$ rpki-client -vvf repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft File: 9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft (raw, json) Hash identifier: AMBc3/ECbaomQ2Rj5OtsOWJi25NuAPrx68yMa13bsb0= Subject key identifier: BB:06:96:80:7B:DE:8E:F2:F5:16:A9:68:D7:0B:25:E3:21:3C:07:E5 Authority key identifier: 9F:AA:E7:3A:F6:8F:08:D5:79:3C:C3:2C:5C:4E:A8:C5:F5:D2:43:7A Certificate issuer: /CN=9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A Certificate serial: 1F91C047573135AF9F300B5952BF0603FCB3C53D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft Manifest number: 01D5 Signing time: Wed 23 Apr 2025 23:40:00 +0000 Manifest this update: Wed 23 Apr 2025 23:35:00 +0000 Manifest next update: Sun 27 Apr 2025 08:40:00 +0000 Files and hashes: 1: 3130332e3136392e3232372e302f32342d3234203d3e20313432333633.roa (hash: e6iQYYr+b0+k42f/Dnky3Z0YydCENT/ESZfkhJr3jDE=) 2: 9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.crl (hash: spWYU5HOJdtlt381Qve+ULnQ7iTz8b8HQtyN9sjEn7E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.crl rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 08:10:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:91:c0:47:57:31:35:af:9f:30:0b:59:52:bf:06:03:fc:b3:c5:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A Validity Not Before: Apr 23 23:35:00 2025 GMT Not After : Apr 27 08:40:00 2025 GMT Subject: CN=BB0696807BDE8EF2F516A968D70B25E3213C07E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c5:17:23:06:f2:30:f0:2e:fb:7a:92:07:0f: f4:4d:6a:68:f2:c9:ff:23:33:b2:f1:ab:4b:48:a3: 35:be:f7:d1:79:e6:1e:2c:71:20:db:7e:38:fe:11: 8d:79:1a:f1:2a:a5:20:80:28:d5:0c:17:09:00:2b: 7d:dd:29:51:5f:89:ed:3a:dc:6a:11:3c:39:4d:8b: 44:e6:26:c8:d4:71:7c:6d:73:19:fe:f7:2b:4c:5e: f7:89:6b:1e:2e:83:10:1e:4a:2a:6d:f1:a9:00:cb: 7b:15:54:35:f1:40:25:77:16:e8:73:a2:92:bc:d3: cf:c4:f7:19:50:12:61:e9:3e:52:af:e8:e0:ba:08: e5:06:c4:40:8a:0c:94:54:03:48:5d:54:99:55:87: 09:e3:6d:31:66:b2:87:1b:ca:7f:37:95:34:3d:0b: b5:06:88:55:d8:05:bc:ca:bd:60:5a:d4:60:d8:f7: 7b:ea:46:a0:69:bc:58:b8:d5:5f:b0:b7:cd:01:a4: c6:6e:9c:af:d4:78:08:fa:fa:bb:43:81:24:cd:ac: e5:e2:96:eb:1f:26:67:0b:41:5c:7e:3c:e3:9b:9a: f8:44:2c:aa:bd:7a:ec:6d:7a:c6:c2:8f:78:78:4a: dd:17:82:c6:4a:ca:83:32:55:41:34:d3:38:15:c2: d4:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:06:96:80:7B:DE:8E:F2:F5:16:A9:68:D7:0B:25:E3:21:3C:07:E5 X509v3 Authority Key Identifier: keyid:9F:AA:E7:3A:F6:8F:08:D5:79:3C:C3:2C:5C:4E:A8:C5:F5:D2:43:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:98:e8:3d:4e:97:b8:1d:5d:34:eb:a6:b5:27:ae:36:84:48: 25:44:fd:e3:89:d8:95:13:a2:81:e0:e8:9d:3b:a1:52:11:98: dd:18:19:ab:6c:2a:d7:02:7d:21:c5:1a:a1:b3:11:16:55:15: a8:96:bd:de:10:f5:aa:98:96:5a:f8:f5:55:38:70:f8:55:ed: 21:89:04:34:f0:36:e3:91:3f:96:e3:61:99:ea:b8:44:5e:01: 40:92:fb:60:41:60:19:0e:40:3a:28:1a:f2:53:a8:4d:93:aa: d1:d3:3f:7f:1c:f4:31:d8:92:32:24:8c:0b:6b:d4:e3:45:7a: 78:f8:e4:dc:07:96:7d:f1:3a:73:7e:95:61:f8:d3:53:01:49: 29:dc:f4:88:80:ba:12:db:e6:91:10:c4:c7:11:62:c7:40:16: 37:9d:2d:c7:7f:e5:04:e8:18:02:75:61:6d:9e:f3:9d:19:36: 4d:9f:c4:68:29:ee:e4:70:44:38:8b:91:dc:0e:83:7e:ef:b0: c8:ee:43:59:5b:e6:79:0b:aa:08:41:7f:80:9d:8c:3d:ab:0e: b5:33:5c:7f:8b:7b:57:4a:9b:51:0c:60:05:9d:a7:34:b9:6f: 10:35:f5:7b:41:4a:a3:71:e8:f1:00:5f:c2:25:57:61:bc:d0: 2a:40:0c:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH5HAR1cxNa+fMAtZUr8GA/yzxT0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZBQUU3M0FGNjhGMDhENTc5M0NDMzJDNUM0RUE4QzVG NUQyNDM3QTAeFw0yNTA0MjMyMzM1MDBaFw0yNTA0MjcwODQwMDBaMDMxMTAvBgNV BAMTKEJCMDY5NjgwN0JERThFRjJGNTE2QTk2OEQ3MEIyNUUzMjEzQzA3RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBxRcjBvIw8C77epIHD/RNamjy yf8jM7Lxq0tIozW+99F55h4scSDbfjj+EY15GvEqpSCAKNUMFwkAK33dKVFfie06 3GoRPDlNi0TmJsjUcXxtcxn+9ytMXveJax4ugxAeSipt8akAy3sVVDXxQCV3Fuhz opK808/E9xlQEmHpPlKv6OC6COUGxECKDJRUA0hdVJlVhwnjbTFmsocbyn83lTQ9 C7UGiFXYBbzKvWBa1GDY93vqRqBpvFi41V+wt80BpMZunK/UeAj6+rtDgSTNrOXi lusfJmcLQVx+POObmvhELKq9euxtesbCj3h4St0XgsZKyoMyVUE00zgVwtSdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuwaWgHvejvL1Fqlo1wsl4yE8B+UwHwYDVR0j BBgwFoAUn6rnOvaPCNV5PMMsXE6oxfXSQ3owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OWFlOTgyOC0wZTgyLTQ0MzQtYjhmMi0yZDhhZDU5Y2VhODgvMC85RkFBRTczQUY2 OEYwOEQ1NzkzQ0MzMkM1QzRFQThDNUY1RDI0MzdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUZBQUU3M0FGNjhGMDhENTc5M0NDMzJDNUM0RUE4QzVGNUQy NDM3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDlhZTk4MjgtMGU4Mi00NDM0LWI4 ZjItMmQ4YWQ1OWNlYTg4LzAvOUZBQUU3M0FGNjhGMDhENTc5M0NDMzJDNUM0RUE4 QzVGNUQyNDM3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI2Y6D1Ol7gdXTTrprUnrjaESCVE/eOJ2JUT ooHg6J07oVIRmN0YGatsKtcCfSHFGqGzERZVFaiWvd4Q9aqYllr49VU4cPhV7SGJ BDTwNuORP5bjYZnquEReAUCS+2BBYBkOQDooGvJTqE2TqtHTP38c9DHYkjIkjAtr 1ONFenj45NwHln3xOnN+lWH401MBSSnc9IiAuhLb5pEQxMcRYsdAFjedLcd/5QTo GAJ1YW2e850ZNk2fxGgp7uRwRDiLkdwOg37vsMjuQ1lb5nkLqghBf4CdjD2rDrUz XH+Le1dKm1EMYAWdpzS5bxA19XtBSqNx6PEAX8IlV2G80CpADFE= -----END CERTIFICATE-----Generated at Thu Apr 24 04:31:50 2025 by rpki-client on console.sobornost.net