$ rpki-client -vvf repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.mft File: FC646066A689B77054AF95653FA324395357E6A3.mft (raw, json) Hash identifier: skUqJtV8gLSvjNtDsAesudHa1Yp1PlhyCecTl/hzujQ= Subject key identifier: 6C:0D:A5:83:51:87:D2:43:E6:A6:4B:61:F8:C8:DE:E9:3A:1B:12:CC Authority key identifier: FC:64:60:66:A6:89:B7:70:54:AF:95:65:3F:A3:24:39:53:57:E6:A3 Certificate issuer: /CN=FC646066A689B77054AF95653FA324395357E6A3 Certificate serial: 372EC6035F3D50C573A96DF990E4BC0E8E60DB5E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.mft Manifest number: 04C9 Signing time: Thu 24 Apr 2025 15:52:08 +0000 Manifest this update: Thu 24 Apr 2025 15:47:08 +0000 Manifest next update: Mon 28 Apr 2025 02:10:08 +0000 Files and hashes: 1: 31342e3130322e3135322e302f32322d3234203d3e203535363533.roa (hash: TM3GYewxHHLLEzakQI/e4lcxtVAjFWl7n3OxdIcy9do=) 2: 34332e3234392e3134302e302f32322d3234203d3e203535363533.roa (hash: RAbCLxobZi0sT1mrrSFIFMMt66YKWEiZkYMYeXBiifg=) 3: 3130332e31312e39362e302f32322d3234203d3e203535363533.roa (hash: i+PocK8SEp44TFX6dfSGcfLf+KIkgk/b4aqmIJNUvI4=) 4: 323430323a633330303a3a2f33322d3438203d3e203535363533.roa (hash: Sjz+Mw4h9hDynPTU4wmbIFS9wojilMuVRHQLpoKIQ3U=) 5: 3230322e35322e31322e302f32322d3234203d3e203535363533.roa (hash: zzu9Pa4aUrYBrkU/dzzrAVQ+KTnyVkmxoRDur+r4jp0=) 6: 3230322e31302e36332e302f32342d3234203d3e203535363533.roa (hash: 3x/TagzWw9AEnitF9/BKz1IoUShxY7ix8DtkXTWs+vs=) 7: FC646066A689B77054AF95653FA324395357E6A3.crl (hash: xIV7TXVzuaQKeP32XgqmNhyPplGF0vfsqESrWvR9EaU=) 8: 3130332e3235342e3132362e302f32332d3234203d3e203535363533.roa (hash: NPccw/uPbjU6Ng0Kv+MnSicLOTD8CXxnBeD+TitCSK4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.crl rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 19:07:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:2e:c6:03:5f:3d:50:c5:73:a9:6d:f9:90:e4:bc:0e:8e:60:db:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC646066A689B77054AF95653FA324395357E6A3 Validity Not Before: Apr 24 15:47:08 2025 GMT Not After : Apr 28 02:10:08 2025 GMT Subject: CN=6C0DA5835187D243E6A64B61F8C8DEE93A1B12CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:43:38:bb:81:1d:23:f3:b3:d5:13:05:56:01: 2a:76:41:cb:08:1d:c8:2b:5a:06:1b:90:ef:61:20: c8:dc:c4:31:4b:9e:e6:39:e7:9d:49:3c:05:83:fb: b9:a3:2b:e5:95:9c:db:3e:e2:a8:12:04:52:3a:d5: 00:15:f2:2d:77:0e:af:92:0f:13:cc:45:89:b9:1e: d0:bd:6c:e7:ae:5d:95:e9:00:6d:55:e0:96:02:45: f2:79:3d:61:78:a3:2e:04:13:e9:7f:41:35:2d:57: aa:87:08:1b:30:b4:b1:a4:ef:09:21:42:1b:a8:c5: ad:c8:5c:60:b4:39:d7:c6:b4:a6:57:2c:5f:f9:05: 79:0a:67:05:5a:3d:ed:d5:b2:82:ed:a1:aa:0b:06: 23:eb:83:5a:71:0e:ff:7c:c4:9b:80:31:13:4d:df: 64:30:09:e6:6e:bb:26:2a:9a:4b:07:6a:d9:7d:b1: db:e8:2f:b8:12:55:85:85:dd:75:f3:fb:e7:c6:62: d9:7d:47:7d:4b:88:39:3b:24:eb:da:32:a5:a6:de: 1f:79:a6:14:4f:d7:bf:17:19:a7:16:7d:49:46:e9: 47:c9:60:d5:c1:59:ec:5e:f7:61:b2:77:cb:c0:b6: 52:03:81:22:82:58:91:fe:79:fc:b9:c7:23:39:98: 62:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:0D:A5:83:51:87:D2:43:E6:A6:4B:61:F8:C8:DE:E9:3A:1B:12:CC X509v3 Authority Key Identifier: keyid:FC:64:60:66:A6:89:B7:70:54:AF:95:65:3F:A3:24:39:53:57:E6:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:09:8c:c1:bf:58:42:b0:31:33:2d:5d:34:34:ae:90:76:4e: 7b:d1:c8:eb:6d:dc:be:23:92:2e:e2:9c:bd:b6:aa:aa:71:b3: 59:6b:5e:b6:c0:c6:0d:8f:95:1f:de:ae:dc:c5:8a:18:dc:66: 86:d6:dc:6d:37:6a:5a:d4:d2:2a:88:95:cb:7b:65:27:59:e5: 5c:1b:a1:44:08:bb:64:f0:0e:ba:9b:ff:79:37:4d:e5:9b:f0: 42:f0:1e:e3:61:a9:c9:93:43:22:94:fb:f4:78:6c:d8:ab:6f: d3:b5:37:41:45:ac:7e:b5:b5:7e:6d:a7:09:8b:da:9d:b5:6a: e7:18:f6:1b:ee:2a:65:48:59:d3:5f:3e:81:63:32:f4:22:bc: 6a:98:22:bb:21:19:ab:68:eb:da:0e:d0:b4:48:7b:18:a1:2f: 84:7f:93:5e:e9:f2:43:14:5a:c4:48:46:d5:bb:ef:ba:f1:ba: 42:cb:c1:75:43:69:19:72:1d:fd:34:ef:7e:1d:3e:5a:5e:09: 7d:5c:80:73:3e:78:b7:e9:15:c4:6a:61:57:fe:7c:ec:76:5b: 9d:1b:7c:f3:50:ae:04:19:19:7e:6f:c7:c7:d9:88:f6:05:8a: 05:0c:c6:cd:73:4d:28:11:9b:5f:49:3d:7b:63:d1:24:6d:9e: cd:ba:3f:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNy7GA189UMVzqW35kOS8Do5g214wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkM2NDYwNjZBNjg5Qjc3MDU0QUY5NTY1M0ZBMzI0Mzk1 MzU3RTZBMzAeFw0yNTA0MjQxNTQ3MDhaFw0yNTA0MjgwMjEwMDhaMDMxMTAvBgNV BAMTKDZDMERBNTgzNTE4N0QyNDNFNkE2NEI2MUY4QzhERUU5M0ExQjEyQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZQzi7gR0j87PVEwVWASp2QcsI HcgrWgYbkO9hIMjcxDFLnuY5551JPAWD+7mjK+WVnNs+4qgSBFI61QAV8i13Dq+S DxPMRYm5HtC9bOeuXZXpAG1V4JYCRfJ5PWF4oy4EE+l/QTUtV6qHCBswtLGk7wkh Qhuoxa3IXGC0OdfGtKZXLF/5BXkKZwVaPe3VsoLtoaoLBiPrg1pxDv98xJuAMRNN 32QwCeZuuyYqmksHatl9sdvoL7gSVYWF3XXz++fGYtl9R31LiDk7JOvaMqWm3h95 phRP178XGacWfUlG6UfJYNXBWexe92Gyd8vAtlIDgSKCWJH+efy5xyM5mGJNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbA2lg1GH0kPmpkth+Mje6TobEswwHwYDVR0j BBgwFoAU/GRgZqaJt3BUr5VlP6MkOVNX5qMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OTc0NjVlMy03OGEwLTQ5NjUtYWUxNC1lNGNiNGQwZmMxODUvMC9GQzY0NjA2NkE2 ODlCNzcwNTRBRjk1NjUzRkEzMjQzOTUzNTdFNkEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkM2NDYwNjZBNjg5Qjc3MDU0QUY5NTY1M0ZBMzI0Mzk1MzU3 RTZBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzk3NDY1ZTMtNzhhMC00OTY1LWFl MTQtZTRjYjRkMGZjMTg1LzAvRkM2NDYwNjZBNjg5Qjc3MDU0QUY5NTY1M0ZBMzI0 Mzk1MzU3RTZBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB0JjMG/WEKwMTMtXTQ0rpB2TnvRyOtt3L4j ki7inL22qqpxs1lrXrbAxg2PlR/ertzFihjcZobW3G03alrU0iqIlct7ZSdZ5Vwb oUQIu2TwDrqb/3k3TeWb8ELwHuNhqcmTQyKU+/R4bNirb9O1N0FFrH61tX5tpwmL 2p21aucY9hvuKmVIWdNfPoFjMvQivGqYIrshGato69oO0LRIexihL4R/k17p8kMU WsRIRtW777rxukLLwXVDaRlyHf00734dPlpeCX1cgHM+eLfpFcRqYVf+fOx2W50b fPNQrgQZGX5vx8fZiPYFigUMxs1zTSgRm19JPXtj0SRtns26P/4= -----END CERTIFICATE-----Generated at Thu Apr 24 18:01:38 2025 by rpki-client on console.sobornost.net