$ rpki-client -vvf repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft File: BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft (raw, json) Hash identifier: 2WgEo+4/SVqVMZhHDmL2ZA+g9daRtNxioSn3hjS7zqE= Subject key identifier: 8A:6F:99:C8:76:3F:74:E8:EB:68:09:C5:26:00:38:D9:97:F6:17:8D Authority key identifier: BC:8B:D5:48:5C:9B:01:D1:76:F3:FA:A8:F3:81:E5:EC:ED:8C:D3:B8 Certificate issuer: /CN=BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8 Certificate serial: 4F2BF7B0A5AA2C258D5808010F07FD7BA9DE2837 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft Manifest number: 01CA Signing time: Thu 24 Apr 2025 09:20:36 +0000 Manifest this update: Thu 24 Apr 2025 09:15:36 +0000 Manifest next update: Sun 27 Apr 2025 11:14:36 +0000 Files and hashes: 1: 3130332e37332e3139322e302f32342d3234203d3e20313439393434.roa (hash: kygHr26DqsY5AyJfGENb/AiH0P8fZ+v+8xcM4ekCjqw=) 2: BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.crl (hash: 1PZSJG8OsRrWoF7RQOKYrw7fNSlhJmt3Y1bfKaMkbho=) 3: 3130332e37332e3139332e302f32342d3234203d3e20313439393434.roa (hash: lkOBGNn2AJWIi+TpBDjIZfkm3ctiv119XuzaX4+/4fI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.crl rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 10:42:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:2b:f7:b0:a5:aa:2c:25:8d:58:08:01:0f:07:fd:7b:a9:de:28:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8 Validity Not Before: Apr 24 09:15:36 2025 GMT Not After : Apr 27 11:14:36 2025 GMT Subject: CN=8A6F99C8763F74E8EB6809C5260038D997F6178D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9f:2b:22:63:90:73:a7:5c:c5:4c:ce:75:88: 95:91:d4:54:c6:da:75:85:6a:d1:7d:5b:41:09:39: 30:56:9f:c1:fc:90:1d:f2:2f:c7:aa:b4:e4:67:b5: 34:89:5a:63:8a:49:97:1a:0d:c5:09:0f:f0:70:0e: 39:36:89:17:cc:53:bc:69:d7:8d:6e:ec:b4:c6:22: bb:cf:44:b2:52:e3:66:e5:2d:2e:5c:d3:0b:4c:bc: d3:1b:35:43:1a:40:b5:9c:7f:1e:69:62:e3:c3:5e: 4d:fb:74:07:ec:81:6a:6d:7c:f2:fb:ff:ba:0c:b7: 9e:48:58:25:3e:22:e0:8e:cd:4f:55:4b:6e:4b:7c: c6:33:eb:37:84:18:e1:8e:31:49:2f:8a:00:84:1b: 1c:ec:df:37:89:c2:54:01:4c:72:f4:b3:dc:eb:66: 8c:52:c1:2c:16:5d:8a:77:d7:8b:b6:ed:8e:7e:8e: 6d:92:5a:bc:af:ba:2c:70:e1:5d:e0:9b:67:8e:b7: ea:01:41:37:ff:7e:17:f3:e1:26:5d:9d:89:38:e0: f2:cc:36:ea:c3:f4:ad:2d:26:8f:a6:73:fc:00:15: eb:58:48:74:4e:35:a9:44:48:15:3e:10:30:1e:6c: ea:2d:22:b2:96:bb:01:43:05:69:08:55:ef:45:23: b2:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:6F:99:C8:76:3F:74:E8:EB:68:09:C5:26:00:38:D9:97:F6:17:8D X509v3 Authority Key Identifier: keyid:BC:8B:D5:48:5C:9B:01:D1:76:F3:FA:A8:F3:81:E5:EC:ED:8C:D3:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:98:ae:25:06:9b:1c:99:2a:14:c1:2d:2e:6f:54:8a:c5:a5: 24:6f:d5:b0:f8:31:d1:ba:a8:7b:71:86:15:5b:79:d4:73:fa: 68:44:5a:ed:5f:84:da:c5:cd:1a:1b:33:25:17:d3:e0:3a:f9: 6e:50:28:e0:3c:7a:7a:53:66:86:88:88:f2:40:f5:3d:bc:dd: d3:6b:cd:a1:bc:a5:ce:18:5d:26:51:77:31:11:61:ca:80:68: 58:77:89:23:9b:ad:1d:a6:9e:71:f7:c3:c8:b0:6c:44:9c:db: 7d:60:f2:5b:be:e8:29:e0:fe:28:cb:a4:9c:e0:85:7d:56:9b: 78:9c:25:b4:7e:9a:ac:12:6f:fc:92:06:0d:ac:e3:f9:1a:83: 5b:5a:17:10:d9:62:a2:2a:83:39:1c:97:f9:84:c9:ea:eb:7d: 4f:16:ec:22:c9:14:f7:b1:6f:1d:64:2d:a7:5e:b9:f1:3a:be: a8:8f:fe:d8:e2:db:c1:0e:a8:57:a5:b4:ea:c6:71:ca:ce:08: ff:f9:d2:a4:42:cd:5d:52:f2:e7:dc:0a:9b:66:11:fd:ff:f7: a9:51:8f:fa:c0:dd:ae:5a:b4:f2:66:5e:17:37:eb:70:74:e2: 29:4d:0b:8d:02:fa:20:c4:91:79:bd:d9:1c:58:d3:9e:9d:0e: c9:c2:2c:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTyv3sKWqLCWNWAgBDwf9e6neKDcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkM4QkQ1NDg1QzlCMDFEMTc2RjNGQUE4RjM4MUU1RUNF RDhDRDNCODAeFw0yNTA0MjQwOTE1MzZaFw0yNTA0MjcxMTE0MzZaMDMxMTAvBgNV BAMTKDhBNkY5OUM4NzYzRjc0RThFQjY4MDlDNTI2MDAzOEQ5OTdGNjE3OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCynysiY5Bzp1zFTM51iJWR1FTG 2nWFatF9W0EJOTBWn8H8kB3yL8eqtORntTSJWmOKSZcaDcUJD/BwDjk2iRfMU7xp 141u7LTGIrvPRLJS42blLS5c0wtMvNMbNUMaQLWcfx5pYuPDXk37dAfsgWptfPL7 /7oMt55IWCU+IuCOzU9VS25LfMYz6zeEGOGOMUkvigCEGxzs3zeJwlQBTHL0s9zr ZoxSwSwWXYp314u27Y5+jm2SWryvuixw4V3gm2eOt+oBQTf/fhfz4SZdnYk44PLM NurD9K0tJo+mc/wAFetYSHRONalESBU+EDAebOotIrKWuwFDBWkIVe9FI7IXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUim+ZyHY/dOjraAnFJgA42Zf2F40wHwYDVR0j BBgwFoAUvIvVSFybAdF28/qo84Hl7O2M07gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NzQxODAxMy0xNjc5LTQ5NmItODBmNi0yZDA1Y2M1YmU3MmYvMC9CQzhCRDU0ODVD OUIwMUQxNzZGM0ZBQThGMzgxRTVFQ0VEOENEM0I4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkM4QkQ1NDg1QzlCMDFEMTc2RjNGQUE4RjM4MUU1RUNFRDhD RDNCOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjc0MTgwMTMtMTY3OS00OTZiLTgw ZjYtMmQwNWNjNWJlNzJmLzAvQkM4QkQ1NDg1QzlCMDFEMTc2RjNGQUE4RjM4MUU1 RUNFRDhDRDNCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ2YriUGmxyZKhTBLS5vVIrFpSRv1bD4MdG6 qHtxhhVbedRz+mhEWu1fhNrFzRobMyUX0+A6+W5QKOA8enpTZoaIiPJA9T283dNr zaG8pc4YXSZRdzERYcqAaFh3iSObrR2mnnH3w8iwbESc231g8lu+6Cng/ijLpJzg hX1Wm3icJbR+mqwSb/ySBg2s4/kag1taFxDZYqIqgzkcl/mEyerrfU8W7CLJFPex bx1kLadeufE6vqiP/tji28EOqFeltOrGccrOCP/50qRCzV1S8ufcCptmEf3/96lR j/rA3a5atPJmXhc363B04ilNC40C+iDEkXm92RxY056dDsnCLFk= -----END CERTIFICATE-----Generated at Thu Apr 24 11:25:24 2025 by rpki-client on console.sobornost.net