$ rpki-client -vvf repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft File: 4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft (raw, json) Hash identifier: NLSHdE6BH7f3jBUpPNEvqRjZ/fKDxe+ES/Wf1Mvu1Mk= Subject key identifier: 83:07:B9:B8:6B:70:06:3F:6C:FB:0D:18:E6:C4:7F:68:68:B9:BF:A7 Authority key identifier: 4B:E0:EB:AF:EF:1E:20:6C:AD:8B:4E:AD:6D:6A:08:D3:A8:C0:1B:50 Certificate issuer: /CN=4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50 Certificate serial: 7713C2E6328BB466E5F44DFB7DDB11B608DE709B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft Manifest number: 01BB Signing time: Fri 25 Apr 2025 05:00:49 +0000 Manifest this update: Fri 25 Apr 2025 04:55:49 +0000 Manifest next update: Mon 28 Apr 2025 14:33:49 +0000 Files and hashes: 1: 4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.crl (hash: S+euGKDMyeicX/FAa535zVD9XWxMmjVAjijhleZuV0c=) 2: 3130332e38362e3132382e302f32332d3234203d3e2034383030.roa (hash: ER09/d673Zei97k2o4R+YDy6neQAyCBVuW6CuWOZSDM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.crl rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:13:c2:e6:32:8b:b4:66:e5:f4:4d:fb:7d:db:11:b6:08:de:70:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50 Validity Not Before: Apr 25 04:55:49 2025 GMT Not After : Apr 28 14:33:49 2025 GMT Subject: CN=8307B9B86B70063F6CFB0D18E6C47F6868B9BFA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:bd:6a:58:ff:a8:7f:91:ca:7b:8f:08:ec:5f: 6a:07:56:21:7a:f5:6c:db:4b:cd:40:e9:8c:7e:0a: b4:97:b5:c5:2b:41:d5:63:61:e0:50:3e:c4:82:f3: 2f:38:20:e0:dd:bd:4d:1c:2b:5e:84:56:23:b2:bf: 21:f2:74:a9:27:c8:ad:bc:c0:8a:6a:fc:55:96:5b: ee:3d:05:61:b5:87:1f:87:d9:70:5c:a4:f8:e7:5b: 26:ea:ae:54:aa:d2:27:9a:a0:1c:41:f4:17:e5:ed: 61:f7:09:1c:3d:ed:c1:5c:f2:86:d5:5e:5f:d1:26: 07:4c:b2:f4:fe:e4:57:02:50:6d:9a:2f:57:b1:28: 6c:56:94:e5:47:b5:8f:37:cc:7c:41:c5:5b:59:38: cc:b3:f4:11:f7:bd:d1:d2:08:94:ff:79:5f:4b:7c: 95:3b:6c:5e:7d:ac:2f:e3:0f:26:5c:93:df:c3:ff: a4:d2:3d:ff:ab:25:b3:5a:14:40:51:b7:2b:5c:f7: 9f:35:89:d5:41:ea:47:c8:72:2c:c1:1e:1c:eb:a8: 60:44:c3:57:db:48:a8:03:17:c5:15:f0:5c:07:a3: d3:c2:f4:bd:9b:89:5c:1b:91:b1:8c:63:e7:e6:26: 2f:9b:0a:2d:de:47:ab:93:39:cb:43:13:04:da:13: 98:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:07:B9:B8:6B:70:06:3F:6C:FB:0D:18:E6:C4:7F:68:68:B9:BF:A7 X509v3 Authority Key Identifier: keyid:4B:E0:EB:AF:EF:1E:20:6C:AD:8B:4E:AD:6D:6A:08:D3:A8:C0:1B:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:25:a6:5e:81:fd:16:fe:d1:1f:36:f4:dc:07:82:15:ac:ea: 36:a0:6d:5d:99:15:1d:1e:8e:4b:5d:3a:14:63:41:89:11:01: d5:6e:6f:8b:bb:2a:f2:3c:8a:33:f3:2f:df:48:5d:83:5b:91: 56:b1:c8:55:e2:04:cb:c4:2a:7f:cd:03:a8:e1:67:38:2a:14: 8b:a2:8a:de:26:21:22:0c:d8:00:91:a3:dc:42:fc:d2:0c:0f: 4b:3c:04:bf:f9:b7:83:91:f7:fb:b3:f1:f9:a1:1f:5a:27:cf: e1:20:38:42:53:84:b5:3e:d8:15:e4:40:46:2d:7a:42:00:d8: 1e:e2:45:53:3c:0e:db:3d:ca:ac:6a:3c:21:50:92:9e:93:61: 6c:89:ea:39:db:fe:16:42:11:0c:d8:9a:b9:c7:4d:33:c7:6a: 32:f3:f5:2e:c0:2c:d2:0c:ce:8d:b3:fb:42:5e:ea:e6:01:1d: 88:26:22:54:b5:33:ce:55:7e:81:12:cd:bb:fd:ec:37:2c:8d: 97:4a:2d:19:12:50:db:13:21:ea:fe:5d:19:bb:6f:4f:e0:7e: fc:db:b7:61:63:54:ea:62:cc:76:a4:4c:05:fa:5d:ab:3b:08: a3:7d:da:56:df:e5:15:9e:f5:c1:5a:ca:86:b8:f2:6c:0e:36: 3d:93:70:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdxPC5jKLtGbl9E37fdsRtgjecJswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJFMEVCQUZFRjFFMjA2Q0FEOEI0RUFENkQ2QTA4RDNB OEMwMUI1MDAeFw0yNTA0MjUwNDU1NDlaFw0yNTA0MjgxNDMzNDlaMDMxMTAvBgNV BAMTKDgzMDdCOUI4NkI3MDA2M0Y2Q0ZCMEQxOEU2QzQ3RjY4NjhCOUJGQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2vWpY/6h/kcp7jwjsX2oHViF6 9WzbS81A6Yx+CrSXtcUrQdVjYeBQPsSC8y84IODdvU0cK16EViOyvyHydKknyK28 wIpq/FWWW+49BWG1hx+H2XBcpPjnWybqrlSq0ieaoBxB9Bfl7WH3CRw97cFc8obV Xl/RJgdMsvT+5FcCUG2aL1exKGxWlOVHtY83zHxBxVtZOMyz9BH3vdHSCJT/eV9L fJU7bF59rC/jDyZck9/D/6TSPf+rJbNaFEBRtytc9581idVB6kfIcizBHhzrqGBE w1fbSKgDF8UV8FwHo9PC9L2biVwbkbGMY+fmJi+bCi3eR6uTOctDEwTaE5jDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgwe5uGtwBj9s+w0Y5sR/aGi5v6cwHwYDVR0j BBgwFoAUS+Drr+8eIGyti06tbWoI06jAG1AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OGE3ZjM1NS1mMjI1LTQ4ZjMtODdmOC0wYmZiMGM4ZTU4ZjAvMC80QkUwRUJBRkVG MUUyMDZDQUQ4QjRFQUQ2RDZBMDhEM0E4QzAxQjUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEJFMEVCQUZFRjFFMjA2Q0FEOEI0RUFENkQ2QTA4RDNBOEMw MUI1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOThhN2YzNTUtZjIyNS00OGYzLTg3 ZjgtMGJmYjBjOGU1OGYwLzAvNEJFMEVCQUZFRjFFMjA2Q0FEOEI0RUFENkQ2QTA4 RDNBOEMwMUI1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGAlpl6B/Rb+0R829NwHghWs6jagbV2ZFR0e jktdOhRjQYkRAdVub4u7KvI8ijPzL99IXYNbkVaxyFXiBMvEKn/NA6jhZzgqFIui it4mISIM2ACRo9xC/NIMD0s8BL/5t4OR9/uz8fmhH1onz+EgOEJThLU+2BXkQEYt ekIA2B7iRVM8Dts9yqxqPCFQkp6TYWyJ6jnb/hZCEQzYmrnHTTPHajLz9S7ALNIM zo2z+0Je6uYBHYgmIlS1M85VfoESzbv97DcsjZdKLRkSUNsTIer+XRm7b0/gfvzb t2FjVOpizHakTAX6Xas7CKN92lbf5RWe9cFayoa48mwONj2TcN4= -----END CERTIFICATE-----Generated at Fri Apr 25 08:21:08 2025 by rpki-client on console.sobornost.net