$ rpki-client -vvf repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/7433AB64571BE1827F0BC97ED291976B6E3429FA.mft File: 7433AB64571BE1827F0BC97ED291976B6E3429FA.mft (raw, json) Hash identifier: p3jZobcBFqoPgq7lZz8ogxyavxqFmZZgsqkpsOdJo+g= Subject key identifier: 94:02:62:38:50:65:50:D9:1D:2E:95:78:50:44:F1:B9:7A:D2:17:DD Authority key identifier: 74:33:AB:64:57:1B:E1:82:7F:0B:C9:7E:D2:91:97:6B:6E:34:29:FA Certificate issuer: /CN=7433AB64571BE1827F0BC97ED291976B6E3429FA Certificate serial: 5E3C644D79B01AA807F1A0A9C97673D3FDE5CD87 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7433AB64571BE1827F0BC97ED291976B6E3429FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/7433AB64571BE1827F0BC97ED291976B6E3429FA.mft Manifest number: 0166 Signing time: Thu 24 Apr 2025 22:52:13 +0000 Manifest this update: Thu 24 Apr 2025 22:47:13 +0000 Manifest next update: Mon 28 Apr 2025 10:14:13 +0000 Files and hashes: 1: 7433AB64571BE1827F0BC97ED291976B6E3429FA.crl (hash: UD8Jg2IB5RwKqvncoIXIeBtckjRTHG35Ax/74RINOUM=) 2: 3130332e37352e36332e302f32342d3234203d3e20313530353339.roa (hash: dt0M2E6hMVGXyd6wchuCJpbqgL7DjAEk9eGkYZfJTqo=) 3: 3130332e37352e36322e302f32342d3234203d3e20313530353339.roa (hash: Foo7ECvYM8eC5QdFLfci515Pz4pdcUotJYsrxOmUjnQ=) 4: 3130332e37352e36322e302f32332d3234203d3e20313530353339.roa (hash: LDOqOfl8+d8Lz+/c+0knmLxGK2Kr8P4Ti1sIU0L3/wo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/7433AB64571BE1827F0BC97ED291976B6E3429FA.crl rsync://repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/7433AB64571BE1827F0BC97ED291976B6E3429FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7433AB64571BE1827F0BC97ED291976B6E3429FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:3c:64:4d:79:b0:1a:a8:07:f1:a0:a9:c9:76:73:d3:fd:e5:cd:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7433AB64571BE1827F0BC97ED291976B6E3429FA Validity Not Before: Apr 24 22:47:13 2025 GMT Not After : Apr 28 10:14:13 2025 GMT Subject: CN=94026238506550D91D2E95785044F1B97AD217DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:57:57:a5:1b:01:58:0e:8d:13:c1:3b:2a:fc: 55:90:51:8f:c6:0e:1c:88:c4:44:1a:b7:9b:40:bf: 6b:e9:42:17:29:78:1b:e7:b1:dd:b5:d1:ff:32:70: f4:58:6d:aa:f7:79:5e:71:9e:ee:77:97:92:46:4a: 1c:fd:01:cf:08:57:25:7b:0a:8c:30:51:ff:9c:88: df:12:ba:17:16:af:51:1d:33:c7:65:09:8a:47:a2: 89:d2:33:fd:29:f7:6b:5b:06:df:69:33:0d:d9:15: ef:07:ee:12:51:ee:ad:aa:fc:28:61:e1:6d:8a:11: cd:dd:8d:10:4e:28:6a:14:3b:aa:ed:02:c4:d6:35: e1:6b:65:51:24:14:d8:bf:52:65:80:9a:0b:a1:f0: 49:29:0c:0b:93:93:7f:2a:98:ae:0b:3c:81:7e:85: 8d:bf:b8:64:f4:f0:67:53:a7:71:bf:b5:d9:ce:e3: 84:91:b5:f2:c8:96:bc:61:f7:82:d0:42:d8:24:aa: 59:c4:34:d4:08:ee:3f:2b:65:ca:29:79:8b:3f:bd: 04:c5:01:6b:92:91:06:e7:01:6a:fc:84:c0:44:6a: f5:80:2a:c4:27:7b:66:9b:c3:53:c0:e1:12:36:7e: ff:67:2c:2e:da:11:78:23:9d:81:08:bd:eb:66:fc: a3:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:02:62:38:50:65:50:D9:1D:2E:95:78:50:44:F1:B9:7A:D2:17:DD X509v3 Authority Key Identifier: keyid:74:33:AB:64:57:1B:E1:82:7F:0B:C9:7E:D2:91:97:6B:6E:34:29:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/7433AB64571BE1827F0BC97ED291976B6E3429FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7433AB64571BE1827F0BC97ED291976B6E3429FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/7433AB64571BE1827F0BC97ED291976B6E3429FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:17:1b:3b:50:c1:ad:da:f6:55:b9:a8:d0:ca:10:a0:96:22: c3:6f:cf:fc:3d:85:b3:76:eb:dd:f7:11:a1:18:65:32:59:e0: 79:8b:5d:6d:bd:c8:3a:ae:14:77:0a:27:a2:73:67:fb:7a:3d: 7c:4b:c6:b5:08:89:ee:97:bc:71:43:e4:77:df:58:61:7c:c9: 03:42:d7:09:b1:d7:40:6d:e4:7a:c1:8e:18:dd:00:44:8b:4c: 44:8c:34:9e:24:48:19:1e:09:ec:c2:21:18:62:a2:46:15:14: 7f:29:82:10:43:05:0d:ce:68:74:f5:1d:ca:1d:1b:46:ff:e3: 42:c0:d4:62:61:92:fe:67:43:62:d3:db:85:3e:bd:b6:72:13: 2b:1f:68:94:90:56:ed:51:54:a8:93:70:b2:f5:ef:3b:e9:75: b8:63:9d:67:51:2a:38:ba:4b:44:95:25:a3:d0:78:c2:b7:0c: 31:c9:79:d3:13:a4:e0:e6:ae:ed:12:4c:58:c4:a0:4b:b8:d2: af:5c:0a:f9:1d:35:04:c5:97:cb:7f:ce:58:67:7c:7e:b5:d5: 4c:7c:82:69:1f:d7:ec:52:12:0b:9c:3a:fc:8e:85:c6:59:88: 12:03:d9:cd:38:a7:66:ab:5d:12:0b:d6:f4:76:31:99:84:21: 74:72:ba:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXjxkTXmwGqgH8aCpyXZz0/3lzYcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQzM0FCNjQ1NzFCRTE4MjdGMEJDOTdFRDI5MTk3NkI2 RTM0MjlGQTAeFw0yNTA0MjQyMjQ3MTNaFw0yNTA0MjgxMDE0MTNaMDMxMTAvBgNV BAMTKDk0MDI2MjM4NTA2NTUwRDkxRDJFOTU3ODUwNDRGMUI5N0FEMjE3REQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvV1elGwFYDo0TwTsq/FWQUY/G DhyIxEQat5tAv2vpQhcpeBvnsd210f8ycPRYbar3eV5xnu53l5JGShz9Ac8IVyV7 CowwUf+ciN8SuhcWr1EdM8dlCYpHoonSM/0p92tbBt9pMw3ZFe8H7hJR7q2q/Chh 4W2KEc3djRBOKGoUO6rtAsTWNeFrZVEkFNi/UmWAmguh8EkpDAuTk38qmK4LPIF+ hY2/uGT08GdTp3G/tdnO44SRtfLIlrxh94LQQtgkqlnENNQI7j8rZcopeYs/vQTF AWuSkQbnAWr8hMBEavWAKsQne2abw1PA4RI2fv9nLC7aEXgjnYEIvetm/KNrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlAJiOFBlUNkdLpV4UETxuXrSF90wHwYDVR0j BBgwFoAUdDOrZFcb4YJ/C8l+0pGXa240KfowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w N2M4YTBjMy0zN2Y1LTQ2NjctYTQzMC02ZmExMTFkMzQzYWEvMC83NDMzQUI2NDU3 MUJFMTgyN0YwQkM5N0VEMjkxOTc2QjZFMzQyOUZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzQzM0FCNjQ1NzFCRTE4MjdGMEJDOTdFRDI5MTk3NkI2RTM0 MjlGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDdjOGEwYzMtMzdmNS00NjY3LWE0 MzAtNmZhMTExZDM0M2FhLzAvNzQzM0FCNjQ1NzFCRTE4MjdGMEJDOTdFRDI5MTk3 NkI2RTM0MjlGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADcXGztQwa3a9lW5qNDKEKCWIsNvz/w9hbN2 6933EaEYZTJZ4HmLXW29yDquFHcKJ6JzZ/t6PXxLxrUIie6XvHFD5HffWGF8yQNC 1wmx10Bt5HrBjhjdAESLTESMNJ4kSBkeCezCIRhiokYVFH8pghBDBQ3OaHT1Hcod G0b/40LA1GJhkv5nQ2LT24U+vbZyEysfaJSQVu1RVKiTcLL17zvpdbhjnWdRKji6 S0SVJaPQeMK3DDHJedMTpODmru0STFjEoEu40q9cCvkdNQTFl8t/zlhnfH611Ux8 gmkf1+xSEgucOvyOhcZZiBID2c04p2arXRIL1vR2MZmEIXRyulA= -----END CERTIFICATE-----Generated at Fri Apr 25 03:46:16 2025 by rpki-client on console.sobornost.net