$ rpki-client -vvf repo-rpki.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/B891A45840F824B9F116CBEAA3574A68343F5538.mft File: B891A45840F824B9F116CBEAA3574A68343F5538.mft (raw, json) Hash identifier: bXrCmy0/o/xknGemZcWclj52a+lBrDfUtOD3luw2svE= Subject key identifier: B7:97:D1:B2:F2:92:EA:B0:61:44:8B:74:A5:5D:2C:C2:53:9B:FF:3B Authority key identifier: B8:91:A4:58:40:F8:24:B9:F1:16:CB:EA:A3:57:4A:68:34:3F:55:38 Certificate issuer: /CN=B891A45840F824B9F116CBEAA3574A68343F5538 Certificate serial: 15EF691BEC6C7CD8F3DBD95ADDB7B8A1E723060F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B891A45840F824B9F116CBEAA3574A68343F5538.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/B891A45840F824B9F116CBEAA3574A68343F5538.mft Manifest number: 3C Signing time: Thu 24 Apr 2025 15:52:07 +0000 Manifest this update: Thu 24 Apr 2025 15:47:07 +0000 Manifest next update: Sun 27 Apr 2025 18:30:07 +0000 Files and hashes: 1: 3130332e32332e3131362e302f32332d3234203d3e203538333835.roa (hash: 5UewkM1pAbLnP65YZLTVxzSYU/L1g1J84e5HTrwnd3M=) 2: 3130332e3234362e3136392e302f32342d3234203d3e203538333835.roa (hash: 8meh4qssPriL64kBvXs5YtBumf6ArWnflJaVktjo3Fo=) 3: B891A45840F824B9F116CBEAA3574A68343F5538.crl (hash: bvij7fUjapKfVaW7OECdFh0qeGdE6ef+0gmA6ZAkcXQ=) 4: 3131302e39322e37342e302f32332d3234203d3e203538333835.roa (hash: XgxFmfrvLr/HS422k6dRWPfIUiiCoQbGouQtaJJQX4Y=) 5: 3130332e32382e3231382e302f32342d3234203d3e203538333835.roa (hash: cMJACG+wJYTKnGt0rpeqO/b7Kbn+Qvg12TrUivh9cCk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/B891A45840F824B9F116CBEAA3574A68343F5538.crl rsync://repo-rpki.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/B891A45840F824B9F116CBEAA3574A68343F5538.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B891A45840F824B9F116CBEAA3574A68343F5538.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 18:30:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:ef:69:1b:ec:6c:7c:d8:f3:db:d9:5a:dd:b7:b8:a1:e7:23:06:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B891A45840F824B9F116CBEAA3574A68343F5538 Validity Not Before: Apr 24 15:47:07 2025 GMT Not After : Apr 27 18:30:07 2025 GMT Subject: CN=B797D1B2F292EAB061448B74A55D2CC2539BFF3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:67:30:73:ca:c2:35:24:e4:ab:4f:a3:ae:0c: 4f:ea:b0:60:f4:74:b9:03:91:e7:43:ef:07:60:71: 7e:db:70:8b:10:47:85:c9:e7:21:90:b8:2a:6b:ef: 5c:8a:8c:17:20:63:58:22:64:94:d4:07:5e:89:b5: e7:cc:3f:9d:c8:38:97:31:74:7e:de:72:89:eb:be: ab:a2:9d:5a:14:d2:1b:a1:27:37:bb:17:8b:b0:46: a6:07:4d:97:52:60:af:f8:31:ff:2b:44:a7:d9:65: 9e:5a:9b:d7:70:53:17:40:e6:75:49:e0:12:6a:9d: 2b:5b:24:9e:8e:da:28:1e:57:37:79:14:40:7e:91: 1c:09:df:37:2c:1c:69:5a:b1:41:a8:3d:1b:33:db: fe:cc:db:56:78:fa:fb:8f:9c:27:32:79:c3:c8:1b: b4:19:7a:12:6b:90:98:af:b6:d7:1b:96:f5:9f:1c: e1:c1:f4:de:f3:6b:51:a7:38:1d:fc:b6:9b:5e:08: dc:c4:eb:e3:3b:31:50:a3:cd:f1:17:1b:01:86:53: 53:55:23:44:e3:55:1d:99:53:8d:38:a3:b4:7d:63: 4f:22:d0:3a:ef:42:3b:ac:c1:a8:1b:66:71:5a:13: ef:61:8c:87:91:2e:49:5c:c9:95:58:64:d0:4b:f7: e6:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:97:D1:B2:F2:92:EA:B0:61:44:8B:74:A5:5D:2C:C2:53:9B:FF:3B X509v3 Authority Key Identifier: keyid:B8:91:A4:58:40:F8:24:B9:F1:16:CB:EA:A3:57:4A:68:34:3F:55:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/B891A45840F824B9F116CBEAA3574A68343F5538.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B891A45840F824B9F116CBEAA3574A68343F5538.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/B891A45840F824B9F116CBEAA3574A68343F5538.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:b3:e6:e2:8a:71:83:33:95:0c:e1:12:24:23:2f:98:7a:fc: 7a:4c:47:20:70:bf:a1:12:cb:4c:95:23:b3:41:89:e3:ad:d0: 42:f9:6f:33:f0:c2:83:c6:3b:7d:ce:d2:ad:0c:0f:8e:f0:bd: 65:e2:4e:87:a7:42:02:e3:ab:02:e1:da:09:fc:65:c0:e7:2c: 35:9c:a3:6a:b5:bf:16:4b:65:7e:8a:50:b5:e1:ec:08:93:d9: fc:81:05:d2:bf:e5:0b:4d:70:0a:d9:27:17:0f:98:0b:ec:97: c4:82:96:10:a3:75:9e:6e:06:94:8e:58:ea:78:10:59:3c:5f: 80:38:27:64:d5:72:be:68:30:21:41:6f:3b:12:65:b9:4c:09: 50:82:65:2c:86:60:b9:bf:f6:4c:1a:62:17:19:37:e4:73:09: 76:40:3c:d1:bd:75:eb:af:4a:48:66:ef:60:4f:b5:b8:cf:bd: a0:ed:d7:ec:fd:28:bf:b4:4c:4f:5b:b2:56:80:72:18:83:57: ac:04:fa:ea:5e:2d:f1:1c:4c:0a:0d:38:e0:02:c0:5c:ca:54: 6d:fd:13:4d:e2:a8:4b:b4:fb:90:55:43:1c:bd:f5:ef:82:ce: 53:7a:45:08:59:6d:73:c8:3b:4f:c8:b2:5b:ce:7e:64:5f:bf: 31:53:2b:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFe9pG+xsfNjz29la3be4oecjBg8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg5MUE0NTg0MEY4MjRCOUYxMTZDQkVBQTM1NzRBNjgz NDNGNTUzODAeFw0yNTA0MjQxNTQ3MDdaFw0yNTA0MjcxODMwMDdaMDMxMTAvBgNV BAMTKEI3OTdEMUIyRjI5MkVBQjA2MTQ0OEI3NEE1NUQyQ0MyNTM5QkZGM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJZzBzysI1JOSrT6OuDE/qsGD0 dLkDkedD7wdgcX7bcIsQR4XJ5yGQuCpr71yKjBcgY1giZJTUB16JtefMP53IOJcx dH7econrvquinVoU0huhJze7F4uwRqYHTZdSYK/4Mf8rRKfZZZ5am9dwUxdA5nVJ 4BJqnStbJJ6O2igeVzd5FEB+kRwJ3zcsHGlasUGoPRsz2/7M21Z4+vuPnCcyecPI G7QZehJrkJivttcblvWfHOHB9N7za1GnOB38tpteCNzE6+M7MVCjzfEXGwGGU1NV I0TjVR2ZU404o7R9Y08i0DrvQjuswagbZnFaE+9hjIeRLklcyZVYZNBL9+YnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt5fRsvKS6rBhRIt0pV0swlOb/zswHwYDVR0j BBgwFoAUuJGkWED4JLnxFsvqo1dKaDQ/VTgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MzkyNTM4OC0zNWM2LTQxZDctOWRjNC1kYjRkMTE4ZDEzNWEvMC9CODkxQTQ1ODQw RjgyNEI5RjExNkNCRUFBMzU3NEE2ODM0M0Y1NTM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjg5MUE0NTg0MEY4MjRCOUYxMTZDQkVBQTM1NzRBNjgzNDNG NTUzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDM5MjUzODgtMzVjNi00MWQ3LTlk YzQtZGI0ZDExOGQxMzVhLzAvQjg5MUE0NTg0MEY4MjRCOUYxMTZDQkVBQTM1NzRB NjgzNDNGNTUzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKez5uKKcYMzlQzhEiQjL5h6/HpMRyBwv6ES y0yVI7NBieOt0EL5bzPwwoPGO33O0q0MD47wvWXiToenQgLjqwLh2gn8ZcDnLDWc o2q1vxZLZX6KULXh7AiT2fyBBdK/5QtNcArZJxcPmAvsl8SClhCjdZ5uBpSOWOp4 EFk8X4A4J2TVcr5oMCFBbzsSZblMCVCCZSyGYLm/9kwaYhcZN+RzCXZAPNG9deuv Skhm72BPtbjPvaDt1+z9KL+0TE9bslaAchiDV6wE+upeLfEcTAoNOOACwFzKVG39 E03iqEu0+5BVQxy99e+CzlN6RQhZbXPIO0/IslvOfmRfvzFTKzo= -----END CERTIFICATE-----Generated at Thu Apr 24 18:01:38 2025 by rpki-client on console.sobornost.net