$ rpki-client -vvf repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft File: F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft (raw, json) Hash identifier: AJZaFajzq0Eshmu7wkPHwd5iW1AeX8VFTNNW2zYp/sA= Subject key identifier: 06:97:BD:B3:0F:38:C2:5F:93:F0:39:E7:96:B6:28:95:3E:B3:A1:B0 Authority key identifier: F5:58:D9:AA:4E:66:D7:B6:E4:CB:29:EC:87:79:53:D3:ED:6C:D7:66 Certificate issuer: /CN=F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766 Certificate serial: 681D33091159DCDC2C62B6FA4BEAA7CB7C14F3F1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.cer Subject info access: rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft Manifest number: 029C Signing time: Thu 24 Apr 2025 23:20:03 +0000 Manifest this update: Thu 24 Apr 2025 23:15:03 +0000 Manifest next update: Mon 28 Apr 2025 10:07:03 +0000 Files and hashes: 1: 3130332e3133322e3233392e302f32342d3234203d3e20313338313239.roa (hash: p62ZDq5ZKBkPYp/iloiGAyAKE+MyvpfKUn6NvYYi1Cg=) 2: 3130332e3133322e3233372e302f32342d3234203d3e20313338313239.roa (hash: Ts+xPNKTeqHI6xUcpbKs8S135rclyr4OArUohFwar50=) 3: F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.crl (hash: vbZPZ+WHGmxWawAg843QjTKf7VRhDkgTRipyXNVWT4g=) 4: 3130332e3133322e3233362e302f32322d3234203d3e20313338313239.roa (hash: 5qpVCvjI9PjIophhb0DrKlY1ZzQUC1Gd5jsIbY8iF5Y=) 5: 323430343a343234303a3a2f33322d3438203d3e20313338313239.roa (hash: SvIeLSLlhhpFSIgXipR6gaxlaD8nS6vjAYwqJyJZieU=) 6: 323430343a343234303a3133383a3a2f34382d3438203d3e20313338313239.roa (hash: nq4zy1af72x204AkF+u1PwnoA4FxaLfpw4t+rXKovzs=) 7: 3130332e3133322e3233362e302f32342d3234203d3e20313338313239.roa (hash: i9nBXlvSxbioIMa6/RyGmFvQTR4AM5zzTQEPL/AB/CY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.crl rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:1d:33:09:11:59:dc:dc:2c:62:b6:fa:4b:ea:a7:cb:7c:14:f3:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766 Validity Not Before: Apr 24 23:15:03 2025 GMT Not After : Apr 28 10:07:03 2025 GMT Subject: CN=0697BDB30F38C25F93F039E796B628953EB3A1B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:76:fb:0a:57:9f:c0:b6:ad:24:21:9a:6b:ae: d9:8a:34:e8:fa:0c:ea:f9:a0:0c:65:3a:9f:65:14: 6f:e9:28:bc:49:f6:93:e5:97:99:4e:19:d8:e0:01: d7:5c:58:b4:6d:67:77:75:f8:dc:ed:72:70:b8:ff: 68:c3:11:3c:fb:cc:aa:50:93:1d:dd:7f:ae:27:60: 4a:2b:28:2b:99:36:d1:79:ef:3d:fe:7c:98:fd:60: 65:e5:55:27:b5:c3:38:fc:7b:d3:85:91:e5:3f:f2: f7:96:0c:6c:70:1d:96:d8:fb:0b:da:be:5e:2d:4d: b7:8d:3b:58:a1:63:42:c9:de:32:45:01:95:ba:31: ec:bc:80:42:67:a4:03:40:a3:93:b5:b1:3d:9f:70: 83:06:e1:03:52:7a:94:0f:45:cf:67:0a:41:fb:2e: da:53:72:0f:fa:5e:1a:01:04:53:75:8f:68:28:73: 77:ce:d3:4d:e9:e3:bc:49:20:fd:35:81:d3:8e:6e: 48:4f:9d:f1:7c:1f:71:d1:5d:52:6c:4f:d4:98:eb: 57:b9:f9:9b:9e:88:48:29:a4:71:d4:7c:23:d6:cf: eb:08:81:5a:f2:eb:84:c0:1a:bf:2b:74:d4:06:dd: 68:06:f5:83:d0:9a:c4:c9:10:ec:b5:90:f8:19:45: bc:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:97:BD:B3:0F:38:C2:5F:93:F0:39:E7:96:B6:28:95:3E:B3:A1:B0 X509v3 Authority Key Identifier: keyid:F5:58:D9:AA:4E:66:D7:B6:E4:CB:29:EC:87:79:53:D3:ED:6C:D7:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:f4:a1:90:72:36:84:25:22:55:2d:d1:de:2d:8d:e9:02:3a: 16:1c:ce:c2:54:fc:e1:f8:04:10:a3:68:a6:47:20:32:73:a4: 5b:0c:f2:8c:6c:04:3f:4e:63:bb:78:ab:cf:13:7c:ea:d1:f9: af:17:c6:df:d6:e5:2d:6b:db:f6:41:6d:65:5b:e4:c6:15:13: 69:ce:b5:3a:1e:b4:6c:09:98:8f:00:dd:c3:e1:db:6a:81:40: 4f:1c:8a:6e:67:c0:f8:21:b0:c1:d5:2d:eb:ff:f6:a9:e0:49: cc:18:be:02:14:cc:c0:b3:ed:5f:94:27:c3:53:72:a2:d9:04: 16:13:e2:d2:1a:b5:be:77:ab:1d:9c:22:f7:7b:fe:48:65:14: 2f:15:be:b0:61:24:e8:2a:42:36:d0:48:95:97:17:2a:a6:7a: b3:ee:bb:b4:9b:7c:f1:5a:94:24:f1:29:b2:fc:0f:73:46:84: 0e:d3:ac:78:71:04:b6:1d:d8:2d:f3:3d:37:74:27:8b:85:e3: 79:05:87:4c:1d:ca:3d:69:01:ba:60:eb:a4:87:55:4b:e9:40: 75:e9:95:3e:a9:ed:ba:72:7f:6b:65:56:67:46:e5:d1:fe:6a: c5:27:db:b3:61:d6:fd:fd:a2:62:bb:4a:23:4d:d9:5b:4f:bf: 2f:0c:e2:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaB0zCRFZ3NwsYrb6S+qny3wU8/EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjU1OEQ5QUE0RTY2RDdCNkU0Q0IyOUVDODc3OTUzRDNF RDZDRDc2NjAeFw0yNTA0MjQyMzE1MDNaFw0yNTA0MjgxMDA3MDNaMDMxMTAvBgNV BAMTKDA2OTdCREIzMEYzOEMyNUY5M0YwMzlFNzk2QjYyODk1M0VCM0ExQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCldvsKV5/Atq0kIZprrtmKNOj6 DOr5oAxlOp9lFG/pKLxJ9pPll5lOGdjgAddcWLRtZ3d1+NztcnC4/2jDETz7zKpQ kx3df64nYEorKCuZNtF57z3+fJj9YGXlVSe1wzj8e9OFkeU/8veWDGxwHZbY+wva vl4tTbeNO1ihY0LJ3jJFAZW6Mey8gEJnpANAo5O1sT2fcIMG4QNSepQPRc9nCkH7 LtpTcg/6XhoBBFN1j2goc3fO003p47xJIP01gdOObkhPnfF8H3HRXVJsT9SY61e5 +ZueiEgppHHUfCPWz+sIgVry64TAGr8rdNQG3WgG9YPQmsTJEOy1kPgZRbzjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBpe9sw84wl+T8DnnlrYolT6zobAwHwYDVR0j BBgwFoAU9VjZqk5m17bkyynsh3lT0+1s12YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NDljODY4MC1iZDBmLTRhNGYtOTk2ZC0yMTAyYTA1MzUzNzQvMC9GNTU4RDlBQTRF NjZEN0I2RTRDQjI5RUM4Nzc5NTNEM0VENkNENzY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjU1OEQ5QUE0RTY2RDdCNkU0Q0IyOUVDODc3OTUzRDNFRDZD RDc2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTQ5Yzg2ODAtYmQwZi00YTRmLTk5 NmQtMjEwMmEwNTM1Mzc0LzAvRjU1OEQ5QUE0RTY2RDdCNkU0Q0IyOUVDODc3OTUz RDNFRDZDRDc2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABP0oZByNoQlIlUt0d4tjekCOhYczsJU/OH4 BBCjaKZHIDJzpFsM8oxsBD9OY7t4q88TfOrR+a8Xxt/W5S1r2/ZBbWVb5MYVE2nO tToetGwJmI8A3cPh22qBQE8cim5nwPghsMHVLev/9qngScwYvgIUzMCz7V+UJ8NT cqLZBBYT4tIatb53qx2cIvd7/khlFC8VvrBhJOgqQjbQSJWXFyqmerPuu7SbfPFa lCTxKbL8D3NGhA7TrHhxBLYd2C3zPTd0J4uF43kFh0wdyj1pAbpg66SHVUvpQHXp lT6p7bpyf2tlVmdG5dH+asUn27Nh1v39omK7SiNN2VtPvy8M4gI= -----END CERTIFICATE-----Generated at Fri Apr 25 03:46:17 2025 by rpki-client on console.sobornost.net