$ rpki-client -vvf repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.mft File: 4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.mft (raw, json) Hash identifier: C61vLRNCBVK14xrQZSlF/LxL+Q8+MavuebxwfSHm24Q= Subject key identifier: E6:A9:9F:7C:02:E6:8F:A5:3C:4E:7F:6E:8F:8F:F9:6B:00:A4:21:09 Authority key identifier: 4A:AA:6F:5B:5D:0E:68:58:FC:56:A3:04:65:5C:7B:B3:97:51:8D:CC Certificate issuer: /CN=4AAA6F5B5D0E6858FC56A304655C7BB397518DCC Certificate serial: 7DE308D9B1C0C9A7E0991A9BE1176A560DAF7D0A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.mft Manifest number: 0153 Signing time: Wed 23 Apr 2025 10:50:45 +0000 Manifest this update: Wed 23 Apr 2025 10:45:45 +0000 Manifest next update: Sat 26 Apr 2025 21:05:45 +0000 Files and hashes: 1: 4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.crl (hash: 3/tjEqx7ziqH424FtEhUfV0+eh/FqMLhfK4JwGJM/5I=) 2: 3130332e3136342e38342e302f32342d3234203d3e20313431393035.roa (hash: 8uomqJJ5dPxSbtw5AaFHahACABASWlHMbpsa55zMpZI=) 3: 3130332e3231372e37362e302f32342d3234203d3e20313431393035.roa (hash: nXIgwMlbCEiRLhTmQpk3ILcP6WiZR0pqc4IDqdZRoJI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.crl rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 12:29:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:e3:08:d9:b1:c0:c9:a7:e0:99:1a:9b:e1:17:6a:56:0d:af:7d:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AAA6F5B5D0E6858FC56A304655C7BB397518DCC Validity Not Before: Apr 23 10:45:45 2025 GMT Not After : Apr 26 21:05:45 2025 GMT Subject: CN=E6A99F7C02E68FA53C4E7F6E8F8FF96B00A42109 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8a:eb:10:8d:7e:de:92:f8:96:c3:b8:2c:26: 77:e0:1b:3f:56:f0:42:7b:18:2f:b4:a5:f3:8b:89: 0e:83:c7:8e:21:31:c9:b7:39:fc:64:64:8a:bd:b2: da:c3:f7:a0:d4:99:10:a9:29:f0:44:bf:4b:f7:fd: 86:90:f9:5c:c1:5c:9d:65:24:f5:59:83:47:2d:a3: 47:62:ff:7b:1a:a4:69:54:84:38:2a:49:13:39:8c: cb:e2:e0:ca:ae:b2:ed:9d:2c:d7:d0:c0:4d:b6:be: b8:ba:f9:5a:a9:95:4c:75:0c:3f:b6:e8:ba:62:cd: b6:11:27:47:4e:f4:cc:5f:e1:eb:f5:c1:ef:c7:40: dc:7e:f0:9d:42:06:d2:b5:72:06:41:bf:89:d4:ba: c6:cb:2c:60:d0:e1:81:04:cd:e1:73:43:f5:23:e0: 17:a4:b0:93:ba:0c:6a:98:79:ee:bf:85:11:a0:41: 97:64:df:6a:78:b1:e8:58:c8:e6:8c:00:0b:39:50: 7f:de:d8:15:03:57:3c:91:e0:a1:24:55:e2:ea:81: 32:3b:7d:d1:cc:16:b5:16:e1:33:cc:e2:a8:b2:32: b1:48:21:d4:ba:81:bd:25:46:d2:a1:a2:7d:72:be: ed:b2:81:40:10:9d:ba:27:52:c7:b5:73:37:ec:9f: 20:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:A9:9F:7C:02:E6:8F:A5:3C:4E:7F:6E:8F:8F:F9:6B:00:A4:21:09 X509v3 Authority Key Identifier: keyid:4A:AA:6F:5B:5D:0E:68:58:FC:56:A3:04:65:5C:7B:B3:97:51:8D:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:e6:1b:1e:a2:f7:18:bd:01:ad:92:4d:f8:af:e1:e4:23:45: c4:6f:7a:ec:70:92:6b:68:29:0a:88:e9:b1:c7:68:46:40:eb: 47:32:3f:ed:c5:8f:8c:f2:27:00:14:ac:96:5c:98:2a:f4:5a: 4d:4f:b9:87:67:4b:8a:32:a9:64:a5:23:2b:be:1c:4d:33:52: 35:e7:28:15:a7:1b:7d:25:b0:54:dd:ee:3b:2e:e8:1e:47:98: 8f:d0:a3:95:34:65:89:cc:c0:9e:9d:2b:9c:f7:bd:da:48:c3: 9a:93:a6:e9:1d:ac:50:b1:c4:58:a9:ee:06:c1:30:82:c5:03: bf:4b:f6:e8:be:49:3c:16:e0:15:df:b9:9f:58:f5:f1:81:9c: 2b:45:be:b9:c6:33:d5:fe:fc:59:79:f0:b5:a2:3c:83:fe:4b: 6b:b2:0f:1f:f9:4b:d4:2c:50:d3:8b:48:bc:4d:22:5a:14:35: 65:b1:ce:76:de:67:41:d4:ab:c0:5c:a3:70:33:14:17:3f:a4: 47:a4:9a:f0:e1:d8:c5:dc:2a:43:63:74:83:b8:a9:04:c4:76: 8b:61:58:f2:0b:5b:9b:7f:6d:29:ed:21:ea:fe:84:02:dc:4f: ba:d6:8f:1e:34:93:6c:44:05:01:c2:2d:01:fa:70:88:ea:45: fb:f5:1d:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfeMI2bHAyafgmRqb4RdqVg2vfQowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFBQTZGNUI1RDBFNjg1OEZDNTZBMzA0NjU1QzdCQjM5 NzUxOERDQzAeFw0yNTA0MjMxMDQ1NDVaFw0yNTA0MjYyMTA1NDVaMDMxMTAvBgNV BAMTKEU2QTk5RjdDMDJFNjhGQTUzQzRFN0Y2RThGOEZGOTZCMDBBNDIxMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxiusQjX7ekviWw7gsJnfgGz9W 8EJ7GC+0pfOLiQ6Dx44hMcm3OfxkZIq9strD96DUmRCpKfBEv0v3/YaQ+VzBXJ1l JPVZg0cto0di/3sapGlUhDgqSRM5jMvi4Mqusu2dLNfQwE22vri6+VqplUx1DD+2 6LpizbYRJ0dO9Mxf4ev1we/HQNx+8J1CBtK1cgZBv4nUusbLLGDQ4YEEzeFzQ/Uj 4BeksJO6DGqYee6/hRGgQZdk32p4sehYyOaMAAs5UH/e2BUDVzyR4KEkVeLqgTI7 fdHMFrUW4TPM4qiyMrFIIdS6gb0lRtKhon1yvu2ygUAQnbonUse1czfsnyChAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5qmffALmj6U8Tn9uj4/5awCkIQkwHwYDVR0j BBgwFoAUSqpvW10OaFj8VqMEZVx7s5dRjcwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2VlNmJmMy0yYmRhLTRjYTQtYTVlNy02ZTcwNjMyNDA0YjQvMC80QUFBNkY1QjVE MEU2ODU4RkM1NkEzMDQ2NTVDN0JCMzk3NTE4RENDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEFBQTZGNUI1RDBFNjg1OEZDNTZBMzA0NjU1QzdCQjM5NzUx OERDQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjdlZTZiZjMtMmJkYS00Y2E0LWE1 ZTctNmU3MDYzMjQwNGI0LzAvNEFBQTZGNUI1RDBFNjg1OEZDNTZBMzA0NjU1QzdC QjM5NzUxOERDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADDmGx6i9xi9Aa2STfiv4eQjRcRveuxwkmto KQqI6bHHaEZA60cyP+3Fj4zyJwAUrJZcmCr0Wk1PuYdnS4oyqWSlIyu+HE0zUjXn KBWnG30lsFTd7jsu6B5HmI/Qo5U0ZYnMwJ6dK5z3vdpIw5qTpukdrFCxxFip7gbB MILFA79L9ui+STwW4BXfuZ9Y9fGBnCtFvrnGM9X+/Fl58LWiPIP+S2uyDx/5S9Qs UNOLSLxNIloUNWWxznbeZ0HUq8Bco3AzFBc/pEekmvDh2MXcKkNjdIO4qQTEdoth WPILW5t/bSntIer+hALcT7rWjx40k2xEBQHCLQH6cIjqRfv1HR4= -----END CERTIFICATE-----Generated at Wed Apr 23 13:25:32 2025 by rpki-client on console.sobornost.net