$ rpki-client -vvf repo-rpki.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/0A1DE6FD88BB9EF4E349C1774DA926E423264796.mft File: 0A1DE6FD88BB9EF4E349C1774DA926E423264796.mft (raw, json) Hash identifier: Qn6tqDjZaZjuYt2Nnyo4/7LDQ2TjMginA/SR+zZAdUI= Subject key identifier: 93:A4:53:A4:58:F5:FB:DB:AD:9F:25:6A:57:8C:AD:9B:39:66:D3:CD Authority key identifier: 0A:1D:E6:FD:88:BB:9E:F4:E3:49:C1:77:4D:A9:26:E4:23:26:47:96 Certificate issuer: /CN=0A1DE6FD88BB9EF4E349C1774DA926E423264796 Certificate serial: 1B6C85E3F5B67DF8847F36EECE0A501C3319B2C3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DE6FD88BB9EF4E349C1774DA926E423264796.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/0A1DE6FD88BB9EF4E349C1774DA926E423264796.mft Manifest number: 04CA Signing time: Fri 25 Apr 2025 13:02:05 +0000 Manifest this update: Fri 25 Apr 2025 12:57:05 +0000 Manifest next update: Mon 28 Apr 2025 13:05:05 +0000 Files and hashes: 1: 323030313a6466343a343938303a3a2f34382d3438203d3e20313430343633.roa (hash: UZS06JVCHJquB9MDcVVKyhbpAEHHB93htblC2PYxKYk=) 2: 3130332e3135332e3133312e302f32342d3234203d3e20313430343633.roa (hash: Z1HM4GcTx4KcKCpM72/PPyVhWETpNnJYgpZsqohktAo=) 3: 0A1DE6FD88BB9EF4E349C1774DA926E423264796.crl (hash: fz+PzK4rlbygCBsQZmmAwARvbW62IjyOhkLR1cPUWQo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/0A1DE6FD88BB9EF4E349C1774DA926E423264796.crl rsync://repo-rpki.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/0A1DE6FD88BB9EF4E349C1774DA926E423264796.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DE6FD88BB9EF4E349C1774DA926E423264796.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 13:05:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:6c:85:e3:f5:b6:7d:f8:84:7f:36:ee:ce:0a:50:1c:33:19:b2:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A1DE6FD88BB9EF4E349C1774DA926E423264796 Validity Not Before: Apr 25 12:57:05 2025 GMT Not After : Apr 28 13:05:05 2025 GMT Subject: CN=93A453A458F5FBDBAD9F256A578CAD9B3966D3CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:97:f2:31:02:cd:cc:e5:5a:eb:80:90:2e:29: d4:8f:bc:c5:3f:8a:cf:be:de:fc:af:c6:19:d2:f6: 84:d8:5c:9e:42:41:b3:0a:e9:cb:b2:c5:8f:43:ed: 2a:8d:57:bc:b9:ed:30:c7:3c:88:64:58:26:9e:e4: b2:40:3c:b4:4d:0b:3a:18:61:8f:bf:31:87:65:a7: 14:20:fe:ea:73:b2:bd:57:bc:36:66:24:68:28:93: 93:7c:66:05:92:39:c0:53:87:ec:1b:5f:3b:ee:b6: 8d:3d:13:28:e8:19:80:0f:73:74:39:f5:d5:f1:bb: 1c:d9:32:82:29:4c:fa:e9:22:b0:40:6e:5d:51:74: b2:31:b9:d7:17:cf:5c:95:58:44:5c:20:70:c0:55: 9c:8a:f8:f6:84:f4:dd:bf:a9:8a:97:c0:93:15:78: 48:93:a1:d2:b2:a3:7c:dc:e9:a0:60:0d:ef:d9:d0: c4:44:41:8e:0f:f9:f9:e2:6d:00:7b:61:ce:ad:35: cd:01:8a:d2:b2:77:ea:f2:66:4d:62:14:4e:ff:d3: 29:71:bb:1b:4d:48:64:63:03:f6:3e:19:be:1a:8d: 70:6c:87:82:42:d9:df:c5:c1:8d:bb:c5:6f:bd:d1: 3d:20:31:cd:02:15:a1:bd:5c:fb:20:1c:e0:22:ef: 43:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:A4:53:A4:58:F5:FB:DB:AD:9F:25:6A:57:8C:AD:9B:39:66:D3:CD X509v3 Authority Key Identifier: keyid:0A:1D:E6:FD:88:BB:9E:F4:E3:49:C1:77:4D:A9:26:E4:23:26:47:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/0A1DE6FD88BB9EF4E349C1774DA926E423264796.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DE6FD88BB9EF4E349C1774DA926E423264796.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/0A1DE6FD88BB9EF4E349C1774DA926E423264796.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:fe:e5:64:8d:a6:3e:ba:c6:2f:5f:d2:dd:8e:a1:50:f3:7c: 62:f2:0e:58:b3:4e:8f:4d:58:08:9f:47:4b:67:82:1d:bc:45: fa:4e:19:b4:a4:26:a7:d5:ed:28:6e:6d:b7:d2:09:a1:d9:c7: 56:84:3b:32:ac:03:c0:f7:06:17:d4:17:f8:95:66:2d:f2:7e: 42:0e:dc:21:06:c9:86:1f:9d:21:bc:fe:4f:d9:07:e1:3e:f8: ec:02:3d:83:ab:b9:7c:46:46:91:ba:f7:99:b6:4d:6b:ff:20: 8c:09:58:51:4e:0c:db:62:98:8e:82:47:87:9b:73:cf:d6:eb: c0:f3:c6:d9:aa:d3:63:f3:37:3c:87:7e:73:4e:91:dd:ae:46: a6:eb:40:b8:8d:c0:bf:5f:18:e2:53:47:99:18:da:30:09:ab: 46:4c:bb:b7:22:60:21:7c:43:cc:25:c0:84:88:4d:84:41:6d: b6:cc:6a:9b:b3:a3:f4:4a:64:a0:fc:b6:31:1f:b3:5d:80:78: d6:63:e4:88:19:8a:a7:c8:c0:ee:ac:3e:0d:d9:85:09:d5:58: 24:4a:90:bd:f7:4f:10:cf:55:e1:d9:8d:e1:db:02:ad:ff:56: 9c:a7:a3:77:43:f6:54:ab:29:92:73:72:e4:1c:26:4f:13:2b: 6a:b8:d9:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG2yF4/W2ffiEfzbuzgpQHDMZssMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEExREU2RkQ4OEJCOUVGNEUzNDlDMTc3NERBOTI2RTQy MzI2NDc5NjAeFw0yNTA0MjUxMjU3MDVaFw0yNTA0MjgxMzA1MDVaMDMxMTAvBgNV BAMTKDkzQTQ1M0E0NThGNUZCREJBRDlGMjU2QTU3OENBRDlCMzk2NkQzQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7l/IxAs3M5VrrgJAuKdSPvMU/ is++3vyvxhnS9oTYXJ5CQbMK6cuyxY9D7SqNV7y57TDHPIhkWCae5LJAPLRNCzoY YY+/MYdlpxQg/upzsr1XvDZmJGgok5N8ZgWSOcBTh+wbXzvuto09EyjoGYAPc3Q5 9dXxuxzZMoIpTPrpIrBAbl1RdLIxudcXz1yVWERcIHDAVZyK+PaE9N2/qYqXwJMV eEiTodKyo3zc6aBgDe/Z0MREQY4P+fnibQB7Yc6tNc0BitKyd+ryZk1iFE7/0ylx uxtNSGRjA/Y+Gb4ajXBsh4JC2d/FwY27xW+90T0gMc0CFaG9XPsgHOAi70NfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk6RTpFj1+9utnyVqV4ytmzlm080wHwYDVR0j BBgwFoAUCh3m/Yi7nvTjScF3Takm5CMmR5YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTFlMGJkNy0yODFhLTRlYmEtYjk4Yy04MjkzOTMyN2RkZDcvMC8wQTFERTZGRDg4 QkI5RUY0RTM0OUMxNzc0REE5MjZFNDIzMjY0Nzk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEExREU2RkQ4OEJCOUVGNEUzNDlDMTc3NERBOTI2RTQyMzI2 NDc5Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWExZTBiZDctMjgxYS00ZWJhLWI5 OGMtODI5MzkzMjdkZGQ3LzAvMEExREU2RkQ4OEJCOUVGNEUzNDlDMTc3NERBOTI2 RTQyMzI2NDc5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB/+5WSNpj66xi9f0t2OoVDzfGLyDlizTo9N WAifR0tngh28RfpOGbSkJqfV7ShubbfSCaHZx1aEOzKsA8D3BhfUF/iVZi3yfkIO 3CEGyYYfnSG8/k/ZB+E++OwCPYOruXxGRpG695m2TWv/IIwJWFFODNtimI6CR4eb c8/W68Dzxtmq02PzNzyHfnNOkd2uRqbrQLiNwL9fGOJTR5kY2jAJq0ZMu7ciYCF8 Q8wlwISITYRBbbbMapuzo/RKZKD8tjEfs12AeNZj5IgZiqfIwO6sPg3ZhQnVWCRK kL33TxDPVeHZjeHbAq3/Vpyno3dD9lSrKZJzcuQcJk8TK2q42Wk= -----END CERTIFICATE-----Generated at Fri Apr 25 17:12:03 2025 by rpki-client on console.sobornost.net