$ rpki-client -vvf repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.mft File: B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.mft (raw, json) Hash identifier: O/KJ7ZpjU7VFuWc239zMOIXlwF+05n67F6SYLMre//s= Subject key identifier: 6F:D8:06:39:E2:F2:75:EE:B9:6D:2C:68:5C:B1:B4:2E:8D:ED:A8:E2 Authority key identifier: B5:8E:67:4F:E8:3A:74:66:7F:EF:1B:69:A0:7E:AA:FA:02:B2:AC:A2 Certificate issuer: /CN=B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2 Certificate serial: 687F4D91DE21FD1D95BA363EE721C2551CED0150 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.mft Manifest number: 01F7 Signing time: Wed 23 Apr 2025 20:00:03 +0000 Manifest this update: Wed 23 Apr 2025 19:55:03 +0000 Manifest next update: Sun 27 Apr 2025 03:17:03 +0000 Files and hashes: 1: B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.crl (hash: aJo99xe3umwxmCW0VIsTXHLlcui66HnDavmjtdXOmVw=) 2: 3130332e3131362e3136382e302f32342d3234203d3e20313337333731.roa (hash: gC29j+yO4i7uQ2lQ5TlSgcpEgKWPrlDicf9vHKUSroM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.crl rsync://repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 02:40:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:7f:4d:91:de:21:fd:1d:95:ba:36:3e:e7:21:c2:55:1c:ed:01:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2 Validity Not Before: Apr 23 19:55:03 2025 GMT Not After : Apr 27 03:17:03 2025 GMT Subject: CN=6FD80639E2F275EEB96D2C685CB1B42E8DEDA8E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:71:ce:b4:26:a9:66:94:2d:0d:9e:ea:69:dc: 57:df:2f:55:75:2e:9a:cb:50:fc:ce:ab:fb:2d:63: cc:a8:1c:87:7c:c0:d3:06:9a:52:27:94:a4:69:f3: 27:a2:e8:0d:b0:f3:79:38:bc:08:2a:df:99:24:a0: cc:7c:21:88:b0:17:fd:d2:09:ea:51:66:d2:85:52: ba:45:a7:b3:ff:c6:46:bb:a8:b8:ea:73:9c:b5:22: 1c:8a:e6:a4:f9:45:ab:f4:62:95:a2:ce:5c:da:be: 6e:a5:af:fa:05:39:06:51:ce:f0:32:67:58:b8:bb: ab:b4:3f:bf:03:7b:f1:ef:55:6a:d4:61:e5:48:7d: 96:7d:14:0b:b2:37:ec:45:9b:50:b9:7a:4d:a1:fe: 34:f0:e4:50:49:be:31:6f:da:e8:86:22:9b:fc:39: 39:fc:90:60:8a:b4:91:0c:38:10:82:69:24:57:11: 3e:e4:2c:92:26:84:3d:bd:58:00:81:18:d7:05:93: 96:9e:6c:d6:6d:f4:cc:2e:f6:c9:17:68:f3:b0:fc: 86:3b:9c:71:74:cd:50:22:78:ac:81:f7:3c:97:09: df:26:cf:df:78:bd:10:66:2e:43:d9:66:9c:82:23: bd:ba:ac:73:4e:e5:93:18:28:82:c8:10:74:fa:49: 3e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:D8:06:39:E2:F2:75:EE:B9:6D:2C:68:5C:B1:B4:2E:8D:ED:A8:E2 X509v3 Authority Key Identifier: keyid:B5:8E:67:4F:E8:3A:74:66:7F:EF:1B:69:A0:7E:AA:FA:02:B2:AC:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:f3:e5:81:a5:24:9c:b0:c2:93:74:6c:a5:97:52:c5:69:66: 33:94:51:58:b1:fe:f9:3b:14:46:ee:3d:e4:a8:e6:fb:13:e7: c4:ba:a5:25:ee:49:cd:69:b1:a8:d4:6f:4e:8f:99:59:e2:86: eb:a6:d9:10:54:1b:3d:a8:5d:e0:9a:c5:7b:5b:0b:11:a5:ea: de:22:9e:57:7c:ba:c1:25:c6:f5:42:83:3b:d8:1d:98:82:17: 22:38:59:6d:7a:b0:2b:76:6b:23:c6:71:d0:f5:1e:d4:4a:96: f2:da:12:f5:61:31:5c:90:4c:de:47:af:f0:73:82:50:4f:f3: 88:d9:8d:41:87:33:ce:52:15:e3:e5:b4:c5:db:69:48:1b:77: 2b:5b:db:17:e0:54:e9:23:d6:83:ee:8b:2d:d7:79:0a:7d:9f: 96:18:f4:a6:60:4e:ca:3a:cb:f5:a8:ae:06:6e:46:56:c6:19: 6e:b0:8c:79:76:d2:e1:2e:c6:88:fb:c4:f9:fd:ae:19:4a:be: 5e:ed:7c:6a:b1:45:1f:f0:68:79:ef:f0:4a:48:22:73:7f:21: d8:06:21:2a:0b:6f:85:2d:71:6d:37:30:77:2e:94:16:a8:31: fa:e5:7e:52:a8:fb:41:a7:a9:93:88:14:a3:82:e0:91:3b:00: 79:3e:96:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaH9Nkd4h/R2VujY+5yHCVRztAVAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU4RTY3NEZFODNBNzQ2NjdGRUYxQjY5QTA3RUFBRkEw MkIyQUNBMjAeFw0yNTA0MjMxOTU1MDNaFw0yNTA0MjcwMzE3MDNaMDMxMTAvBgNV BAMTKDZGRDgwNjM5RTJGMjc1RUVCOTZEMkM2ODVDQjFCNDJFOERFREE4RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCicc60JqlmlC0Nnupp3FffL1V1 LprLUPzOq/stY8yoHId8wNMGmlInlKRp8yei6A2w83k4vAgq35kkoMx8IYiwF/3S CepRZtKFUrpFp7P/xka7qLjqc5y1IhyK5qT5Rav0YpWizlzavm6lr/oFOQZRzvAy Z1i4u6u0P78De/HvVWrUYeVIfZZ9FAuyN+xFm1C5ek2h/jTw5FBJvjFv2uiGIpv8 OTn8kGCKtJEMOBCCaSRXET7kLJImhD29WACBGNcFk5aebNZt9Mwu9skXaPOw/IY7 nHF0zVAieKyB9zyXCd8mz994vRBmLkPZZpyCI726rHNO5ZMYKILIEHT6ST7jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb9gGOeLyde65bSxoXLG0Lo3tqOIwHwYDVR0j BBgwFoAUtY5nT+g6dGZ/7xtpoH6q+gKyrKIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MzI2ZTRjYS01NGU0LTQ4YmMtOWU3OS1hNjJlZmFlYWQwMzIvMC9CNThFNjc0RkU4 M0E3NDY2N0ZFRjFCNjlBMDdFQUFGQTAyQjJBQ0EyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjU4RTY3NEZFODNBNzQ2NjdGRUYxQjY5QTA3RUFBRkEwMkIy QUNBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjMyNmU0Y2EtNTRlNC00OGJjLTll NzktYTYyZWZhZWFkMDMyLzAvQjU4RTY3NEZFODNBNzQ2NjdGRUYxQjY5QTA3RUFB RkEwMkIyQUNBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGvz5YGlJJywwpN0bKWXUsVpZjOUUVix/vk7 FEbuPeSo5vsT58S6pSXuSc1psajUb06PmVnihuum2RBUGz2oXeCaxXtbCxGl6t4i nld8usElxvVCgzvYHZiCFyI4WW16sCt2ayPGcdD1HtRKlvLaEvVhMVyQTN5Hr/Bz glBP84jZjUGHM85SFePltMXbaUgbdytb2xfgVOkj1oPuiy3XeQp9n5YY9KZgTso6 y/WorgZuRlbGGW6wjHl20uEuxoj7xPn9rhlKvl7tfGqxRR/waHnv8EpIInN/IdgG ISoLb4UtcW03MHculBaoMfrlflKo+0GnqZOIFKOC4JE7AHk+li4= -----END CERTIFICATE-----Generated at Wed Apr 23 22:12:04 2025 by rpki-client on console.sobornost.net