$ rpki-client -vvf repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft File: 8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft (raw, json) Hash identifier: mZCNc/NvzEr7CvvU0c4GsVVFgtSl3zAWCCtE+R0H8p4= Subject key identifier: 07:91:8D:24:EA:61:FF:9A:6F:9B:D3:18:12:D5:99:11:A7:25:8D:97 Authority key identifier: 8A:95:FA:F7:23:EC:12:9E:33:6E:75:AC:E1:CD:4F:30:94:FB:64:81 Certificate issuer: /CN=8A95FAF723EC129E336E75ACE1CD4F3094FB6481 Certificate serial: 0AAF0C104F548B9A8DA1BAA5CA6C86A0D744E017 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft Manifest number: 0411 Signing time: Wed 23 Apr 2025 20:11:21 +0000 Manifest this update: Wed 23 Apr 2025 20:06:21 +0000 Manifest next update: Sat 26 Apr 2025 22:51:21 +0000 Files and hashes: 1: 34332e3234352e3138302e302f32322d3234203d3e203538333937.roa (hash: f+W5KSnYaSOmv7obX83rwEJhTHZvGPxy0VlZOsEAh+k=) 2: 8A95FAF723EC129E336E75ACE1CD4F3094FB6481.crl (hash: XPMW2RzeoPDSlMxWxdm8IUwQcXCKtkEAvBVGsdc3ioQ=) 3: 323030313a6466303a663830303a3a2f34382d3438203d3e203538333937.roa (hash: 8qFDAcssXXUuL7jdU+5MBpRRNuUnSR4XPXnprUszlok=) 4: 3130332e32332e32302e302f32322d3234203d3e203538333937.roa (hash: y/aRgAk/Ol217uqThdECq/g+tO93bdhzL10rqxPOy5s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.crl rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 22:51:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:af:0c:10:4f:54:8b:9a:8d:a1:ba:a5:ca:6c:86:a0:d7:44:e0:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A95FAF723EC129E336E75ACE1CD4F3094FB6481 Validity Not Before: Apr 23 20:06:21 2025 GMT Not After : Apr 26 22:51:21 2025 GMT Subject: CN=07918D24EA61FF9A6F9BD31812D59911A7258D97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:20:ae:97:1f:22:68:b0:34:e2:a9:02:97:15: 90:14:25:4d:50:d0:8c:c5:05:7a:ca:13:0f:2d:c9: 6e:05:a3:a1:d4:5a:86:2d:7e:e0:d6:e9:e9:47:c6: 1d:50:5a:cc:db:55:7d:0f:21:2b:f8:2d:ee:5c:19: 6a:f4:00:a6:e0:6e:6f:1f:bc:8c:db:19:6a:4a:ec: b7:cf:65:0d:e5:87:57:ef:a1:c8:9b:c7:50:63:3a: ff:9d:ed:1d:a4:26:45:66:36:cf:65:9d:ac:37:90: 47:a3:80:c6:65:78:d8:f6:a2:37:f1:d4:a8:c8:a9: 21:4a:9d:78:03:a9:2d:31:31:77:6f:6a:30:32:ce: 6a:21:3d:4d:92:f8:d4:36:52:d6:cb:0f:6e:4b:9a: 50:98:d0:8a:c6:2f:f1:12:6c:22:f6:0c:4a:97:d6: 35:de:fc:13:14:9d:da:d6:47:0f:33:24:5b:c5:58: e0:3b:1f:cd:de:bd:5d:72:2d:15:50:ae:8a:7c:d1: 0b:07:30:5b:52:ac:4a:16:13:62:22:70:55:c4:c1: a3:d1:09:c3:89:46:c6:d2:52:31:30:c1:43:6d:b3: e0:f6:e1:e7:6a:3d:42:42:a2:8b:42:5d:21:dc:df: 4e:b5:77:ee:5d:50:f5:83:f9:37:ab:84:ad:4e:2e: 3b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:91:8D:24:EA:61:FF:9A:6F:9B:D3:18:12:D5:99:11:A7:25:8D:97 X509v3 Authority Key Identifier: keyid:8A:95:FA:F7:23:EC:12:9E:33:6E:75:AC:E1:CD:4F:30:94:FB:64:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:9a:8d:a9:86:f0:e8:69:6f:9d:c3:94:cd:18:13:c3:b3:42: 6c:e3:95:7d:5a:51:4c:43:ea:23:1b:b5:6b:90:fa:63:e1:d3: 0d:a8:c1:60:e8:5c:84:46:11:00:f1:e4:c5:b5:5f:87:de:05: f2:e1:2c:3a:c8:58:d9:fe:cb:f0:55:d6:74:64:5f:ca:bb:ef: eb:60:04:92:59:01:e9:3d:51:ef:c2:fe:97:9f:d4:46:88:6e: af:de:b7:15:66:c7:6c:e8:92:d9:21:91:25:7f:a2:70:86:72: 8e:b2:d7:d8:40:ee:dd:11:b4:9b:d2:25:cf:d3:33:ac:d7:96: e6:7e:8c:a5:2e:98:4a:89:10:2d:00:3e:e4:79:52:5b:53:b2: e8:24:07:db:f7:3f:10:2e:19:cb:f9:c2:52:82:a2:69:79:0b: 40:1c:46:36:a6:8f:da:be:fd:04:e6:ab:e2:51:50:b8:81:fd: 3b:04:b1:ef:ae:e1:32:df:dc:18:e7:57:17:37:a0:68:47:00: 81:60:4d:f5:4b:4e:e4:1b:d4:94:01:81:67:d4:76:f4:85:94: 03:e9:ed:93:1a:e1:bc:44:cd:fc:12:4b:d4:f6:34:4e:9b:a4: 46:87:35:ed:1a:f6:82:63:1b:46:05:4e:ad:e6:a4:44:20:39: 98:15:01:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCq8MEE9Ui5qNobqlymyGoNdE4BcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE5NUZBRjcyM0VDMTI5RTMzNkU3NUFDRTFDRDRGMzA5 NEZCNjQ4MTAeFw0yNTA0MjMyMDA2MjFaFw0yNTA0MjYyMjUxMjFaMDMxMTAvBgNV BAMTKDA3OTE4RDI0RUE2MUZGOUE2RjlCRDMxODEyRDU5OTExQTcyNThEOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpIK6XHyJosDTiqQKXFZAUJU1Q 0IzFBXrKEw8tyW4Fo6HUWoYtfuDW6elHxh1QWszbVX0PISv4Le5cGWr0AKbgbm8f vIzbGWpK7LfPZQ3lh1fvocibx1BjOv+d7R2kJkVmNs9lnaw3kEejgMZleNj2ojfx 1KjIqSFKnXgDqS0xMXdvajAyzmohPU2S+NQ2UtbLD25LmlCY0IrGL/ESbCL2DEqX 1jXe/BMUndrWRw8zJFvFWOA7H83evV1yLRVQrop80QsHMFtSrEoWE2IicFXEwaPR CcOJRsbSUjEwwUNts+D24edqPUJCootCXSHc3061d+5dUPWD+TerhK1OLjvvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB5GNJOph/5pvm9MYEtWZEacljZcwHwYDVR0j BBgwFoAUipX69yPsEp4zbnWs4c1PMJT7ZIEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OGI5ODcyMi0xY2I0LTQwZDQtYWM4Yi1jM2JjYTJiY2EyMTcvMC84QTk1RkFGNzIz RUMxMjlFMzM2RTc1QUNFMUNENEYzMDk0RkI2NDgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEE5NUZBRjcyM0VDMTI5RTMzNkU3NUFDRTFDRDRGMzA5NEZC NjQ4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDhiOTg3MjItMWNiNC00MGQ0LWFj OGItYzNiY2EyYmNhMjE3LzAvOEE5NUZBRjcyM0VDMTI5RTMzNkU3NUFDRTFDRDRG MzA5NEZCNjQ4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHyajamG8Ohpb53DlM0YE8OzQmzjlX1aUUxD 6iMbtWuQ+mPh0w2owWDoXIRGEQDx5MW1X4feBfLhLDrIWNn+y/BV1nRkX8q77+tg BJJZAek9Ue/C/pef1EaIbq/etxVmx2zoktkhkSV/onCGco6y19hA7t0RtJvSJc/T M6zXluZ+jKUumEqJEC0APuR5UltTsugkB9v3PxAuGcv5wlKComl5C0AcRjamj9q+ /QTmq+JRULiB/TsEse+u4TLf3BjnVxc3oGhHAIFgTfVLTuQb1JQBgWfUdvSFlAPp 7ZMa4bxEzfwSS9T2NE6bpEaHNe0a9oJjG0YFTq3mpEQgOZgVAXY= -----END CERTIFICATE-----Generated at Wed Apr 23 22:12:04 2025 by rpki-client on console.sobornost.net