$ rpki-client -vvf repo-rpki.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.mft File: 20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.mft (raw, json) Hash identifier: TvXvJ9skSQpEAse5BNnrXRJlH4H8ny+8MaLkddY1HMU= Subject key identifier: 13:C2:00:BB:5B:8A:1E:A5:CF:66:49:3F:6C:69:70:F1:07:79:BE:61 Authority key identifier: 20:FD:16:65:50:36:93:52:D6:C4:C8:AB:8E:9E:42:03:C5:D9:AB:EE Certificate issuer: /CN=20FD166550369352D6C4C8AB8E9E4203C5D9ABEE Certificate serial: 586908CCF67FECF8CB3E0CBA9AD0C541C8C3F889 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.mft Manifest number: 01BB Signing time: Wed 23 Apr 2025 23:20:45 +0000 Manifest this update: Wed 23 Apr 2025 23:15:45 +0000 Manifest next update: Sun 27 Apr 2025 10:22:45 +0000 Files and hashes: 1: 3130332e3135362e3134362e302f32332d3234203d3e20313431303933.roa (hash: IgfjgKMY3XCpPST6kax6ANVIRUFC9yDuOzV+TPxNu+4=) 2: 20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.crl (hash: wqRUhVqlhqmasAo5lRXdPB1NMZgkNZZpHul0WvqsD0s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.crl rsync://repo-rpki.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 08:10:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:69:08:cc:f6:7f:ec:f8:cb:3e:0c:ba:9a:d0:c5:41:c8:c3:f8:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20FD166550369352D6C4C8AB8E9E4203C5D9ABEE Validity Not Before: Apr 23 23:15:45 2025 GMT Not After : Apr 27 10:22:45 2025 GMT Subject: CN=13C200BB5B8A1EA5CF66493F6C6970F10779BE61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:29:f2:34:ca:f2:fd:9c:be:16:ad:33:d5:c0: a1:41:25:00:52:f7:8d:14:d4:ff:c6:10:7b:d2:2c: 22:3b:8d:52:78:f0:db:d5:e4:42:21:44:4c:de:73: e3:28:60:d0:13:a6:b5:4a:69:ac:cb:28:41:14:73: 7f:d8:fa:b1:f7:c5:9d:98:6b:d1:e3:4d:d7:82:59: 9b:d4:fc:8b:47:58:ab:53:83:cd:3e:57:1b:ff:a3: 8c:41:1e:86:17:f1:c2:5e:21:44:55:88:d3:eb:be: 83:59:2f:b0:48:f4:65:cc:c7:fa:dd:66:2b:e3:12: 3a:2f:b1:95:74:48:52:8e:dc:39:42:02:84:e2:fb: 41:f2:f4:2d:e8:5c:b5:e7:a2:d1:ba:18:b3:b4:59: 0b:a0:34:b2:9e:2f:ac:d2:01:9e:67:8f:6f:1f:d9: 56:39:b1:cb:4f:36:92:75:d5:41:b9:32:e5:28:2e: 41:97:a0:11:42:8d:12:cd:21:9f:ad:30:86:3f:90: 4d:37:81:67:7b:b5:69:7f:67:2e:9a:ac:62:ae:5c: 0b:92:da:f5:84:0f:0b:18:1d:2c:77:37:cd:0d:a4: dd:c7:d1:bb:7b:dd:3f:b3:96:b5:35:49:30:48:a1: c2:16:1b:48:b5:34:82:bc:a8:d4:1c:15:a8:8e:d2: e4:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:C2:00:BB:5B:8A:1E:A5:CF:66:49:3F:6C:69:70:F1:07:79:BE:61 X509v3 Authority Key Identifier: keyid:20:FD:16:65:50:36:93:52:D6:C4:C8:AB:8E:9E:42:03:C5:D9:AB:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:50:de:bc:73:6b:57:2e:4b:0c:69:ed:8c:30:e8:dd:35:6f: b7:95:d6:f6:5a:77:5d:4b:fb:00:bd:84:2b:45:32:bf:9a:7c: bc:80:1d:ec:72:54:b6:1c:52:d4:cc:bc:64:33:d7:10:fe:e4: be:c0:27:60:a6:a4:1e:7d:10:59:2b:dd:33:09:ce:2b:3c:1d: 1d:60:f8:51:a9:70:e8:1f:33:0e:f2:78:b2:58:e7:ff:4b:24: eb:ae:77:32:9d:bf:ff:af:f5:dd:a2:75:f9:fc:b0:5f:18:b2: 73:df:fe:49:a4:6e:39:de:ca:37:6e:08:7d:83:63:8d:72:66: 9f:e1:83:ab:23:9d:fe:36:d3:3c:30:39:4e:6d:5f:c4:8d:75: 0c:6b:2b:61:d4:87:4d:4a:86:12:f7:2c:99:ce:f5:dd:77:6b: a9:ad:60:ca:c2:21:95:75:55:e3:99:6b:f7:51:e5:6e:62:39: ae:4b:a1:a0:fd:5f:34:38:bc:d2:b9:c5:d3:2c:87:9e:35:31: 10:82:98:79:df:c8:c7:e6:1c:93:b2:73:e8:74:68:8f:34:ac: 35:72:a6:e2:e2:a1:04:23:4f:15:54:92:12:cd:d1:6d:55:c1: 2c:63:17:4f:35:35:df:08:c2:b2:d3:65:0d:32:b9:51:0e:cb: 49:10:bb:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWGkIzPZ/7PjLPgy6mtDFQcjD+IkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBGRDE2NjU1MDM2OTM1MkQ2QzRDOEFCOEU5RTQyMDND NUQ5QUJFRTAeFw0yNTA0MjMyMzE1NDVaFw0yNTA0MjcxMDIyNDVaMDMxMTAvBgNV BAMTKDEzQzIwMEJCNUI4QTFFQTVDRjY2NDkzRjZDNjk3MEYxMDc3OUJFNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUKfI0yvL9nL4WrTPVwKFBJQBS 940U1P/GEHvSLCI7jVJ48NvV5EIhREzec+MoYNATprVKaazLKEEUc3/Y+rH3xZ2Y a9HjTdeCWZvU/ItHWKtTg80+Vxv/o4xBHoYX8cJeIURViNPrvoNZL7BI9GXMx/rd ZivjEjovsZV0SFKO3DlCAoTi+0Hy9C3oXLXnotG6GLO0WQugNLKeL6zSAZ5nj28f 2VY5sctPNpJ11UG5MuUoLkGXoBFCjRLNIZ+tMIY/kE03gWd7tWl/Zy6arGKuXAuS 2vWEDwsYHSx3N80NpN3H0bt73T+zlrU1STBIocIWG0i1NIK8qNQcFaiO0uS7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE8IAu1uKHqXPZkk/bGlw8Qd5vmEwHwYDVR0j BBgwFoAUIP0WZVA2k1LWxMirjp5CA8XZq+4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ODk5YTE1Yi1kNWFlLTQ1ZWMtODAxMi1hNmNhYWIzZGQ4OGIvMC8yMEZEMTY2NTUw MzY5MzUyRDZDNEM4QUI4RTlFNDIwM0M1RDlBQkVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjBGRDE2NjU1MDM2OTM1MkQ2QzRDOEFCOEU5RTQyMDNDNUQ5 QUJFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjg5OWExNWItZDVhZS00NWVjLTgw MTItYTZjYWFiM2RkODhiLzAvMjBGRDE2NjU1MDM2OTM1MkQ2QzRDOEFCOEU5RTQy MDNDNUQ5QUJFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALlQ3rxza1cuSwxp7Yww6N01b7eV1vZad11L +wC9hCtFMr+afLyAHexyVLYcUtTMvGQz1xD+5L7AJ2CmpB59EFkr3TMJzis8HR1g +FGpcOgfMw7yeLJY5/9LJOuudzKdv/+v9d2idfn8sF8YsnPf/kmkbjneyjduCH2D Y41yZp/hg6sjnf420zwwOU5tX8SNdQxrK2HUh01KhhL3LJnO9d13a6mtYMrCIZV1 VeOZa/dR5W5iOa5LoaD9XzQ4vNK5xdMsh541MRCCmHnfyMfmHJOyc+h0aI80rDVy puLioQQjTxVUkhLN0W1VwSxjF081Nd8IwrLTZQ0yuVEOy0kQux0= -----END CERTIFICATE-----Generated at Thu Apr 24 04:31:49 2025 by rpki-client on console.sobornost.net