$ rpki-client -vvf repo-rpki.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/4AA76DED689FD4420809D0962087A03BCF018FEA.mft File: 4AA76DED689FD4420809D0962087A03BCF018FEA.mft (raw, json) Hash identifier: xhdCo/XGJ98cBhZ5XGAye0RanMfZwjVCj44T0ZwFKW4= Subject key identifier: 18:54:B5:03:0E:F4:3C:A9:49:E1:95:3D:8B:FE:B7:05:DB:07:EA:25 Authority key identifier: 4A:A7:6D:ED:68:9F:D4:42:08:09:D0:96:20:87:A0:3B:CF:01:8F:EA Certificate issuer: /CN=4AA76DED689FD4420809D0962087A03BCF018FEA Certificate serial: 4B427695F3A9B330D7893A65F7093C3219E60A11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AA76DED689FD4420809D0962087A03BCF018FEA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/4AA76DED689FD4420809D0962087A03BCF018FEA.mft Manifest number: 85 Signing time: Fri 25 Apr 2025 03:11:39 +0000 Manifest this update: Fri 25 Apr 2025 03:06:39 +0000 Manifest next update: Mon 28 Apr 2025 12:55:39 +0000 Files and hashes: 1: 3130332e39392e3133372e302f32342d3234203d3e20313531353735.roa (hash: t1oPzu4VEOt7+PmdI8majMljNsaF8ctMOjhLL1SL0Go=) 2: 4AA76DED689FD4420809D0962087A03BCF018FEA.crl (hash: S+bUEStyOySukEj66DoHA6Bn2WmZaroMa2M1LlRXJZQ=) 3: 323030313a6466343a3763303a3a2f34382d3438203d3e20313531353735.roa (hash: ONsSDNwNCKSQA0g6zXrNIJFeG1JttoPkAupg3mK+FJ4=) 4: 3130332e39392e3133362e302f32342d3234203d3e20313531353735.roa (hash: O0N8YnmOgvwU8r8KKC4SJAWcGP/YV+Rw0wgGJ4ZOg7I=) 5: 3130332e39392e3133362e302f32332d3233203d3e20313531353735.roa (hash: fDg3pcJLO4nMKHIhIadc4UOWwJA6xSlIAC7zIOEu60s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/4AA76DED689FD4420809D0962087A03BCF018FEA.crl rsync://repo-rpki.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/4AA76DED689FD4420809D0962087A03BCF018FEA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AA76DED689FD4420809D0962087A03BCF018FEA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:42:76:95:f3:a9:b3:30:d7:89:3a:65:f7:09:3c:32:19:e6:0a:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AA76DED689FD4420809D0962087A03BCF018FEA Validity Not Before: Apr 25 03:06:39 2025 GMT Not After : Apr 28 12:55:39 2025 GMT Subject: CN=1854B5030EF43CA949E1953D8BFEB705DB07EA25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a0:ea:38:2e:fe:6b:73:9b:44:6d:74:64:1b: c9:fa:bd:7a:a3:92:ec:1c:06:89:8d:81:0c:f3:f1: ae:a0:99:78:5d:35:b9:e4:89:70:bb:64:8a:97:0f: 72:0a:fa:6d:ce:85:86:b1:af:73:e6:05:62:97:69: b6:1b:df:30:dd:80:38:a1:e9:e4:87:54:dd:3b:fb: 42:99:6d:80:d4:2e:6a:61:73:f8:7f:e9:37:a7:00: e0:55:6f:63:8c:78:b9:8d:ea:3d:77:9b:5d:e1:0f: 4b:40:83:e4:26:68:2c:2a:1b:eb:ea:87:85:fc:78: 08:74:33:cd:9e:58:9c:58:cf:af:6f:30:8f:43:f2: 11:a0:fd:84:5f:e3:c7:ae:81:5b:95:dc:41:ea:50: a4:09:e4:e2:b2:2f:6d:ec:0f:91:1a:b0:d7:19:3b: d9:74:4d:d4:d1:17:68:6f:01:bd:8d:21:6b:0e:ce: 3a:d4:97:33:82:d3:a4:91:15:ec:07:7f:bb:52:4c: f2:b0:86:db:a2:e7:dd:c5:52:53:24:6f:2c:15:4c: de:f6:7e:fe:02:f0:62:ab:9b:31:dd:f1:9d:6f:77: 74:3d:aa:8c:5e:33:5c:e1:d9:f0:10:01:b2:8a:6d: 52:fa:fd:39:40:63:60:62:9f:b5:10:d1:b1:0b:15: 6d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:54:B5:03:0E:F4:3C:A9:49:E1:95:3D:8B:FE:B7:05:DB:07:EA:25 X509v3 Authority Key Identifier: keyid:4A:A7:6D:ED:68:9F:D4:42:08:09:D0:96:20:87:A0:3B:CF:01:8F:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/4AA76DED689FD4420809D0962087A03BCF018FEA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AA76DED689FD4420809D0962087A03BCF018FEA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/4AA76DED689FD4420809D0962087A03BCF018FEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:bc:e0:f4:bc:73:cc:03:61:39:14:34:c1:1d:6c:64:93:91: 38:cc:49:c4:1f:29:9d:fc:5c:cc:da:a0:98:f4:6d:23:58:f7: 25:7f:a2:e6:cb:04:ec:80:2b:dc:e5:39:5e:c4:68:a8:ec:e9: 84:27:4c:06:e6:4c:02:00:fa:f0:88:e2:6c:65:bd:76:4a:07: 39:79:93:5f:8b:2a:b3:53:de:00:df:fa:2c:98:42:89:1c:de: a6:5f:c9:29:11:78:b9:01:88:20:a2:b7:92:5b:d6:84:71:8c: af:11:eb:2a:56:d7:9f:0f:e2:d9:06:a5:4e:f3:9d:9a:8b:1e: 5b:65:9c:72:61:b9:7f:64:65:a9:f4:cb:af:15:9f:64:45:eb: e4:a0:b5:d9:17:d7:3c:d7:59:ec:68:f7:1f:2d:59:c7:6b:37: 78:b6:c1:e6:7d:9f:1a:a1:4b:dd:9d:c0:98:93:8a:2e:62:0e: a3:0b:2a:23:a7:d9:fb:c5:4b:96:36:f0:e9:c8:f4:0d:a1:76: a8:37:a2:0c:9b:e2:94:63:44:1e:ac:d6:5b:3e:5c:8e:e8:de: 9f:d4:61:3e:e5:fe:a8:32:6c:b7:38:60:c1:2c:7f:bb:db:a9: 20:22:24:af:5b:6d:10:8f:34:f0:40:5c:bd:f6:74:25:1e:ef: 98:73:4a:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS0J2lfOpszDXiTpl9wk8MhnmChEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFBNzZERUQ2ODlGRDQ0MjA4MDlEMDk2MjA4N0EwM0JD RjAxOEZFQTAeFw0yNTA0MjUwMzA2MzlaFw0yNTA0MjgxMjU1MzlaMDMxMTAvBgNV BAMTKDE4NTRCNTAzMEVGNDNDQTk0OUUxOTUzRDhCRkVCNzA1REIwN0VBMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPoOo4Lv5rc5tEbXRkG8n6vXqj kuwcBomNgQzz8a6gmXhdNbnkiXC7ZIqXD3IK+m3OhYaxr3PmBWKXabYb3zDdgDih 6eSHVN07+0KZbYDULmphc/h/6TenAOBVb2OMeLmN6j13m13hD0tAg+QmaCwqG+vq h4X8eAh0M82eWJxYz69vMI9D8hGg/YRf48eugVuV3EHqUKQJ5OKyL23sD5EasNcZ O9l0TdTRF2hvAb2NIWsOzjrUlzOC06SRFewHf7tSTPKwhtui593FUlMkbywVTN72 fv4C8GKrmzHd8Z1vd3Q9qoxeM1zh2fAQAbKKbVL6/TlAY2Bin7UQ0bELFW0bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGFS1Aw70PKlJ4ZU9i/63BdsH6iUwHwYDVR0j BBgwFoAUSqdt7Wif1EIICdCWIIegO88Bj+owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzI4MGFmMy1hYTFkLTQyNzEtOGMwNi1hM2ZhMjg4OTg0MjYvMC80QUE3NkRFRDY4 OUZENDQyMDgwOUQwOTYyMDg3QTAzQkNGMDE4RkVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEFBNzZERUQ2ODlGRDQ0MjA4MDlEMDk2MjA4N0EwM0JDRjAx OEZFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmMyODBhZjMtYWExZC00MjcxLThj MDYtYTNmYTI4ODk4NDI2LzAvNEFBNzZERUQ2ODlGRDQ0MjA4MDlEMDk2MjA4N0Ew M0JDRjAxOEZFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJq84PS8c8wDYTkUNMEdbGSTkTjMScQfKZ38 XMzaoJj0bSNY9yV/oubLBOyAK9zlOV7EaKjs6YQnTAbmTAIA+vCI4mxlvXZKBzl5 k1+LKrNT3gDf+iyYQokc3qZfySkReLkBiCCit5Jb1oRxjK8R6ypW158P4tkGpU7z nZqLHltlnHJhuX9kZan0y68Vn2RF6+SgtdkX1zzXWexo9x8tWcdrN3i2weZ9nxqh S92dwJiTii5iDqMLKiOn2fvFS5Y28OnI9A2hdqg3ogyb4pRjRB6s1ls+XI7o3p/U YT7l/qgybLc4YMEsf7vbqSAiJK9bbRCPNPBAXL32dCUe75hzSt8= -----END CERTIFICATE-----Generated at Fri Apr 25 06:02:22 2025 by rpki-client on console.sobornost.net