$ rpki-client -vvf repo-rpki.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.mft File: 9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.mft (raw, json) Hash identifier: iwFFtZJVjd8HpmTso2+moW3EV5MSQJBQJamc4CSVnjs= Subject key identifier: 7F:0B:25:F5:13:E5:4F:1C:D0:EC:0E:87:56:B5:E2:E5:80:0E:C9:69 Authority key identifier: 9F:FC:F0:AD:AE:CD:BD:1C:C5:6C:FE:B6:8D:9D:CA:F9:53:5A:10:17 Certificate issuer: /CN=9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017 Certificate serial: 433E3D137B578BC97B0D33CB6864DD8A349C52BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.mft Manifest number: 86 Signing time: Thu 24 Apr 2025 16:31:15 +0000 Manifest this update: Thu 24 Apr 2025 16:26:15 +0000 Manifest next update: Mon 28 Apr 2025 01:02:15 +0000 Files and hashes: 1: 3136302e32322e3232322e302f32342d3234203d3e20313533303633.roa (hash: Gcco8HMc4fDeDY6SNOtuEepeCd4wmhRWtDSSXTsyywU=) 2: 3136302e32322e3232332e302f32342d3234203d3e20313533303633.roa (hash: gyWJHanxNQG1DzFhuDTy0RtjXEo+5iUbOZzhyP1gSA0=) 3: 9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.crl (hash: 5sVVvXHteVF8OzUu71Vw1VkyAtBu3iGGgnIHoFD/s7A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.crl rsync://repo-rpki.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 19:57:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:3e:3d:13:7b:57:8b:c9:7b:0d:33:cb:68:64:dd:8a:34:9c:52:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017 Validity Not Before: Apr 24 16:26:15 2025 GMT Not After : Apr 28 01:02:15 2025 GMT Subject: CN=7F0B25F513E54F1CD0EC0E8756B5E2E5800EC969 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:8a:3a:ac:5f:4e:cc:fd:8d:92:8d:e7:98:c7: 68:a3:8c:4a:4d:7c:84:86:87:91:7c:28:05:61:2e: a3:66:ed:9a:64:21:56:d3:99:fc:6b:d7:e5:ed:6c: ec:69:36:4d:bb:83:3e:97:57:de:69:f0:b0:e7:a0: 06:75:71:c6:88:58:17:5c:95:e6:5c:54:41:66:c7: 18:cb:8f:db:31:4b:4f:60:b8:32:3c:69:ab:e4:ed: 1e:64:c2:6f:5d:10:e8:9d:5a:2d:07:7c:ce:b2:6c: eb:3c:5b:a9:48:ab:18:82:85:0c:dc:72:0a:e2:53: db:cf:30:31:ef:ff:65:7f:23:93:bc:ce:87:13:8d: 4d:d5:64:6b:45:4f:63:ff:8a:96:cb:17:4d:30:e1: 66:78:cc:81:48:6a:35:d8:91:95:e2:8f:99:f0:46: 7e:d7:d5:d3:d4:9d:76:81:2e:be:77:dd:02:5a:54: be:bc:0e:28:be:5a:28:ee:51:c3:83:88:cd:da:15: 2e:f0:e5:b4:4d:ce:44:25:48:93:e7:37:c3:42:ce: 84:55:26:72:f1:ec:90:65:00:99:54:fe:80:21:e8: 4c:04:20:13:b5:e1:c1:ae:f6:9c:2a:e3:56:d3:b7: af:9c:47:37:20:4a:0c:43:7c:7f:c1:b6:6f:20:3c: b6:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:0B:25:F5:13:E5:4F:1C:D0:EC:0E:87:56:B5:E2:E5:80:0E:C9:69 X509v3 Authority Key Identifier: keyid:9F:FC:F0:AD:AE:CD:BD:1C:C5:6C:FE:B6:8D:9D:CA:F9:53:5A:10:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:07:84:c4:0d:62:c5:fd:08:6d:ca:38:3c:e1:d4:ce:0c:b4: ee:8d:24:25:1d:dd:45:dc:63:fa:76:74:5e:31:6d:9a:d4:41: af:49:ee:69:a0:6b:e6:c2:55:18:46:9f:bb:e2:5b:bb:0b:da: 59:6f:b8:31:86:57:37:18:cd:41:b6:c7:3c:19:78:a4:9f:63: ec:59:b5:3f:4b:71:ca:17:de:2a:01:7d:f2:af:84:4b:e8:b6: 3a:47:f2:bd:13:98:be:46:62:23:2f:78:1f:74:d4:fb:ed:ab: 0a:4f:f6:11:07:2c:e2:97:b2:16:9f:a1:65:ec:f7:2f:b1:c3: e1:d2:52:e5:84:e5:ab:13:29:75:53:c1:cd:dc:8b:d0:8a:fe: 3a:3a:c9:a5:27:6d:a8:80:fe:a7:2d:7b:32:a6:30:de:d5:a9: 52:91:3e:22:3d:cb:e8:0a:dc:7e:f8:cc:d6:e7:74:54:e5:f6: 18:a3:8a:e1:0d:ab:ec:bc:43:93:09:43:69:75:4a:41:d0:fc: c1:59:6f:ef:37:d8:12:9c:8c:bd:83:69:01:89:46:a4:a3:d1: df:cb:5e:b8:c5:b3:28:fa:e3:6b:c6:17:79:0d:c0:f6:7c:4d: dd:54:5e:6d:99:82:35:dd:b9:4a:4b:ab:bc:6d:4c:4d:1f:07: 24:9a:44:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQz49E3tXi8l7DTPLaGTdijScUr0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZGQ0YwQURBRUNEQkQxQ0M1NkNGRUI2OEQ5RENBRjk1 MzVBMTAxNzAeFw0yNTA0MjQxNjI2MTVaFw0yNTA0MjgwMTAyMTVaMDMxMTAvBgNV BAMTKDdGMEIyNUY1MTNFNTRGMUNEMEVDMEU4NzU2QjVFMkU1ODAwRUM5NjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMijqsX07M/Y2SjeeYx2ijjEpN fISGh5F8KAVhLqNm7ZpkIVbTmfxr1+XtbOxpNk27gz6XV95p8LDnoAZ1ccaIWBdc leZcVEFmxxjLj9sxS09guDI8aavk7R5kwm9dEOidWi0HfM6ybOs8W6lIqxiChQzc cgriU9vPMDHv/2V/I5O8zocTjU3VZGtFT2P/ipbLF00w4WZ4zIFIajXYkZXij5nw Rn7X1dPUnXaBLr533QJaVL68Dii+WijuUcODiM3aFS7w5bRNzkQlSJPnN8NCzoRV JnLx7JBlAJlU/oAh6EwEIBO14cGu9pwq41bTt6+cRzcgSgxDfH/Btm8gPLYzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfwsl9RPlTxzQ7A6HVrXi5YAOyWkwHwYDVR0j BBgwFoAUn/zwra7NvRzFbP62jZ3K+VNaEBcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YjI5ZTkxMi0zNWM2LTQ4MGYtYjg2OS0yYTBmOGFlZjMwZDIvMC85RkZDRjBBREFF Q0RCRDFDQzU2Q0ZFQjY4RDlEQ0FGOTUzNUExMDE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUZGQ0YwQURBRUNEQkQxQ0M1NkNGRUI2OEQ5RENBRjk1MzVB MTAxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGIyOWU5MTItMzVjNi00ODBmLWI4 NjktMmEwZjhhZWYzMGQyLzAvOUZGQ0YwQURBRUNEQkQxQ0M1NkNGRUI2OEQ5RENB Rjk1MzVBMTAxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACMHhMQNYsX9CG3KODzh1M4MtO6NJCUd3UXc Y/p2dF4xbZrUQa9J7mmga+bCVRhGn7viW7sL2llvuDGGVzcYzUG2xzwZeKSfY+xZ tT9LccoX3ioBffKvhEvotjpH8r0TmL5GYiMveB901PvtqwpP9hEHLOKXshafoWXs 9y+xw+HSUuWE5asTKXVTwc3ci9CK/jo6yaUnbaiA/qctezKmMN7VqVKRPiI9y+gK 3H74zNbndFTl9hijiuENq+y8Q5MJQ2l1SkHQ/MFZb+832BKcjL2DaQGJRqSj0d/L XrjFsyj642vGF3kNwPZ8Td1UXm2ZgjXduUpLq7xtTE0fBySaRJU= -----END CERTIFICATE-----Generated at Thu Apr 24 18:01:27 2025 by rpki-client on console.sobornost.net