$ rpki-client -vvf repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.mft File: 23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.mft (raw, json) Hash identifier: LpD3R5haFwxLLA7NLbl1LESa43skJUSFo8XJVsgqC0M= Subject key identifier: BF:B2:90:A4:DF:B7:CD:0D:4E:3A:70:69:F2:B2:4B:8B:B5:90:9D:CD Authority key identifier: 23:BE:8C:EA:61:94:06:F9:D8:60:B1:F9:7E:E8:F7:ED:77:E8:EE:7C Certificate issuer: /CN=23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C Certificate serial: 5D72F6DF03DF5D3089D2CEB68EBA2EBDCEEF9504 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.mft Manifest number: 54 Signing time: Wed 23 Apr 2025 04:42:02 +0000 Manifest this update: Wed 23 Apr 2025 04:37:02 +0000 Manifest next update: Sat 26 Apr 2025 16:24:02 +0000 Files and hashes: 1: 23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.crl (hash: eZ0QQlk7shDBHo2hRfJaj55xsEC0x40ZrQHW1jJCb5g=) 2: 3136302e32302e3235302e302f32342d3234203d3e20313532383132.roa (hash: YV/07SIZYC4/VtvBJStdBJgRKQnAK1y/gzxul6oggek=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.crl rsync://repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 01:36:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:72:f6:df:03:df:5d:30:89:d2:ce:b6:8e:ba:2e:bd:ce:ef:95:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C Validity Not Before: Apr 23 04:37:02 2025 GMT Not After : Apr 26 16:24:02 2025 GMT Subject: CN=BFB290A4DFB7CD0D4E3A7069F2B24B8BB5909DCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:06:36:92:65:32:34:00:23:0f:d4:66:2f:d3: a0:03:a6:fe:a3:54:3a:dc:3d:90:29:19:3d:43:33: d5:63:a8:da:4b:9e:59:09:41:1b:6a:ce:26:16:cf: 9c:24:4b:ba:8f:73:4b:d9:7e:48:09:91:e0:1e:cd: 35:51:9d:e4:81:d2:3d:eb:1d:b4:6d:4f:9c:4a:d0: be:41:46:fe:48:9e:03:1e:58:43:63:79:38:7c:cd: be:e7:71:0a:a2:ff:15:50:bb:e1:6c:69:22:34:8a: 7c:c7:ec:a2:03:52:06:c3:a6:c2:be:d7:dc:39:6c: 95:9d:27:f2:38:89:91:dd:2b:f7:c3:06:9d:aa:b7: af:c8:9f:e0:a5:14:9e:30:13:9f:3e:33:6a:37:a7: 5a:a6:1f:db:8e:e9:5f:73:7d:15:ca:f2:98:fa:1d: 37:9c:0b:b3:8a:68:cd:03:7e:52:bd:87:53:28:ea: b6:5b:13:30:d6:74:19:b7:21:5d:74:19:73:4d:27: bd:ea:69:14:62:89:5c:34:75:b7:cd:4b:70:97:c0: 37:b7:2e:46:49:4f:a1:d0:29:3b:5e:49:eb:24:55: 75:6d:5c:49:7b:59:b6:18:3f:d8:8e:9b:a0:85:30: 26:be:c6:95:48:0c:8d:d7:1e:2e:15:25:81:c2:10: 86:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:B2:90:A4:DF:B7:CD:0D:4E:3A:70:69:F2:B2:4B:8B:B5:90:9D:CD X509v3 Authority Key Identifier: keyid:23:BE:8C:EA:61:94:06:F9:D8:60:B1:F9:7E:E8:F7:ED:77:E8:EE:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/23BE8CEA619406F9D860B1F97EE8F7ED77E8EE7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:64:1c:ab:b6:41:58:f8:b8:87:75:21:96:6c:ce:2f:0d:8f: 49:16:d0:a4:af:77:52:d5:90:07:1a:55:fa:a1:f6:82:a9:7f: 4e:0f:40:80:73:85:bb:c8:50:ab:03:42:a8:31:12:5c:d4:fd: 58:80:96:2e:d6:2b:78:a1:24:bf:1a:a1:b4:ea:93:16:37:02: e6:e3:a9:c1:8a:b2:38:a0:c1:31:0c:f9:b7:aa:e2:b0:98:72: e0:a9:64:88:b4:22:e5:52:7c:d4:58:05:49:c9:ad:87:81:29: 04:4c:b1:2d:01:5f:9e:1a:c1:ca:dd:fb:b1:fb:64:40:59:62: 09:ab:85:94:02:3a:e6:8e:67:1c:e3:bb:59:b7:b0:06:00:19: c3:32:75:18:2e:39:de:42:d4:14:95:3e:7b:08:9f:a7:59:1c: 3c:7b:9f:42:e8:0d:d2:e4:05:0c:a9:4b:f1:85:87:3c:9b:b2: f2:b8:8e:82:c4:d8:5a:37:4d:8b:68:7c:c9:5b:17:bc:b5:8f: 11:c7:f4:1b:7a:8a:2d:19:f7:31:2f:38:2a:97:25:10:96:ef: 22:ba:8e:30:57:a4:6d:b5:f7:8c:6a:3f:9d:5d:8a:3f:50:a7: 1d:6b:04:79:69:37:e7:69:6d:7f:69:de:ca:d2:63:fe:ee:77: a4:0d:b4:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXXL23wPfXTCJ0s62jrouvc7vlQQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNCRThDRUE2MTk0MDZGOUQ4NjBCMUY5N0VFOEY3RUQ3 N0U4RUU3QzAeFw0yNTA0MjMwNDM3MDJaFw0yNTA0MjYxNjI0MDJaMDMxMTAvBgNV BAMTKEJGQjI5MEE0REZCN0NEMEQ0RTNBNzA2OUYyQjI0QjhCQjU5MDlEQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEBjaSZTI0ACMP1GYv06ADpv6j VDrcPZApGT1DM9VjqNpLnlkJQRtqziYWz5wkS7qPc0vZfkgJkeAezTVRneSB0j3r HbRtT5xK0L5BRv5IngMeWENjeTh8zb7ncQqi/xVQu+FsaSI0inzH7KIDUgbDpsK+ 19w5bJWdJ/I4iZHdK/fDBp2qt6/In+ClFJ4wE58+M2o3p1qmH9uO6V9zfRXK8pj6 HTecC7OKaM0DflK9h1Mo6rZbEzDWdBm3IV10GXNNJ73qaRRiiVw0dbfNS3CXwDe3 LkZJT6HQKTteSeskVXVtXEl7WbYYP9iOm6CFMCa+xpVIDI3XHi4VJYHCEIZrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv7KQpN+3zQ1OOnBp8rJLi7WQnc0wHwYDVR0j BBgwFoAUI76M6mGUBvnYYLH5fuj37Xfo7nwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YmVkNmRjNC1kMzhiLTQ0YmEtOWYwYi00Mjg0NTViMjc2ZWUvMC8yM0JFOENFQTYx OTQwNkY5RDg2MEIxRjk3RUU4RjdFRDc3RThFRTdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjNCRThDRUE2MTk0MDZGOUQ4NjBCMUY5N0VFOEY3RUQ3N0U4 RUU3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmJlZDZkYzQtZDM4Yi00NGJhLTlm MGItNDI4NDU1YjI3NmVlLzAvMjNCRThDRUE2MTk0MDZGOUQ4NjBCMUY5N0VFOEY3 RUQ3N0U4RUU3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACxkHKu2QVj4uId1IZZszi8Nj0kW0KSvd1LV kAcaVfqh9oKpf04PQIBzhbvIUKsDQqgxElzU/ViAli7WK3ihJL8aobTqkxY3Aubj qcGKsjigwTEM+beq4rCYcuCpZIi0IuVSfNRYBUnJrYeBKQRMsS0BX54awcrd+7H7 ZEBZYgmrhZQCOuaOZxzju1m3sAYAGcMydRguOd5C1BSVPnsIn6dZHDx7n0LoDdLk BQypS/GFhzybsvK4joLE2Fo3TYtofMlbF7y1jxHH9Bt6ii0Z9zEvOCqXJRCW7yK6 jjBXpG2194xqP51dij9Qpx1rBHlpN+dpbX9p3srSY/7ud6QNtJ4= -----END CERTIFICATE-----Generated at Wed Apr 23 06:32:02 2025 by rpki-client on console.sobornost.net