$ rpki-client -vvf repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft File: 9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft (raw, json) Hash identifier: 8Ds3AEdEmRz+JxVGPyfXLH3mNxLj03iUMCw4TOLXVco= Subject key identifier: 8E:EC:70:14:32:86:B0:B9:8E:56:50:A8:44:2E:4C:99:CE:60:D5:A7 Authority key identifier: 9C:0D:BD:7A:E1:93:2E:6B:9D:09:83:FC:48:E3:21:43:D8:A4:CF:93 Certificate issuer: /CN=9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93 Certificate serial: 5BFBF9F3C067D79C01795AC48ADE357985E376F6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft Manifest number: 40 Signing time: Thu 24 Apr 2025 08:21:29 +0000 Manifest this update: Thu 24 Apr 2025 08:16:29 +0000 Manifest next update: Sun 27 Apr 2025 16:03:29 +0000 Files and hashes: 1: 3136302e3138372e3233312e302f32342d3234203d3e20313533313430.roa (hash: CfyTnP9T5RGgWbjQJLTa07E3uK+I4w43c5c8aAok3+8=) 2: 9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.crl (hash: lFl+9c8Ufv5fmjg42akA0AJQC/THd+tpWPneoYV2MdE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.crl rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 10:32:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:fb:f9:f3:c0:67:d7:9c:01:79:5a:c4:8a:de:35:79:85:e3:76:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93 Validity Not Before: Apr 24 08:16:29 2025 GMT Not After : Apr 27 16:03:29 2025 GMT Subject: CN=8EEC70143286B0B98E5650A8442E4C99CE60D5A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e2:4e:69:ba:66:5b:00:de:cd:a0:2d:a5:ed: bd:5e:27:c5:57:d8:11:9a:d1:7e:b3:ed:b6:e8:9a: e3:95:e8:09:9d:3a:45:65:1c:a0:5b:77:03:22:c5: 39:38:92:80:14:00:c4:02:5e:82:23:e8:23:3e:c4: 0f:4b:6d:ec:96:ae:b2:71:17:c8:3f:e0:1b:bd:9e: d5:c4:27:a9:7d:38:62:af:58:27:a1:ee:9f:b0:ed: e6:f1:13:22:c0:33:46:6e:b1:a9:93:7e:b5:75:99: d9:86:97:36:d5:18:ea:e2:cc:f9:2e:51:5d:16:f2: 89:61:04:fa:0d:3b:58:48:99:4f:f9:8f:99:72:c7: 6b:b2:87:4f:a8:cd:0b:b1:7a:08:fb:29:e5:f7:df: d2:83:d5:61:93:17:63:0e:11:e6:55:48:ff:63:e4: 4b:58:ba:f9:52:75:59:c1:de:50:43:e4:bb:25:6b: 3e:14:73:c6:d7:a6:2a:19:29:a9:a6:87:e2:8e:29: 05:90:0c:72:4c:60:39:20:e9:89:91:ed:82:7f:86: 14:16:06:1e:49:59:12:f2:1d:0a:9c:14:6d:12:3b: 35:f0:47:80:f2:a1:67:f3:ec:8b:e3:c4:d0:26:af: c7:86:ec:ae:1a:de:73:c6:b0:b8:8e:42:c1:f7:a5: 5d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:EC:70:14:32:86:B0:B9:8E:56:50:A8:44:2E:4C:99:CE:60:D5:A7 X509v3 Authority Key Identifier: keyid:9C:0D:BD:7A:E1:93:2E:6B:9D:09:83:FC:48:E3:21:43:D8:A4:CF:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:f5:8c:7c:5f:aa:7c:a0:46:1c:16:1c:1e:73:fc:5f:ff:2a: 88:a8:3b:aa:71:26:00:aa:06:51:37:ad:7c:d2:d9:cc:da:41: 26:d2:e6:66:2f:e1:04:06:62:a4:e6:72:c9:c0:f7:6f:34:16: f6:97:94:5e:2b:29:1b:eb:58:8d:84:ce:35:ac:9a:33:68:4b: 3b:78:3b:56:4d:54:6b:f3:b0:16:39:d0:37:62:ce:90:54:42: 33:c0:a1:0a:fc:19:3c:a8:4c:d6:a0:80:b2:3b:7c:90:68:2e: 92:86:cd:8e:b8:dc:e8:f4:cc:6e:4f:30:d9:1f:13:7e:4b:71: 1d:9a:24:8c:d0:e2:9e:07:33:aa:16:ec:b0:a1:79:a8:22:06: 61:18:c4:12:12:2c:27:b3:07:f6:32:a7:2c:57:55:e4:a9:48: 7f:19:0a:45:7b:fd:98:c0:8c:a6:0f:73:5c:11:cc:92:11:29: 5c:f1:9f:6d:31:4a:c9:48:9e:1b:61:37:ce:42:28:58:e0:bf: de:12:07:ce:98:d4:c7:ab:12:f4:8e:3d:13:e4:bd:18:cc:62: 92:21:ab:70:69:f0:b6:e5:51:3f:04:09:04:58:62:91:bc:e2: b1:c6:14:db:3e:f0:0c:43:c8:f2:9b:6b:a6:e3:75:c8:85:28: 5b:77:53:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW/v588Bn15wBeVrEit41eYXjdvYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUMwREJEN0FFMTkzMkU2QjlEMDk4M0ZDNDhFMzIxNDNE OEE0Q0Y5MzAeFw0yNTA0MjQwODE2MjlaFw0yNTA0MjcxNjAzMjlaMDMxMTAvBgNV BAMTKDhFRUM3MDE0MzI4NkIwQjk4RTU2NTBBODQ0MkU0Qzk5Q0U2MEQ1QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+4k5pumZbAN7NoC2l7b1eJ8VX 2BGa0X6z7bbomuOV6AmdOkVlHKBbdwMixTk4koAUAMQCXoIj6CM+xA9LbeyWrrJx F8g/4Bu9ntXEJ6l9OGKvWCeh7p+w7ebxEyLAM0ZusamTfrV1mdmGlzbVGOrizPku UV0W8olhBPoNO1hImU/5j5lyx2uyh0+ozQuxegj7KeX339KD1WGTF2MOEeZVSP9j 5EtYuvlSdVnB3lBD5Lslaz4Uc8bXpioZKammh+KOKQWQDHJMYDkg6YmR7YJ/hhQW Bh5JWRLyHQqcFG0SOzXwR4DyoWfz7IvjxNAmr8eG7K4a3nPGsLiOQsH3pV0dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjuxwFDKGsLmOVlCoRC5Mmc5g1acwHwYDVR0j BBgwFoAUnA29euGTLmudCYP8SOMhQ9ikz5MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YWZjYmZiYi1iYTNmLTRkNTMtYTA0Zi0xNGQ2ZjRiZTBjYjEvMC85QzBEQkQ3QUUx OTMyRTZCOUQwOTgzRkM0OEUzMjE0M0Q4QTRDRjkzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUMwREJEN0FFMTkzMkU2QjlEMDk4M0ZDNDhFMzIxNDNEOEE0 Q0Y5My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2FmY2JmYmItYmEzZi00ZDUzLWEw NGYtMTRkNmY0YmUwY2IxLzAvOUMwREJEN0FFMTkzMkU2QjlEMDk4M0ZDNDhFMzIx NDNEOEE0Q0Y5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFX1jHxfqnygRhwWHB5z/F//KoioO6pxJgCq BlE3rXzS2czaQSbS5mYv4QQGYqTmcsnA9280FvaXlF4rKRvrWI2EzjWsmjNoSzt4 O1ZNVGvzsBY50DdizpBUQjPAoQr8GTyoTNaggLI7fJBoLpKGzY643Oj0zG5PMNkf E35LcR2aJIzQ4p4HM6oW7LCheagiBmEYxBISLCezB/YypyxXVeSpSH8ZCkV7/ZjA jKYPc1wRzJIRKVzxn20xSslInhthN85CKFjgv94SB86Y1MerEvSOPRPkvRjMYpIh q3Bp8LblUT8ECQRYYpG84rHGFNs+8AxDyPKba6bjdciFKFt3U1Q= -----END CERTIFICATE-----Generated at Thu Apr 24 11:25:24 2025 by rpki-client on console.sobornost.net