$ rpki-client -vvf repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.mft File: 09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.mft (raw, json) Hash identifier: Q9SXyzbvZqxlddRappN8Ue1omZMFTJkhze3UlhO8pz0= Subject key identifier: 1F:4A:5B:05:1B:30:11:D9:3E:9F:31:63:51:9E:EB:BB:FD:AB:BD:98 Authority key identifier: 09:F5:8F:64:1C:5D:42:BD:2D:25:57:FF:A2:EA:06:1B:66:AC:BD:A8 Certificate issuer: /CN=09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8 Certificate serial: 58AD8CB24BC951F20AF4320030A951A786E462A7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.mft Manifest number: 9B Signing time: Thu 24 Apr 2025 18:10:58 +0000 Manifest this update: Thu 24 Apr 2025 18:05:58 +0000 Manifest next update: Mon 28 Apr 2025 03:08:58 +0000 Files and hashes: 1: 09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.crl (hash: e4bSNujGjkdhyJzzBTSMKSHpk+7UQ3GHTnNmJtMqtc4=) 2: 3130332e3134332e3139342e302f32342d3234203d3e20313339343135.roa (hash: 6JTrw+Mp0tW4mL+1m/3L++wGPh6kpNXujm25I/r3bRQ=) 3: 3130332e3134332e3139352e302f32342d3234203d3e20313339343135.roa (hash: SPQ4XR24apUiNOZQsSPO5TwjwY0jCKQWVjVVXKtDXDI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.crl rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:ad:8c:b2:4b:c9:51:f2:0a:f4:32:00:30:a9:51:a7:86:e4:62:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8 Validity Not Before: Apr 24 18:05:58 2025 GMT Not After : Apr 28 03:08:58 2025 GMT Subject: CN=1F4A5B051B3011D93E9F3163519EEBBBFDABBD98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:38:17:ab:0d:ce:81:11:72:85:84:72:25:06: a0:02:32:20:cd:b1:c1:bb:98:ea:d1:6c:0d:55:bd: b0:bb:1b:ec:f3:e7:2f:06:7d:b9:7a:02:a5:c7:11: 43:fe:c0:03:d2:f6:6e:47:7e:0e:8e:f9:f9:03:b6: b8:a8:b7:9a:8a:cb:4e:aa:52:f7:71:bf:a4:77:31: 5b:bd:7f:ff:9c:59:72:df:25:1a:73:53:64:5a:11: ca:cb:cb:34:47:de:c4:b2:57:7c:d5:65:59:37:b1: 0b:7d:dd:5e:d9:f3:46:a9:ea:d2:2a:cd:d1:d5:d1: 39:19:58:4f:01:11:4a:d5:09:00:04:61:8a:f1:e9: f2:6c:08:1d:d3:f3:48:62:97:c2:20:cf:9d:f3:a9: 34:fc:d0:8b:d6:b4:4d:54:80:01:3a:90:79:fe:d3: c8:e3:52:14:eb:1a:d0:d4:b2:7e:08:4a:e6:14:6e: 50:4a:33:13:9d:ca:ca:ba:df:d0:8e:93:b3:d1:fc: c5:82:d2:de:e2:b8:1e:27:76:cb:04:cc:fb:4c:db: c5:87:15:62:d7:2d:3b:2e:c9:6f:f3:2d:47:9d:31: ad:ac:cc:ce:6b:d3:a3:df:57:a4:b3:08:27:03:7e: 18:22:a6:28:83:0d:38:1b:36:06:8e:75:db:c8:7c: e3:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:4A:5B:05:1B:30:11:D9:3E:9F:31:63:51:9E:EB:BB:FD:AB:BD:98 X509v3 Authority Key Identifier: keyid:09:F5:8F:64:1C:5D:42:BD:2D:25:57:FF:A2:EA:06:1B:66:AC:BD:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:ac:fe:3f:85:b8:a4:64:89:67:30:15:f5:c4:f5:86:05:d5: 75:b6:1d:f1:24:84:c7:a6:5f:a6:ab:fa:45:e3:78:b7:f5:6e: 0c:15:53:2a:ad:88:e0:98:bc:81:40:14:40:11:0b:2d:08:c6: a1:93:b4:2b:54:79:a6:2c:20:0e:7c:0c:12:87:81:3d:c5:0f: d9:17:a2:55:1f:23:de:08:3f:bb:a6:81:e8:99:1c:b6:ab:45: ee:d4:1f:54:52:eb:dd:12:7f:6e:58:0c:59:0e:bd:1c:17:96: 8f:56:8d:82:a8:54:77:2d:a8:e5:33:7f:13:6b:ac:6b:76:55: c9:45:ac:3e:0b:ca:61:4b:2a:b8:f5:8d:1e:22:57:33:2d:35: 8e:03:34:91:55:2f:39:81:fe:18:41:46:c6:4b:c8:73:f6:ad: 68:a2:56:71:ff:cf:aa:0d:3c:11:c1:19:e3:78:7b:85:26:9b: 02:a0:3a:9f:a8:d4:e9:ca:9e:14:3d:24:fa:cd:13:f7:71:2a: 01:fa:2c:db:55:7d:12:f2:50:a4:49:47:78:4b:ad:6d:34:35: 34:cf:38:f2:a4:47:31:3a:8a:ef:b2:cf:4b:21:fd:a9:5e:79: 95:96:97:c6:43:b8:b2:c2:bf:79:55:bd:f2:dc:aa:9d:2e:13: aa:6e:2b:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWK2MskvJUfIK9DIAMKlRp4bkYqcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlGNThGNjQxQzVENDJCRDJEMjU1N0ZGQTJFQTA2MUI2 NkFDQkRBODAeFw0yNTA0MjQxODA1NThaFw0yNTA0MjgwMzA4NThaMDMxMTAvBgNV BAMTKDFGNEE1QjA1MUIzMDExRDkzRTlGMzE2MzUxOUVFQkJCRkRBQkJEOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeOBerDc6BEXKFhHIlBqACMiDN scG7mOrRbA1VvbC7G+zz5y8Gfbl6AqXHEUP+wAPS9m5Hfg6O+fkDtriot5qKy06q Uvdxv6R3MVu9f/+cWXLfJRpzU2RaEcrLyzRH3sSyV3zVZVk3sQt93V7Z80ap6tIq zdHV0TkZWE8BEUrVCQAEYYrx6fJsCB3T80hil8Igz53zqTT80IvWtE1UgAE6kHn+ 08jjUhTrGtDUsn4ISuYUblBKMxOdysq639COk7PR/MWC0t7iuB4ndssEzPtM28WH FWLXLTsuyW/zLUedMa2szM5r06PfV6SzCCcDfhgipiiDDTgbNgaOddvIfOPHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH0pbBRswEdk+nzFjUZ7ru/2rvZgwHwYDVR0j BBgwFoAUCfWPZBxdQr0tJVf/ouoGG2asvagwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MmUwNmY3Mi0xMzIzLTRmYmQtYjI2ZS05ZWQ5YTlhZGQ4ODAvMC8wOUY1OEY2NDFD NUQ0MkJEMkQyNTU3RkZBMkVBMDYxQjY2QUNCREE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDlGNThGNjQxQzVENDJCRDJEMjU1N0ZGQTJFQTA2MUI2NkFD QkRBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjJlMDZmNzItMTMyMy00ZmJkLWIy NmUtOWVkOWE5YWRkODgwLzAvMDlGNThGNjQxQzVENDJCRDJEMjU1N0ZGQTJFQTA2 MUI2NkFDQkRBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABqs/j+FuKRkiWcwFfXE9YYF1XW2HfEkhMem X6ar+kXjeLf1bgwVUyqtiOCYvIFAFEARCy0IxqGTtCtUeaYsIA58DBKHgT3FD9kX olUfI94IP7umgeiZHLarRe7UH1RS690Sf25YDFkOvRwXlo9WjYKoVHctqOUzfxNr rGt2VclFrD4LymFLKrj1jR4iVzMtNY4DNJFVLzmB/hhBRsZLyHP2rWiiVnH/z6oN PBHBGeN4e4UmmwKgOp+o1OnKnhQ9JPrNE/dxKgH6LNtVfRLyUKRJR3hLrW00NTTP OPKkRzE6iu+yz0sh/aleeZWWl8ZDuLLCv3lVvfLcqp0uE6puK0c= -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:24 2025 by rpki-client on console.sobornost.net