$ rpki-client -vvf repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.mft File: 9CD5DECA8E146A0231AE872283EA0F93B5784114.mft (raw, json) Hash identifier: AhDG23H7lee4D5WxX61LD5j75KRErfEBdI5yVWpgsC0= Subject key identifier: F4:0B:6D:D6:11:58:8F:27:6B:A9:90:0E:20:0F:87:6B:1C:69:13:C7 Authority key identifier: 9C:D5:DE:CA:8E:14:6A:02:31:AE:87:22:83:EA:0F:93:B5:78:41:14 Certificate issuer: /CN=9CD5DECA8E146A0231AE872283EA0F93B5784114 Certificate serial: 391D7DE11055BAC6CA19264CEC1A75ABFB35DBDF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CD5DECA8E146A0231AE872283EA0F93B5784114.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.mft Manifest number: 016D Signing time: Thu 24 Apr 2025 08:50:49 +0000 Manifest this update: Thu 24 Apr 2025 08:45:49 +0000 Manifest next update: Sun 27 Apr 2025 08:56:49 +0000 Files and hashes: 1: 9CD5DECA8E146A0231AE872283EA0F93B5784114.crl (hash: Eg/p9+wnejgx88d8I9Qgh+t40cH0ZvffpIxRrFcL8/4=) 2: 3130332e3132332e38352e302f32342d3234203d3e20313530343939.roa (hash: eyJ4EDaG/HHNCoBUT9JYVkheds3R4k5CGBTlZLCH7uE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.crl rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CD5DECA8E146A0231AE872283EA0F93B5784114.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 08:56:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:1d:7d:e1:10:55:ba:c6:ca:19:26:4c:ec:1a:75:ab:fb:35:db:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CD5DECA8E146A0231AE872283EA0F93B5784114 Validity Not Before: Apr 24 08:45:49 2025 GMT Not After : Apr 27 08:56:49 2025 GMT Subject: CN=F40B6DD611588F276BA9900E200F876B1C6913C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:28:39:9d:df:5e:1c:8d:88:05:8d:31:ae:37: 44:ae:cd:e0:db:1c:59:fd:91:f7:da:73:85:57:52: 63:7b:b3:cb:ee:3b:08:5a:ac:d0:1d:ef:15:2f:f7: 4d:da:4f:46:ee:92:fe:96:2f:4c:e4:b4:6f:76:3a: d6:91:19:dc:bb:42:af:6d:5f:7c:d8:03:5d:5d:88: 1d:93:53:10:69:28:4c:d1:47:3b:eb:f8:11:6f:df: bd:7f:90:44:19:28:57:7f:0b:37:06:47:e0:f6:43: 89:d9:2b:4f:46:7d:59:72:fb:54:46:b3:a1:73:64: 06:4a:9e:9c:8a:39:a6:84:27:92:4f:3d:9b:62:6d: 3e:0c:c2:14:de:7b:24:39:7a:f5:fe:04:17:e0:9a: f1:0c:55:62:a3:9e:04:19:a4:d0:8c:18:76:3a:b8: 81:68:6e:4a:ee:dd:39:53:36:ee:e1:b6:3f:af:37: 91:f7:28:ff:aa:d9:c8:38:37:ac:d3:f1:6f:5b:17: 25:96:ac:9c:00:b2:49:e0:a3:5e:9e:f4:ba:1b:83: c3:d6:ae:62:40:7e:87:ec:1f:b8:1a:ab:ff:9f:57: 01:da:d2:a7:82:17:bc:eb:2f:17:d6:eb:2a:e7:8a: 29:52:e2:e6:dc:2f:82:ab:99:6a:2a:49:3d:79:cc: 67:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:0B:6D:D6:11:58:8F:27:6B:A9:90:0E:20:0F:87:6B:1C:69:13:C7 X509v3 Authority Key Identifier: keyid:9C:D5:DE:CA:8E:14:6A:02:31:AE:87:22:83:EA:0F:93:B5:78:41:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CD5DECA8E146A0231AE872283EA0F93B5784114.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:8b:5c:23:d4:d1:9e:a8:3b:4d:ea:bf:cb:b5:17:d5:ce:16: ab:67:e6:68:c9:d5:f2:3c:ed:72:a6:b2:d9:79:37:35:e4:cb: 2a:46:2b:68:63:fc:61:57:51:da:2d:a6:66:b8:f0:4b:da:fe: 26:ee:93:23:4c:17:d0:47:56:ae:80:04:8e:a6:48:60:7d:86: 53:fe:a0:3e:a6:9c:75:48:c9:a9:dc:e0:65:9d:2a:a9:11:16: 2c:83:9e:cf:be:70:f9:ee:35:c1:77:2b:51:44:ad:c2:87:be: 88:d9:0a:78:9d:6c:47:6c:d9:30:c2:99:2c:c4:fa:fb:db:cd: 94:c2:14:e3:33:2d:17:2e:8e:a8:e6:6b:83:ce:3e:af:69:fa: 05:a9:5d:90:59:f7:f7:a3:88:15:fb:6f:16:47:a4:ce:86:bb: 2c:a9:49:3a:e9:2e:8b:1c:54:fa:dd:4a:ac:f5:f2:26:4d:93: f7:21:0f:2c:ef:4c:14:45:74:13:2c:50:38:a1:b7:1f:68:10: 3e:4d:1e:48:8d:29:c5:06:e4:75:37:70:44:b1:5b:1f:06:17: 75:88:8d:e6:96:02:30:1a:7d:3f:22:f9:51:19:59:a3:c8:2f: 82:b1:2b:e6:a0:2f:11:0a:06:34:b5:fb:1c:dd:c7:97:6d:f7: 72:72:f2:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOR194RBVusbKGSZM7Bp1q/s1298wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNENURFQ0E4RTE0NkEwMjMxQUU4NzIyODNFQTBGOTNC NTc4NDExNDAeFw0yNTA0MjQwODQ1NDlaFw0yNTA0MjcwODU2NDlaMDMxMTAvBgNV BAMTKEY0MEI2REQ2MTE1ODhGMjc2QkE5OTAwRTIwMEY4NzZCMUM2OTEzQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPKDmd314cjYgFjTGuN0SuzeDb HFn9kffac4VXUmN7s8vuOwharNAd7xUv903aT0bukv6WL0zktG92OtaRGdy7Qq9t X3zYA11diB2TUxBpKEzRRzvr+BFv371/kEQZKFd/CzcGR+D2Q4nZK09GfVly+1RG s6FzZAZKnpyKOaaEJ5JPPZtibT4MwhTeeyQ5evX+BBfgmvEMVWKjngQZpNCMGHY6 uIFobkru3TlTNu7htj+vN5H3KP+q2cg4N6zT8W9bFyWWrJwAskngo16e9Lobg8PW rmJAfofsH7gaq/+fVwHa0qeCF7zrLxfW6yrniilS4ubcL4KrmWoqST15zGf7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9Att1hFYjydrqZAOIA+HaxxpE8cwHwYDVR0j BBgwFoAUnNXeyo4UagIxrocig+oPk7V4QRQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZDJiNGY3Ny03NGQwLTQ3OTctYWVlMC05ZWE5MDc2NTQ3MzAvMC85Q0Q1REVDQThF MTQ2QTAyMzFBRTg3MjI4M0VBMEY5M0I1Nzg0MTE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUNENURFQ0E4RTE0NkEwMjMxQUU4NzIyODNFQTBGOTNCNTc4 NDExNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmQyYjRmNzctNzRkMC00Nzk3LWFl ZTAtOWVhOTA3NjU0NzMwLzAvOUNENURFQ0E4RTE0NkEwMjMxQUU4NzIyODNFQTBG OTNCNTc4NDExNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABmLXCPU0Z6oO03qv8u1F9XOFqtn5mjJ1fI8 7XKmstl5NzXkyypGK2hj/GFXUdotpma48Eva/ibukyNMF9BHVq6ABI6mSGB9hlP+ oD6mnHVIyanc4GWdKqkRFiyDns++cPnuNcF3K1FErcKHvojZCnidbEds2TDCmSzE +vvbzZTCFOMzLRcujqjma4POPq9p+gWpXZBZ9/ejiBX7bxZHpM6GuyypSTrpLosc VPrdSqz18iZNk/chDyzvTBRFdBMsUDihtx9oED5NHkiNKcUG5HU3cESxWx8GF3WI jeaWAjAafT8i+VEZWaPIL4KxK+agLxEKBjS1+xzdx5dt93Jy8r4= -----END CERTIFICATE-----Generated at Thu Apr 24 11:25:24 2025 by rpki-client on console.sobornost.net