$ rpki-client -vvf repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft File: F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft (raw, json) Hash identifier: HxaaqtY/2AlyMxVsGmoC9PkOqmjWeBQb6TtNi4TSqCc= Subject key identifier: 42:51:D6:0F:AB:87:CB:20:07:D2:F1:C6:B3:AB:8C:21:A6:70:BD:CD Authority key identifier: F8:FA:AE:F9:7E:D3:DB:A7:D2:72:43:70:7C:7C:0D:16:05:89:6B:AF Certificate issuer: /CN=F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF Certificate serial: 6F8889547FA35565CAF68CA2B4AA5BF9811AE6A6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft Manifest number: AE Signing time: Thu 24 Apr 2025 19:51:00 +0000 Manifest this update: Thu 24 Apr 2025 19:46:00 +0000 Manifest next update: Mon 28 Apr 2025 01:34:00 +0000 Files and hashes: 1: F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.crl (hash: 95+FU1kCmseNDdDkOcH4Sg04bh3s1xHXcDCASfXlpcQ=) 2: 3135372e32302e3133312e302f32342d3234203d3e20313532343134.roa (hash: W4ACU/xOnpQ+wB4eCIEuEDxQIvNhZYjdjmTdf9J25lk=) 3: 3135372e32302e3133302e302f32342d3234203d3e20313532343134.roa (hash: yredKIZP9xr2lB528+R6ApvkXgeNpX2Bu3+xAbm9RU0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.crl rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 19:57:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:88:89:54:7f:a3:55:65:ca:f6:8c:a2:b4:aa:5b:f9:81:1a:e6:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF Validity Not Before: Apr 24 19:46:00 2025 GMT Not After : Apr 28 01:34:00 2025 GMT Subject: CN=4251D60FAB87CB2007D2F1C6B3AB8C21A670BDCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:88:00:90:17:10:06:8b:b0:5f:d4:49:b3:fa: 59:ec:87:26:59:93:16:c9:00:09:92:0e:5a:d5:4a: 6d:f4:93:24:4d:44:4e:f8:72:8e:64:b3:68:34:81: 23:fb:eb:be:00:d9:ab:93:aa:f5:69:ea:2f:0c:ee: 99:5b:dd:1f:85:c3:8d:83:7f:0e:f3:13:8f:55:60: 22:86:02:b4:19:46:d5:53:5e:2f:ba:6e:1f:93:a2: 47:a9:e4:38:29:39:1d:43:81:cd:8f:4b:7d:a1:d3: cd:fc:03:c1:1f:14:3b:b9:a4:98:50:46:57:d9:4b: 82:c5:7d:70:5a:a6:d9:e1:7a:49:db:b0:4e:bb:82: 00:6b:61:14:92:d6:b9:ff:14:fb:c5:5e:25:43:b2: 83:05:76:fd:eb:04:f2:62:ff:14:e0:25:c4:c4:ca: 8a:e8:6c:93:d2:38:09:06:0d:ba:49:e7:d4:b3:ca: 76:76:fb:e3:84:d0:00:27:4a:0a:bb:8e:74:52:89: 1f:55:0a:84:cd:e4:80:cd:3c:f3:e6:53:de:8e:f4: 37:82:8f:c1:29:0c:00:8b:d3:2d:86:b7:80:38:61: 09:c0:a8:42:9e:d2:db:d9:e1:13:80:ef:76:78:b1: f1:d0:58:54:f8:81:81:8f:56:7a:2b:51:db:cd:11: 7b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:51:D6:0F:AB:87:CB:20:07:D2:F1:C6:B3:AB:8C:21:A6:70:BD:CD X509v3 Authority Key Identifier: keyid:F8:FA:AE:F9:7E:D3:DB:A7:D2:72:43:70:7C:7C:0D:16:05:89:6B:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c86ff264-ff25-4fe6-86ef-d84b7d288354/0/F8FAAEF97ED3DBA7D27243707C7C0D1605896BAF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:95:9b:90:f5:53:40:ac:fb:b3:e2:31:fb:dc:da:43:0d:b5: 55:be:5b:e5:3b:d4:b4:d2:6d:7d:88:97:fd:3c:c5:24:c8:73: ee:2b:b5:8d:57:3c:2e:69:7d:5b:00:6d:46:cc:7d:55:f7:15: f2:95:16:54:40:88:b4:28:a3:e0:8e:4c:79:e8:3d:7f:ae:1c: 0a:32:13:17:0a:02:fa:be:10:08:f2:7c:aa:21:a7:b9:a5:81: 48:9d:d6:cc:3a:20:4f:99:cb:a1:8b:98:60:f8:ac:42:65:7c: 44:65:22:00:e6:40:e0:8c:56:a4:aa:44:50:5d:70:72:33:a1: e4:08:98:48:ce:84:04:4e:b7:99:e8:9b:d0:65:9a:85:db:a1: 6a:8c:34:ec:72:17:ee:50:01:c9:e1:5e:f3:66:06:b9:6a:72: f9:e9:8f:5c:fa:5d:37:10:50:0c:92:78:b1:e9:1a:90:49:3c: e2:1b:fa:8a:46:02:d8:f9:57:ad:1b:93:5f:8a:e1:5c:b7:01: 09:c6:d6:7f:87:b2:62:19:6d:a8:3a:37:83:a8:8e:cb:30:4c: b6:a3:67:7a:1e:44:25:f9:dd:69:86:34:26:7e:cc:f4:3d:38: f2:9c:43:e2:78:46:04:cc:47:95:e8:20:9f:b1:49:09:f6:d0: 70:73:d5:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb4iJVH+jVWXK9oyitKpb+YEa5qYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhGQUFFRjk3RUQzREJBN0QyNzI0MzcwN0M3QzBEMTYw NTg5NkJBRjAeFw0yNTA0MjQxOTQ2MDBaFw0yNTA0MjgwMTM0MDBaMDMxMTAvBgNV BAMTKDQyNTFENjBGQUI4N0NCMjAwN0QyRjFDNkIzQUI4QzIxQTY3MEJEQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQiACQFxAGi7Bf1Emz+lnshyZZ kxbJAAmSDlrVSm30kyRNRE74co5ks2g0gSP7674A2auTqvVp6i8M7plb3R+Fw42D fw7zE49VYCKGArQZRtVTXi+6bh+Tokep5DgpOR1Dgc2PS32h0838A8EfFDu5pJhQ RlfZS4LFfXBaptnheknbsE67ggBrYRSS1rn/FPvFXiVDsoMFdv3rBPJi/xTgJcTE yorobJPSOAkGDbpJ59SzynZ2++OE0AAnSgq7jnRSiR9VCoTN5IDNPPPmU96O9DeC j8EpDACL0y2Gt4A4YQnAqEKe0tvZ4ROA73Z4sfHQWFT4gYGPVnorUdvNEXtDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQlHWD6uHyyAH0vHGs6uMIaZwvc0wHwYDVR0j BBgwFoAU+Pqu+X7T26fSckNwfHwNFgWJa68wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODZmZjI2NC1mZjI1LTRmZTYtODZlZi1kODRiN2QyODgzNTQvMC9GOEZBQUVGOTdF RDNEQkE3RDI3MjQzNzA3QzdDMEQxNjA1ODk2QkFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjhGQUFFRjk3RUQzREJBN0QyNzI0MzcwN0M3QzBEMTYwNTg5 NkJBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzg2ZmYyNjQtZmYyNS00ZmU2LTg2 ZWYtZDg0YjdkMjg4MzU0LzAvRjhGQUFFRjk3RUQzREJBN0QyNzI0MzcwN0M3QzBE MTYwNTg5NkJBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADOVm5D1U0Cs+7PiMfvc2kMNtVW+W+U71LTS bX2Il/08xSTIc+4rtY1XPC5pfVsAbUbMfVX3FfKVFlRAiLQoo+COTHnoPX+uHAoy ExcKAvq+EAjyfKohp7mlgUid1sw6IE+Zy6GLmGD4rEJlfERlIgDmQOCMVqSqRFBd cHIzoeQImEjOhAROt5nom9BlmoXboWqMNOxyF+5QAcnhXvNmBrlqcvnpj1z6XTcQ UAySeLHpGpBJPOIb+opGAtj5V60bk1+K4Vy3AQnG1n+HsmIZbag6N4OojsswTLaj Z3oeRCX53WmGNCZ+zPQ9OPKcQ+J4RgTMR5XoIJ+xSQn20HBz1R0= -----END CERTIFICATE-----Generated at Fri Apr 25 00:06:29 2025 by rpki-client on console.sobornost.net