$ rpki-client -vvf repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.mft File: 1073C0AF2447C17B85643987B72701D1AE52823D.mft (raw, json) Hash identifier: BLythQ4gWQH83DlQXgkSlEHc9h6lROtNLVPQj3bxoHk= Subject key identifier: 1E:BC:EB:B9:91:B9:26:33:27:D9:11:3E:0B:87:6C:7E:7F:8D:87:56 Authority key identifier: 10:73:C0:AF:24:47:C1:7B:85:64:39:87:B7:27:01:D1:AE:52:82:3D Certificate issuer: /CN=1073C0AF2447C17B85643987B72701D1AE52823D Certificate serial: 5D649C8691EF54DB3B715F75FEBDB47C10F4EE3F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1073C0AF2447C17B85643987B72701D1AE52823D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.mft Manifest number: 8C Signing time: Thu 24 Apr 2025 09:31:04 +0000 Manifest this update: Thu 24 Apr 2025 09:26:04 +0000 Manifest next update: Sun 27 Apr 2025 20:14:04 +0000 Files and hashes: 1: 1073C0AF2447C17B85643987B72701D1AE52823D.crl (hash: j6r4mrNTNC/WVBgq9OEB+oxm769vKUb3EFaKEEkjhr4=) 2: 3135372e31352e3132322e302f32342d3234203d3e20313532333937.roa (hash: PVzIS0ESkEZ67q03gwRLnYkqKCd0joMIjci7Y3exMbQ=) 3: 3135372e31352e3132332e302f32342d3234203d3e20313532333937.roa (hash: pjc/YrdKV/TdiFaIjRayQO8Sqerd8j/hCT2Hki4kTnU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.crl rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1073C0AF2447C17B85643987B72701D1AE52823D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 10:32:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:64:9c:86:91:ef:54:db:3b:71:5f:75:fe:bd:b4:7c:10:f4:ee:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1073C0AF2447C17B85643987B72701D1AE52823D Validity Not Before: Apr 24 09:26:04 2025 GMT Not After : Apr 27 20:14:04 2025 GMT Subject: CN=1EBCEBB991B9263327D9113E0B876C7E7F8D8756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:eb:f8:1c:78:6a:eb:0f:fa:b8:c2:bb:2f:19: 96:74:32:33:90:49:af:60:1b:ed:24:08:8d:22:9e: 90:31:4f:05:17:86:3b:df:4c:cd:c2:54:20:d5:14: b3:00:06:ea:18:ae:c5:e7:81:62:52:8e:ab:2a:dd: 65:cf:c6:31:4d:42:8e:1e:48:02:28:74:e6:e1:20: 33:68:58:74:10:b3:99:29:99:29:1f:93:e7:e8:04: 76:95:e7:4e:e2:60:6d:3c:b0:32:d2:5a:ce:28:ca: 4c:14:6c:c9:5b:00:4e:5b:e2:af:38:16:92:b8:76: 02:6c:49:8c:a3:db:f5:fe:eb:1b:61:df:6d:38:69: e4:35:22:ca:ad:a6:e4:71:5e:56:ae:07:a3:d6:86: 7c:2d:16:30:61:07:c9:6c:e4:0e:6d:87:75:77:a8: 82:84:35:5c:52:51:f8:c0:0d:38:28:cd:6b:34:c3: 5d:1a:42:5e:a0:99:6f:d8:dd:b4:c5:9e:5a:26:be: 38:58:40:5c:e2:1b:54:37:c8:d0:f8:5d:fe:b1:34: 63:24:d9:c7:6c:80:31:f1:09:3e:3c:fa:dd:a2:fc: 2b:07:fe:7a:c7:e8:0e:aa:9e:55:b7:ea:17:82:99: 38:b4:a8:2c:bf:8a:46:87:5f:df:83:df:d1:30:b8: 90:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:BC:EB:B9:91:B9:26:33:27:D9:11:3E:0B:87:6C:7E:7F:8D:87:56 X509v3 Authority Key Identifier: keyid:10:73:C0:AF:24:47:C1:7B:85:64:39:87:B7:27:01:D1:AE:52:82:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1073C0AF2447C17B85643987B72701D1AE52823D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:7b:a2:0d:7d:e0:a8:19:e5:3a:27:ed:c1:6a:dd:a1:c4:8c: 5e:7a:0b:94:b5:9c:54:7d:03:fa:80:fd:e4:6a:a8:19:2c:d9: 7e:89:4b:69:4c:21:c3:b0:3a:5f:9e:aa:72:91:84:37:a1:f4: 69:c1:f3:ae:e1:bb:8a:30:89:7b:2f:6d:9d:ef:a9:ec:c3:b8: 15:a2:ba:24:f0:ca:ee:c9:0f:7a:a0:f9:54:c9:f3:f7:93:4d: bc:f0:3c:8a:2e:d9:78:68:73:53:f6:bf:2d:94:a4:d7:e4:83: 79:53:f8:8c:f7:85:f7:40:dd:03:af:a7:f3:1c:1d:09:b1:09: 4e:f7:ef:24:7f:29:24:0a:65:7c:f4:a7:d5:6f:54:08:08:1f: 2c:9e:4d:f4:cf:59:bf:4f:34:3e:62:34:68:b6:0b:be:d2:4a: d9:c4:5c:dd:4e:cf:e2:65:46:60:ba:63:1d:cb:d9:c2:0a:4d: 5e:c7:60:fc:c0:b4:ad:3d:3c:62:dc:7c:24:e2:9a:9e:64:80: f6:53:8d:60:55:67:5f:c1:ed:08:d6:9e:60:9b:87:6a:32:a7: 51:42:04:4d:90:49:b5:96:45:99:cc:52:fb:8f:07:c6:18:f4: c8:a9:1f:2b:de:b3:03:7c:8c:e9:28:1b:85:12:e3:bc:f0:33: a9:c5:59:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXWSchpHvVNs7cV91/r20fBD07j8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA3M0MwQUYyNDQ3QzE3Qjg1NjQzOTg3QjcyNzAxRDFB RTUyODIzRDAeFw0yNTA0MjQwOTI2MDRaFw0yNTA0MjcyMDE0MDRaMDMxMTAvBgNV BAMTKDFFQkNFQkI5OTFCOTI2MzMyN0Q5MTEzRTBCODc2QzdFN0Y4RDg3NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz6/gceGrrD/q4wrsvGZZ0MjOQ Sa9gG+0kCI0inpAxTwUXhjvfTM3CVCDVFLMABuoYrsXngWJSjqsq3WXPxjFNQo4e SAIodObhIDNoWHQQs5kpmSkfk+foBHaV507iYG08sDLSWs4oykwUbMlbAE5b4q84 FpK4dgJsSYyj2/X+6xth3204aeQ1IsqtpuRxXlauB6PWhnwtFjBhB8ls5A5th3V3 qIKENVxSUfjADTgozWs0w10aQl6gmW/Y3bTFnlomvjhYQFziG1Q3yND4Xf6xNGMk 2cdsgDHxCT48+t2i/CsH/nrH6A6qnlW36heCmTi0qCy/ikaHX9+D39EwuJDFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHrzruZG5JjMn2RE+C4dsfn+Nh1YwHwYDVR0j BBgwFoAUEHPAryRHwXuFZDmHtycB0a5Sgj0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NmRkMTVlMy05ZWU1LTRkNTItOWVlZS03MTJiYjNiN2JmZmIvMC8xMDczQzBBRjI0 NDdDMTdCODU2NDM5ODdCNzI3MDFEMUFFNTI4MjNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTA3M0MwQUYyNDQ3QzE3Qjg1NjQzOTg3QjcyNzAxRDFBRTUy ODIzRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzZkZDE1ZTMtOWVlNS00ZDUyLTll ZWUtNzEyYmIzYjdiZmZiLzAvMTA3M0MwQUYyNDQ3QzE3Qjg1NjQzOTg3QjcyNzAx RDFBRTUyODIzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACJ7og194KgZ5Ton7cFq3aHEjF56C5S1nFR9 A/qA/eRqqBks2X6JS2lMIcOwOl+eqnKRhDeh9GnB867hu4owiXsvbZ3vqezDuBWi uiTwyu7JD3qg+VTJ8/eTTbzwPIou2Xhoc1P2vy2UpNfkg3lT+Iz3hfdA3QOvp/Mc HQmxCU737yR/KSQKZXz0p9VvVAgIHyyeTfTPWb9PND5iNGi2C77SStnEXN1Oz+Jl RmC6Yx3L2cIKTV7HYPzAtK09PGLcfCTimp5kgPZTjWBVZ1/B7QjWnmCbh2oyp1FC BE2QSbWWRZnMUvuPB8YY9MipHyveswN8jOkoG4US47zwM6nFWVY= -----END CERTIFICATE-----Generated at Thu Apr 24 11:25:12 2025 by rpki-client on console.sobornost.net