$ rpki-client -vvf repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft File: BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft (raw, json) Hash identifier: gulT/ityrui1jqZWCD8IdNLkup+haChFWeQfZ9QfFt0= Subject key identifier: E8:0B:E9:D6:0F:D6:B0:00:B8:9A:AD:DE:3B:88:C9:71:79:1E:C1:D1 Authority key identifier: BB:9F:73:96:40:FA:A3:D9:05:27:D7:B5:7D:2D:1D:99:93:A4:2B:D1 Certificate issuer: /CN=BB9F739640FAA3D90527D7B57D2D1D9993A42BD1 Certificate serial: 652E961300131BB686B42878442EC64A291D9428 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft Manifest number: 0191 Signing time: Thu 24 Apr 2025 14:10:51 +0000 Manifest this update: Thu 24 Apr 2025 14:05:51 +0000 Manifest next update: Sun 27 Apr 2025 20:55:51 +0000 Files and hashes: 1: BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.crl (hash: e1JkkE/ABeJcc6yTf8aZX0Bm66jWG71vPFF9L2rjrxQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.crl rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 17:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:2e:96:13:00:13:1b:b6:86:b4:28:78:44:2e:c6:4a:29:1d:94:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB9F739640FAA3D90527D7B57D2D1D9993A42BD1 Validity Not Before: Apr 24 14:05:51 2025 GMT Not After : Apr 27 20:55:51 2025 GMT Subject: CN=E80BE9D60FD6B000B89AADDE3B88C971791EC1D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:09:40:16:95:77:56:a4:a6:46:57:ca:f0:89: 79:db:49:45:fe:a6:ef:91:9e:dd:4a:14:fa:f8:47: df:46:ef:ca:72:88:0b:5e:e5:55:d4:dc:04:dc:4a: 54:3d:c6:a0:b9:2c:ea:73:84:aa:1f:48:26:60:fc: 61:04:32:7b:25:15:e8:fe:8f:df:54:98:82:c8:e4: eb:12:da:58:e4:05:02:77:dc:1e:82:5b:05:f3:b9: 16:d5:4b:57:72:eb:e7:51:bb:33:25:d3:89:a9:67: cb:9e:c3:b0:7c:ac:61:89:89:97:c9:73:7c:5c:18: ba:08:d0:09:a0:b6:c2:1c:37:8f:15:13:98:62:2e: 5c:8c:5e:2c:fc:8a:d5:04:30:a8:b5:24:e1:d6:b2: ab:93:54:c9:af:16:08:cb:19:93:de:14:18:84:2a: 8e:4f:97:86:b5:29:cf:c1:d8:98:36:3f:38:68:82: 64:4b:df:bf:80:0f:c0:7d:66:6b:d5:48:37:a3:fc: 51:8c:9c:2e:bb:fe:76:d0:2a:33:89:84:7d:cc:62: 4b:e0:51:ff:4e:94:82:ac:4f:e8:26:98:f5:73:1c: 00:03:b2:40:e9:87:86:8c:20:a1:85:95:a9:dc:f2: 85:c4:29:e9:62:b1:17:52:90:a7:73:a3:4d:2c:09: 13:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:0B:E9:D6:0F:D6:B0:00:B8:9A:AD:DE:3B:88:C9:71:79:1E:C1:D1 X509v3 Authority Key Identifier: keyid:BB:9F:73:96:40:FA:A3:D9:05:27:D7:B5:7D:2D:1D:99:93:A4:2B:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:fa:4f:7e:5c:3f:7b:16:31:71:fb:89:97:9e:f4:21:9f:54: 38:64:38:c7:1d:35:04:05:6a:2b:15:d9:e1:cf:6e:df:38:f7: 48:e4:bc:a1:2b:ce:d6:33:61:a1:68:19:37:23:cc:21:7d:44: 89:e7:eb:91:30:0c:35:2c:ae:2a:6f:ce:15:35:21:0c:8a:f3: dc:b9:f3:89:18:e6:28:d6:2e:a1:b0:20:10:66:05:87:cc:6d: 52:d3:e0:fa:c5:74:55:37:16:61:3d:7b:73:05:7f:ca:56:d8: f8:db:c3:d1:d1:8e:b8:8f:7e:4b:c5:43:23:9c:45:4f:d8:17: 4a:35:f8:bd:83:16:2c:54:d8:dd:46:d8:f4:00:62:38:f0:af: 0b:fa:48:0b:0f:fe:9c:22:c1:83:4e:73:41:fd:6e:c7:ca:18: 43:d3:ce:5a:42:1a:a6:39:68:48:ff:11:62:f2:1c:b0:6b:7d: 5a:22:8c:d9:8a:33:87:c8:34:c6:78:e3:3a:e8:79:9b:14:1f: 33:bf:67:c3:05:68:46:b6:8b:a3:2e:4e:e5:24:0c:e7:bf:be: 13:09:aa:a1:d2:45:d8:8f:12:7c:8a:2a:4c:ba:e7:b9:30:a7: c8:e9:54:a3:45:4b:de:fb:cf:fd:85:21:51:28:86:37:f9:eb: d9:ed:19:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZS6WEwATG7aGtCh4RC7GSikdlCgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI5RjczOTY0MEZBQTNEOTA1MjdEN0I1N0QyRDFEOTk5 M0E0MkJEMTAeFw0yNTA0MjQxNDA1NTFaFw0yNTA0MjcyMDU1NTFaMDMxMTAvBgNV BAMTKEU4MEJFOUQ2MEZENkIwMDBCODlBQURERTNCODhDOTcxNzkxRUMxRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDACUAWlXdWpKZGV8rwiXnbSUX+ pu+Rnt1KFPr4R99G78pyiAte5VXU3ATcSlQ9xqC5LOpzhKofSCZg/GEEMnslFej+ j99UmILI5OsS2ljkBQJ33B6CWwXzuRbVS1dy6+dRuzMl04mpZ8uew7B8rGGJiZfJ c3xcGLoI0AmgtsIcN48VE5hiLlyMXiz8itUEMKi1JOHWsquTVMmvFgjLGZPeFBiE Ko5Pl4a1Kc/B2Jg2PzhogmRL37+AD8B9ZmvVSDej/FGMnC67/nbQKjOJhH3MYkvg Uf9OlIKsT+gmmPVzHAADskDph4aMIKGFlanc8oXEKelisRdSkKdzo00sCRNNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6Avp1g/WsAC4mq3eO4jJcXkewdEwHwYDVR0j BBgwFoAUu59zlkD6o9kFJ9e1fS0dmZOkK9EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MmIzMGYxNi1lODc2LTQ4Y2ItOTM2Yi03MDJjMzA1NTExM2QvMC9CQjlGNzM5NjQw RkFBM0Q5MDUyN0Q3QjU3RDJEMUQ5OTkzQTQyQkQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkI5RjczOTY0MEZBQTNEOTA1MjdEN0I1N0QyRDFEOTk5M0E0 MkJEMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjJiMzBmMTYtZTg3Ni00OGNiLTkz NmItNzAyYzMwNTUxMTNkLzAvQkI5RjczOTY0MEZBQTNEOTA1MjdEN0I1N0QyRDFE OTk5M0E0MkJEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGD6T35cP3sWMXH7iZee9CGfVDhkOMcdNQQF aisV2eHPbt8490jkvKErztYzYaFoGTcjzCF9RInn65EwDDUsripvzhU1IQyK89y5 84kY5ijWLqGwIBBmBYfMbVLT4PrFdFU3FmE9e3MFf8pW2Pjbw9HRjriPfkvFQyOc RU/YF0o1+L2DFixU2N1G2PQAYjjwrwv6SAsP/pwiwYNOc0H9bsfKGEPTzlpCGqY5 aEj/EWLyHLBrfVoijNmKM4fINMZ44zroeZsUHzO/Z8MFaEa2i6MuTuUkDOe/vhMJ qqHSRdiPEnyKKky657kwp8jpVKNFS977z/2FIVEohjf569ntGfA= -----END CERTIFICATE-----Generated at Thu Apr 24 15:50:16 2025 by rpki-client on console.sobornost.net