV35SrkKdQKgnpNDF7NnXHvvqO8MDVqA3UFgr8pvFc= -----END CERTIFICATE-----Generated at Thu Apr 24 13:38:49 2025 by rpki-client on console.sobornost.net