$ rpki-client -vvf repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.mft File: 0E8637C23FD7FD1ABF91B025E48040909797EA6C.mft (raw, json) Hash identifier: DUhc4E8bwVgbAfzinw6M12NazBUftty5GRugGsGjDMw= Subject key identifier: F3:C0:6E:B1:DE:53:CB:A5:02:14:29:D9:00:A8:7A:0B:20:69:BE:A1 Authority key identifier: 0E:86:37:C2:3F:D7:FD:1A:BF:91:B0:25:E4:80:40:90:97:97:EA:6C Certificate issuer: /CN=0E8637C23FD7FD1ABF91B025E48040909797EA6C Certificate serial: 73654A105019AF4B66C1D264C10D7EE552334F8F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E8637C23FD7FD1ABF91B025E48040909797EA6C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.mft Manifest number: 04C8 Signing time: Thu 24 Apr 2025 10:21:15 +0000 Manifest this update: Thu 24 Apr 2025 10:16:15 +0000 Manifest next update: Sun 27 Apr 2025 15:30:15 +0000 Files and hashes: 1: 323430373a396338303a3a2f33322d3438203d3e20313335343834.roa (hash: n5BgEkTxLwtJUZihnJWVAnPuV9guSfKe7HeHpe21Ps8=) 2: 0E8637C23FD7FD1ABF91B025E48040909797EA6C.crl (hash: AM16TpkjuW4zgRTuvImkbduHUz8Inf0P9Vg5W+tMKVo=) 3: 3130332e37372e3135362e302f32322d3234203d3e20313335343834.roa (hash: vlDIC/lMXwB1lSYV52oEq30trZJO4UYf8/53n6LO/vI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.crl rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E8637C23FD7FD1ABF91B025E48040909797EA6C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 15:30:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:65:4a:10:50:19:af:4b:66:c1:d2:64:c1:0d:7e:e5:52:33:4f:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E8637C23FD7FD1ABF91B025E48040909797EA6C Validity Not Before: Apr 24 10:16:15 2025 GMT Not After : Apr 27 15:30:15 2025 GMT Subject: CN=F3C06EB1DE53CBA5021429D900A87A0B2069BEA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:6d:1a:74:3e:ef:62:55:1b:d8:f8:90:8e:ea: 0a:3a:37:00:c0:24:b5:db:70:8c:c9:1c:58:30:0d: 03:25:fc:2f:90:0d:19:91:4e:02:8b:0b:1f:dc:a7: 37:d6:61:9b:f6:16:c8:f0:2c:12:fa:93:27:77:fe: 6f:e5:05:5f:cf:3e:97:73:e4:91:cd:fd:68:81:8a: 60:83:d5:9f:21:d2:d2:fe:5e:96:a9:42:2b:23:e4: b7:cb:4f:fe:5e:aa:99:c3:d2:13:ea:45:f0:79:ba: 93:d7:24:1a:d9:26:22:13:a9:d6:c5:fd:7c:4c:5c: 63:bd:a6:e9:67:7f:e8:64:f0:48:a6:46:dd:97:7f: 13:3c:5d:62:20:7f:ba:89:db:7c:e1:cc:6a:2e:f0: 5d:11:97:c9:23:a3:37:35:c8:93:ef:4d:7f:af:e1: 4a:e8:b1:e3:52:2e:02:9c:4d:82:ab:61:01:88:c6: 60:c2:43:e5:a3:7f:9b:94:44:72:ab:5a:43:89:77: c1:b7:4e:80:a4:4d:e5:20:2f:2a:d2:be:e6:e1:de: dc:fb:cd:45:32:e6:69:1f:91:8d:b5:e0:0f:ff:65: 26:da:ee:ad:3b:3f:42:53:b6:95:6c:df:1d:13:c4: db:de:09:96:95:13:d3:c3:32:ca:89:94:4a:86:af: 02:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:C0:6E:B1:DE:53:CB:A5:02:14:29:D9:00:A8:7A:0B:20:69:BE:A1 X509v3 Authority Key Identifier: keyid:0E:86:37:C2:3F:D7:FD:1A:BF:91:B0:25:E4:80:40:90:97:97:EA:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E8637C23FD7FD1ABF91B025E48040909797EA6C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:01:d4:e1:fd:e6:35:fe:af:06:5c:63:1c:f1:dd:11:49:ca: e0:d5:47:c9:48:94:b9:fe:63:37:89:d9:46:2a:e5:39:19:3c: 48:a5:fc:e4:9b:b5:53:85:59:e9:f9:c2:22:f8:29:c3:9b:03: 6e:c6:b6:b2:c0:ae:50:7e:9f:26:f1:a0:9a:bf:92:b2:12:d2: b3:ed:4f:b5:6e:c9:a9:29:fe:df:10:6f:f4:f5:14:33:f9:1c: d2:20:eb:15:38:d3:9e:3b:5a:95:f1:b5:46:b4:71:a2:cb:c3: cd:b0:94:1c:2d:8c:6e:d0:49:fd:a0:ba:a1:46:b9:2e:d7:92: 8d:18:fa:76:97:19:aa:64:67:08:8e:9a:5c:af:20:59:9c:08: c5:da:4c:56:c3:0d:38:5c:6d:1c:db:0b:83:a0:e9:d4:75:35: e1:12:88:28:49:eb:15:ac:d9:94:0b:c5:86:41:90:be:81:44: 4c:dd:1e:55:0b:d8:d3:f2:dd:b5:c2:f2:61:52:7c:81:b5:e0: 36:cd:b1:37:90:fb:8b:9e:3d:63:08:2a:11:b1:97:67:e7:b9: ff:f7:e3:9c:d1:48:27:e2:6d:66:5a:06:3e:24:40:02:c3:4f: e5:5e:d8:82:8d:4b:38:c1:6e:62:4a:a2:64:8b:8b:76:76:27: 12:f0:08:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc2VKEFAZr0tmwdJkwQ1+5VIzT48wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU4NjM3QzIzRkQ3RkQxQUJGOTFCMDI1RTQ4MDQwOTA5 Nzk3RUE2QzAeFw0yNTA0MjQxMDE2MTVaFw0yNTA0MjcxNTMwMTVaMDMxMTAvBgNV BAMTKEYzQzA2RUIxREU1M0NCQTUwMjE0MjlEOTAwQTg3QTBCMjA2OUJFQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1bRp0Pu9iVRvY+JCO6go6NwDA JLXbcIzJHFgwDQMl/C+QDRmRTgKLCx/cpzfWYZv2FsjwLBL6kyd3/m/lBV/PPpdz 5JHN/WiBimCD1Z8h0tL+XpapQisj5LfLT/5eqpnD0hPqRfB5upPXJBrZJiITqdbF /XxMXGO9pulnf+hk8EimRt2XfxM8XWIgf7qJ23zhzGou8F0Rl8kjozc1yJPvTX+v 4UroseNSLgKcTYKrYQGIxmDCQ+Wjf5uURHKrWkOJd8G3ToCkTeUgLyrSvubh3tz7 zUUy5mkfkY214A//ZSba7q07P0JTtpVs3x0TxNveCZaVE9PDMsqJlEqGrwK9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU88Busd5Ty6UCFCnZAKh6CyBpvqEwHwYDVR0j BBgwFoAUDoY3wj/X/Rq/kbAl5IBAkJeX6mwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YzNmMjI4OC04OGNmLTRkMmItYmJhNi1hMDNkZDVmODM3NjEvMC8wRTg2MzdDMjNG RDdGRDFBQkY5MUIwMjVFNDgwNDA5MDk3OTdFQTZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEU4NjM3QzIzRkQ3RkQxQUJGOTFCMDI1RTQ4MDQwOTA5Nzk3 RUE2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWMzZjIyODgtODhjZi00ZDJiLWJi YTYtYTAzZGQ1ZjgzNzYxLzAvMEU4NjM3QzIzRkQ3RkQxQUJGOTFCMDI1RTQ4MDQw OTA5Nzk3RUE2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAQB1OH95jX+rwZcYxzx3RFJyuDVR8lIlLn+ YzeJ2UYq5TkZPEil/OSbtVOFWen5wiL4KcObA27GtrLArlB+nybxoJq/krIS0rPt T7Vuyakp/t8Qb/T1FDP5HNIg6xU40547WpXxtUa0caLLw82wlBwtjG7QSf2guqFG uS7Xko0Y+naXGapkZwiOmlyvIFmcCMXaTFbDDThcbRzbC4Og6dR1NeESiChJ6xWs 2ZQLxYZBkL6BREzdHlUL2NPy3bXC8mFSfIG14DbNsTeQ+4uePWMIKhGxl2fnuf/3 45zRSCfibWZaBj4kQALDT+Ve2IKNSzjBbmJKomSLi3Z2JxLwCNE= -----END CERTIFICATE-----Generated at Thu Apr 24 13:39:00 2025 by rpki-client on console.sobornost.net