$ rpki-client -vvf repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.mft File: 1072AD17A8EDB1513AED95A258088F480ADA492B.mft (raw, json) Hash identifier: BTt/vtEhqnsaKu+NQnOEr8DIqmRkXMgD9xEX+kno2a4= Subject key identifier: 04:EC:AC:64:14:C9:6F:19:FE:2B:B9:ED:35:9E:55:73:6C:2C:BC:95 Authority key identifier: 10:72:AD:17:A8:ED:B1:51:3A:ED:95:A2:58:08:8F:48:0A:DA:49:2B Certificate issuer: /CN=1072AD17A8EDB1513AED95A258088F480ADA492B Certificate serial: 5DA5733923C0F46B648639537F68EB78BCBD0619 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1072AD17A8EDB1513AED95A258088F480ADA492B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.mft Manifest number: 0160 Signing time: Wed 23 Apr 2025 08:41:14 +0000 Manifest this update: Wed 23 Apr 2025 08:36:14 +0000 Manifest next update: Sat 26 Apr 2025 20:04:14 +0000 Files and hashes: 1: 3130332e3232302e3131342e302f32332d3234203d3e20313335343436.roa (hash: rmtw0G0gq68lr7jcdH8MQxUIP+1AwEpTMYMONzRXapE=) 2: 1072AD17A8EDB1513AED95A258088F480ADA492B.crl (hash: pLK0VkbuhbyglE01m5Yn3lsFeXTfSlLhxV3a0axs8Ko=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.crl rsync://repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1072AD17A8EDB1513AED95A258088F480ADA492B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 09:26:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:a5:73:39:23:c0:f4:6b:64:86:39:53:7f:68:eb:78:bc:bd:06:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1072AD17A8EDB1513AED95A258088F480ADA492B Validity Not Before: Apr 23 08:36:14 2025 GMT Not After : Apr 26 20:04:14 2025 GMT Subject: CN=04ECAC6414C96F19FE2BB9ED359E55736C2CBC95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:18:03:e1:08:59:a3:57:e0:19:97:40:b6:1f: fa:c0:6d:ed:74:3e:22:9c:a8:85:06:bf:99:98:15: f3:93:d4:37:5d:fb:4c:3d:c3:36:92:9a:f3:ce:1c: e7:4f:61:27:c3:f0:80:48:4a:80:31:88:44:eb:7a: 80:f5:19:e2:c2:6a:78:86:92:e2:9b:c2:5a:6e:f1: 6a:c1:e0:f8:6e:fd:fa:21:49:ea:8f:1f:a6:0f:2b: d5:e1:f7:75:13:3a:da:f3:60:b1:a7:7c:89:8b:4f: cf:31:a0:43:95:aa:e3:3e:b0:28:05:d4:20:be:af: ef:c1:d5:8f:71:65:3f:a3:73:e3:f7:bd:34:c1:2a: b3:07:a2:d2:29:41:56:f8:c1:ad:26:95:6c:1e:79: 06:1e:8e:c3:da:86:5d:64:0a:e0:cf:25:22:fa:e0: 92:08:e2:ee:66:8b:f1:b3:5b:6f:a2:7c:c1:41:57: 58:6e:5f:1b:50:e6:8e:f5:a1:15:5a:52:3f:45:ff: ef:25:07:bd:56:aa:af:24:ee:09:75:b0:af:1a:66: e2:af:2b:25:d2:6d:65:8e:2f:3f:dd:de:e1:13:2e: 33:c2:cb:5e:0d:51:b7:93:ae:c6:f7:cd:73:32:d3: bb:eb:50:9e:68:97:3d:08:ad:59:54:2e:d7:1c:ca: 19:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:EC:AC:64:14:C9:6F:19:FE:2B:B9:ED:35:9E:55:73:6C:2C:BC:95 X509v3 Authority Key Identifier: keyid:10:72:AD:17:A8:ED:B1:51:3A:ED:95:A2:58:08:8F:48:0A:DA:49:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1072AD17A8EDB1513AED95A258088F480ADA492B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:8a:83:5e:9c:e5:9f:6b:4f:c2:6c:76:38:6b:88:56:61:f0: 47:7c:54:8e:1e:30:a3:51:ec:31:b2:cd:08:db:99:66:a7:bf: a3:98:be:64:88:83:98:6d:8a:65:70:04:63:17:90:67:e4:c5: 7b:17:ad:b0:46:39:df:5f:ac:82:8f:98:b0:e4:7d:58:76:1f: d4:30:45:8c:5e:de:24:79:2b:ea:d6:6e:2e:55:38:80:55:14: e8:c8:64:3c:fa:78:41:66:f4:bd:bd:6e:0c:00:ec:5d:5f:a9: 8c:ec:ae:b6:99:ac:e3:2f:0a:f9:27:9e:93:7f:4f:ad:66:6c: 3f:7e:b6:31:50:ba:ba:7e:ab:38:fd:a9:73:c2:28:aa:08:a6: 77:db:31:8a:11:b3:f8:f2:3f:34:9b:de:07:c0:c4:da:6f:4a: 26:8e:97:33:7d:4b:1f:7c:71:0a:f4:00:c8:c9:f1:a8:e6:67: 16:d2:9d:59:7b:7a:95:f9:94:62:b4:d0:8c:d9:64:e5:27:f8: c3:b2:76:53:ae:0a:e4:8e:ad:56:13:9d:92:d7:72:b7:66:c3: 0b:f2:f7:54:aa:48:3f:9c:0f:46:87:33:cd:44:81:78:a8:fb: 61:aa:39:a8:fc:f6:40:85:d1:70:41:c9:7b:b1:3d:03:ad:e0: 73:19:18:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXaVzOSPA9GtkhjlTf2jreLy9BhkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA3MkFEMTdBOEVEQjE1MTNBRUQ5NUEyNTgwODhGNDgw QURBNDkyQjAeFw0yNTA0MjMwODM2MTRaFw0yNTA0MjYyMDA0MTRaMDMxMTAvBgNV BAMTKDA0RUNBQzY0MTRDOTZGMTlGRTJCQjlFRDM1OUU1NTczNkMyQ0JDOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMGAPhCFmjV+AZl0C2H/rAbe10 PiKcqIUGv5mYFfOT1Ddd+0w9wzaSmvPOHOdPYSfD8IBISoAxiETreoD1GeLCaniG kuKbwlpu8WrB4Phu/fohSeqPH6YPK9Xh93UTOtrzYLGnfImLT88xoEOVquM+sCgF 1CC+r+/B1Y9xZT+jc+P3vTTBKrMHotIpQVb4wa0mlWweeQYejsPahl1kCuDPJSL6 4JII4u5mi/GzW2+ifMFBV1huXxtQ5o71oRVaUj9F/+8lB71Wqq8k7gl1sK8aZuKv KyXSbWWOLz/d3uETLjPCy14NUbeTrsb3zXMy07vrUJ5olz0IrVlULtccyhmbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBOysZBTJbxn+K7ntNZ5Vc2wsvJUwHwYDVR0j BBgwFoAUEHKtF6jtsVE67ZWiWAiPSAraSSswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NTRiOWQzMi0zYzVhLTQwZTItYjc4OC0wNjlkZTBjM2QyZGUvMC8xMDcyQUQxN0E4 RURCMTUxM0FFRDk1QTI1ODA4OEY0ODBBREE0OTJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA3MkFEMTdBOEVEQjE1MTNBRUQ5NUEyNTgwODhGNDgwQURB NDkyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTU0YjlkMzItM2M1YS00MGUyLWI3 ODgtMDY5ZGUwYzNkMmRlLzAvMTA3MkFEMTdBOEVEQjE1MTNBRUQ5NUEyNTgwODhG NDgwQURBNDkyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHCKg16c5Z9rT8JsdjhriFZh8Ed8VI4eMKNR 7DGyzQjbmWanv6OYvmSIg5htimVwBGMXkGfkxXsXrbBGOd9frIKPmLDkfVh2H9Qw RYxe3iR5K+rWbi5VOIBVFOjIZDz6eEFm9L29bgwA7F1fqYzsrraZrOMvCvknnpN/ T61mbD9+tjFQurp+qzj9qXPCKKoIpnfbMYoRs/jyPzSb3gfAxNpvSiaOlzN9Sx98 cQr0AMjJ8ajmZxbSnVl7epX5lGK00IzZZOUn+MOydlOuCuSOrVYTnZLXcrdmwwvy 91SqSD+cD0aHM81EgXio+2GqOaj89kCF0XBByXuxPQOt4HMZGC8= -----END CERTIFICATE-----Generated at Wed Apr 23 11:12:11 2025 by rpki-client on console.sobornost.net