$ rpki-client -vvf repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.mft File: B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.mft (raw, json) Hash identifier: OXMF8/ul1s+a9PuS/DeKHeaX7vtTvCEE3aV8Mkh5vZ8= Subject key identifier: 90:6A:62:7C:04:A7:E3:41:02:9E:43:02:E8:41:2B:42:E6:C1:90:AF Authority key identifier: B5:AB:E8:6E:BB:2A:02:C5:83:92:74:9A:92:FE:A6:8F:BA:FC:5C:46 Certificate issuer: /CN=B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46 Certificate serial: 57AEA1BE0265A8044327169065BF51356357CF1A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.mft Manifest number: B9 Signing time: Fri 25 Apr 2025 17:10:02 +0000 Manifest this update: Fri 25 Apr 2025 17:05:01 +0000 Manifest next update: Tue 29 Apr 2025 00:16:01 +0000 Files and hashes: 1: 3135372e32302e33372e302f32342d3234203d3e20313430343730.roa (hash: xOyiM0EcaCp+QM0RHt1mndAJkrKKxlB6dJJDF4X/v7Y=) 2: 3135372e32302e33362e302f32342d3234203d3e20313430343730.roa (hash: GpC0yHwXQ5lbHiYUnaLrCvfX3lNPHMkYotv+J++l4RE=) 3: B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.crl (hash: DwDNT4Tv4zObOjes0G/7XzF+BxpWyfQObssaMqO4yhM=) 4: 3135372e32302e33362e302f32332d3233203d3e20313430343730.roa (hash: RHyzhtAgplvJvuCV7fIv62s8sggnnXtZnxO1BaRf1q4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.crl rsync://repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 19:57:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:ae:a1:be:02:65:a8:04:43:27:16:90:65:bf:51:35:63:57:cf:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46 Validity Not Before: Apr 25 17:05:01 2025 GMT Not After : Apr 29 00:16:01 2025 GMT Subject: CN=906A627C04A7E341029E4302E8412B42E6C190AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c6:3e:60:53:b6:6d:c1:40:73:a8:89:13:4c: af:18:d5:d7:e6:ae:6b:90:b6:60:34:0f:7d:9e:23: ad:67:5c:db:b9:ee:05:97:92:c6:61:5e:c3:03:f3: 74:10:d9:be:83:bd:b6:33:1d:57:69:f8:cc:c5:c5: 42:5f:27:3a:ea:33:d7:c3:c9:be:fc:d4:b4:b8:83: e8:3d:c2:91:51:8c:4d:93:a9:e8:99:95:2f:d8:af: e9:2e:1a:5d:ec:85:9d:48:f3:31:23:70:a9:cc:9b: 00:b3:05:e4:5f:5e:20:77:44:2e:95:79:4a:20:fe: 69:45:4e:89:b4:8c:f9:58:35:e4:1a:ba:3a:5c:a4: ae:2a:bf:c6:49:6d:09:70:dd:4f:9e:7a:24:0d:55: 8c:b4:e6:be:d4:76:f2:ef:6e:80:60:35:1b:90:61: 0f:9a:d2:b0:f2:86:51:84:74:87:dc:6f:0a:6d:1d: 7e:a7:c4:db:25:d3:d4:ae:58:98:31:8d:bd:db:53: 1c:52:bc:97:6f:e4:eb:50:7c:fe:af:d3:6a:f8:ed: 7e:c5:de:cc:5d:7d:59:2c:25:9b:2a:21:1d:83:b0: de:9e:b9:1a:f7:a5:89:5b:6b:6b:2f:4b:d7:d5:2b: 93:64:b8:5d:ed:84:3b:3c:80:e8:d5:06:0f:e4:fb: b0:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:6A:62:7C:04:A7:E3:41:02:9E:43:02:E8:41:2B:42:E6:C1:90:AF X509v3 Authority Key Identifier: keyid:B5:AB:E8:6E:BB:2A:02:C5:83:92:74:9A:92:FE:A6:8F:BA:FC:5C:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:98:8f:c8:18:54:c4:10:ce:27:e2:8f:8f:43:1c:c8:d2:31: a2:89:9c:67:a4:96:e6:68:9b:f9:54:44:e8:0f:57:9d:e1:73: 5d:af:d9:c5:29:6a:51:c2:51:cf:16:9f:1e:6e:38:61:76:35: f7:f3:0b:9d:5b:70:3a:f1:7d:be:7e:34:8d:14:45:55:de:69: d7:b7:ee:7f:59:bd:62:58:b4:c6:ab:c2:39:84:66:b1:bd:85: 31:1d:17:24:f2:24:c5:74:b8:aa:67:bd:c7:29:a5:3b:d3:6d: b2:ab:3b:f7:8c:f9:70:79:64:2f:ea:01:ba:39:51:b0:56:ba: e2:5c:14:3e:d4:51:58:0c:73:0a:7b:ec:98:ce:9f:38:10:1e: f3:de:2f:fb:e7:a7:9b:d7:e4:76:29:e1:e0:72:1a:49:a7:80: d3:32:c0:84:cd:c2:c9:f7:e6:73:cc:8a:a2:70:c3:ea:69:eb: 2b:02:98:39:55:83:50:d2:11:ed:1b:52:9b:04:94:9b:cc:08: a3:9d:bb:09:3d:23:70:9c:99:fd:a1:c5:a1:5f:03:63:b5:99: e9:bf:d7:e4:19:6b:42:91:76:8b:5b:e2:22:a1:bf:8c:41:32: 99:1d:a6:0b:c6:34:08:0d:dc:7a:50:3d:75:2d:6b:77:00:a0: dd:3a:5f:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV66hvgJlqARDJxaQZb9RNWNXzxowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVBQkU4NkVCQjJBMDJDNTgzOTI3NDlBOTJGRUE2OEZC QUZDNUM0NjAeFw0yNTA0MjUxNzA1MDFaFw0yNTA0MjkwMDE2MDFaMDMxMTAvBgNV BAMTKDkwNkE2MjdDMDRBN0UzNDEwMjlFNDMwMkU4NDEyQjQyRTZDMTkwQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQxj5gU7ZtwUBzqIkTTK8Y1dfm rmuQtmA0D32eI61nXNu57gWXksZhXsMD83QQ2b6DvbYzHVdp+MzFxUJfJzrqM9fD yb781LS4g+g9wpFRjE2TqeiZlS/Yr+kuGl3shZ1I8zEjcKnMmwCzBeRfXiB3RC6V eUog/mlFTom0jPlYNeQaujpcpK4qv8ZJbQlw3U+eeiQNVYy05r7UdvLvboBgNRuQ YQ+a0rDyhlGEdIfcbwptHX6nxNsl09SuWJgxjb3bUxxSvJdv5OtQfP6v02r47X7F 3sxdfVksJZsqIR2DsN6euRr3pYlba2svS9fVK5NkuF3thDs8gOjVBg/k+7CJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkGpifASn40ECnkMC6EErQubBkK8wHwYDVR0j BBgwFoAUtavobrsqAsWDknSakv6mj7r8XEYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MGJkN2Q2Yy1lYTVhLTRjNDUtOTU1OC03MTc5OTRhYjY4MGUvMC9CNUFCRTg2RUJC MkEwMkM1ODM5Mjc0OUE5MkZFQTY4RkJBRkM1QzQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjVBQkU4NkVCQjJBMDJDNTgzOTI3NDlBOTJGRUE2OEZCQUZD NUM0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjBiZDdkNmMtZWE1YS00YzQ1LTk1 NTgtNzE3OTk0YWI2ODBlLzAvQjVBQkU4NkVCQjJBMDJDNTgzOTI3NDlBOTJGRUE2 OEZCQUZDNUM0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALaYj8gYVMQQzifij49DHMjSMaKJnGekluZo m/lUROgPV53hc12v2cUpalHCUc8Wnx5uOGF2NffzC51bcDrxfb5+NI0URVXeade3 7n9ZvWJYtMarwjmEZrG9hTEdFyTyJMV0uKpnvccppTvTbbKrO/eM+XB5ZC/qAbo5 UbBWuuJcFD7UUVgMcwp77JjOnzgQHvPeL/vnp5vX5HYp4eByGkmngNMywITNwsn3 5nPMiqJww+pp6ysCmDlVg1DSEe0bUpsElJvMCKOduwk9I3Ccmf2hxaFfA2O1mem/ 1+QZa0KRdotb4iKhv4xBMpkdpgvGNAgN3HpQPXUta3cAoN06X4E= -----END CERTIFICATE-----Generated at Fri Apr 25 19:23:50 2025 by rpki-client on console.sobornost.net