$ rpki-client -vvf repo-rpki.idnic.net/repo/b5424280-33be-4eb7-8db9-e03d417c4d97/0/8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.mft File: 8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.mft (raw, json) Hash identifier: 1EubBldl5EOiXiTgjuDknEqBjDNtuLe+e6X4KYahqnU= Subject key identifier: BA:A5:FF:FF:75:21:62:05:03:56:DD:CB:C5:91:A0:27:A3:3C:2B:DE Authority key identifier: 8B:4A:0C:10:F8:8A:0B:6E:F9:E4:51:0F:0F:61:27:AD:75:DB:C4:92 Certificate issuer: /CN=8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492 Certificate serial: 4A2356C3E8008981AA76A16C390B275B565B1F5B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b5424280-33be-4eb7-8db9-e03d417c4d97/0/8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.mft Manifest number: 0483 Signing time: Sat 26 Apr 2025 23:50:44 +0000 Manifest this update: Sat 26 Apr 2025 23:45:44 +0000 Manifest next update: Wed 30 Apr 2025 03:04:44 +0000 Files and hashes: 1: 8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.crl (hash: lkkytVA2ueUGna90MvAEigYLN3RTtqSbFLKCTBvXBkE=) 2: 3130332e3134332e36382e302f32342d3234203d3e20313339333931.roa (hash: wVNUf+VlURHvtPfJTdBPKqRmCoRq5tMqXCMVvLe41BI=) 3: 3130332e3134332e36392e302f32342d3234203d3e20313339333931.roa (hash: 617B49ZlXhGk82stAiewN3YrmDgkhS7z3S8GVYVN5mw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b5424280-33be-4eb7-8db9-e03d417c4d97/0/8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.crl rsync://repo-rpki.idnic.net/repo/b5424280-33be-4eb7-8db9-e03d417c4d97/0/8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 03:04:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:23:56:c3:e8:00:89:81:aa:76:a1:6c:39:0b:27:5b:56:5b:1f:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492 Validity Not Before: Apr 26 23:45:44 2025 GMT Not After : Apr 30 03:04:44 2025 GMT Subject: CN=BAA5FFFF752162050356DDCBC591A027A33C2BDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:43:eb:76:32:01:c8:e5:bb:96:4b:30:54:c0: 04:a9:fa:5f:96:98:7f:2a:40:07:d0:92:45:e7:85: 4a:c6:a3:ac:75:12:c9:54:fa:bf:fa:c4:35:7b:ef: 3c:08:87:f3:a6:80:04:40:61:50:9a:0c:5e:44:30: a0:a1:ab:74:4e:ab:96:34:4e:bc:55:fb:ae:3f:58: ea:63:53:13:af:bc:0a:fa:30:97:de:a2:a8:c0:8c: b1:a8:37:0b:34:c1:e9:c1:7a:cb:89:9f:f9:3b:89: 58:35:c5:95:37:f8:cd:aa:8d:2e:93:d2:18:27:9b: d4:e7:6f:4a:65:38:36:99:9b:2b:e8:e0:39:80:af: e1:b1:f2:98:f6:e9:fc:d3:eb:26:82:1f:09:8a:5b: f4:84:e7:f4:46:c2:9c:51:82:c8:ca:e1:3e:13:7d: f8:67:b5:a2:07:13:b6:b6:e5:fe:0d:35:64:f9:27: 2c:8a:b9:9f:23:a0:42:2d:d2:f4:7c:67:8d:c2:c9: 25:22:6c:fc:5c:11:a6:7f:ba:54:49:be:e6:8f:45: c3:43:39:a9:c9:5f:2c:33:80:3b:04:da:4b:9e:4b: 43:65:84:33:b2:e3:f2:03:90:40:5d:34:db:da:dc: b4:c5:95:87:50:25:d8:53:68:5d:5e:4b:9d:5d:94: 09:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:A5:FF:FF:75:21:62:05:03:56:DD:CB:C5:91:A0:27:A3:3C:2B:DE X509v3 Authority Key Identifier: keyid:8B:4A:0C:10:F8:8A:0B:6E:F9:E4:51:0F:0F:61:27:AD:75:DB:C4:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b5424280-33be-4eb7-8db9-e03d417c4d97/0/8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5424280-33be-4eb7-8db9-e03d417c4d97/0/8B4A0C10F88A0B6EF9E4510F0F6127AD75DBC492.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:51:68:90:cb:68:97:ac:e0:b0:25:ad:84:fe:78:4d:ca:70: 66:93:eb:77:83:c8:0d:5c:dd:b2:4b:8f:68:0f:7b:3c:1f:1d: d9:44:ab:23:4a:dd:c0:1d:cd:e4:74:05:b9:47:e6:04:2d:25: 97:55:af:46:2c:41:1f:45:2d:c5:c7:57:cb:a9:d6:bd:2e:19: 2c:f8:ea:d9:82:47:58:c6:c2:99:14:50:3c:c1:5f:d4:6f:ee: c5:7c:e6:d6:56:c7:04:37:23:24:82:50:eb:42:3c:ae:33:35: 3c:87:2a:46:51:56:0a:94:62:ed:e5:c9:cd:67:68:6d:81:d2: 08:04:fc:a1:9e:7e:8e:b5:23:40:c6:e0:42:30:3d:30:6e:49: b8:8e:e3:8b:57:46:65:b3:2a:50:a4:6d:7d:b8:46:bb:f3:d1: a0:a9:5d:ab:23:c3:67:6c:9d:d6:26:9b:09:62:e6:19:0d:9a: 80:91:c6:67:f3:fa:6a:4f:7c:ed:59:c8:da:f9:59:c0:68:ec: 0d:f6:02:7e:26:4f:ed:98:3b:cb:84:c4:0c:07:5e:b3:a6:65: 9d:f0:78:93:42:85:85:43:25:af:0f:6a:2f:cc:68:08:6c:b7: e3:e3:02:70:24:60:7c:c4:a4:ca:ba:b9:d2:00:56:6e:11:b6: cb:d7:36:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSiNWw+gAiYGqdqFsOQsnW1ZbH1swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI0QTBDMTBGODhBMEI2RUY5RTQ1MTBGMEY2MTI3QUQ3 NURCQzQ5MjAeFw0yNTA0MjYyMzQ1NDRaFw0yNTA0MzAwMzA0NDRaMDMxMTAvBgNV BAMTKEJBQTVGRkZGNzUyMTYyMDUwMzU2RERDQkM1OTFBMDI3QTMzQzJCREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzQ+t2MgHI5buWSzBUwASp+l+W mH8qQAfQkkXnhUrGo6x1EslU+r/6xDV77zwIh/OmgARAYVCaDF5EMKChq3ROq5Y0 TrxV+64/WOpjUxOvvAr6MJfeoqjAjLGoNws0wenBesuJn/k7iVg1xZU3+M2qjS6T 0hgnm9Tnb0plODaZmyvo4DmAr+Gx8pj26fzT6yaCHwmKW/SE5/RGwpxRgsjK4T4T ffhntaIHE7a25f4NNWT5JyyKuZ8joEIt0vR8Z43CySUibPxcEaZ/ulRJvuaPRcND OanJXywzgDsE2kueS0NlhDOy4/IDkEBdNNva3LTFlYdQJdhTaF1eS51dlAn9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuqX//3UhYgUDVt3LxZGgJ6M8K94wHwYDVR0j BBgwFoAUi0oMEPiKC2755FEPD2EnrXXbxJIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NTQyNDI4MC0zM2JlLTRlYjctOGRiOS1lMDNkNDE3YzRkOTcvMC84QjRBMEMxMEY4 OEEwQjZFRjlFNDUxMEYwRjYxMjdBRDc1REJDNDkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEI0QTBDMTBGODhBMEI2RUY5RTQ1MTBGMEY2MTI3QUQ3NURC QzQ5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjU0MjQyODAtMzNiZS00ZWI3LThk YjktZTAzZDQxN2M0ZDk3LzAvOEI0QTBDMTBGODhBMEI2RUY5RTQ1MTBGMEY2MTI3 QUQ3NURCQzQ5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH5RaJDLaJes4LAlrYT+eE3KcGaT63eDyA1c 3bJLj2gPezwfHdlEqyNK3cAdzeR0BblH5gQtJZdVr0YsQR9FLcXHV8up1r0uGSz4 6tmCR1jGwpkUUDzBX9Rv7sV85tZWxwQ3IySCUOtCPK4zNTyHKkZRVgqUYu3lyc1n aG2B0ggE/KGefo61I0DG4EIwPTBuSbiO44tXRmWzKlCkbX24Rrvz0aCpXasjw2ds ndYmmwli5hkNmoCRxmfz+mpPfO1ZyNr5WcBo7A32An4mT+2YO8uExAwHXrOmZZ3w eJNChYVDJa8Pai/MaAhst+PjAnAkYHzEpMq6udIAVm4RtsvXNqQ= -----END CERTIFICATE-----Generated at Sun Apr 27 05:33:08 2025 by rpki-client on console.sobornost.net