$ rpki-client -vvf repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.mft File: 957CC5B55223EC29F2E71324C678334C4348BE02.mft (raw, json) Hash identifier: om31T06aEg/LJ10ZekpWE8PyJCCQBrID/mZmBzxO/UQ= Subject key identifier: 04:57:8E:5C:7E:38:C0:4C:FB:35:7A:01:07:E8:B5:ED:94:35:B0:65 Authority key identifier: 95:7C:C5:B5:52:23:EC:29:F2:E7:13:24:C6:78:33:4C:43:48:BE:02 Certificate issuer: /CN=957CC5B55223EC29F2E71324C678334C4348BE02 Certificate serial: 46D6B0E2CDBB333750780492BA8B1B1B04326BF1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/957CC5B55223EC29F2E71324C678334C4348BE02.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.mft Manifest number: 0189 Signing time: Thu 24 Apr 2025 16:50:49 +0000 Manifest this update: Thu 24 Apr 2025 16:45:49 +0000 Manifest next update: Mon 28 Apr 2025 04:19:49 +0000 Files and hashes: 1: 957CC5B55223EC29F2E71324C678334C4348BE02.crl (hash: rq/4v6YYhCaX1iSLjV8n4bTHRgcPeZMHa03G8TAA5cw=) 2: 3130332e3134372e3131362e302f32332d3234203d3e203137373639.roa (hash: gpKP80eZFgz1Xe+59VM+E5nhQuUU0t/9JV7P0fWMBTY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.crl rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/957CC5B55223EC29F2E71324C678334C4348BE02.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:d6:b0:e2:cd:bb:33:37:50:78:04:92:ba:8b:1b:1b:04:32:6b:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=957CC5B55223EC29F2E71324C678334C4348BE02 Validity Not Before: Apr 24 16:45:49 2025 GMT Not After : Apr 28 04:19:49 2025 GMT Subject: CN=04578E5C7E38C04CFB357A0107E8B5ED9435B065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:61:e4:87:02:d3:ae:29:d0:4e:aa:3f:69:7f: a8:ab:8c:2d:9a:d2:47:e1:31:2f:c5:03:9c:2c:8a: b0:5c:6a:26:28:3b:9a:43:3f:4a:c3:91:ff:e3:1e: ac:2d:39:01:b0:90:ed:9c:05:fd:f3:45:c7:8c:53: af:0b:47:eb:0d:8e:6b:ec:09:32:d7:29:26:b9:bf: 90:cf:b0:61:d3:0a:84:01:00:84:3b:ec:56:e2:29: 2e:64:50:86:17:4b:22:e5:8b:fb:e2:f7:36:58:ec: 56:73:42:b2:b8:ad:0d:30:37:36:24:e9:f4:79:be: 3b:bc:7b:d6:80:42:51:75:e0:a2:93:12:ed:aa:7d: 83:80:6a:0e:37:62:c1:97:38:43:63:64:f8:2a:a5: 23:8d:3a:63:e0:81:42:b2:cb:fc:57:64:38:0f:9b: ee:90:37:19:f5:ef:e7:44:19:2e:7b:2e:f5:0e:de: e6:fb:7e:a6:09:ac:ae:e4:2d:c1:c0:fe:9f:9e:25: ea:5e:4b:7b:3c:71:8f:07:e4:49:fe:0e:d9:02:ef: 52:86:c9:39:c8:8b:22:2a:09:3a:e2:c7:71:21:e4: ad:cb:e7:87:96:30:bd:6a:da:55:d6:d7:1f:61:bf: 71:fb:db:06:c0:94:28:2f:d5:64:e5:00:bb:1e:72: 9e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:57:8E:5C:7E:38:C0:4C:FB:35:7A:01:07:E8:B5:ED:94:35:B0:65 X509v3 Authority Key Identifier: keyid:95:7C:C5:B5:52:23:EC:29:F2:E7:13:24:C6:78:33:4C:43:48:BE:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/957CC5B55223EC29F2E71324C678334C4348BE02.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:30:e2:55:22:4b:f8:df:a6:1f:26:6c:4f:6e:23:a2:81:78: ce:4d:2f:80:1e:fc:cd:c7:60:7b:60:92:4c:f6:94:4d:d8:8a: 12:45:98:47:0f:70:b9:63:90:29:a3:7a:92:a6:35:1f:b9:00: 5c:9b:03:a6:3b:f1:63:33:ba:1f:70:8d:cf:4e:15:f1:47:13: 34:4b:35:fb:4d:30:1c:33:e9:da:e9:d2:a6:fe:54:f2:ba:91: b2:84:42:c6:88:c6:e8:0b:ef:5d:75:74:81:24:0a:32:f4:a7: 11:62:b6:a0:af:36:a2:c4:e8:7c:96:f3:d7:3e:ce:0b:9e:d4: d6:57:d8:c9:cd:6e:f8:2a:4e:73:fb:a1:7a:77:9d:9e:86:89: e5:d7:a3:67:74:58:c7:44:ad:b6:17:81:3b:f2:c7:45:08:a8: a3:ed:12:37:71:e8:36:ff:04:d9:5b:88:26:cb:51:e1:32:9f: eb:69:45:51:4d:49:de:7f:33:e8:a3:75:72:8c:f6:3a:7d:43: 37:78:fe:e9:3a:26:58:45:0e:53:e3:08:c7:b1:95:85:0c:f1: 6f:ce:79:2b:9e:6e:c3:e9:e1:18:b2:92:e9:0a:b2:15:ca:14: 3a:e1:66:23:6e:f4:39:3e:61:d8:a1:29:30:77:8f:c9:e6:56: fb:40:eb:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURtaw4s27MzdQeASSuosbGwQya/EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU3Q0M1QjU1MjIzRUMyOUYyRTcxMzI0QzY3ODMzNEM0 MzQ4QkUwMjAeFw0yNTA0MjQxNjQ1NDlaFw0yNTA0MjgwNDE5NDlaMDMxMTAvBgNV BAMTKDA0NTc4RTVDN0UzOEMwNENGQjM1N0EwMTA3RThCNUVEOTQzNUIwNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiYeSHAtOuKdBOqj9pf6irjC2a 0kfhMS/FA5wsirBcaiYoO5pDP0rDkf/jHqwtOQGwkO2cBf3zRceMU68LR+sNjmvs CTLXKSa5v5DPsGHTCoQBAIQ77FbiKS5kUIYXSyLli/vi9zZY7FZzQrK4rQ0wNzYk 6fR5vju8e9aAQlF14KKTEu2qfYOAag43YsGXOENjZPgqpSONOmPggUKyy/xXZDgP m+6QNxn17+dEGS57LvUO3ub7fqYJrK7kLcHA/p+eJepeS3s8cY8H5En+DtkC71KG yTnIiyIqCTrix3Eh5K3L54eWML1q2lXW1x9hv3H72wbAlCgv1WTlALsecp6BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBFeOXH44wEz7NXoBB+i17ZQ1sGUwHwYDVR0j BBgwFoAUlXzFtVIj7Cny5xMkxngzTENIvgIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MGE3OGMwNi0xZDZlLTQzYjYtYmYzMC04NjBjZWJkZGZiMzIvMC85NTdDQzVCNTUy MjNFQzI5RjJFNzEzMjRDNjc4MzM0QzQzNDhCRTAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTU3Q0M1QjU1MjIzRUMyOUYyRTcxMzI0QzY3ODMzNEM0MzQ4 QkUwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjBhNzhjMDYtMWQ2ZS00M2I2LWJm MzAtODYwY2ViZGRmYjMyLzAvOTU3Q0M1QjU1MjIzRUMyOUYyRTcxMzI0QzY3ODMz NEM0MzQ4QkUwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHEw4lUiS/jfph8mbE9uI6KBeM5NL4Ae/M3H YHtgkkz2lE3YihJFmEcPcLljkCmjepKmNR+5AFybA6Y78WMzuh9wjc9OFfFHEzRL NftNMBwz6drp0qb+VPK6kbKEQsaIxugL7111dIEkCjL0pxFitqCvNqLE6HyW89c+ zgue1NZX2MnNbvgqTnP7oXp3nZ6GieXXo2d0WMdErbYXgTvyx0UIqKPtEjdx6Db/ BNlbiCbLUeEyn+tpRVFNSd5/M+ijdXKM9jp9Qzd4/uk6JlhFDlPjCMexlYUM8W/O eSuebsPp4RiykukKshXKFDrhZiNu9Dk+YdihKTB3j8nmVvtA69Q= -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:10 2025 by rpki-client on console.sobornost.net