$ rpki-client -vvf repo-rpki.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.mft File: B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.mft (raw, json) Hash identifier: bXdf0WY+LXhkW/nEdFhS6sGRyPNuLr0RSp0K/ddhJeU= Subject key identifier: 2E:84:09:CD:5C:CF:B2:8D:DC:91:D1:BD:7F:A4:6C:5B:7A:0A:D9:7F Authority key identifier: B5:E9:7B:71:FA:FA:24:FF:8F:A2:B1:A3:35:58:D8:0A:98:25:4D:B2 Certificate issuer: /CN=B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2 Certificate serial: 140DDC9E41609385D9C8FD2329738BB1BAEA8726 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.mft Manifest number: 01BC Signing time: Thu 24 Apr 2025 05:42:01 +0000 Manifest this update: Thu 24 Apr 2025 05:37:01 +0000 Manifest next update: Sun 27 Apr 2025 15:30:01 +0000 Files and hashes: 1: 3130332e3138382e3235332e302f32342d3234203d3e20313439373337.roa (hash: fMitGvSIMZKR/xojJDzG2iWApTg4bDt/1kqJnOfFiTo=) 2: 3130332e3138382e3235322e302f32342d3234203d3e20313439373337.roa (hash: kjCPg8CNqMlAMRebUqHb4gpHFMec5lXxDxlOd53bN+M=) 3: B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.crl (hash: cAOohivcFmtiUMJzQqJCqzfDnzd7TV+3DxPxFdr/9c8=) 4: 3130332e3138382e3235322e302f32332d3233203d3e20313439373337.roa (hash: SLcrpmMGhS+iLPHlXSc6GQF6hzriCb0znzXu+cnHQhI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.crl rsync://repo-rpki.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 08:44:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:0d:dc:9e:41:60:93:85:d9:c8:fd:23:29:73:8b:b1:ba:ea:87:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2 Validity Not Before: Apr 24 05:37:01 2025 GMT Not After : Apr 27 15:30:01 2025 GMT Subject: CN=2E8409CD5CCFB28DDC91D1BD7FA46C5B7A0AD97F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fd:94:62:30:34:7b:24:cc:0a:73:a7:f6:9b: 38:37:68:2a:ad:e7:dc:08:31:87:69:df:df:ff:3e: cf:47:43:73:cd:58:a0:da:af:1f:f0:21:57:c8:08: b8:39:b7:7c:6c:58:e7:1d:6c:52:ee:3c:3f:98:d7: 2c:4b:7a:32:f1:26:25:36:a6:5c:03:9d:a8:46:84: e8:a1:ad:72:3a:1e:6a:24:fa:d6:5a:98:75:b6:f3: 2c:a8:39:cb:ed:45:d1:ad:31:7b:f0:7c:02:f4:71: c9:be:b7:93:08:58:c3:ba:06:fd:3b:68:6e:03:75: ac:a3:89:2c:ce:c4:15:59:16:2a:74:f8:54:aa:8a: 43:b2:74:9b:d3:6f:88:f4:80:39:0f:91:f7:55:0a: b9:81:b8:c5:b0:d9:3b:5a:f8:70:a9:55:44:95:c9: 03:07:01:24:13:a6:43:36:0b:e6:e0:6f:f4:72:5f: 5c:67:20:9b:07:a5:14:8f:ba:fd:9c:45:67:bb:52: 36:e4:31:54:79:42:12:25:51:90:8f:f2:0f:8d:73: ae:de:da:88:75:50:b2:3a:4e:a1:d5:3b:1a:ba:a5: 46:0a:3b:97:09:38:52:64:13:af:18:00:f5:1c:b9: 07:71:47:da:df:b7:19:60:d4:ca:7a:cc:05:b8:98: 66:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:84:09:CD:5C:CF:B2:8D:DC:91:D1:BD:7F:A4:6C:5B:7A:0A:D9:7F X509v3 Authority Key Identifier: keyid:B5:E9:7B:71:FA:FA:24:FF:8F:A2:B1:A3:35:58:D8:0A:98:25:4D:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:85:3b:01:46:56:44:d3:bf:02:b5:15:d4:7c:55:02:8c:a6: 74:70:79:b1:16:dc:f1:85:73:0c:01:6d:a6:14:6e:0e:dc:fc: 93:d0:6d:ba:00:63:c8:d6:d7:11:e4:cb:3f:9c:16:66:7d:c6: 99:01:bc:93:96:93:40:e0:c3:2e:01:c5:14:fa:4b:81:f4:9a: e9:6f:25:08:5c:71:1f:f1:b3:68:be:76:bb:67:03:36:b9:4b: 8c:e8:83:1d:25:c1:c8:d8:aa:96:18:08:32:52:1b:7f:41:03: 8f:08:cd:88:a1:b1:f2:80:3e:0d:55:4b:47:0b:f0:04:7b:80: 7b:4a:57:b2:30:30:51:68:07:8d:cb:89:3c:93:a9:a0:16:ac: 3d:c6:5e:2c:e2:43:7d:c0:24:93:09:51:ce:af:13:3f:c0:10: ef:45:fe:01:b3:9a:a2:82:6f:af:ad:b5:87:16:8d:b1:56:54: 4e:c1:67:16:32:b7:1e:e5:7c:ad:a9:14:98:85:56:42:aa:6e: 72:f7:cc:88:21:0c:87:ac:37:df:23:68:08:c8:80:23:8b:b9: 8e:73:d0:d5:12:0d:56:0b:3a:f9:30:4f:1f:3b:57:86:09:0e: 91:91:b1:2d:1b:77:3e:42:31:63:ba:70:11:af:f3:65:d6:9b: e9:e9:45:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFA3cnkFgk4XZyP0jKXOLsbrqhyYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVFOTdCNzFGQUZBMjRGRjhGQTJCMUEzMzU1OEQ4MEE5 ODI1NERCMjAeFw0yNTA0MjQwNTM3MDFaFw0yNTA0MjcxNTMwMDFaMDMxMTAvBgNV BAMTKDJFODQwOUNENUNDRkIyOEREQzkxRDFCRDdGQTQ2QzVCN0EwQUQ5N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz/ZRiMDR7JMwKc6f2mzg3aCqt 59wIMYdp39//Ps9HQ3PNWKDarx/wIVfICLg5t3xsWOcdbFLuPD+Y1yxLejLxJiU2 plwDnahGhOihrXI6Hmok+tZamHW28yyoOcvtRdGtMXvwfAL0ccm+t5MIWMO6Bv07 aG4DdayjiSzOxBVZFip0+FSqikOydJvTb4j0gDkPkfdVCrmBuMWw2Tta+HCpVUSV yQMHASQTpkM2C+bgb/RyX1xnIJsHpRSPuv2cRWe7UjbkMVR5QhIlUZCP8g+Nc67e 2oh1ULI6TqHVOxq6pUYKO5cJOFJkE68YAPUcuQdxR9rftxlg1Mp6zAW4mGaRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULoQJzVzPso3ckdG9f6RsW3oK2X8wHwYDVR0j BBgwFoAUtel7cfr6JP+PorGjNVjYCpglTbIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YWVkMDk4Yi00OWIxLTRmNTMtYjc1YS0yNzNlMTFjMjUxNDkvMC9CNUU5N0I3MUZB RkEyNEZGOEZBMkIxQTMzNTU4RDgwQTk4MjU0REIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjVFOTdCNzFGQUZBMjRGRjhGQTJCMUEzMzU1OEQ4MEE5ODI1 NERCMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWFlZDA5OGItNDliMS00ZjUzLWI3 NWEtMjczZTExYzI1MTQ5LzAvQjVFOTdCNzFGQUZBMjRGRjhGQTJCMUEzMzU1OEQ4 MEE5ODI1NERCMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIyFOwFGVkTTvwK1FdR8VQKMpnRwebEW3PGF cwwBbaYUbg7c/JPQbboAY8jW1xHkyz+cFmZ9xpkBvJOWk0Dgwy4BxRT6S4H0mulv JQhccR/xs2i+drtnAza5S4zogx0lwcjYqpYYCDJSG39BA48IzYihsfKAPg1VS0cL 8AR7gHtKV7IwMFFoB43LiTyTqaAWrD3GXiziQ33AJJMJUc6vEz/AEO9F/gGzmqKC b6+ttYcWjbFWVE7BZxYytx7lfK2pFJiFVkKqbnL3zIghDIesN98jaAjIgCOLuY5z 0NUSDVYLOvkwTx87V4YJDpGRsS0bdz5CMWO6cBGv82XWm+npRTQ= -----END CERTIFICATE-----Generated at Thu Apr 24 09:03:03 2025 by rpki-client on console.sobornost.net