$ rpki-client -vvf repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.mft File: 9A97A919AD61446780D593589DED8D76DE76F83A.mft (raw, json) Hash identifier: wExQGVbUeLlecWYCxWw1Jr1xd/xC7NCu2YVghx8X/H8= Subject key identifier: 27:1B:E8:22:B8:F8:93:25:7C:8A:BE:17:27:A1:59:1C:19:39:57:A9 Authority key identifier: 9A:97:A9:19:AD:61:44:67:80:D5:93:58:9D:ED:8D:76:DE:76:F8:3A Certificate issuer: /CN=9A97A919AD61446780D593589DED8D76DE76F83A Certificate serial: 08E9AECDDA59607B8CEA6A1329E958FF680C9A40 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A97A919AD61446780D593589DED8D76DE76F83A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.mft Manifest number: D9 Signing time: Fri 25 Apr 2025 11:21:13 +0000 Manifest this update: Fri 25 Apr 2025 11:16:13 +0000 Manifest next update: Mon 28 Apr 2025 21:49:13 +0000 Files and hashes: 1: 33362e35302e35362e302f32342d3234203d3e20313532303239.roa (hash: 2p64IHTS1KJjROytQWdZfphFf4DPvCVP6lr6B3pIJFA=) 2: 33362e35302e35372e302f32342d3234203d3e20313532303239.roa (hash: i3Vw84Ep8wSgPwzTzjBdWpWCt0j7DNGxOg0DoWzkkCo=) 3: 9A97A919AD61446780D593589DED8D76DE76F83A.crl (hash: pROs6wRMJUEIpjUJavKi70cxoYqoni0aeQwNPHNDco0=) 4: 33362e35302e35362e302f32332d3233203d3e20313532303239.roa (hash: pDSTP56ToJDSRTcVsVFyapPSURv6QT0rNlu5hwY/nzw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.crl rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A97A919AD61446780D593589DED8D76DE76F83A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 14:02:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:e9:ae:cd:da:59:60:7b:8c:ea:6a:13:29:e9:58:ff:68:0c:9a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A97A919AD61446780D593589DED8D76DE76F83A Validity Not Before: Apr 25 11:16:13 2025 GMT Not After : Apr 28 21:49:13 2025 GMT Subject: CN=271BE822B8F893257C8ABE1727A1591C193957A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:97:b9:91:60:b4:b0:df:a0:5d:20:cf:83:a5: 27:0c:31:e7:ef:d0:6f:7c:6a:25:d0:28:b9:f7:a4: c2:8e:8a:fe:b2:61:22:87:44:a8:a3:18:df:74:d1: b7:24:08:aa:1d:f9:5e:52:b0:c5:63:83:2f:5e:fc: 22:42:81:ba:c7:cd:92:d2:56:58:f4:95:a1:25:69: 1a:ea:20:2c:08:33:f3:1b:46:b3:e8:b0:8e:b9:af: b6:ab:bd:88:05:e1:37:b3:bf:2c:3b:41:ec:92:0d: 8a:02:4a:c7:d1:ef:74:2a:35:37:af:b3:18:cd:bd: 6f:9d:ad:cd:c4:8f:a5:85:44:05:0f:55:b1:41:ba: 73:eb:8d:2a:42:75:a0:99:8c:4a:47:e7:ee:a7:94: 4c:04:10:13:5b:ba:26:d8:75:ea:7b:68:68:f3:07: 75:82:f4:23:79:c1:49:57:d0:29:77:f8:a3:85:0c: 9b:15:76:d7:77:46:5f:4f:8c:98:ad:45:54:44:9c: f7:c9:56:91:43:c6:50:d1:a6:6b:4c:ec:6a:56:ba: 27:e7:f2:60:c5:ca:05:d8:f8:76:51:d9:23:02:17: e1:b6:f8:88:5f:1d:f0:59:a2:85:c4:83:25:91:f4: 05:6d:b1:0b:88:19:3e:58:a3:2a:c9:a4:51:4d:26: 03:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:1B:E8:22:B8:F8:93:25:7C:8A:BE:17:27:A1:59:1C:19:39:57:A9 X509v3 Authority Key Identifier: keyid:9A:97:A9:19:AD:61:44:67:80:D5:93:58:9D:ED:8D:76:DE:76:F8:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A97A919AD61446780D593589DED8D76DE76F83A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:d6:2c:f1:91:83:31:09:a6:a8:5f:e2:82:82:e9:a9:63:e0: 32:9e:0a:a4:1b:fa:58:2a:c1:c3:40:c2:94:92:18:58:fd:09: 5d:83:a2:5c:0a:15:ac:f2:e3:95:ab:3e:69:ae:63:4d:ae:6e: af:a3:56:b2:f3:cd:bc:6f:27:c8:42:a6:d0:7c:89:77:d9:98: 7a:db:94:ca:f7:64:68:58:15:67:5f:0a:1a:84:f6:5e:24:38: d1:13:09:24:d3:ff:27:0d:bd:80:da:92:88:4b:15:5e:e7:41: e6:2c:08:ff:a3:cc:af:c8:66:2d:e6:65:c6:6c:1a:07:07:25: 79:64:c9:b9:24:08:bb:a5:bf:d4:1f:5c:f8:24:fb:b9:1a:9c: 16:66:fe:3e:8e:24:85:a9:ac:23:fe:8e:11:32:2a:9c:de:e2: 08:f6:34:d9:0b:d7:60:39:a6:2b:5c:4e:84:02:56:6a:90:1b: f6:85:1c:c8:5a:70:70:5a:bc:bb:af:4b:92:2e:92:41:32:ed: 35:6b:02:2e:7c:64:93:9e:c9:2f:a7:48:cb:8e:da:98:3f:5f: f2:6d:3f:7b:6a:ac:43:20:33:f4:90:6b:22:87:92:2d:8a:c0: 16:5c:eb:b7:4a:23:6a:cc:26:84:59:49:55:80:84:7f:bd:c4: e0:72:1a:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCOmuzdpZYHuM6moTKelY/2gMmkAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE5N0E5MTlBRDYxNDQ2NzgwRDU5MzU4OURFRDhENzZE RTc2RjgzQTAeFw0yNTA0MjUxMTE2MTNaFw0yNTA0MjgyMTQ5MTNaMDMxMTAvBgNV BAMTKDI3MUJFODIyQjhGODkzMjU3QzhBQkUxNzI3QTE1OTFDMTkzOTU3QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJl7mRYLSw36BdIM+DpScMMefv 0G98aiXQKLn3pMKOiv6yYSKHRKijGN900bckCKod+V5SsMVjgy9e/CJCgbrHzZLS Vlj0laElaRrqICwIM/MbRrPosI65r7arvYgF4Tezvyw7QeySDYoCSsfR73QqNTev sxjNvW+drc3Ej6WFRAUPVbFBunPrjSpCdaCZjEpH5+6nlEwEEBNbuibYdep7aGjz B3WC9CN5wUlX0Cl3+KOFDJsVdtd3Rl9PjJitRVREnPfJVpFDxlDRpmtM7GpWuifn 8mDFygXY+HZR2SMCF+G2+IhfHfBZooXEgyWR9AVtsQuIGT5YoyrJpFFNJgNfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJxvoIrj4kyV8ir4XJ6FZHBk5V6kwHwYDVR0j BBgwFoAUmpepGa1hRGeA1ZNYne2Ndt52+DowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjhhN2ZhNS1mZGEzLTRhM2UtOTJmNy1mYWJmZWQwNWE5NWMvMC85QTk3QTkxOUFE NjE0NDY3ODBENTkzNTg5REVEOEQ3NkRFNzZGODNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE5N0E5MTlBRDYxNDQ2NzgwRDU5MzU4OURFRDhENzZERTc2 RjgzQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWI4YTdmYTUtZmRhMy00YTNlLTky ZjctZmFiZmVkMDVhOTVjLzAvOUE5N0E5MTlBRDYxNDQ2NzgwRDU5MzU4OURFRDhE NzZERTc2RjgzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF3WLPGRgzEJpqhf4oKC6alj4DKeCqQb+lgq wcNAwpSSGFj9CV2DolwKFazy45WrPmmuY02ubq+jVrLzzbxvJ8hCptB8iXfZmHrb lMr3ZGhYFWdfChqE9l4kONETCSTT/ycNvYDakohLFV7nQeYsCP+jzK/IZi3mZcZs GgcHJXlkybkkCLulv9QfXPgk+7kanBZm/j6OJIWprCP+jhEyKpze4gj2NNkL12A5 pitcToQCVmqQG/aFHMhacHBavLuvS5IukkEy7TVrAi58ZJOeyS+nSMuO2pg/X/Jt P3tqrEMgM/SQayKHki2KwBZc67dKI2rMJoRZSVWAhH+9xOByGnc= -----END CERTIFICATE-----Generated at Fri Apr 25 12:54:06 2025 by rpki-client on console.sobornost.net