$ rpki-client -vvf repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft File: 1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft (raw, json) Hash identifier: Rb6WWhFLH2xzn7VgdEaM6Gj1eAWVPciiQ8k9Dx1GV9o= Subject key identifier: 40:DA:B8:3B:30:88:50:85:D4:B0:7A:E5:5F:0E:AC:91:06:C5:16:81 Authority key identifier: 1F:F9:DE:47:6A:B6:86:55:9E:1C:18:3A:1B:5B:D4:73:3E:1B:01:ED Certificate issuer: /CN=1FF9DE476AB686559E1C183A1B5BD4733E1B01ED Certificate serial: 05E43553DFCF77770C2FBF7B2FEB8FF8441FBD52 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft Manifest number: 018D Signing time: Thu 24 Apr 2025 15:43:04 +0000 Manifest this update: Thu 24 Apr 2025 15:38:04 +0000 Manifest next update: Mon 28 Apr 2025 00:12:04 +0000 Files and hashes: 1: 3130332e33362e37302e302f32342d3234203d3e20313530323037.roa (hash: 5j0Tt77Cz46MkrUQmLJBWqtCp8m1Y546C35T0cpKX64=) 2: 1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.crl (hash: nCI6wLjKYnMI/JPeiBVkGxO+n6fTGMi0EjjOALYF0fU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.crl rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 19:07:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:e4:35:53:df:cf:77:77:0c:2f:bf:7b:2f:eb:8f:f8:44:1f:bd:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FF9DE476AB686559E1C183A1B5BD4733E1B01ED Validity Not Before: Apr 24 15:38:04 2025 GMT Not After : Apr 28 00:12:04 2025 GMT Subject: CN=40DAB83B30885085D4B07AE55F0EAC9106C51681 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:76:80:df:39:05:69:90:77:00:5f:43:75:77: 87:0d:0a:ce:14:d3:59:75:75:1b:40:70:20:fd:5a: cc:9c:04:14:d4:75:61:6e:0c:76:fe:f4:7b:95:fa: 10:ac:91:94:77:15:33:5f:26:c5:f7:9d:aa:a6:38: f4:e9:be:da:77:7b:b1:90:7a:3d:2b:5a:9d:bc:72: 51:75:4a:9a:94:6c:71:3e:1c:a3:31:74:21:49:42: 9c:b8:94:60:0b:81:5f:4e:cb:82:73:65:2c:bb:fe: 3c:83:b4:a2:75:7b:67:7a:72:ef:4c:80:14:c1:fb: cf:2c:78:1b:a8:69:b6:8c:a3:17:ae:74:a9:d1:57: b6:9c:f4:cf:3d:df:df:a1:2f:33:4f:ea:f1:f6:2a: 98:24:3b:ab:ed:77:87:ca:31:8a:00:80:8c:85:4b: 1a:32:dc:fe:e2:f4:b3:4c:7a:b6:4d:64:85:56:24: b3:fd:e0:00:3f:f8:78:c7:1b:7e:c4:e3:f1:72:1d: bd:e5:ae:0a:2d:0a:4c:ab:79:cb:ea:78:38:48:17: 38:56:ae:ce:4f:8e:c0:5d:8a:44:27:d8:fb:73:8c: a0:9c:54:e7:3d:6c:85:bd:44:f4:cf:6d:49:95:91: 2d:90:d7:f6:99:cf:21:e1:d7:aa:8d:e1:6a:54:db: b4:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:DA:B8:3B:30:88:50:85:D4:B0:7A:E5:5F:0E:AC:91:06:C5:16:81 X509v3 Authority Key Identifier: keyid:1F:F9:DE:47:6A:B6:86:55:9E:1C:18:3A:1B:5B:D4:73:3E:1B:01:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:9b:e7:86:29:56:af:f5:9a:90:c2:1d:a6:6d:31:1e:77:28: 19:71:ee:c2:63:23:a3:7f:32:99:2a:b3:9d:a8:b7:b6:14:3c: 9e:5f:7b:67:e3:f7:f9:25:86:9a:d1:a4:f2:c9:2e:a5:d7:3f: 0f:57:1c:8b:44:4b:a8:e4:ff:27:fe:8b:e7:18:bc:ca:23:ec: 3d:93:72:12:b1:2b:8a:cb:39:eb:13:fc:4f:b4:1f:c3:fb:2b: c2:b5:5a:97:87:3c:ba:a7:91:06:73:74:2b:cc:9b:05:08:23: 48:80:99:e5:a9:e6:ae:ae:e1:c0:bd:f8:7f:f1:51:06:fd:ba: 5c:22:65:8a:b9:99:2d:b9:b4:96:41:9e:d4:5a:d6:cc:95:d5: ae:88:43:48:fb:00:4c:b1:f9:25:fd:f5:f0:75:77:13:34:9a: 02:86:bc:dc:8e:55:e1:8a:9b:b0:5f:e5:dc:4e:23:b1:fa:80: d6:6b:1e:84:11:54:f5:da:e5:63:5c:91:59:fe:6d:f3:c7:94: 70:8a:e4:b1:ac:7b:48:d3:c7:c5:08:e6:33:e1:d1:64:b7:5e: 93:84:66:bd:6d:ab:d4:d2:3b:f1:2e:09:19:2e:d0:5e:26:41: 08:2c:40:9e:04:52:20:fa:5f:65:75:2c:1e:6e:5b:e5:63:5c: 56:44:6d:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBeQ1U9/Pd3cML797L+uP+EQfvVIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZGOURFNDc2QUI2ODY1NTlFMUMxODNBMUI1QkQ0NzMz RTFCMDFFRDAeFw0yNTA0MjQxNTM4MDRaFw0yNTA0MjgwMDEyMDRaMDMxMTAvBgNV BAMTKDQwREFCODNCMzA4ODUwODVENEIwN0FFNTVGMEVBQzkxMDZDNTE2ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVdoDfOQVpkHcAX0N1d4cNCs4U 01l1dRtAcCD9WsycBBTUdWFuDHb+9HuV+hCskZR3FTNfJsX3naqmOPTpvtp3e7GQ ej0rWp28clF1SpqUbHE+HKMxdCFJQpy4lGALgV9Oy4JzZSy7/jyDtKJ1e2d6cu9M gBTB+88seBuoabaMoxeudKnRV7ac9M8939+hLzNP6vH2KpgkO6vtd4fKMYoAgIyF Sxoy3P7i9LNMerZNZIVWJLP94AA/+HjHG37E4/FyHb3lrgotCkyrecvqeDhIFzhW rs5PjsBdikQn2PtzjKCcVOc9bIW9RPTPbUmVkS2Q1/aZzyHh16qN4WpU27RjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQNq4OzCIUIXUsHrlXw6skQbFFoEwHwYDVR0j BBgwFoAUH/neR2q2hlWeHBg6G1vUcz4bAe0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZTExZTk4Zi1mNTRlLTQ2MGItODhmMy1iZjkxZTA0NDNlOTAvMC8xRkY5REU0NzZB QjY4NjU1OUUxQzE4M0ExQjVCRDQ3MzNFMUIwMUVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZGOURFNDc2QUI2ODY1NTlFMUMxODNBMUI1QkQ0NzMzRTFC MDFFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmUxMWU5OGYtZjU0ZS00NjBiLTg4 ZjMtYmY5MWUwNDQzZTkwLzAvMUZGOURFNDc2QUI2ODY1NTlFMUMxODNBMUI1QkQ0 NzMzRTFCMDFFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADOb54YpVq/1mpDCHaZtMR53KBlx7sJjI6N/ Mpkqs52ot7YUPJ5fe2fj9/klhprRpPLJLqXXPw9XHItES6jk/yf+i+cYvMoj7D2T chKxK4rLOesT/E+0H8P7K8K1WpeHPLqnkQZzdCvMmwUII0iAmeWp5q6u4cC9+H/x UQb9ulwiZYq5mS25tJZBntRa1syV1a6IQ0j7AEyx+SX99fB1dxM0mgKGvNyOVeGK m7Bf5dxOI7H6gNZrHoQRVPXa5WNckVn+bfPHlHCK5LGse0jTx8UI5jPh0WS3XpOE Zr1tq9TSO/EuCRku0F4mQQgsQJ4EUiD6X2V1LB5uW+VjXFZEbZ0= -----END CERTIFICATE-----Generated at Thu Apr 24 18:01:38 2025 by rpki-client on console.sobornost.net