$ rpki-client -vvf repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft File: B563D708A094B24FC361EDD11C91EE7979AB0471.mft (raw, json) Hash identifier: CAVMXM+GPkWJnd1N6WSNGN+W1Or5N1BTwjivRFZhQGU= Subject key identifier: C3:29:DB:BA:A6:9F:2C:9F:0C:8B:12:4E:0F:40:97:B7:77:9B:E0:3B Authority key identifier: B5:63:D7:08:A0:94:B2:4F:C3:61:ED:D1:1C:91:EE:79:79:AB:04:71 Certificate issuer: /CN=B563D708A094B24FC361EDD11C91EE7979AB0471 Certificate serial: 56A8D6D23BDE031A6D4B8BBF548F51984FF1BB1C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B563D708A094B24FC361EDD11C91EE7979AB0471.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft Manifest number: 044A Signing time: Wed 23 Apr 2025 15:21:05 +0000 Manifest this update: Wed 23 Apr 2025 15:16:05 +0000 Manifest next update: Sat 26 Apr 2025 19:54:05 +0000 Files and hashes: 1: B563D708A094B24FC361EDD11C91EE7979AB0471.crl (hash: PUgwIEZYtBSmRUMFQK0Icrfn9bhicCDlShl0zRF+OFA=) 2: 3130332e3135382e3233342e302f32342d3234203d3e20313431313332.roa (hash: DGfAo05fKoOwOYpCuhv9fRDHV+AUZgV1sVLKuj31JYc=) 3: 3130332e3135382e3233342e302f32332d3233203d3e20313431313332.roa (hash: bWoeXxpcULQJI+FL8P7bige1XkZqPOoPbJG66/nkyFc=) 4: 3130332e3135382e3233342e302f32342d3234203d3e20313431383938.roa (hash: D2U2OhiX4JpcmakIWdkjvlLoKPGy8UFmuSAMLEyoyEQ=) 5: 3130332e3135382e3233352e302f32342d3234203d3e20313431383938.roa (hash: RkBfllGvEefotMCbBX+M6tjX7qjYPoT7phVfnxdgKbU=) 6: 3130332e3135382e3233342e302f32332d3233203d3e20313431383938.roa (hash: ubs3KFRcbUrpRgNw8QOw+os2JdUl6qStS3zNmN6w2iE=) 7: 3130332e3135382e3233352e302f32342d3234203d3e20313431313332.roa (hash: wu1R31TtfIFRPzZm0Pb0tIerh4jIibnO+i3KDJeQHqM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.crl rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B563D708A094B24FC361EDD11C91EE7979AB0471.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 12:29:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:a8:d6:d2:3b:de:03:1a:6d:4b:8b:bf:54:8f:51:98:4f:f1:bb:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B563D708A094B24FC361EDD11C91EE7979AB0471 Validity Not Before: Apr 23 15:16:05 2025 GMT Not After : Apr 26 19:54:05 2025 GMT Subject: CN=C329DBBAA69F2C9F0C8B124E0F4097B7779BE03B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e7:05:b1:6d:eb:23:0d:ea:b1:69:e2:f1:dd: 71:9f:e1:62:a3:80:ba:c3:d6:5f:4f:6c:17:dd:6d: 33:0c:e3:fd:39:12:11:61:2c:2d:96:03:52:ae:dc: 8f:09:f8:98:0c:98:3d:a5:f2:01:38:17:42:a6:94: b8:15:f5:d6:fe:70:95:b4:a8:2c:6a:ec:4b:90:46: 61:77:a0:38:2d:b0:77:50:ed:bf:c5:78:75:ef:a9: 0a:c2:fe:01:b7:f1:5e:99:26:90:de:72:4d:01:0b: 1c:b3:4b:b3:76:67:4d:b8:95:a4:9d:f3:ed:84:de: 4f:08:65:47:55:6c:71:ba:6e:2c:ad:04:5b:31:32: 1d:45:fc:4f:b2:74:4b:aa:f0:92:50:9c:93:78:9c: 47:71:23:90:6c:80:51:8a:af:6d:62:6b:68:82:f3: 4e:06:b9:f8:d9:64:ec:ae:f2:c1:75:02:8a:95:e9: ec:fd:23:ad:9c:6b:ed:54:f5:8c:03:75:da:66:60: 27:1c:d6:38:a3:dc:d8:d3:fb:69:da:fc:88:e4:36: 3b:bb:e0:76:e3:dc:46:1a:35:14:46:05:0d:53:c3: 27:7a:fe:85:23:b2:a3:f5:13:ba:a2:d9:35:c0:74: 2b:cb:1b:4e:a8:41:50:c5:44:64:34:b7:20:03:ad: e8:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:29:DB:BA:A6:9F:2C:9F:0C:8B:12:4E:0F:40:97:B7:77:9B:E0:3B X509v3 Authority Key Identifier: keyid:B5:63:D7:08:A0:94:B2:4F:C3:61:ED:D1:1C:91:EE:79:79:AB:04:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B563D708A094B24FC361EDD11C91EE7979AB0471.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:f0:0c:2f:1a:02:95:ba:a6:81:7e:9f:08:18:2d:43:4c:6e: bf:fc:3c:38:b1:fe:fd:e2:4d:0c:bd:cb:5a:ee:1c:7c:73:b7: ef:e6:78:e7:42:87:bb:f7:62:9d:00:bf:f8:bf:8b:e9:5b:97: cf:c8:3e:9b:69:03:18:3b:76:d2:30:62:3a:b9:7d:03:89:8f: 92:61:c0:c0:79:6d:70:eb:31:80:e1:17:45:77:5e:cb:f9:8b: 29:60:f1:fa:82:ee:bc:57:b8:d1:f4:6d:72:cf:c1:7c:5f:94: 0d:3d:67:c5:5b:60:54:8c:54:44:29:7d:83:df:91:85:4b:94: 77:f3:55:e6:cc:85:ef:af:be:69:56:9d:7d:ed:7e:8c:ac:b7: b1:e7:af:b2:59:1e:51:2c:15:e7:d3:66:eb:a0:79:12:56:63: 2c:d3:eb:84:ba:3e:71:6a:c0:61:79:cf:d7:a8:cd:46:43:9c: 3f:42:0a:e4:ab:12:8c:9a:5d:5f:19:ed:df:6c:f8:0e:71:d5: 1b:6f:f2:7a:68:bf:a4:83:8d:00:60:ad:ea:bb:10:9d:1c:29: 5d:86:c1:e6:b1:b1:62:fb:33:b0:7a:1f:df:aa:1a:15:d6:73: a7:60:10:26:69:0d:8b:3a:be:5d:68:9c:96:69:d6:3c:84:2c: 71:89:b5:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVqjW0jveAxptS4u/VI9RmE/xuxwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU2M0Q3MDhBMDk0QjI0RkMzNjFFREQxMUM5MUVFNzk3 OUFCMDQ3MTAeFw0yNTA0MjMxNTE2MDVaFw0yNTA0MjYxOTU0MDVaMDMxMTAvBgNV BAMTKEMzMjlEQkJBQTY5RjJDOUYwQzhCMTI0RTBGNDA5N0I3Nzc5QkUwM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI5wWxbesjDeqxaeLx3XGf4WKj gLrD1l9PbBfdbTMM4/05EhFhLC2WA1Ku3I8J+JgMmD2l8gE4F0KmlLgV9db+cJW0 qCxq7EuQRmF3oDgtsHdQ7b/FeHXvqQrC/gG38V6ZJpDeck0BCxyzS7N2Z024laSd 8+2E3k8IZUdVbHG6biytBFsxMh1F/E+ydEuq8JJQnJN4nEdxI5BsgFGKr21ia2iC 804GufjZZOyu8sF1AoqV6ez9I62ca+1U9YwDddpmYCcc1jij3NjT+2na/IjkNju7 4Hbj3EYaNRRGBQ1Twyd6/oUjsqP1E7qi2TXAdCvLG06oQVDFRGQ0tyADrehrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwynbuqafLJ8MixJOD0CXt3eb4DswHwYDVR0j BBgwFoAUtWPXCKCUsk/DYe3RHJHueXmrBHEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDM2ZTA3Yy04MjgzLTQzZDMtOTE2NC0zZTBlNmNhY2Y0OTkvMC9CNTYzRDcwOEEw OTRCMjRGQzM2MUVERDExQzkxRUU3OTc5QUIwNDcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjU2M0Q3MDhBMDk0QjI0RkMzNjFFREQxMUM5MUVFNzk3OUFC MDQ3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTAzNmUwN2MtODI4My00M2QzLTkx NjQtM2UwZTZjYWNmNDk5LzAvQjU2M0Q3MDhBMDk0QjI0RkMzNjFFREQxMUM5MUVF Nzk3OUFCMDQ3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABzwDC8aApW6poF+nwgYLUNMbr/8PDix/v3i TQy9y1ruHHxzt+/meOdCh7v3Yp0Av/i/i+lbl8/IPptpAxg7dtIwYjq5fQOJj5Jh wMB5bXDrMYDhF0V3Xsv5iylg8fqC7rxXuNH0bXLPwXxflA09Z8VbYFSMVEQpfYPf kYVLlHfzVebMhe+vvmlWnX3tfoyst7Hnr7JZHlEsFefTZuugeRJWYyzT64S6PnFq wGF5z9eozUZDnD9CCuSrEoyaXV8Z7d9s+A5x1Rtv8npov6SDjQBgreq7EJ0cKV2G weaxsWL7M7B6H9+qGhXWc6dgECZpDYs6vl1onJZp1jyELHGJtcs= -----END CERTIFICATE-----Generated at Wed Apr 23 17:38:31 2025 by rpki-client on console.sobornost.net