$ rpki-client -vvf repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft File: BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft (raw, json) Hash identifier: KByQV9fLOMFHnBiYI2ULs90wqY8Ex8X62gD0uCAzvq8= Subject key identifier: 27:1D:C8:B2:B3:4E:B6:52:B6:71:21:72:EF:A4:15:74:E5:21:44:BA Authority key identifier: BD:8C:DE:6F:E3:DF:9F:A1:ED:A6:CE:A4:62:F7:7E:F6:04:78:99:0D Certificate issuer: /CN=BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D Certificate serial: 13C5C37582FCFE87A303037CD177DA54555581C9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft Manifest number: 04C7 Signing time: Thu 24 Apr 2025 16:11:18 +0000 Manifest this update: Thu 24 Apr 2025 16:06:18 +0000 Manifest next update: Sun 27 Apr 2025 17:02:18 +0000 Files and hashes: 1: BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.crl (hash: w/AkacXjZuKSygEsQ2thtSxqXNpokmTrlS9MeXFxjZ4=) 2: 3130332e34312e3234372e302f32342d3234203d3e20313333383032.roa (hash: SE91KCthotRrX/AsP1qesUPqNUCPFEcuGMcgZjQqeBU=) 3: 3130332e3134312e36312e302f32342d3234203d3e20313333383032.roa (hash: tetctb3x0jo2tKS9PhsP2mOyqUJEiXGEiR7qL9F7+V4=) 4: 323030313a6466343a366330303a3a2f34382d3438203d3e20313333383032.roa (hash: clOOS2UHgiK1XdM7aZazMvJvGgOo73bVQrDZ1oe6k8c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.crl rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 17:02:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:c5:c3:75:82:fc:fe:87:a3:03:03:7c:d1:77:da:54:55:55:81:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D Validity Not Before: Apr 24 16:06:18 2025 GMT Not After : Apr 27 17:02:18 2025 GMT Subject: CN=271DC8B2B34EB652B6712172EFA41574E52144BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:6a:50:69:a1:ca:29:a3:97:2f:1f:84:26:48: 6f:e6:73:22:9c:e5:7f:8f:f7:0b:7d:19:bf:65:d0: 89:0d:87:37:de:32:bd:f2:89:5a:72:c1:88:b9:7a: e2:45:5f:ae:45:bd:ce:52:26:5c:b0:81:ec:6c:4e: 77:68:94:50:cd:5f:fc:2f:7b:1c:f4:74:ce:64:4c: 43:48:b2:e3:fc:19:aa:5d:a7:3a:bc:d9:69:d2:16: 17:f1:fc:86:a9:22:e1:eb:cf:54:47:71:2c:bc:1c: 5f:d1:06:e8:cb:0a:d0:45:bf:f6:3b:c6:d3:2e:76: dc:f0:29:51:e2:9a:3a:0d:11:46:29:06:05:54:76: e6:7d:6e:5c:78:33:72:65:b0:1b:30:56:a2:66:77: ee:40:77:09:e9:6b:ba:c8:2e:d7:b7:6e:b7:16:83: 7f:74:ad:56:0e:8a:5d:3b:6f:1c:1a:4a:c3:ba:44: 77:9f:7c:87:22:70:b7:f8:56:aa:10:b9:8a:72:03: 4e:94:fe:3f:62:3d:c9:e1:b3:6f:29:7a:ee:d2:f9: 01:b1:93:d4:14:24:25:e5:f5:f0:cc:c3:26:cd:f2: f1:5b:b4:86:43:e7:e4:b0:c9:14:5d:86:27:28:a4: c6:d5:b4:c0:f3:71:4e:fb:c6:37:71:52:10:a4:30: d6:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:1D:C8:B2:B3:4E:B6:52:B6:71:21:72:EF:A4:15:74:E5:21:44:BA X509v3 Authority Key Identifier: keyid:BD:8C:DE:6F:E3:DF:9F:A1:ED:A6:CE:A4:62:F7:7E:F6:04:78:99:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:1f:ac:fe:f8:30:6f:39:d1:32:c2:29:31:02:c2:a9:7e:c8: e6:f4:da:e6:9b:1b:4b:e1:44:98:9b:2e:6c:1b:de:4b:17:df: 89:bd:8a:1b:6d:57:1a:a7:6c:13:e7:9e:05:fb:68:fd:1e:3d: 13:17:10:d7:97:74:1c:45:02:76:6e:1b:9d:6d:65:a1:ee:b7: 14:94:6f:b1:ce:40:93:68:35:23:be:12:d8:31:4a:cf:c1:ae: b0:d7:d4:00:3d:ac:ef:3c:3a:39:8a:bf:89:a1:64:27:73:62: 76:21:0b:67:8e:39:8d:c3:90:6e:46:b5:29:d8:d8:8b:99:3d: 11:d0:7b:98:61:c0:6c:c6:1c:f4:a4:1f:f9:4e:dd:36:60:0d: c2:4e:81:70:e9:3a:54:67:23:25:d7:0c:2d:d7:78:09:8c:c2: 0e:f4:1f:bc:0f:9b:98:6a:aa:02:3b:79:2a:63:88:3f:8f:08: 3e:33:40:ef:1a:6a:c8:14:eb:92:2e:76:e6:43:fd:a9:d4:bb: 3f:fb:20:53:7d:81:68:0c:50:5f:5c:69:16:75:96:f3:7f:3c: 7a:52:09:4d:07:77:c8:5b:ac:7d:17:08:6c:19:41:fe:14:0c: 36:aa:88:01:18:39:2d:fd:78:1f:92:a4:a7:f3:65:1b:39:cf: fd:c2:8c:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE8XDdYL8/oejAwN80XfaVFVVgckwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ4Q0RFNkZFM0RGOUZBMUVEQTZDRUE0NjJGNzdFRjYw NDc4OTkwRDAeFw0yNTA0MjQxNjA2MThaFw0yNTA0MjcxNzAyMThaMDMxMTAvBgNV BAMTKDI3MURDOEIyQjM0RUI2NTJCNjcxMjE3MkVGQTQxNTc0RTUyMTQ0QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOalBpocopo5cvH4QmSG/mcyKc 5X+P9wt9Gb9l0IkNhzfeMr3yiVpywYi5euJFX65Fvc5SJlywgexsTndolFDNX/wv exz0dM5kTENIsuP8Gapdpzq82WnSFhfx/IapIuHrz1RHcSy8HF/RBujLCtBFv/Y7 xtMudtzwKVHimjoNEUYpBgVUduZ9blx4M3JlsBswVqJmd+5Adwnpa7rILte3brcW g390rVYOil07bxwaSsO6RHeffIcicLf4VqoQuYpyA06U/j9iPcnhs28peu7S+QGx k9QUJCXl9fDMwybN8vFbtIZD5+SwyRRdhicopMbVtMDzcU77xjdxUhCkMNbHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJx3IsrNOtlK2cSFy76QVdOUhRLowHwYDVR0j BBgwFoAUvYzeb+Pfn6Htps6kYvd+9gR4mQ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NTljZmQwNC02OWQwLTRkNGMtOGQwOS0yZDIyMTM4NDJjMmMvMC9CRDhDREU2RkUz REY5RkExRURBNkNFQTQ2MkY3N0VGNjA0Nzg5OTBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQ4Q0RFNkZFM0RGOUZBMUVEQTZDRUE0NjJGNzdFRjYwNDc4 OTkwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjU5Y2ZkMDQtNjlkMC00ZDRjLThk MDktMmQyMjEzODQyYzJjLzAvQkQ4Q0RFNkZFM0RGOUZBMUVEQTZDRUE0NjJGNzdF RjYwNDc4OTkwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJIfrP74MG850TLCKTECwql+yOb02uabG0vh RJibLmwb3ksX34m9ihttVxqnbBPnngX7aP0ePRMXENeXdBxFAnZuG51tZaHutxSU b7HOQJNoNSO+EtgxSs/BrrDX1AA9rO88OjmKv4mhZCdzYnYhC2eOOY3DkG5GtSnY 2IuZPRHQe5hhwGzGHPSkH/lO3TZgDcJOgXDpOlRnIyXXDC3XeAmMwg70H7wPm5hq qgI7eSpjiD+PCD4zQO8aasgU65IuduZD/anUuz/7IFN9gWgMUF9caRZ1lvN/PHpS CU0Hd8hbrH0XCGwZQf4UDDaqiAEYOS39eB+SpKfzZRs5z/3CjK0= -----END CERTIFICATE-----Generated at Thu Apr 24 18:01:38 2025 by rpki-client on console.sobornost.net