$ rpki-client -vvf repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft File: 8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft (raw, json) Hash identifier: XtUKtVkJ57UeaTHDcsacPIL/yOwdBbmkgmcTKCAKEYw= Subject key identifier: 8C:89:36:BF:9F:01:5E:86:7F:80:A4:ED:12:7C:A3:BB:94:9A:33:C5 Authority key identifier: 86:03:B0:F7:26:A0:5A:B3:56:D1:0D:B1:70:BD:8E:27:96:3A:FE:1A Certificate issuer: /CN=8603B0F726A05AB356D10DB170BD8E27963AFE1A Certificate serial: 2A13C1B1CC624950283C6832BD905D20579FC1B0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8603B0F726A05AB356D10DB170BD8E27963AFE1A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft Manifest number: 03B8 Signing time: Sun 27 Apr 2025 11:31:54 +0000 Manifest this update: Sun 27 Apr 2025 11:26:54 +0000 Manifest next update: Wed 30 Apr 2025 20:11:54 +0000 Files and hashes: 1: 3130332e3134382e31392e302f32342d3234203d3e20313339393738.roa (hash: CZOT3Qe6u5gK3ZMkwDdMPzpBsT/hchoPycr1jT+sxpE=) 2: 8603B0F726A05AB356D10DB170BD8E27963AFE1A.crl (hash: i7b4D5Okc8VsXx/LvjgQ8e5KXY7gh7EaO77XKRoQs7o=) 3: 3130332e3134382e31382e302f32342d3234203d3e20313339393738.roa (hash: KlVfWP1Il3RN3ASw6Ya5TPYfRFfepbYfILbLkUXBAks=) 4: 3130332e3134382e31382e302f32332d3233203d3e20313339393738.roa (hash: 9QqvAfZSusq7TNTZjMNWZS+7iPHdwM0xe1dY5FOdfh4=) 5: 323430353a633763303a3a2f33322d3332203d3e20313339393738.roa (hash: w1U60qcdJqGqgGejfw5qqfHMeYCjchzAjGjkoYQhMH8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.crl rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8603B0F726A05AB356D10DB170BD8E27963AFE1A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 15:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:13:c1:b1:cc:62:49:50:28:3c:68:32:bd:90:5d:20:57:9f:c1:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8603B0F726A05AB356D10DB170BD8E27963AFE1A Validity Not Before: Apr 27 11:26:54 2025 GMT Not After : Apr 30 20:11:54 2025 GMT Subject: CN=8C8936BF9F015E867F80A4ED127CA3BB949A33C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:62:c8:03:77:c1:f6:a0:bf:58:28:43:e8:3b: 95:8c:fa:6a:27:17:12:14:f8:7d:ca:67:90:e8:de: 75:61:b1:07:78:89:b7:78:32:8d:e8:16:e3:09:fe: 11:96:5b:30:51:af:1c:b0:77:27:2f:5b:4e:59:1d: 38:31:2d:c5:b5:27:46:8e:15:1f:a1:3d:c4:96:e4: cb:53:e3:9e:29:de:bc:3e:f9:c6:5e:66:26:58:53: 2b:36:62:2a:d9:a4:e4:da:f0:ed:e8:27:05:47:f9: ae:95:a9:cf:ad:d8:24:e3:cc:26:a5:bc:45:3b:d0: a7:f1:ed:2f:ca:bd:26:f1:9b:9c:35:b7:78:c7:e1: 93:61:c1:eb:82:11:92:75:57:8f:ee:30:bf:aa:d4: df:45:1a:06:1b:aa:a4:85:d9:c9:9b:ef:a5:eb:66: 69:70:b9:2f:15:db:ec:1f:53:3c:67:e7:ca:50:7c: 7c:75:73:c4:49:0c:5e:84:a1:f0:b1:58:13:12:a0: 7e:59:4a:60:da:41:9f:75:14:c2:d2:fe:f9:24:ca: ce:d5:2a:70:97:98:0b:6b:f7:93:b7:85:82:1d:e0: 68:14:cb:f5:39:60:7f:90:9b:30:60:54:0d:e4:4f: c1:53:f6:ff:38:73:de:dd:e6:92:40:73:10:79:4d: 17:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:89:36:BF:9F:01:5E:86:7F:80:A4:ED:12:7C:A3:BB:94:9A:33:C5 X509v3 Authority Key Identifier: keyid:86:03:B0:F7:26:A0:5A:B3:56:D1:0D:B1:70:BD:8E:27:96:3A:FE:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8603B0F726A05AB356D10DB170BD8E27963AFE1A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:f1:8d:02:e8:e6:5f:62:1b:5e:bf:53:be:74:54:6b:61:9a: 1f:08:99:1f:c4:a9:22:b5:b0:3c:d0:28:bb:04:3f:db:50:41: b1:09:f5:9c:8b:97:d5:8b:b2:77:8e:e3:39:78:20:47:36:0c: d8:55:4d:f7:e5:ee:3c:9e:5c:52:69:96:49:38:d1:8f:4d:ab: d1:77:49:8b:d0:eb:68:fe:8d:4b:c9:67:19:07:a3:1a:76:c4: e2:2a:a0:6f:99:5f:46:88:89:6e:ba:85:84:ce:2d:93:b4:56: 08:db:20:df:47:72:29:ce:13:58:95:5c:36:34:1f:31:ec:f2: 0c:eb:62:66:bf:d8:a5:63:2f:38:0c:f1:c9:c1:87:ab:b0:22: 61:90:fb:ed:7e:29:26:d8:c6:9b:ea:9e:50:0f:e7:f4:07:50: e2:88:5d:f0:cb:56:9e:49:39:54:ad:ab:92:6d:f8:15:71:66: e8:26:30:c1:9a:08:9e:0c:20:27:89:86:c2:57:dd:99:11:84: 19:fc:c3:0f:a1:bd:85:b4:c0:43:20:a4:55:63:61:8d:a4:19: 87:8e:c5:1c:a5:90:f2:ae:7f:e4:64:ae:fc:33:77:34:6b:c9: 1d:57:b9:8e:b5:6e:1e:5e:7e:dc:59:37:a3:53:49:64:55:e3: 88:01:66:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKhPBscxiSVAoPGgyvZBdIFefwbAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODYwM0IwRjcyNkEwNUFCMzU2RDEwREIxNzBCRDhFMjc5 NjNBRkUxQTAeFw0yNTA0MjcxMTI2NTRaFw0yNTA0MzAyMDExNTRaMDMxMTAvBgNV BAMTKDhDODkzNkJGOUYwMTVFODY3RjgwQTRFRDEyN0NBM0JCOTQ5QTMzQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFYsgDd8H2oL9YKEPoO5WM+mon FxIU+H3KZ5Do3nVhsQd4ibd4Mo3oFuMJ/hGWWzBRrxywdycvW05ZHTgxLcW1J0aO FR+hPcSW5MtT454p3rw++cZeZiZYUys2YirZpOTa8O3oJwVH+a6Vqc+t2CTjzCal vEU70Kfx7S/KvSbxm5w1t3jH4ZNhweuCEZJ1V4/uML+q1N9FGgYbqqSF2cmb76Xr ZmlwuS8V2+wfUzxn58pQfHx1c8RJDF6EofCxWBMSoH5ZSmDaQZ91FMLS/vkkys7V KnCXmAtr95O3hYId4GgUy/U5YH+QmzBgVA3kT8FT9v84c97d5pJAcxB5TRdDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjIk2v58BXoZ/gKTtEnyju5SaM8UwHwYDVR0j BBgwFoAUhgOw9yagWrNW0Q2xcL2OJ5Y6/howDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i N2I4N2Y2ZC0yOWE3LTRiNGMtODFjNy01YjRjYmRiMmNiNmEvMC84NjAzQjBGNzI2 QTA1QUIzNTZEMTBEQjE3MEJEOEUyNzk2M0FGRTFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODYwM0IwRjcyNkEwNUFCMzU2RDEwREIxNzBCRDhFMjc5NjNB RkUxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjdiODdmNmQtMjlhNy00YjRjLTgx YzctNWI0Y2JkYjJjYjZhLzAvODYwM0IwRjcyNkEwNUFCMzU2RDEwREIxNzBCRDhF Mjc5NjNBRkUxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJPxjQLo5l9iG16/U750VGthmh8ImR/EqSK1 sDzQKLsEP9tQQbEJ9ZyLl9WLsneO4zl4IEc2DNhVTffl7jyeXFJplkk40Y9Nq9F3 SYvQ62j+jUvJZxkHoxp2xOIqoG+ZX0aIiW66hYTOLZO0VgjbIN9HcinOE1iVXDY0 HzHs8gzrYma/2KVjLzgM8cnBh6uwImGQ++1+KSbYxpvqnlAP5/QHUOKIXfDLVp5J OVStq5Jt+BVxZugmMMGaCJ4MICeJhsJX3ZkRhBn8ww+hvYW0wEMgpFVjYY2kGYeO xRylkPKuf+RkrvwzdzRryR1XuY61bh5eftxZN6NTSWRV44gBZrs= -----END CERTIFICATE-----Generated at Sun Apr 27 14:50:34 2025 by rpki-client on console.sobornost.net