$ rpki-client -vvf repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.mft File: 1697127AE288F4C03503ED0ED8F09BD7A10A1E20.mft (raw, json) Hash identifier: jqztQTzXUrm533xHCZiXKlDsDg0qPrqJq5SQ1WjR8Bw= Subject key identifier: 77:61:7C:48:62:4F:97:EE:1E:19:60:51:B4:D5:40:8D:DA:70:0E:19 Authority key identifier: 16:97:12:7A:E2:88:F4:C0:35:03:ED:0E:D8:F0:9B:D7:A1:0A:1E:20 Certificate issuer: /CN=1697127AE288F4C03503ED0ED8F09BD7A10A1E20 Certificate serial: 0F84EF6FDDE7AF29BAD868AD80CAAD3A8234685C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.mft Manifest number: 01FF Signing time: Fri 25 Apr 2025 13:01:45 +0000 Manifest this update: Fri 25 Apr 2025 12:56:45 +0000 Manifest next update: Mon 28 Apr 2025 22:10:45 +0000 Files and hashes: 1: 1697127AE288F4C03503ED0ED8F09BD7A10A1E20.crl (hash: XKK0nAFuoSA4FKGTBCAkn0OU4M9fmEydBOx7yboBV6M=) 2: 3130332e3138302e3235312e302f32342d3234203d3e20313439333733.roa (hash: omQCe9i6UAQabn658NY546AFhSlSDQxwejMwWzEAolo=) 3: 3130332e3138302e3235302e302f32342d3234203d3e20313439333733.roa (hash: 132Kizc+R6ps/hT6AogJkCilm9HX7+ORPphZ8hVhLQ8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.crl rsync://repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:10:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:84:ef:6f:dd:e7:af:29:ba:d8:68:ad:80:ca:ad:3a:82:34:68:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1697127AE288F4C03503ED0ED8F09BD7A10A1E20 Validity Not Before: Apr 25 12:56:45 2025 GMT Not After : Apr 28 22:10:45 2025 GMT Subject: CN=77617C48624F97EE1E196051B4D5408DDA700E19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:db:2d:16:98:3e:1e:f5:d2:20:71:98:9b:e3: 84:51:d3:29:28:37:e4:ab:8a:41:fc:91:12:20:e5: b9:08:7f:77:65:5b:6a:09:c8:64:b1:6e:f8:20:9a: 81:7b:dc:3a:3c:d9:25:39:9d:84:be:aa:ff:a9:61: 45:a7:6c:3f:d4:56:19:e1:b5:4f:77:a0:c4:72:50: f0:84:e6:db:78:b9:f7:4a:5d:ac:d0:5a:f4:47:2d: 7a:02:2c:de:4c:80:cd:f9:84:67:72:4f:a3:f2:fa: 0d:4b:54:e5:22:94:66:ac:2b:c4:9e:cc:e8:1c:c3: 43:ec:9d:99:40:56:67:d5:26:7d:0c:18:17:1f:c9: 28:d8:68:d8:f8:e5:9b:a3:4b:ce:1a:02:d8:ed:90: 98:07:3a:42:05:8c:a8:13:d9:33:e1:22:2e:49:f1: a2:38:e7:72:48:96:1b:0a:62:4f:7e:7f:b3:6f:e6: 0c:a2:c7:ca:fe:12:57:a9:d0:05:21:99:27:0c:ab: 46:73:e3:04:47:1f:23:a5:9b:7b:04:6a:13:8f:59: f0:06:3a:73:d9:55:c3:20:66:37:50:1a:98:e7:a8: d7:12:a6:af:eb:47:4f:76:63:8d:af:66:f3:e1:ac: 6b:99:ea:ce:0f:5d:ed:ef:b5:b4:e7:fa:07:68:06: 6b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:61:7C:48:62:4F:97:EE:1E:19:60:51:B4:D5:40:8D:DA:70:0E:19 X509v3 Authority Key Identifier: keyid:16:97:12:7A:E2:88:F4:C0:35:03:ED:0E:D8:F0:9B:D7:A1:0A:1E:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:a7:a0:59:06:66:6e:9e:cf:8c:aa:b2:e1:1d:76:f3:77:7b: 07:24:05:af:fb:52:d3:01:69:bb:38:86:b9:7e:ab:ca:d8:af: 6c:fb:4c:93:7b:1f:eb:67:26:6b:12:ea:76:5b:87:57:83:d6: 48:67:77:42:19:55:1d:d7:8b:78:52:26:7c:a2:07:3a:ef:f1: 9b:14:5e:1f:6a:61:91:7a:f1:fc:cf:0d:e4:ba:fa:6f:7c:2c: 0d:90:2c:33:36:d1:06:7f:4d:48:8b:69:b0:8d:2c:4d:41:aa: e8:12:e4:3a:87:62:60:04:55:13:b5:bf:3a:c7:4b:24:ee:f1: 8d:9e:79:16:ea:8a:87:ae:9e:51:e8:36:fa:1f:27:fd:8d:d8: 5e:24:ff:99:cd:2d:a9:35:38:cb:48:1b:1e:d5:08:6f:c9:a3: 84:22:2a:97:de:a1:69:d6:e6:00:6e:cb:d4:a8:80:9f:b3:8a: 14:8f:1b:a6:2f:c0:c6:f6:49:3f:39:a8:29:3c:ad:ff:97:8a: c0:a7:7a:e2:ea:1d:a3:2b:d0:07:98:0d:6c:7e:0f:02:31:c1: 99:e4:e6:b7:7b:e1:b1:63:4e:72:95:8f:8a:c2:af:d2:65:2f: cf:dc:cb:1c:ea:70:1d:87:fe:30:1e:51:d5:6b:f6:f5:d8:7a: 9f:47:1d:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD4Tvb93nrym62GitgMqtOoI0aFwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY5NzEyN0FFMjg4RjRDMDM1MDNFRDBFRDhGMDlCRDdB MTBBMUUyMDAeFw0yNTA0MjUxMjU2NDVaFw0yNTA0MjgyMjEwNDVaMDMxMTAvBgNV BAMTKDc3NjE3QzQ4NjI0Rjk3RUUxRTE5NjA1MUI0RDU0MDhEREE3MDBFMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF2y0WmD4e9dIgcZib44RR0yko N+SrikH8kRIg5bkIf3dlW2oJyGSxbvggmoF73Do82SU5nYS+qv+pYUWnbD/UVhnh tU93oMRyUPCE5tt4ufdKXazQWvRHLXoCLN5MgM35hGdyT6Py+g1LVOUilGasK8Se zOgcw0PsnZlAVmfVJn0MGBcfySjYaNj45ZujS84aAtjtkJgHOkIFjKgT2TPhIi5J 8aI453JIlhsKYk9+f7Nv5gyix8r+Elep0AUhmScMq0Zz4wRHHyOlm3sEahOPWfAG OnPZVcMgZjdQGpjnqNcSpq/rR092Y42vZvPhrGuZ6s4PXe3vtbTn+gdoBmtnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd2F8SGJPl+4eGWBRtNVAjdpwDhkwHwYDVR0j BBgwFoAUFpcSeuKI9MA1A+0O2PCb16EKHiAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MjQ5ZDM4Ny03MGNmLTQwZTktODc1OS05Yjg2ZTBjNjUxMjgvMC8xNjk3MTI3QUUy ODhGNEMwMzUwM0VEMEVEOEYwOUJEN0ExMEExRTIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY5NzEyN0FFMjg4RjRDMDM1MDNFRDBFRDhGMDlCRDdBMTBB MUUyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTI0OWQzODctNzBjZi00MGU5LTg3 NTktOWI4NmUwYzY1MTI4LzAvMTY5NzEyN0FFMjg4RjRDMDM1MDNFRDBFRDhGMDlC RDdBMTBBMUUyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGqnoFkGZm6ez4yqsuEddvN3ewckBa/7UtMB abs4hrl+q8rYr2z7TJN7H+tnJmsS6nZbh1eD1khnd0IZVR3Xi3hSJnyiBzrv8ZsU Xh9qYZF68fzPDeS6+m98LA2QLDM20QZ/TUiLabCNLE1BqugS5DqHYmAEVRO1vzrH SyTu8Y2eeRbqioeunlHoNvofJ/2N2F4k/5nNLak1OMtIGx7VCG/Jo4QiKpfeoWnW 5gBuy9SogJ+zihSPG6YvwMb2ST85qCk8rf+XisCneuLqHaMr0AeYDWx+DwIxwZnk 5rd74bFjTnKVj4rCr9JlL8/cyxzqcB2H/jAeUdVr9vXYep9HHQo= -----END CERTIFICATE-----Generated at Fri Apr 25 17:11:50 2025 by rpki-client on console.sobornost.net