$ rpki-client -vvf repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft File: A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft (raw, json) Hash identifier: vbJZv9yL1otiIhZJCo4sCyaYwdnApWUu1RCAHP+myE8= Subject key identifier: 98:61:91:78:D5:F7:0E:9B:A1:04:E6:BD:C3:CA:A5:20:B5:1D:3B:5F Authority key identifier: A7:1B:AA:66:62:38:47:B7:BD:9E:A7:C4:0B:CB:CA:85:5E:52:E8:EB Certificate issuer: /CN=A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB Certificate serial: 02FB9092401E39931C5C893577A8E5F27859F5DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft Manifest number: 72 Signing time: Thu 24 Apr 2025 13:10:55 +0000 Manifest this update: Thu 24 Apr 2025 13:05:55 +0000 Manifest next update: Sun 27 Apr 2025 21:13:55 +0000 Files and hashes: 1: A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.crl (hash: 73+YMwKVYM8GHyxUMOGl/cdYXqOoGw6OGtpqXStV9Mo=) 2: 3136302e32302e33362e302f32332d3234203d3e20313532373631.roa (hash: avjOhQMHcwWGlDF7WDzZoOiS3u3B2hy6xJEOi4n8Cr0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.crl rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 10:32:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:fb:90:92:40:1e:39:93:1c:5c:89:35:77:a8:e5:f2:78:59:f5:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB Validity Not Before: Apr 24 13:05:55 2025 GMT Not After : Apr 27 21:13:55 2025 GMT Subject: CN=98619178D5F70E9BA104E6BDC3CAA520B51D3B5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e1:44:9e:30:a1:4d:5a:2c:41:22:15:b9:81: b5:12:7c:6f:48:3c:58:34:3f:ec:88:9e:2e:82:a7: d9:3e:16:55:5e:d8:66:69:2a:28:ab:50:c8:a9:13: cd:1b:64:25:65:21:2c:2d:38:d0:cd:2e:aa:cb:eb: c2:ab:92:2e:bc:8b:eb:09:dd:24:c6:a7:5c:8f:67: 74:71:09:87:bc:79:9f:ac:06:3f:27:c2:b5:05:82: 7c:d8:07:3d:42:f4:b6:de:31:fe:d6:3c:c6:08:ed: 50:ac:ba:c5:3e:2e:ef:db:ff:06:ec:60:78:1f:db: a1:c9:6c:3e:6c:3f:ef:45:7d:60:e9:0c:67:65:94: 2e:64:05:98:85:e8:8f:07:11:d9:4d:76:5a:3d:f9: fc:86:ac:bd:ab:fc:c4:8d:94:73:b6:3a:25:8e:49: 76:ad:67:f8:11:01:48:3a:a1:82:98:11:57:f3:73: 13:26:02:db:12:b4:46:d3:ea:b7:32:b6:a4:23:62: 7a:0e:4d:9c:a4:ce:14:67:8d:ee:c8:da:c8:a9:93: 30:1e:81:65:f4:9d:ab:4e:c5:5b:d0:61:89:b2:c0: 7e:b9:ee:b7:e2:b7:46:83:78:5e:73:50:6b:43:4d: 42:49:29:dc:e8:21:c7:e9:3b:04:aa:24:eb:28:a2: ce:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:61:91:78:D5:F7:0E:9B:A1:04:E6:BD:C3:CA:A5:20:B5:1D:3B:5F X509v3 Authority Key Identifier: keyid:A7:1B:AA:66:62:38:47:B7:BD:9E:A7:C4:0B:CB:CA:85:5E:52:E8:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:ee:31:17:1d:5c:be:c9:07:6e:15:a1:8b:e5:5d:d9:47:e2: 62:63:c9:8d:92:15:1a:10:22:fc:09:9c:f8:de:4c:02:64:98: 29:74:1f:c4:83:56:47:d4:f0:46:a2:cb:2e:d1:a9:a6:46:08: 26:58:bd:18:65:8c:d9:c9:b8:a3:2e:52:22:2c:51:b2:08:3e: 13:49:64:33:43:b5:6c:f4:ac:45:47:f3:fb:6c:8c:c6:17:33: 52:a6:93:6e:cf:3c:20:e4:c0:5e:25:cb:fe:81:cb:8d:1d:77: 2a:1c:43:0d:d5:2d:86:e8:33:df:b2:df:71:70:fa:bc:5e:9c: ea:14:e9:4d:26:a6:1d:4f:ce:65:21:fa:1b:38:0a:8e:fc:96: de:01:c2:4a:33:0e:02:24:86:79:6b:9b:08:95:18:2a:29:13: 68:ed:e5:db:4f:23:97:ee:f2:db:ba:57:ea:73:e6:16:47:47: 67:c1:cb:65:70:fe:ab:8f:b3:24:2d:8d:3b:74:98:fe:ac:50: cd:45:33:d9:85:dd:13:36:24:56:aa:6b:b0:e5:ec:87:2b:33: bf:51:eb:0f:96:86:58:48:33:52:2a:be:a9:9c:af:ac:4b:a9: 8d:c6:4c:63:98:b3:e8:73:28:5e:f5:5b:c5:79:7c:e9:3d:14: 28:84:07:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAvuQkkAeOZMcXIk1d6jl8nhZ9d4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTcxQkFBNjY2MjM4NDdCN0JEOUVBN0M0MEJDQkNBODU1 RTUyRThFQjAeFw0yNTA0MjQxMzA1NTVaFw0yNTA0MjcyMTEzNTVaMDMxMTAvBgNV BAMTKDk4NjE5MTc4RDVGNzBFOUJBMTA0RTZCREMzQ0FBNTIwQjUxRDNCNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK4USeMKFNWixBIhW5gbUSfG9I PFg0P+yIni6Cp9k+FlVe2GZpKiirUMipE80bZCVlISwtONDNLqrL68Krki68i+sJ 3STGp1yPZ3RxCYe8eZ+sBj8nwrUFgnzYBz1C9LbeMf7WPMYI7VCsusU+Lu/b/wbs YHgf26HJbD5sP+9FfWDpDGdllC5kBZiF6I8HEdlNdlo9+fyGrL2r/MSNlHO2OiWO SXatZ/gRAUg6oYKYEVfzcxMmAtsStEbT6rcytqQjYnoOTZykzhRnje7I2sipkzAe gWX0natOxVvQYYmywH657rfit0aDeF5zUGtDTUJJKdzoIcfpOwSqJOsoos7NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmGGReNX3DpuhBOa9w8qlILUdO18wHwYDVR0j BBgwFoAUpxuqZmI4R7e9nqfEC8vKhV5S6OswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODFlZjQ0MC01YTVmLTRhNGYtYjUwOS1iMTAzMjQ1YzVjZjEvMC9BNzFCQUE2NjYy Mzg0N0I3QkQ5RUE3QzQwQkNCQ0E4NTVFNTJFOEVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTcxQkFBNjY2MjM4NDdCN0JEOUVBN0M0MEJDQkNBODU1RTUy RThFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjgxZWY0NDAtNWE1Zi00YTRmLWI1 MDktYjEwMzI0NWM1Y2YxLzAvQTcxQkFBNjY2MjM4NDdCN0JEOUVBN0M0MEJDQkNB ODU1RTUyRThFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEHuMRcdXL7JB24VoYvlXdlH4mJjyY2SFRoQ IvwJnPjeTAJkmCl0H8SDVkfU8Eaiyy7RqaZGCCZYvRhljNnJuKMuUiIsUbIIPhNJ ZDNDtWz0rEVH8/tsjMYXM1Kmk27PPCDkwF4ly/6By40ddyocQw3VLYboM9+y33Fw +rxenOoU6U0mph1PzmUh+hs4Co78lt4BwkozDgIkhnlrmwiVGCopE2jt5dtPI5fu 8tu6V+pz5hZHR2fBy2Vw/quPsyQtjTt0mP6sUM1FM9mF3RM2JFaqa7Dl7IcrM79R 6w+WhlhIM1Iqvqmcr6xLqY3GTGOYs+hzKF71W8V5fOk9FCiEBxc= -----END CERTIFICATE-----Generated at Thu Apr 24 15:50:03 2025 by rpki-client on console.sobornost.net