$ rpki-client -vvf repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft File: 0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft (raw, json) Hash identifier: fqi1kHWx6doCzDJRJKVIrJ3GxG+K+C90SnBX20yowTw= Subject key identifier: E6:9D:02:5D:E6:77:AC:27:8B:6E:C9:81:A7:F8:E4:8E:0E:CE:1F:0B Authority key identifier: 0A:1D:FC:B4:A4:38:61:E4:A7:1B:CD:64:57:92:00:54:85:BF:AD:FD Certificate issuer: /CN=0A1DFCB4A43861E4A71BCD645792005485BFADFD Certificate serial: 6E58C04AE35FC27881D92B0B9FE479BE8A0CA7C2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DFCB4A43861E4A71BCD645792005485BFADFD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft Manifest number: 0189 Signing time: Thu 24 Apr 2025 14:11:29 +0000 Manifest this update: Thu 24 Apr 2025 14:06:29 +0000 Manifest next update: Sun 27 Apr 2025 14:30:29 +0000 Files and hashes: 1: 0A1DFCB4A43861E4A71BCD645792005485BFADFD.crl (hash: Sco/Y7yyZ6lxLwjYWRFHgvk4hXp//OI666QRF0MH5GE=) 2: 3130332e3134372e3134342e302f32332d3234203d3e203137373639.roa (hash: k4bVgZQwwhwXyEq21/fgsjgZLJvFrNFPkmTEg/UKHTM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.crl rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DFCB4A43861E4A71BCD645792005485BFADFD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:58:c0:4a:e3:5f:c2:78:81:d9:2b:0b:9f:e4:79:be:8a:0c:a7:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A1DFCB4A43861E4A71BCD645792005485BFADFD Validity Not Before: Apr 24 14:06:29 2025 GMT Not After : Apr 27 14:30:29 2025 GMT Subject: CN=E69D025DE677AC278B6EC981A7F8E48E0ECE1F0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:50:10:1e:51:cf:63:e0:68:4f:75:75:6a:6e: 24:de:be:25:f3:44:88:da:1b:c1:10:a4:a7:fe:cf: ef:67:fb:f9:6f:b2:54:c6:ec:a4:6d:9a:ea:65:a3: 2b:d0:dd:08:b6:42:3b:6b:f8:8f:2e:71:b2:25:ae: 68:fb:c3:98:0a:bd:03:8c:14:f6:75:9c:e1:a6:0e: f4:97:42:9b:f4:ba:56:56:65:b1:67:76:cb:b9:0c: 0a:fe:b9:20:66:ce:58:8b:dc:9a:fb:52:47:f2:74: 57:72:f4:ae:f7:37:d9:24:e8:79:75:f5:54:e6:35: 79:51:b1:8d:d6:43:20:b5:0d:f1:ca:a7:c3:5a:77: 35:3a:99:6a:2d:54:5d:c7:00:32:49:b4:e1:82:85: 10:eb:1e:78:f6:ce:3f:05:ba:70:7a:e0:80:54:ff: c5:e5:ba:21:22:63:43:b2:56:e7:b0:be:1e:52:7b: ac:f0:b1:d8:8e:3c:1f:82:2a:43:29:58:45:6c:0b: 4e:a3:8b:5b:b8:a8:c4:e5:7b:89:0c:7f:d3:b5:7e: 04:8a:52:d5:16:7f:f8:8f:1d:24:3a:82:6c:1f:dc: 62:11:00:d0:2d:58:f8:f7:10:7b:d6:57:03:eb:52: d7:0a:2d:65:38:6b:31:ad:09:67:40:27:0d:3f:d4: 84:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:9D:02:5D:E6:77:AC:27:8B:6E:C9:81:A7:F8:E4:8E:0E:CE:1F:0B X509v3 Authority Key Identifier: keyid:0A:1D:FC:B4:A4:38:61:E4:A7:1B:CD:64:57:92:00:54:85:BF:AD:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DFCB4A43861E4A71BCD645792005485BFADFD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:90:be:11:1f:b1:70:dc:52:5d:86:64:df:10:64:58:b9:3b: 9c:35:6c:cf:3d:57:c9:a3:d0:d5:aa:38:b5:57:f6:a4:b0:d6: b2:78:32:19:f9:15:92:8e:46:4b:da:15:26:03:6f:2f:16:c5: fa:1e:48:68:6b:f9:37:a7:22:8c:a5:39:15:d4:d0:64:a0:d2: 98:79:62:f6:69:b6:be:dd:33:44:15:74:c6:b5:ae:63:63:70: 91:3f:c2:ff:ec:c8:49:b4:b7:5f:8d:21:1c:ef:8d:d6:8a:dc: 75:9b:bd:a1:2a:28:c9:92:15:f0:bf:7c:71:2f:4d:76:0d:0d: 8a:62:33:9c:08:01:04:94:40:10:4a:a3:e1:dc:a4:e9:83:2e: fb:88:d3:90:f0:e3:ff:56:31:85:04:27:bc:68:47:71:99:13: af:36:f2:90:98:10:08:8c:0c:80:ff:0c:f2:49:f7:ab:76:a4: 1d:73:84:bb:03:25:fb:ec:05:b6:cf:b8:4b:a8:c0:7b:8d:65: 38:b8:54:78:24:1a:8c:1a:a3:41:5f:1d:f3:b4:02:18:b2:38: 7e:18:d8:8f:c6:7c:6a:5f:65:70:11:05:c5:2c:2b:e6:dd:e3: 37:14:04:d3:0a:a7:46:fd:8f:07:62:ab:93:18:a2:f0:23:94: 74:9c:6f:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbljASuNfwniB2SsLn+R5vooMp8IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEExREZDQjRBNDM4NjFFNEE3MUJDRDY0NTc5MjAwNTQ4 NUJGQURGRDAeFw0yNTA0MjQxNDA2MjlaFw0yNTA0MjcxNDMwMjlaMDMxMTAvBgNV BAMTKEU2OUQwMjVERTY3N0FDMjc4QjZFQzk4MUE3RjhFNDhFMEVDRTFGMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDUBAeUc9j4GhPdXVqbiTeviXz RIjaG8EQpKf+z+9n+/lvslTG7KRtmuployvQ3Qi2Qjtr+I8ucbIlrmj7w5gKvQOM FPZ1nOGmDvSXQpv0ulZWZbFndsu5DAr+uSBmzliL3Jr7UkfydFdy9K73N9kk6Hl1 9VTmNXlRsY3WQyC1DfHKp8NadzU6mWotVF3HADJJtOGChRDrHnj2zj8FunB64IBU /8XluiEiY0OyVuewvh5Se6zwsdiOPB+CKkMpWEVsC06ji1u4qMTle4kMf9O1fgSK UtUWf/iPHSQ6gmwf3GIRANAtWPj3EHvWVwPrUtcKLWU4azGtCWdAJw0/1IRJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5p0CXeZ3rCeLbsmBp/jkjg7OHwswHwYDVR0j BBgwFoAUCh38tKQ4YeSnG81kV5IAVIW/rf0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODVjYmQ5NS01NzRmLTQwNWItOGJkZS0wZGRiOWM5YmRkYmEvMC8wQTFERkNCNEE0 Mzg2MUU0QTcxQkNENjQ1NzkyMDA1NDg1QkZBREZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEExREZDQjRBNDM4NjFFNEE3MUJDRDY0NTc5MjAwNTQ4NUJG QURGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzg1Y2JkOTUtNTc0Zi00MDViLThi ZGUtMGRkYjljOWJkZGJhLzAvMEExREZDQjRBNDM4NjFFNEE3MUJDRDY0NTc5MjAw NTQ4NUJGQURGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIGQvhEfsXDcUl2GZN8QZFi5O5w1bM89V8mj 0NWqOLVX9qSw1rJ4Mhn5FZKORkvaFSYDby8WxfoeSGhr+TenIoylORXU0GSg0ph5 YvZptr7dM0QVdMa1rmNjcJE/wv/syEm0t1+NIRzvjdaK3HWbvaEqKMmSFfC/fHEv TXYNDYpiM5wIAQSUQBBKo+HcpOmDLvuI05Dw4/9WMYUEJ7xoR3GZE6828pCYEAiM DID/DPJJ96t2pB1zhLsDJfvsBbbPuEuowHuNZTi4VHgkGowao0FfHfO0AhiyOH4Y 2I/GfGpfZXARBcUsK+bd4zcUBNMKp0b9jwdiq5MYovAjlHScb2w= -----END CERTIFICATE-----Generated at Thu Apr 24 15:50:15 2025 by rpki-client on console.sobornost.net