$ rpki-client -vvf repo-rpki.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244.mft File: BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244.mft (raw, json) Hash identifier: AGCvujQ13eQE2I6z63i1q2OdQ7d0I8vxzvQIi+YkuZY= Subject key identifier: C8:C9:D8:58:DD:DB:CB:C7:89:44:C4:BB:B6:1E:2E:CE:FC:D8:1D:05 Authority key identifier: BC:A0:C1:EF:5A:4A:B3:AE:F4:25:E1:5A:B8:9A:19:CD:E5:68:82:44 Certificate issuer: /CN=BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244 Certificate serial: 6F874FA9B4275D5D702FD9EAA617FB7FDC9FAB8F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244.mft Manifest number: 91 Signing time: Thu 24 Apr 2025 03:30:48 +0000 Manifest this update: Thu 24 Apr 2025 03:25:48 +0000 Manifest next update: Sun 27 Apr 2025 14:43:48 +0000 Files and hashes: 1: 3136302e32302e33382e302f32342d3234203d3e20313532373637.roa (hash: qz9gkkaT5gjEW5IKUp/t4G7tipALQOBC2f4F6gPlyJ0=) 2: 3136302e32302e33392e302f32342d3234203d3e20313532373637.roa (hash: r+NcYn+t5rMmjNx2JWkC72GwMhJHESlVZs6P4b6ukaU=) 3: BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244.crl (hash: h6b+kLJ0zPT7uDU6MNqjsDTEPbiJIciWChyF7Me0Ou4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244.crl rsync://repo-rpki.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 11:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:87:4f:a9:b4:27:5d:5d:70:2f:d9:ea:a6:17:fb:7f:dc:9f:ab:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244 Validity Not Before: Apr 24 03:25:48 2025 GMT Not After : Apr 27 14:43:48 2025 GMT Subject: CN=C8C9D858DDDBCBC78944C4BBB61E2ECEFCD81D05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2d:11:a9:53:4d:66:a2:19:39:40:cf:2e:3e: 83:56:63:47:12:1e:19:34:76:b0:af:1d:49:a9:72: cc:6c:67:73:13:04:75:9d:1a:87:c2:ec:b2:f0:1a: 03:f1:f5:68:53:fe:ba:65:7e:2a:da:1a:5c:99:bf: 3d:ee:96:b3:98:9f:15:56:4d:e8:80:35:69:3f:e8: 99:be:7f:4e:b8:d7:f8:e0:5e:94:b5:57:e3:dd:f2: ad:44:80:7e:30:c2:d4:64:c6:2b:be:ef:65:c5:c7: ee:79:a8:e2:f5:c3:a0:20:e0:cc:5b:a4:86:c9:71: 36:cb:6b:76:06:00:1d:82:8c:ef:fd:34:a0:5f:39: a0:28:15:07:28:8d:9b:f1:9a:d7:0a:3f:b1:78:a2: f6:77:ca:a5:70:2e:ff:e2:f9:3f:ef:e2:90:1a:fa: 0a:b6:82:29:29:73:46:bf:5c:7e:21:df:d4:43:29: 0f:36:91:c3:37:a8:ab:ff:02:38:06:7e:c7:d4:ce: 7d:02:cc:ea:75:98:b3:ce:eb:7d:4d:70:57:29:f2: 81:a8:47:a7:74:fd:1d:3b:a2:b9:6f:0c:e5:13:8b: 08:81:1c:21:45:99:0a:b7:05:86:25:ea:9f:a5:9a: 78:b9:45:7d:f6:3a:42:a7:af:5d:ff:b9:e2:f3:0c: 98:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:C9:D8:58:DD:DB:CB:C7:89:44:C4:BB:B6:1E:2E:CE:FC:D8:1D:05 X509v3 Authority Key Identifier: keyid:BC:A0:C1:EF:5A:4A:B3:AE:F4:25:E1:5A:B8:9A:19:CD:E5:68:82:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:80:fc:df:8b:c1:a3:07:0d:41:ba:03:c0:ad:df:bc:7a:42: 16:8a:76:a9:47:5c:4f:8d:40:ac:a1:ec:ca:80:47:29:48:35: 0d:42:bb:9c:04:a4:c0:0a:13:dd:9e:2f:f3:f9:83:7e:1d:98: 6b:35:3a:41:ba:11:f9:b4:90:b8:73:64:98:f1:06:39:48:28: f0:0a:dd:d7:ff:df:90:be:cd:dc:d6:aa:3a:3a:69:ec:18:f1: 22:21:04:19:29:4b:5d:e7:96:7a:26:ef:93:a1:30:a6:e9:01: 2b:28:ee:19:ff:dc:25:a0:97:a9:8e:d3:86:1f:b1:97:d5:4d: 72:25:99:51:15:b7:6f:ef:92:87:f0:06:5b:5c:84:50:f4:ab: 6d:ec:37:3f:98:14:cc:5e:de:10:8d:cd:49:fb:b6:d7:23:95: ea:cc:f2:83:3f:7e:77:79:82:6b:93:ce:8d:79:a4:3e:1d:42: 46:7f:68:de:ca:ab:bd:cc:c8:4d:5c:74:b4:fe:10:b1:06:60: 3d:07:ad:b8:db:d8:5d:60:66:f0:ba:d4:d7:19:f3:49:41:65: 63:32:c6:80:f3:de:5d:85:e9:78:fa:ce:e2:23:23:ad:4c:a5: c3:04:36:9d:0c:0d:d5:8b:61:2a:bd:b1:ed:d6:ef:b3:19:7e: 74:6b:cd:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb4dPqbQnXV1wL9nqphf7f9yfq48wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNBMEMxRUY1QTRBQjNBRUY0MjVFMTVBQjg5QTE5Q0RF NTY4ODI0NDAeFw0yNTA0MjQwMzI1NDhaFw0yNTA0MjcxNDQzNDhaMDMxMTAvBgNV BAMTKEM4QzlEODU4REREQkNCQzc4OTQ0QzRCQkI2MUUyRUNFRkNEODFEMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyLRGpU01mohk5QM8uPoNWY0cS Hhk0drCvHUmpcsxsZ3MTBHWdGofC7LLwGgPx9WhT/rplfiraGlyZvz3ulrOYnxVW TeiANWk/6Jm+f0641/jgXpS1V+Pd8q1EgH4wwtRkxiu+72XFx+55qOL1w6Ag4Mxb pIbJcTbLa3YGAB2CjO/9NKBfOaAoFQcojZvxmtcKP7F4ovZ3yqVwLv/i+T/v4pAa +gq2gikpc0a/XH4h39RDKQ82kcM3qKv/AjgGfsfUzn0CzOp1mLPO631NcFcp8oGo R6d0/R07orlvDOUTiwiBHCFFmQq3BYYl6p+lmni5RX32OkKnr13/ueLzDJiDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyMnYWN3by8eJRMS7th4uzvzYHQUwHwYDVR0j BBgwFoAUvKDB71pKs670JeFauJoZzeVogkQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmU3ZGFjYy0yYjQ1LTQxNDEtOTc3NS1mMWJiOWYwNTIzOTYvMC9CQ0EwQzFFRjVB NEFCM0FFRjQyNUUxNUFCODlBMTlDREU1Njg4MjQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQkNBMEMxRUY1QTRBQjNBRUY0MjVFMTVBQjg5QTE5Q0RFNTY4 ODI0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZlN2RhY2MtMmI0NS00MTQxLTk3 NzUtZjFiYjlmMDUyMzk2LzAvQkNBMEMxRUY1QTRBQjNBRUY0MjVFMTVBQjg5QTE5 Q0RFNTY4ODI0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACuA/N+LwaMHDUG6A8Ct37x6QhaKdqlHXE+N QKyh7MqARylINQ1Cu5wEpMAKE92eL/P5g34dmGs1OkG6Efm0kLhzZJjxBjlIKPAK 3df/35C+zdzWqjo6aewY8SIhBBkpS13nlnom75OhMKbpASso7hn/3CWgl6mO04Yf sZfVTXIlmVEVt2/vkofwBltchFD0q23sNz+YFMxe3hCNzUn7ttcjlerM8oM/fnd5 gmuTzo15pD4dQkZ/aN7Kq73MyE1cdLT+ELEGYD0Hrbjb2F1gZvC61NcZ80lBZWMy xoDz3l2F6Xj6zuIjI61MpcMENp0MDdWLYSq9se3W77MZfnRrzcg= -----END CERTIFICATE-----Generated at Thu Apr 24 06:50:02 2025 by rpki-client on console.sobornost.net