$ rpki-client -vvf repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft File: B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft (raw, json) Hash identifier: 2Pje0nQz5bwkab75PEsJJOOxZAjh+eSW81ZrYbR9q8Y= Subject key identifier: 47:2C:51:18:5B:E5:A9:DB:69:C5:17:EF:49:9E:87:41:FF:50:4C:9F Authority key identifier: B3:47:BB:A6:BD:11:BF:C5:E5:5F:7F:F3:34:C1:65:E9:FD:21:FA:5C Certificate issuer: /CN=B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C Certificate serial: 117FB74B335B63C3F08B3B672DBC63FEFF9BDD70 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft Manifest number: 01DA Signing time: Thu 24 Apr 2025 23:32:06 +0000 Manifest this update: Thu 24 Apr 2025 23:27:06 +0000 Manifest next update: Mon 28 Apr 2025 02:13:06 +0000 Files and hashes: 1: B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.crl (hash: oaAmztSCeFAr2RS5mV3W6KbLpoyk3h0nnp+mmtotJjY=) 2: 3130332e3138362e3230332e302f32342d3234203d3e20313439373036.roa (hash: JgDdJ0VL4u8D8+wDznKBSlTRQ0p6opMwZGoPzapaaX4=) 3: 3130332e3138362e3230322e302f32342d3234203d3e20313439373036.roa (hash: k4Wn7QjCevaLRtjzpZzU9aujDNZ1W8N1HpzN16+qakY=) 4: 3130332e3138362e3230322e302f32332d3233203d3e20313439373036.roa (hash: YXcPTV7LyiaT/dlRqQiGxAGyQ4A0Km1DyhqBZdphgGs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.crl rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:7f:b7:4b:33:5b:63:c3:f0:8b:3b:67:2d:bc:63:fe:ff:9b:dd:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C Validity Not Before: Apr 24 23:27:06 2025 GMT Not After : Apr 28 02:13:06 2025 GMT Subject: CN=472C51185BE5A9DB69C517EF499E8741FF504C9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c1:51:eb:19:7b:8f:3a:00:ee:f9:3e:c4:fb: 9c:9a:bb:d8:11:76:bf:a5:4c:c2:c8:7d:ea:0d:6a: 20:02:15:c7:3f:00:b7:08:20:09:9b:4a:94:19:2a: a2:60:a3:b5:8a:63:22:fe:d5:79:f2:e9:e9:1a:9d: e8:85:a0:dc:cf:ad:9a:b7:36:01:15:00:cc:e7:6c: ae:2e:ae:19:2c:1c:f6:ff:0f:9c:6c:77:6f:e7:d2: db:31:da:a5:f2:c2:bd:b5:09:48:e3:97:b5:05:68: 87:61:d6:ce:2c:b8:f0:ed:d0:75:9c:81:24:21:e6: 4e:cc:12:2b:11:ac:37:8b:c1:0f:8f:ce:80:bf:70: b8:ad:38:4f:53:80:72:86:50:60:0c:fc:8f:72:b3: df:1b:76:50:98:0d:11:30:6d:f1:1b:cf:b8:24:1d: 0f:75:5e:d3:e1:07:eb:41:1b:b4:41:12:dc:7d:b2: b7:ea:27:34:f9:52:e7:97:18:8d:87:1f:ed:c5:71: 4f:f1:77:a9:58:b2:36:92:e1:07:51:3b:c0:6b:5b: e6:7f:b2:bf:d1:26:78:a9:e6:03:c3:01:74:c4:6f: d0:a9:37:14:ed:3b:b0:ac:a9:c8:7b:44:48:b2:39: 06:8c:fe:77:4b:a5:05:00:bb:d3:fd:ba:69:4e:f3: 33:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:2C:51:18:5B:E5:A9:DB:69:C5:17:EF:49:9E:87:41:FF:50:4C:9F X509v3 Authority Key Identifier: keyid:B3:47:BB:A6:BD:11:BF:C5:E5:5F:7F:F3:34:C1:65:E9:FD:21:FA:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:4e:2e:09:cd:09:25:ef:99:a6:e3:1a:c3:7e:1e:19:7f:7c: 08:37:0c:2a:d1:b9:e7:4d:26:3e:d8:1a:36:b9:a0:e2:cb:d2: 66:b4:87:67:56:94:8d:6a:90:b0:3d:83:a7:3b:a2:7f:38:03: 84:72:1a:9a:22:55:05:2f:01:13:c7:1d:d5:8c:31:73:8f:48: 77:6e:4d:ad:f9:51:4b:dd:c0:bc:fa:6b:4f:18:45:73:8b:6a: f9:42:02:9e:c4:46:05:74:f7:5a:e5:48:87:d7:92:4c:5e:f7: 27:ca:f3:c7:f8:e6:dd:06:16:56:55:41:97:1c:6b:a4:9c:75: 90:56:30:9e:21:f0:19:2b:2f:10:bf:cd:72:79:93:99:b4:66: be:d8:38:e8:b0:8c:1b:cf:85:ea:2f:18:0e:33:99:59:e4:49: ef:b6:1e:3e:3e:bd:c0:88:26:38:ea:a9:1c:a4:78:65:07:d4: 91:f3:13:47:d9:e0:40:fa:53:6c:f6:af:f8:f2:96:77:1d:03: 23:2f:80:12:49:f3:92:be:4c:c5:0b:4c:05:c9:85:0f:60:92: 5d:de:fe:f1:ff:18:31:50:41:8b:aa:e4:f1:f8:f3:96:20:4f: ef:90:80:d7:d8:8d:6f:25:f4:d0:f3:35:06:8c:5b:5f:46:66: b0:d3:54:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEX+3SzNbY8PwiztnLbxj/v+b3XAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM0N0JCQTZCRDExQkZDNUU1NUY3RkYzMzRDMTY1RTlG RDIxRkE1QzAeFw0yNTA0MjQyMzI3MDZaFw0yNTA0MjgwMjEzMDZaMDMxMTAvBgNV BAMTKDQ3MkM1MTE4NUJFNUE5REI2OUM1MTdFRjQ5OUU4NzQxRkY1MDRDOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6wVHrGXuPOgDu+T7E+5yau9gR dr+lTMLIfeoNaiACFcc/ALcIIAmbSpQZKqJgo7WKYyL+1Xny6ekaneiFoNzPrZq3 NgEVAMznbK4urhksHPb/D5xsd2/n0tsx2qXywr21CUjjl7UFaIdh1s4suPDt0HWc gSQh5k7MEisRrDeLwQ+PzoC/cLitOE9TgHKGUGAM/I9ys98bdlCYDREwbfEbz7gk HQ91XtPhB+tBG7RBEtx9srfqJzT5UueXGI2HH+3FcU/xd6lYsjaS4QdRO8BrW+Z/ sr/RJnip5gPDAXTEb9CpNxTtO7Csqch7REiyOQaM/ndLpQUAu9P9umlO8zMDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURyxRGFvlqdtpxRfvSZ6HQf9QTJ8wHwYDVR0j BBgwFoAUs0e7pr0Rv8XlX3/zNMFl6f0h+lwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTEwNjgyNy04NjZlLTRhYzMtOGY3OS1hNmUzMjBiMjBkZTcvMC9CMzQ3QkJBNkJE MTFCRkM1RTU1RjdGRjMzNEMxNjVFOUZEMjFGQTVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjM0N0JCQTZCRDExQkZDNUU1NUY3RkYzMzRDMTY1RTlGRDIx RkE1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkxMDY4MjctODY2ZS00YWMzLThm NzktYTZlMzIwYjIwZGU3LzAvQjM0N0JCQTZCRDExQkZDNUU1NUY3RkYzMzRDMTY1 RTlGRDIxRkE1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKlOLgnNCSXvmabjGsN+Hhl/fAg3DCrRuedN Jj7YGja5oOLL0ma0h2dWlI1qkLA9g6c7on84A4RyGpoiVQUvARPHHdWMMXOPSHdu Ta35UUvdwLz6a08YRXOLavlCAp7ERgV091rlSIfXkkxe9yfK88f45t0GFlZVQZcc a6ScdZBWMJ4h8BkrLxC/zXJ5k5m0Zr7YOOiwjBvPheovGA4zmVnkSe+2Hj4+vcCI JjjqqRykeGUH1JHzE0fZ4ED6U2z2r/jylncdAyMvgBJJ85K+TMULTAXJhQ9gkl3e /vH/GDFQQYuq5PH485YgT++QgNfYjW8l9NDzNQaMW19GZrDTVGc= -----END CERTIFICATE-----Generated at Fri Apr 25 06:02:24 2025 by rpki-client on console.sobornost.net