$ rpki-client -vvf repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft File: F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft (raw, json) Hash identifier: D+28e8t3SRNL+rCwwHa02hwbL3Fom/WLJBPLEMTHPGc= Subject key identifier: 87:1A:8F:5C:9E:D6:7B:A9:18:2E:E7:45:C9:02:B6:E5:A3:21:57:C1 Authority key identifier: F8:99:69:E8:BA:BE:05:C4:5C:6D:6E:25:F6:25:E9:F1:84:5C:CC:9C Certificate issuer: /CN=F89969E8BABE05C45C6D6E25F625E9F1845CCC9C Certificate serial: 36563E3770138DEAEE8C46AAD865C08C2A8E1316 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft Manifest number: 04C9 Signing time: Thu 24 Apr 2025 13:10:50 +0000 Manifest this update: Thu 24 Apr 2025 13:05:50 +0000 Manifest next update: Sun 27 Apr 2025 21:08:50 +0000 Files and hashes: 1: 323430343a3763303a3a2f33322d3332203d3e20313338313039.roa (hash: 8YhkhAgabc++Mqu+wq5ak2VX+c1IFJBr8gOpgVG3Khk=) 2: 3130332e3132362e38342e302f32322d3234203d3e20313338313039.roa (hash: ehfw0aKAksEecMg2JLKTIc6o88BDrMQuFW01BJC8zSk=) 3: F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.crl (hash: Vn1FJYrzGfP/MkkJTssk9jSpr+D1N0vFCHC8HXwz/rI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.crl rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 17:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:56:3e:37:70:13:8d:ea:ee:8c:46:aa:d8:65:c0:8c:2a:8e:13:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F89969E8BABE05C45C6D6E25F625E9F1845CCC9C Validity Not Before: Apr 24 13:05:50 2025 GMT Not After : Apr 27 21:08:50 2025 GMT Subject: CN=871A8F5C9ED67BA9182EE745C902B6E5A32157C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9b:f7:c5:b5:02:1d:cc:03:ca:b8:56:83:b1: 78:e9:82:70:c9:b5:5a:bb:21:d9:2b:4d:e9:28:d1: e0:c6:6c:17:a2:8a:71:8e:4c:b0:98:84:5f:cd:22: 15:78:a2:7b:86:d8:91:7e:e6:cb:b7:9f:bb:5c:11: 1e:5a:55:50:58:36:fe:a5:b7:6d:bd:e2:f3:cd:ef: e1:b5:23:7f:00:6e:8c:3e:1e:1d:1e:ab:fd:ab:dd: ae:a3:31:a9:10:e3:35:3a:76:a3:22:3d:fc:6e:0f: b3:49:a0:45:de:d1:dd:40:5f:1e:a1:e9:2f:62:ed: 96:0d:6a:65:03:8c:e1:a6:2a:a3:05:78:57:cc:cf: 7a:ae:ec:41:af:ae:eb:70:84:c5:9c:d4:79:e3:98: fd:03:90:24:75:1f:3f:a8:c1:7f:62:18:0d:67:1f: b3:6e:bd:07:bf:d4:8f:e8:0d:74:bb:87:c7:85:c0: 18:32:7c:8b:af:ca:2a:0c:7f:ae:39:ef:30:a6:e4: 98:c5:7f:ea:8c:41:3e:4f:a2:22:b4:f7:17:bf:c2: 1a:a5:72:b6:3e:66:1d:66:a9:9c:bf:1c:e7:70:ed: 2b:60:bc:ba:a5:35:03:dd:a4:0b:f2:bf:7c:60:12: 8e:32:59:e0:70:1b:9c:5d:84:49:15:95:c6:d4:3e: 6e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:1A:8F:5C:9E:D6:7B:A9:18:2E:E7:45:C9:02:B6:E5:A3:21:57:C1 X509v3 Authority Key Identifier: keyid:F8:99:69:E8:BA:BE:05:C4:5C:6D:6E:25:F6:25:E9:F1:84:5C:CC:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:05:79:6f:98:1c:29:5a:f4:b2:c3:4d:79:e4:66:47:48:5f: d9:9d:f2:9d:c3:2f:0d:36:e0:e0:d5:81:42:ed:f6:2f:0a:5f: 00:b9:c2:c7:27:9e:c5:03:02:dd:98:22:4c:03:56:fb:9b:0d: 92:10:6b:c8:2d:a4:3a:cc:15:2a:10:03:ac:a4:ea:6f:7b:ee: c2:8c:e2:cb:75:fc:d9:27:7c:d0:7a:e4:1b:29:77:c3:55:e9: cf:4c:2d:29:58:7e:cb:7e:d0:70:9f:a0:aa:09:85:ca:27:01: e5:06:d7:42:e3:43:6e:86:05:d3:de:8b:3f:2d:93:84:18:47: 5a:3e:2a:6f:a9:da:b1:0d:16:36:b2:99:a2:8b:79:79:1b:82: 4b:5c:3b:31:70:c6:bf:c3:1c:77:e4:95:24:c4:12:b2:ee:5a: 57:fd:22:0a:36:01:4b:a8:db:7f:e7:11:87:ae:0a:93:70:f1: eb:09:17:71:34:c8:51:21:5a:99:88:1f:8f:ff:74:47:e1:1a: 0b:c4:90:99:d3:1a:67:cd:90:9d:5a:c0:13:d7:0b:f0:24:27: ec:46:61:bd:2b:61:77:e7:48:56:71:7f:f1:e5:55:cd:36:ea: 6f:54:19:a2:09:e2:76:ac:7d:2c:c1:24:3c:08:92:ce:17:f1: a1:ff:63:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNlY+N3ATjerujEaq2GXAjCqOExYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjg5OTY5RThCQUJFMDVDNDVDNkQ2RTI1RjYyNUU5RjE4 NDVDQ0M5QzAeFw0yNTA0MjQxMzA1NTBaFw0yNTA0MjcyMTA4NTBaMDMxMTAvBgNV BAMTKDg3MUE4RjVDOUVENjdCQTkxODJFRTc0NUM5MDJCNkU1QTMyMTU3QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7m/fFtQIdzAPKuFaDsXjpgnDJ tVq7IdkrTeko0eDGbBeiinGOTLCYhF/NIhV4onuG2JF+5su3n7tcER5aVVBYNv6l t2294vPN7+G1I38Abow+Hh0eq/2r3a6jMakQ4zU6dqMiPfxuD7NJoEXe0d1AXx6h 6S9i7ZYNamUDjOGmKqMFeFfMz3qu7EGvrutwhMWc1HnjmP0DkCR1Hz+owX9iGA1n H7NuvQe/1I/oDXS7h8eFwBgyfIuvyioMf6457zCm5JjFf+qMQT5PoiK09xe/whql crY+Zh1mqZy/HOdw7StgvLqlNQPdpAvyv3xgEo4yWeBwG5xdhEkVlcbUPm7XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhxqPXJ7We6kYLudFyQK25aMhV8EwHwYDVR0j BBgwFoAU+Jlp6Lq+BcRcbW4l9iXp8YRczJwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NGI0ZmI4OC04ZjQyLTQ3ZjItYmU4MC0wOWU0MzU2MGRkZGYvMC9GODk5NjlFOEJB QkUwNUM0NUM2RDZFMjVGNjI1RTlGMTg0NUNDQzlDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjg5OTY5RThCQUJFMDVDNDVDNkQ2RTI1RjYyNUU5RjE4NDVD Q0M5Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDRiNGZiODgtOGY0Mi00N2YyLWJl ODAtMDllNDM1NjBkZGRmLzAvRjg5OTY5RThCQUJFMDVDNDVDNkQ2RTI1RjYyNUU5 RjE4NDVDQ0M5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGgFeW+YHCla9LLDTXnkZkdIX9md8p3DLw02 4ODVgULt9i8KXwC5wscnnsUDAt2YIkwDVvubDZIQa8gtpDrMFSoQA6yk6m977sKM 4st1/NknfNB65Bspd8NV6c9MLSlYfst+0HCfoKoJhconAeUG10LjQ26GBdPeiz8t k4QYR1o+Km+p2rENFjaymaKLeXkbgktcOzFwxr/DHHfklSTEErLuWlf9Igo2AUuo 23/nEYeuCpNw8esJF3E0yFEhWpmIH4//dEfhGgvEkJnTGmfNkJ1awBPXC/AkJ+xG Yb0rYXfnSFZxf/HlVc026m9UGaIJ4nasfSzBJDwIks4X8aH/Y6c= -----END CERTIFICATE-----Generated at Thu Apr 24 15:50:16 2025 by rpki-client on console.sobornost.net