$ rpki-client -vvf repo-rpki.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.mft File: 9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.mft (raw, json) Hash identifier: QgmFrOO/XgH8EBfqa3dQhV1BwDMwo1fkpI85Nb6mxzs= Subject key identifier: 46:34:E0:0C:6E:C5:6D:CF:49:04:13:DB:9B:D5:FB:5A:F4:2E:63:44 Authority key identifier: 9E:68:B7:0F:7E:56:B1:BA:86:F1:05:15:F2:AE:8D:F5:B1:1B:26:33 Certificate issuer: /CN=9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633 Certificate serial: 4785CB353A6059BB362DE6AC7632303C2E60D295 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.mft Manifest number: 019B Signing time: Wed 23 Apr 2025 07:41:45 +0000 Manifest this update: Wed 23 Apr 2025 07:36:45 +0000 Manifest next update: Sat 26 Apr 2025 15:54:45 +0000 Files and hashes: 1: 3130332e3135362e3134302e302f32332d3234203d3e20313439383833.roa (hash: n3sbBfuLKEC1geB0k1Dh7NZVeI84mrHDuJ/mBS5tW04=) 2: 3130332e3135362e3134312e302f32342d3234203d3e20313439383833.roa (hash: 9TS4OObq1JemZwvTvegCjn3AKYmdp3K1XOA4LLPSSqQ=) 3: 3130332e3135362e3134302e302f32342d3234203d3e20313439383833.roa (hash: tCdlLAwoC+YY63D9MBa5GyVbtzsufzTeHqMYaKr8EzE=) 4: 9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.crl (hash: HNgHGdUCNXzKWzyGEd4g58n4QHHA2qRd9zKTHporOTE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.crl rsync://repo-rpki.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 09:26:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:85:cb:35:3a:60:59:bb:36:2d:e6:ac:76:32:30:3c:2e:60:d2:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633 Validity Not Before: Apr 23 07:36:45 2025 GMT Not After : Apr 26 15:54:45 2025 GMT Subject: CN=4634E00C6EC56DCF490413DB9BD5FB5AF42E6344 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:cb:2f:0e:d2:84:5e:11:98:15:c5:d1:b8:eb: 84:ce:6f:2f:c7:66:0b:85:4a:db:4b:8b:91:1a:66: b4:15:03:2e:59:b0:14:0b:a8:23:1d:d1:db:7d:96: 22:e3:bb:40:71:24:ab:55:81:6d:6c:68:e9:d4:fc: 01:a5:72:2c:39:8b:b9:fd:72:7a:72:aa:5c:a9:b9: b8:2f:2f:d2:4f:0a:04:cb:d6:ce:6a:17:0f:f2:7d: 43:ff:c3:b4:bb:47:ab:3b:99:24:ed:62:f0:45:1f: c9:ca:50:c0:2d:23:1d:c7:38:14:19:cf:29:9b:85: eb:2c:0b:64:89:ec:4b:c5:0f:98:57:3b:f9:d3:f6: 22:c7:43:cb:37:a2:49:e7:99:a6:6b:64:74:f7:83: 11:e5:84:67:8d:a6:f4:90:35:bf:bf:8a:87:77:70: 11:0e:24:58:c3:8a:05:6c:30:3b:2b:5b:ef:6e:22: fe:6b:05:ec:50:b6:88:e1:f5:3d:f7:f3:9a:b5:96: f2:a6:e2:44:19:d9:7c:d1:19:4f:08:a1:a6:3b:15: fa:db:64:41:ab:66:9f:4e:fa:71:b8:0f:5f:81:c8: d3:99:f5:35:28:1e:d0:a0:29:1c:70:8a:25:f0:79: 75:ea:8a:c8:20:44:61:49:e4:b3:57:26:21:3f:14: 4b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:34:E0:0C:6E:C5:6D:CF:49:04:13:DB:9B:D5:FB:5A:F4:2E:63:44 X509v3 Authority Key Identifier: keyid:9E:68:B7:0F:7E:56:B1:BA:86:F1:05:15:F2:AE:8D:F5:B1:1B:26:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a091793e-bd69-45a4-97a8-c68aa3dd47a3/0/9E68B70F7E56B1BA86F10515F2AE8DF5B11B2633.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:f3:1a:63:55:14:5c:47:1c:c0:83:0c:19:0f:b5:e8:da:ba: fa:84:ca:e3:dc:d0:a9:ee:92:c8:5e:ba:6e:ac:98:5a:21:c4: 4f:41:15:c7:0f:57:25:b0:cf:c8:3a:ef:06:2d:4a:ac:4f:f8: 06:35:3b:58:0d:0c:c8:45:d9:3b:cc:c3:b7:05:47:e9:43:8c: 2d:76:f6:de:b3:1f:e0:8f:22:57:af:bd:9b:a5:c3:9d:82:0b: ec:8a:90:ec:56:3a:af:18:7d:dc:21:91:6d:0f:de:54:c3:2d: 73:18:d2:48:1d:e2:82:00:90:9f:ec:c1:bc:33:99:b8:9d:b1: 0a:ab:67:41:ee:eb:ce:25:37:62:a6:31:49:cd:73:36:c6:16: 83:f6:36:76:f9:71:c2:23:24:16:bc:08:50:1b:fb:07:85:a4: 85:0d:84:fc:70:52:24:93:c3:88:c2:29:dd:77:3b:9a:47:55: c0:2c:f1:da:29:dc:83:03:8b:8f:c6:77:56:fb:f6:db:3f:69: ee:6c:c6:7f:e0:44:23:31:00:35:ea:76:1e:fd:4d:ea:b8:fc: 10:0e:f4:29:cb:57:94:8b:cf:d8:54:1b:d1:21:25:46:f4:6f: b0:a8:53:64:10:4f:dc:18:23:e0:78:29:29:06:13:51:4c:f1: 41:96:85:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR4XLNTpgWbs2LeasdjIwPC5g0pUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUU2OEI3MEY3RTU2QjFCQTg2RjEwNTE1RjJBRThERjVC MTFCMjYzMzAeFw0yNTA0MjMwNzM2NDVaFw0yNTA0MjYxNTU0NDVaMDMxMTAvBgNV BAMTKDQ2MzRFMDBDNkVDNTZEQ0Y0OTA0MTNEQjlCRDVGQjVBRjQyRTYzNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHyy8O0oReEZgVxdG464TOby/H ZguFSttLi5EaZrQVAy5ZsBQLqCMd0dt9liLju0BxJKtVgW1saOnU/AGlciw5i7n9 cnpyqlypubgvL9JPCgTL1s5qFw/yfUP/w7S7R6s7mSTtYvBFH8nKUMAtIx3HOBQZ zymbhessC2SJ7EvFD5hXO/nT9iLHQ8s3oknnmaZrZHT3gxHlhGeNpvSQNb+/iod3 cBEOJFjDigVsMDsrW+9uIv5rBexQtojh9T3385q1lvKm4kQZ2XzRGU8IoaY7Ffrb ZEGrZp9O+nG4D1+ByNOZ9TUoHtCgKRxwiiXweXXqisggRGFJ5LNXJiE/FEv3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURjTgDG7Fbc9JBBPbm9X7WvQuY0QwHwYDVR0j BBgwFoAUnmi3D35WsbqG8QUV8q6N9bEbJjMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MDkxNzkzZS1iZDY5LTQ1YTQtOTdhOC1jNjhhYTNkZDQ3YTMvMC85RTY4QjcwRjdF NTZCMUJBODZGMTA1MTVGMkFFOERGNUIxMUIyNjMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUU2OEI3MEY3RTU2QjFCQTg2RjEwNTE1RjJBRThERjVCMTFC MjYzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTA5MTc5M2UtYmQ2OS00NWE0LTk3 YTgtYzY4YWEzZGQ0N2EzLzAvOUU2OEI3MEY3RTU2QjFCQTg2RjEwNTE1RjJBRThE RjVCMTFCMjYzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADPzGmNVFFxHHMCDDBkPtejauvqEyuPc0Knu ksheum6smFohxE9BFccPVyWwz8g67wYtSqxP+AY1O1gNDMhF2TvMw7cFR+lDjC12 9t6zH+CPIlevvZulw52CC+yKkOxWOq8YfdwhkW0P3lTDLXMY0kgd4oIAkJ/swbwz mbidsQqrZ0Hu684lN2KmMUnNczbGFoP2Nnb5ccIjJBa8CFAb+weFpIUNhPxwUiST w4jCKd13O5pHVcAs8dop3IMDi4/Gd1b79ts/ae5sxn/gRCMxADXqdh79Teq4/BAO 9CnLV5SLz9hUG9EhJUb0b7CoU2QQT9wYI+B4KSkGE1FM8UGWhbk= -----END CERTIFICATE-----Generated at Wed Apr 23 11:12:23 2025 by rpki-client on console.sobornost.net