$ rpki-client -vvf repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft File: A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft (raw, json) Hash identifier: lR/Ld+m1b5rLgiepazk5rQf/wLQK7x7hoLo28lyoOS8= Subject key identifier: 84:B9:D3:A2:72:29:D2:56:2F:61:FC:8E:48:53:E5:60:6B:8B:93:1E Authority key identifier: A9:E9:DB:B7:BC:3B:B1:6F:6A:6A:84:8E:43:07:E8:76:F9:F1:A5:06 Certificate issuer: /CN=A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506 Certificate serial: 54A2F8A29BA9438FA40A643C67F859264FAE0768 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft Manifest number: 02D7 Signing time: Fri 25 Apr 2025 03:11:37 +0000 Manifest this update: Fri 25 Apr 2025 03:06:37 +0000 Manifest next update: Mon 28 Apr 2025 09:43:37 +0000 Files and hashes: 1: 3130332e3136362e3132342e302f32332d3233203d3e20313431393437.roa (hash: i+gbmLv/cDTRzVSCU7nzrBuTZdrg904knWZTmS6Nm1M=) 2: A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.crl (hash: +2RvkglMJbkT1vhA6b5QTHYSQ1JwgVEFytR6HYj/uKs=) 3: 3130332e3136362e3132352e302f32342d3234203d3e20313431393437.roa (hash: rW2LU9K/rfb3qygTA6381vvcBFybx4fuXGfuXbWXxfQ=) 4: 3130332e3136362e3132342e302f32342d3234203d3e20313431393437.roa (hash: /BdahLT6vSLpuEBY3+9TOtbzLb267nsMd1TmGCjkxzI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.crl rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:a2:f8:a2:9b:a9:43:8f:a4:0a:64:3c:67:f8:59:26:4f:ae:07:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506 Validity Not Before: Apr 25 03:06:37 2025 GMT Not After : Apr 28 09:43:37 2025 GMT Subject: CN=84B9D3A27229D2562F61FC8E4853E5606B8B931E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6e:09:6d:80:e3:d9:ef:93:85:a7:7a:ad:a1: 13:cf:85:06:c5:31:cd:a7:3c:ec:1a:24:a4:fa:a0: c6:c7:cf:84:9d:a1:cc:8e:4a:1c:1e:c0:37:d7:3b: 28:89:51:2d:24:e0:3f:d8:d0:52:56:80:a0:b8:d9: 1d:e3:08:29:6e:d6:1b:5a:b3:da:28:dc:fb:3c:70: c1:14:94:5b:aa:d3:b8:9c:36:0d:70:d0:18:dd:8c: 0d:09:1c:cf:dc:bd:26:1c:e6:9a:17:1f:94:47:7d: 1f:fd:15:39:56:46:98:8e:8e:28:be:8e:fc:47:02: cc:1a:5c:89:1e:ed:cf:0b:22:10:84:cf:ee:d1:b4: 01:fb:c5:65:5b:d7:75:b7:57:6e:dc:a2:29:11:93: bc:a7:d6:30:5e:77:9c:f1:3b:1c:0e:ed:01:4b:ee: c5:80:ea:75:79:6c:6d:1b:9e:dd:e6:3d:4d:2b:e1: 68:b5:3c:f3:8b:1b:d8:3a:3a:71:d9:1f:b4:66:14: 4d:43:f9:c9:bf:a4:41:71:72:3a:50:e2:14:44:bd: 94:37:7b:86:06:ed:0c:25:6b:7c:f0:ec:f7:c8:d3: 04:8f:14:da:95:fa:93:e0:c6:03:95:8c:e1:7b:d3: 0d:4b:72:2c:1e:2f:8f:bc:f2:74:a2:e3:4a:40:6f: 4c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:B9:D3:A2:72:29:D2:56:2F:61:FC:8E:48:53:E5:60:6B:8B:93:1E X509v3 Authority Key Identifier: keyid:A9:E9:DB:B7:BC:3B:B1:6F:6A:6A:84:8E:43:07:E8:76:F9:F1:A5:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:99:55:06:2b:25:21:ea:1d:da:ca:d5:b4:45:e2:d4:06:5e: da:d1:48:b5:f6:3c:c9:eb:13:65:f1:72:77:b8:c9:10:cb:f1: 16:53:ba:9f:46:ac:f3:ec:d7:c8:a6:5d:7c:f9:2e:ee:35:f5: 31:92:b3:b5:12:58:73:e1:47:ad:b7:a8:2e:ca:6e:2e:15:1a: a2:d9:2b:f8:64:e1:2e:b0:57:87:bb:b1:cb:11:9c:74:51:91: 9a:82:0f:a1:b7:14:bb:a6:7e:ce:84:65:31:df:4b:fd:c0:92: 00:64:2a:5e:34:7b:ab:a9:7b:dc:ed:0a:06:19:69:64:14:96: 42:62:71:c3:18:10:8b:44:4e:ef:1b:dc:e4:19:ec:3e:41:6c: b5:dd:37:06:5c:4e:17:42:04:94:4f:01:b3:e0:95:7d:c7:db: 94:a1:7e:af:36:b1:79:82:e3:fe:ab:c5:49:6e:a5:04:dd:12: 2a:a0:fd:da:c4:81:2e:8b:4e:3a:c9:0b:58:da:67:1d:b0:85: 99:6b:02:94:31:3d:61:14:60:97:28:83:a7:20:99:c5:91:58: c6:92:f9:7c:bf:2d:1c:ec:78:77:35:83:9d:39:75:dc:90:51: eb:9a:c7:7c:19:77:26:bc:6f:77:42:0e:3d:4d:e9:6d:18:25: 2e:22:82:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVKL4opupQ4+kCmQ8Z/hZJk+uB2gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFOURCQjdCQzNCQjE2RjZBNkE4NDhFNDMwN0U4NzZG OUYxQTUwNjAeFw0yNTA0MjUwMzA2MzdaFw0yNTA0MjgwOTQzMzdaMDMxMTAvBgNV BAMTKDg0QjlEM0EyNzIyOUQyNTYyRjYxRkM4RTQ4NTNFNTYwNkI4QjkzMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwbgltgOPZ75OFp3qtoRPPhQbF Mc2nPOwaJKT6oMbHz4SdocyOShwewDfXOyiJUS0k4D/Y0FJWgKC42R3jCClu1hta s9oo3Ps8cMEUlFuq07icNg1w0BjdjA0JHM/cvSYc5poXH5RHfR/9FTlWRpiOjii+ jvxHAswaXIke7c8LIhCEz+7RtAH7xWVb13W3V27coikRk7yn1jBed5zxOxwO7QFL 7sWA6nV5bG0bnt3mPU0r4Wi1PPOLG9g6OnHZH7RmFE1D+cm/pEFxcjpQ4hREvZQ3 e4YG7Qwla3zw7PfI0wSPFNqV+pPgxgOVjOF70w1LciweL4+88nSi40pAb0yLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhLnTonIp0lYvYfyOSFPlYGuLkx4wHwYDVR0j BBgwFoAUqenbt7w7sW9qaoSOQwfodvnxpQYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTRlNDU2ZC1kYmUyLTQ2MGMtODZkNC1lYmMyZDExNTYxNzYvMC9BOUU5REJCN0JD M0JCMTZGNkE2QTg0OEU0MzA3RTg3NkY5RjFBNTA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlFOURCQjdCQzNCQjE2RjZBNkE4NDhFNDMwN0U4NzZGOUYx QTUwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDU0ZTQ1NmQtZGJlMi00NjBjLTg2 ZDQtZWJjMmQxMTU2MTc2LzAvQTlFOURCQjdCQzNCQjE2RjZBNkE4NDhFNDMwN0U4 NzZGOUYxQTUwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB6ZVQYrJSHqHdrK1bRF4tQGXtrRSLX2PMnr E2Xxcne4yRDL8RZTup9GrPPs18imXXz5Lu419TGSs7USWHPhR623qC7Kbi4VGqLZ K/hk4S6wV4e7scsRnHRRkZqCD6G3FLumfs6EZTHfS/3AkgBkKl40e6upe9ztCgYZ aWQUlkJiccMYEItETu8b3OQZ7D5BbLXdNwZcThdCBJRPAbPglX3H25Shfq82sXmC 4/6rxUlupQTdEiqg/drEgS6LTjrJC1jaZx2whZlrApQxPWEUYJcog6cgmcWRWMaS +Xy/LRzseHc1g505ddyQUeuax3wZdya8b3dCDj1N6W0YJS4iguk= -----END CERTIFICATE-----Generated at Fri Apr 25 06:02:24 2025 by rpki-client on console.sobornost.net