$ rpki-client -vvf repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.mft File: B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.mft (raw, json) Hash identifier: LgBz3IXnp2E5OY22rrXnWQNmN+Bojc2XqvXFDqhaE24= Subject key identifier: 5A:82:36:C5:85:0E:CC:EA:6E:E6:14:EC:8C:9B:F1:83:F3:B9:3B:61 Authority key identifier: B1:1A:6E:BA:7C:0F:02:09:30:47:3F:B7:FA:FC:2D:9C:97:E4:98:2D Certificate issuer: /CN=B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D Certificate serial: 4FB478E57FCCE0CD8A70C480A600DF6F3EE51478 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.mft Manifest number: 04D6 Signing time: Fri 25 Apr 2025 07:51:56 +0000 Manifest this update: Fri 25 Apr 2025 07:46:56 +0000 Manifest next update: Mon 28 Apr 2025 14:28:56 +0000 Files and hashes: 1: 3130332e3232392e3136332e302f32342d3234203d3e203539323838.roa (hash: 9t5jaF/sUgSbxY8Cz9RpcIzWHBkh738wIm0sYN9Y18E=) 2: 3130332e3232392e3136302e302f32342d3234203d3e203539323838.roa (hash: mEzd38YxKhJp+MBizFTrVMus18X/KqN2dgbg6ZALV3A=) 3: B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.crl (hash: VZDj/T8W4q3JBWDOzqbTwcsq1f+eCLBBVoT47H3QYN4=) 4: 3130332e3232392e3136302e302f32322d3234203d3e203539323838.roa (hash: p9nIhhAXDA1VGK03OeTNU5iCdtRuqI9pYS72qu+FFmM=) 5: 3130332e3232392e3136322e302f32342d3234203d3e203539323838.roa (hash: GfzfBdTg8EGjgrPPzHMFf7asLdMNg5rVgiw2FS33DYc=) 6: 3130332e3232392e3136312e302f32342d3234203d3e203539323838.roa (hash: K92crqS5iSS81LOQpQQJN8GiwTH5ZwgilSXiuua4MfI=) 7: 32372e302e3139362e302f32322d3234203d3e203539323838.roa (hash: O8kAH8t08+9DH7Rdkzs7sp0HA8ViQO+3lyriqTCqhRw=) 8: 3130332e3232392e3136322e302f32342d3234203d3e20313338313138.roa (hash: PJNdW/jPDCi4OnaMwTB5HhmqSaNIxJPSQDfjtrHqN5w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.crl rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 14:02:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:b4:78:e5:7f:cc:e0:cd:8a:70:c4:80:a6:00:df:6f:3e:e5:14:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D Validity Not Before: Apr 25 07:46:56 2025 GMT Not After : Apr 28 14:28:56 2025 GMT Subject: CN=5A8236C5850ECCEA6EE614EC8C9BF183F3B93B61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b5:13:56:23:6b:dc:9e:13:9f:e0:39:a7:46: c7:c8:f0:e7:fa:ac:82:09:c6:db:4c:bb:4f:88:86: 9d:1b:c3:e4:ee:c6:0c:5f:aa:d5:04:b5:ee:00:3d: 83:a9:24:fc:e5:f2:f4:9f:7a:46:ce:e0:c1:72:9f: a1:06:2c:53:67:1b:ca:67:dc:dd:80:3c:92:21:dc: bb:e1:c9:7e:a0:8b:09:bf:d0:27:f0:9a:b0:26:fb: 86:18:51:ef:88:70:61:ca:2a:9d:7b:5f:01:76:ad: ee:a7:b5:b2:ff:a4:9e:f4:a5:22:99:41:97:60:b8: 61:b2:85:2e:b3:3d:91:ce:21:d4:1c:67:23:56:22: 4b:e4:c1:73:e8:f9:73:5a:38:9a:9e:9b:c8:6b:4e: be:55:98:89:9d:b0:17:55:80:52:16:90:c1:a6:1d: 4d:0d:57:0a:96:31:77:b6:75:68:bf:91:ee:81:c2: 2a:92:ac:96:99:64:1f:5a:6e:40:c2:50:0a:d4:da: 3f:8a:3e:d6:fb:d3:f4:cb:46:b1:3b:61:4b:40:15: 9c:32:fe:41:1f:f3:0a:4e:c7:6d:0d:58:3d:27:91: fc:49:7f:20:d3:b1:9f:e8:f4:51:8c:af:10:c5:b7: 4d:9e:e1:14:3e:cb:22:16:ac:0c:ff:2a:34:85:7d: 25:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:82:36:C5:85:0E:CC:EA:6E:E6:14:EC:8C:9B:F1:83:F3:B9:3B:61 X509v3 Authority Key Identifier: keyid:B1:1A:6E:BA:7C:0F:02:09:30:47:3F:B7:FA:FC:2D:9C:97:E4:98:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:ab:d2:ef:66:e0:9e:4a:a3:d3:46:d8:35:e8:62:91:57:fa: fa:61:58:95:42:85:c2:84:0a:00:aa:03:6b:40:af:e0:de:14: 69:04:01:86:69:67:e8:5f:83:c0:21:e7:22:85:d3:4f:11:6c: 7e:31:d8:02:01:5b:24:ba:7c:2d:88:f2:f1:5e:a2:ca:ca:06: 70:20:38:81:e3:df:16:41:bc:27:f0:c5:92:a1:62:c1:b1:c8: 5b:84:e3:4b:be:b8:0a:e4:eb:ab:3e:a1:b0:b4:49:94:af:78: ae:7c:07:e5:6d:d6:ca:f8:83:42:60:e8:a9:c9:48:93:3a:0a: 04:1d:42:1b:9d:83:33:95:21:06:a0:54:4b:b0:11:a4:98:0d: 54:e9:ca:7d:3b:90:7a:44:e5:7f:7f:d8:96:a4:b7:9c:f8:ca: e1:a8:d8:94:81:75:07:73:3d:9c:19:80:f0:c6:b4:6d:d5:d0: 19:f4:a8:6b:02:f4:ea:e7:e2:98:93:e1:30:3d:08:cd:ed:03: 42:0c:23:db:6b:e9:07:df:45:0e:11:39:04:4e:3b:81:dc:80: 9e:33:c0:28:27:81:a7:7a:69:bc:eb:11:a5:e3:70:c1:55:68: ff:99:b7:f6:a0:26:15:89:e5:5f:a8:bf:64:fb:08:ed:66:64: 77:41:ad:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT7R45X/M4M2KcMSApgDfbz7lFHgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjExQTZFQkE3QzBGMDIwOTMwNDczRkI3RkFGQzJEOUM5 N0U0OTgyRDAeFw0yNTA0MjUwNzQ2NTZaFw0yNTA0MjgxNDI4NTZaMDMxMTAvBgNV BAMTKDVBODIzNkM1ODUwRUNDRUE2RUU2MTRFQzhDOUJGMTgzRjNCOTNCNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCktRNWI2vcnhOf4DmnRsfI8Of6 rIIJxttMu0+Ihp0bw+TuxgxfqtUEte4APYOpJPzl8vSfekbO4MFyn6EGLFNnG8pn 3N2APJIh3LvhyX6giwm/0CfwmrAm+4YYUe+IcGHKKp17XwF2re6ntbL/pJ70pSKZ QZdguGGyhS6zPZHOIdQcZyNWIkvkwXPo+XNaOJqem8hrTr5VmImdsBdVgFIWkMGm HU0NVwqWMXe2dWi/ke6BwiqSrJaZZB9abkDCUArU2j+KPtb70/TLRrE7YUtAFZwy /kEf8wpOx20NWD0nkfxJfyDTsZ/o9FGMrxDFt02e4RQ+yyIWrAz/KjSFfSVNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWoI2xYUOzOpu5hTsjJvxg/O5O2EwHwYDVR0j BBgwFoAUsRpuunwPAgkwRz+3+vwtnJfkmC0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTNlYjhmNi1iYjZjLTRlYTctODZkZi1iMjQzYzUxNjRkMjIvMC9CMTFBNkVCQTdD MEYwMjA5MzA0NzNGQjdGQUZDMkQ5Qzk3RTQ5ODJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjExQTZFQkE3QzBGMDIwOTMwNDczRkI3RkFGQzJEOUM5N0U0 OTgyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkzZWI4ZjYtYmI2Yy00ZWE3LTg2 ZGYtYjI0M2M1MTY0ZDIyLzAvQjExQTZFQkE3QzBGMDIwOTMwNDczRkI3RkFGQzJE OUM5N0U0OTgyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH+r0u9m4J5Ko9NG2DXoYpFX+vphWJVChcKE CgCqA2tAr+DeFGkEAYZpZ+hfg8Ah5yKF008RbH4x2AIBWyS6fC2I8vFeosrKBnAg OIHj3xZBvCfwxZKhYsGxyFuE40u+uArk66s+obC0SZSveK58B+Vt1sr4g0Jg6KnJ SJM6CgQdQhudgzOVIQagVEuwEaSYDVTpyn07kHpE5X9/2Jakt5z4yuGo2JSBdQdz PZwZgPDGtG3V0Bn0qGsC9Orn4piT4TA9CM3tA0IMI9tr6QffRQ4ROQROO4HcgJ4z wCgngad6abzrEaXjcMFVaP+Zt/agJhWJ5V+ov2T7CO1mZHdBrVA= -----END CERTIFICATE-----Generated at Fri Apr 25 10:36:52 2025 by rpki-client on console.sobornost.net