$ rpki-client -vvf repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft File: 0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft (raw, json) Hash identifier: 1QAmtVyPsRqx5TTcjsRe0RRaoj/g1SxeUZeWc/tpGfE= Subject key identifier: 72:01:F3:D9:CE:A0:03:82:84:54:36:D9:54:8E:30:1A:A7:EF:C9:1D Authority key identifier: 0F:AF:A3:9A:A3:87:5A:4C:F6:3B:CF:7E:87:30:87:92:7B:49:9D:2F Certificate issuer: /CN=0FAFA39AA3875A4CF63BCF7E873087927B499D2F Certificate serial: 4E4ACECC15BA4EB8E0373C61E884F7D14F983FB5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft Manifest number: 01D3 Signing time: Thu 24 Apr 2025 05:11:11 +0000 Manifest this update: Thu 24 Apr 2025 05:06:11 +0000 Manifest next update: Sun 27 Apr 2025 11:42:11 +0000 Files and hashes: 1: 323030313a6466313a326430303a3a2f34382d3438203d3e20313336313132.roa (hash: uiZFjhvQ9ciRjJRK7vZMZHXsl+bdrRUmgcpl6MwjW4M=) 2: 0FAFA39AA3875A4CF63BCF7E873087927B499D2F.crl (hash: CshYxzXctqYeHhWLVqJSOITVN9RQhBOPi6PKrk5caC8=) 3: 3130332e39322e3233322e302f32332d3233203d3e20313336313132.roa (hash: 5yT7jld1qwMjQ1Wxg8xXgEk9H98NQ/9bvOuTLpVK3wE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.crl rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 08:44:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:4a:ce:cc:15:ba:4e:b8:e0:37:3c:61:e8:84:f7:d1:4f:98:3f:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FAFA39AA3875A4CF63BCF7E873087927B499D2F Validity Not Before: Apr 24 05:06:11 2025 GMT Not After : Apr 27 11:42:11 2025 GMT Subject: CN=7201F3D9CEA00382845436D9548E301AA7EFC91D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f2:0a:c5:cd:02:45:65:93:01:26:d3:db:60: 55:f3:69:23:4d:1d:8c:69:81:f0:cc:f0:3e:97:1b: 10:60:96:5a:0e:88:85:19:fc:f3:32:7b:0d:1d:36: a8:ef:8e:d2:0b:c9:f1:ed:16:24:de:5d:4b:bf:62: 57:dc:f9:f2:56:48:32:fe:22:35:e9:54:5b:3a:4f: 55:65:e9:df:cb:d4:eb:78:bc:ce:7a:40:46:42:dc: ef:64:d8:82:33:89:1a:8d:20:c9:b4:a7:4d:7c:6f: 44:73:10:7c:2c:10:33:d5:70:ed:fc:e3:34:b5:0f: 9a:df:a9:b0:27:b9:a7:a2:35:59:c0:8e:ab:53:ff: 89:83:ab:92:dd:5c:a6:f9:58:00:d5:81:73:9c:f4: 80:fa:4a:eb:d7:a3:1c:9d:d5:96:4e:74:e3:2e:d7: 18:79:7e:b4:a6:c7:d8:6a:d7:6a:c6:27:4b:09:cd: 7f:e3:60:60:88:30:77:59:a9:eb:02:6a:78:f5:10: 4a:02:b0:a8:f1:87:ea:73:32:08:b9:14:53:a7:a3: b1:11:ad:a5:6e:70:0a:07:69:6e:10:9c:4e:4a:30: f9:81:b9:83:db:cd:56:49:be:83:c1:21:2b:e7:2a: af:9f:cd:eb:ca:82:36:32:25:68:03:55:22:49:22: ba:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:01:F3:D9:CE:A0:03:82:84:54:36:D9:54:8E:30:1A:A7:EF:C9:1D X509v3 Authority Key Identifier: keyid:0F:AF:A3:9A:A3:87:5A:4C:F6:3B:CF:7E:87:30:87:92:7B:49:9D:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:d7:22:3f:e9:da:a4:f5:98:59:e3:16:9a:c9:19:19:e0:07: 48:99:36:70:4a:90:07:dc:b8:b7:b2:0d:a0:c5:44:20:7c:6e: db:48:81:b4:72:31:a3:0e:16:f5:f0:e8:56:b8:ef:cf:1d:8d: b4:c4:11:a9:6a:e1:61:70:b8:83:be:90:3f:d4:5d:55:fa:5c: 01:08:10:7f:1b:b7:83:be:a4:74:86:b6:27:5f:6e:a5:dc:ab: 36:ca:29:83:fc:d5:b9:ec:3f:a7:62:07:1b:5b:8d:6b:6d:ab: 37:4b:de:ba:c7:a6:72:ab:fe:fc:a5:74:5b:ad:59:87:a5:d0: 82:82:fb:09:c6:e2:df:52:ad:b0:22:cf:d9:02:80:3c:60:81: f3:75:79:3e:14:4a:5a:0c:d8:09:9b:74:75:36:72:9a:e7:12: 55:52:6c:39:9a:99:1b:2a:7f:b1:90:19:a4:4d:9a:62:e3:b9: c3:52:b1:01:44:24:09:45:28:35:cc:81:02:d8:71:c8:5e:d6: 74:fe:13:e3:f7:ca:0e:6b:7b:16:e1:88:ce:4c:b6:8e:7c:7c: ca:c1:65:01:90:2e:78:7c:e3:c2:e1:fb:d0:9e:e3:cc:c4:c2: 8e:8f:e5:03:aa:f5:96:3f:8b:b9:9c:db:6b:34:2f:75:51:4e: 77:54:aa:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTkrOzBW6TrjgNzxh6IT30U+YP7UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZBRkEzOUFBMzg3NUE0Q0Y2M0JDRjdFODczMDg3OTI3 QjQ5OUQyRjAeFw0yNTA0MjQwNTA2MTFaFw0yNTA0MjcxMTQyMTFaMDMxMTAvBgNV BAMTKDcyMDFGM0Q5Q0VBMDAzODI4NDU0MzZEOTU0OEUzMDFBQTdFRkM5MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE8grFzQJFZZMBJtPbYFXzaSNN HYxpgfDM8D6XGxBglloOiIUZ/PMyew0dNqjvjtILyfHtFiTeXUu/Ylfc+fJWSDL+ IjXpVFs6T1Vl6d/L1Ot4vM56QEZC3O9k2IIziRqNIMm0p018b0RzEHwsEDPVcO38 4zS1D5rfqbAnuaeiNVnAjqtT/4mDq5LdXKb5WADVgXOc9ID6SuvXoxyd1ZZOdOMu 1xh5frSmx9hq12rGJ0sJzX/jYGCIMHdZqesCanj1EEoCsKjxh+pzMgi5FFOno7ER raVucAoHaW4QnE5KMPmBuYPbzVZJvoPBISvnKq+fzevKgjYyJWgDVSJJIrqVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcgHz2c6gA4KEVDbZVI4wGqfvyR0wHwYDVR0j BBgwFoAUD6+jmqOHWkz2O89+hzCHkntJnS8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MGUxMWZmYy1lNzVhLTRiZjQtODQ0OC1jNjhlMjAzMzVlZTgvMC8wRkFGQTM5QUEz ODc1QTRDRjYzQkNGN0U4NzMwODc5MjdCNDk5RDJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEZBRkEzOUFBMzg3NUE0Q0Y2M0JDRjdFODczMDg3OTI3QjQ5 OUQyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjBlMTFmZmMtZTc1YS00YmY0LTg0 NDgtYzY4ZTIwMzM1ZWU4LzAvMEZBRkEzOUFBMzg3NUE0Q0Y2M0JDRjdFODczMDg3 OTI3QjQ5OUQyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD7XIj/p2qT1mFnjFprJGRngB0iZNnBKkAfc uLeyDaDFRCB8bttIgbRyMaMOFvXw6Fa4788djbTEEalq4WFwuIO+kD/UXVX6XAEI EH8bt4O+pHSGtidfbqXcqzbKKYP81bnsP6diBxtbjWttqzdL3rrHpnKr/vyldFut WYel0IKC+wnG4t9SrbAiz9kCgDxggfN1eT4USloM2AmbdHU2cprnElVSbDmamRsq f7GQGaRNmmLjucNSsQFEJAlFKDXMgQLYcche1nT+E+P3yg5rexbhiM5Mto58fMrB ZQGQLnh848Lh+9Ce48zEwo6P5QOq9ZY/i7mc22s0L3VRTndUqqs= -----END CERTIFICATE-----Generated at Thu Apr 24 06:50:03 2025 by rpki-client on console.sobornost.net