$ rpki-client -vvf repo-rpki.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/FA86E23853549D2EF1D9F9C9222147A550E36A38.mft File: FA86E23853549D2EF1D9F9C9222147A550E36A38.mft (raw, json) Hash identifier: DRO23qfp9z/oc8zWGjS5nMPoHdzXdS9hbUfS0CGTtxs= Subject key identifier: 44:C7:B9:2F:17:C8:5B:93:2B:7F:BC:61:60:07:36:E4:92:CD:66:0F Authority key identifier: FA:86:E2:38:53:54:9D:2E:F1:D9:F9:C9:22:21:47:A5:50:E3:6A:38 Certificate issuer: /CN=FA86E23853549D2EF1D9F9C9222147A550E36A38 Certificate serial: 6839DC0327980396939BBD5FB24D57D14C0C1692 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA86E23853549D2EF1D9F9C9222147A550E36A38.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/FA86E23853549D2EF1D9F9C9222147A550E36A38.mft Manifest number: 018E Signing time: Fri 25 Apr 2025 04:10:42 +0000 Manifest this update: Fri 25 Apr 2025 04:05:42 +0000 Manifest next update: Mon 28 Apr 2025 10:14:42 +0000 Files and hashes: 1: FA86E23853549D2EF1D9F9C9222147A550E36A38.crl (hash: cY1+Xaa+jblr1d0fjr6fYR4mOblmFDZf6JEJzJomtXs=) 2: 3130332e35352e32382e302f32342d3234203d3e20313530343837.roa (hash: RjVxvxxbyDiQSv718+JovDu9zNSEKhSMEBDdXzJXwvE=) 3: 3130332e35352e32392e302f32342d3234203d3e20313439333134.roa (hash: sRa1nQRwMq2SdKXmWPoNTC7jHzNAd1RDfN7lVB2hLEY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/FA86E23853549D2EF1D9F9C9222147A550E36A38.crl rsync://repo-rpki.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/FA86E23853549D2EF1D9F9C9222147A550E36A38.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA86E23853549D2EF1D9F9C9222147A550E36A38.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:39:dc:03:27:98:03:96:93:9b:bd:5f:b2:4d:57:d1:4c:0c:16:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA86E23853549D2EF1D9F9C9222147A550E36A38 Validity Not Before: Apr 25 04:05:42 2025 GMT Not After : Apr 28 10:14:42 2025 GMT Subject: CN=44C7B92F17C85B932B7FBC61600736E492CD660F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2a:b0:20:2d:e8:0e:98:f5:bf:b5:e2:4d:3f: 99:97:71:fa:41:c9:2f:f1:ce:d1:08:72:3d:32:42: 4c:e7:35:56:2b:e4:a1:b0:61:0b:e0:b5:35:33:fe: 78:23:c6:e1:9f:74:c7:1e:0a:c4:b8:7e:c9:33:e8: 52:f9:43:7f:50:66:f7:e4:a7:cc:21:91:47:ce:58: bf:65:10:82:85:55:f2:91:7c:b9:74:3b:5e:d2:f9: 6a:ed:1e:6d:10:1a:1c:fb:7c:16:3b:4a:76:08:e6: cd:89:45:4e:71:5d:37:82:00:cf:a9:73:89:60:4a: 85:41:6f:cf:70:43:3f:7a:71:42:eb:0d:74:7a:e7: d6:40:01:e1:a0:86:95:95:e5:08:7a:bf:b1:b0:ce: e9:0f:f1:61:05:74:83:98:a9:1f:c5:df:4f:d7:3f: a9:73:7e:9e:45:ac:d7:92:d0:90:a7:08:93:88:4c: b9:73:db:86:fb:43:48:c5:53:f2:07:54:91:8d:2e: 82:98:94:46:7d:4f:29:f0:2a:51:07:0e:5d:16:52: 6b:73:9a:fe:d3:29:aa:b5:d5:74:f7:35:29:50:1f: 5d:a1:07:da:82:ae:c0:c5:51:8c:a9:e1:b7:2e:b8: c0:81:37:a1:c8:a4:85:8e:45:12:8a:ab:9f:3a:32: 52:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:C7:B9:2F:17:C8:5B:93:2B:7F:BC:61:60:07:36:E4:92:CD:66:0F X509v3 Authority Key Identifier: keyid:FA:86:E2:38:53:54:9D:2E:F1:D9:F9:C9:22:21:47:A5:50:E3:6A:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/FA86E23853549D2EF1D9F9C9222147A550E36A38.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA86E23853549D2EF1D9F9C9222147A550E36A38.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/FA86E23853549D2EF1D9F9C9222147A550E36A38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:73:93:f4:ea:12:95:24:cc:98:01:14:b1:6c:cb:cb:30:13: 88:ef:55:60:45:9e:82:0d:4c:0f:90:62:a0:8b:6e:fb:dc:2a: 37:cf:14:70:7c:26:49:c5:e4:9b:d9:84:b3:8f:1a:ec:31:24: 8d:80:6b:f2:4b:da:92:a6:89:6c:5d:ee:c5:a8:56:b1:76:6e: e0:e2:f9:0c:71:41:41:54:c5:87:2e:27:82:1e:39:ed:1a:fd: d9:45:e1:0c:01:2f:1e:db:b7:a3:05:83:47:ed:e2:50:28:20: 88:0a:fe:a1:54:fe:a9:7d:1a:d7:ec:7b:5c:19:da:04:ef:2a: e1:e1:ee:4e:76:dd:ee:92:8c:eb:97:92:c5:62:d5:6f:76:fa: 52:26:8c:e5:01:d1:c9:7b:1a:22:7d:f0:0c:45:c5:0c:af:44: d7:60:fb:5a:c9:82:c1:29:26:16:05:c8:9c:94:e4:48:32:bd: 93:06:d0:b9:db:a6:2c:46:48:7a:97:84:ad:f9:76:fb:71:30: 83:2d:a6:9e:c9:e8:bb:15:b8:08:23:44:86:f0:6b:57:06:57: de:34:7d:bb:6b:24:bc:1c:2b:b8:39:ce:4a:18:a7:72:99:6f: 29:d3:61:90:63:09:e8:28:7c:58:cf:71:5a:f9:17:af:fc:61: 10:05:15:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaDncAyeYA5aTm71fsk1X0UwMFpIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE4NkUyMzg1MzU0OUQyRUYxRDlGOUM5MjIyMTQ3QTU1 MEUzNkEzODAeFw0yNTA0MjUwNDA1NDJaFw0yNTA0MjgxMDE0NDJaMDMxMTAvBgNV BAMTKDQ0QzdCOTJGMTdDODVCOTMyQjdGQkM2MTYwMDczNkU0OTJDRDY2MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3KrAgLegOmPW/teJNP5mXcfpB yS/xztEIcj0yQkznNVYr5KGwYQvgtTUz/ngjxuGfdMceCsS4fskz6FL5Q39QZvfk p8whkUfOWL9lEIKFVfKRfLl0O17S+WrtHm0QGhz7fBY7SnYI5s2JRU5xXTeCAM+p c4lgSoVBb89wQz96cULrDXR659ZAAeGghpWV5Qh6v7GwzukP8WEFdIOYqR/F30/X P6lzfp5FrNeS0JCnCJOITLlz24b7Q0jFU/IHVJGNLoKYlEZ9TynwKlEHDl0WUmtz mv7TKaq11XT3NSlQH12hB9qCrsDFUYyp4bcuuMCBN6HIpIWORRKKq586MlJrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURMe5LxfIW5Mrf7xhYAc25JLNZg8wHwYDVR0j BBgwFoAU+obiOFNUnS7x2fnJIiFHpVDjajgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NTA0NzkzYy1jMjA5LTQ2OWEtOGUzYy1lYjNmNWE4Mzg2M2YvMC9GQTg2RTIzODUz NTQ5RDJFRjFEOUY5QzkyMjIxNDdBNTUwRTM2QTM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkE4NkUyMzg1MzU0OUQyRUYxRDlGOUM5MjIyMTQ3QTU1MEUz NkEzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTUwNDc5M2MtYzIwOS00NjlhLThl M2MtZWIzZjVhODM4NjNmLzAvRkE4NkUyMzg1MzU0OUQyRUYxRDlGOUM5MjIyMTQ3 QTU1MEUzNkEzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA9zk/TqEpUkzJgBFLFsy8swE4jvVWBFnoIN TA+QYqCLbvvcKjfPFHB8JknF5JvZhLOPGuwxJI2Aa/JL2pKmiWxd7sWoVrF2buDi +QxxQUFUxYcuJ4IeOe0a/dlF4QwBLx7bt6MFg0ft4lAoIIgK/qFU/ql9Gtfse1wZ 2gTvKuHh7k523e6SjOuXksVi1W92+lImjOUB0cl7GiJ98AxFxQyvRNdg+1rJgsEp JhYFyJyU5EgyvZMG0LnbpixGSHqXhK35dvtxMIMtpp7J6LsVuAgjRIbwa1cGV940 fbtrJLwcK7g5zkoYp3KZbynTYZBjCegofFjPcVr5F6/8YRAFFaw= -----END CERTIFICATE-----Generated at Fri Apr 25 06:02:24 2025 by rpki-client on console.sobornost.net