$ rpki-client -vvf repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.mft File: A61585874729C58BB62740692BA8FA6ED286FDC9.mft (raw, json) Hash identifier: okKi9LX7gMTUsbbJqNGLlUK1T+zfhdrBOrF/2bh1X4E= Subject key identifier: 4E:12:78:93:1A:11:75:05:F6:34:D3:32:D3:2E:CB:E3:C9:6A:E9:2D Authority key identifier: A6:15:85:87:47:29:C5:8B:B6:27:40:69:2B:A8:FA:6E:D2:86:FD:C9 Certificate issuer: /CN=A61585874729C58BB62740692BA8FA6ED286FDC9 Certificate serial: 05B6E5E8E527DE6B83AA566A996EB08B7522E73C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A61585874729C58BB62740692BA8FA6ED286FDC9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.mft Manifest number: 01AB Signing time: Thu 24 Apr 2025 00:51:57 +0000 Manifest this update: Thu 24 Apr 2025 00:46:57 +0000 Manifest next update: Sun 27 Apr 2025 10:54:57 +0000 Files and hashes: 1: A61585874729C58BB62740692BA8FA6ED286FDC9.crl (hash: q700m52U3EauRKx5c4YDrGlSE+L+mzrHzrHDhxMFdfA=) 2: 3130332e3234352e3137382e302f32332d3233203d3e2039333431.roa (hash: JQ2sbHxQyDFZhgbZypy5jZxgy9AwBRkpTank5bXdFdU=) 3: 3130332e3234352e3137392e302f32342d3234203d3e2039333431.roa (hash: dJLGbPNETK4Ljwpxmc7fr7zDeLYDSeJTvSKzUm9sVu4=) 4: 3130332e3234352e3137382e302f32342d3234203d3e2039333431.roa (hash: VHj+BrkZ6iMwd6Ih4uLfhywh2RJ8HhOVFUyFHjtmvfI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.crl rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A61585874729C58BB62740692BA8FA6ED286FDC9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 08:10:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:b6:e5:e8:e5:27:de:6b:83:aa:56:6a:99:6e:b0:8b:75:22:e7:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A61585874729C58BB62740692BA8FA6ED286FDC9 Validity Not Before: Apr 24 00:46:57 2025 GMT Not After : Apr 27 10:54:57 2025 GMT Subject: CN=4E1278931A117505F634D332D32ECBE3C96AE92D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7b:0e:c8:81:de:76:fb:dd:a0:b2:5f:7b:2b: 26:52:25:25:dd:af:ec:f9:f1:b8:2f:19:74:b8:88: a0:64:6b:93:07:66:b6:cf:e6:be:dc:da:40:af:3b: 8d:c7:e8:df:bd:5c:c7:76:43:a8:99:57:3f:59:12: 6d:84:a8:b7:2b:f8:09:42:6f:94:9f:34:07:94:1e: 74:80:75:89:ca:d6:3a:58:31:8f:aa:b9:d5:5f:b5: 94:0f:54:42:45:df:ad:33:e0:55:5b:87:a7:c0:3c: b2:ae:7f:04:d1:a7:73:40:e5:13:63:10:2e:8a:fb: 2b:f6:fc:af:2b:b9:a1:5a:90:84:bc:94:f5:9f:9c: 81:3f:6b:ab:cb:1e:8d:ba:7c:8b:f7:16:67:d9:80: f4:af:22:31:4b:cf:4d:ee:0d:2d:11:5e:29:91:d9: f1:58:f1:05:90:9f:f3:cc:34:ad:70:18:72:74:da: 5f:c3:7f:76:c7:87:4e:87:1b:63:66:22:32:26:f1: ad:62:f4:b0:f2:c4:b3:f6:7c:cf:d1:ae:ac:9e:a6: 34:4f:e5:3e:56:dd:82:68:0a:48:b9:b3:5e:2e:6a: a7:a4:6c:f3:96:51:81:bd:3f:7d:5f:bd:de:bb:10: 42:7c:8d:d8:a8:c6:a5:79:1f:f4:92:f4:9a:42:70: 93:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:12:78:93:1A:11:75:05:F6:34:D3:32:D3:2E:CB:E3:C9:6A:E9:2D X509v3 Authority Key Identifier: keyid:A6:15:85:87:47:29:C5:8B:B6:27:40:69:2B:A8:FA:6E:D2:86:FD:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A61585874729C58BB62740692BA8FA6ED286FDC9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:a4:d5:05:21:40:84:a3:ed:52:21:9b:37:8e:76:d7:d2:76: a0:a0:40:7c:a8:d5:9d:15:86:44:86:92:59:86:0d:1a:eb:54: 70:8a:44:b9:1d:60:7e:fd:a3:b6:37:21:c3:3c:10:c6:ed:a8: 6c:16:94:86:fd:20:5c:ed:c3:0f:ac:17:b4:23:73:46:7b:9d: a4:c5:a5:4b:d6:ac:49:6a:d1:9e:c1:1e:4d:ee:fe:4b:19:d9: 45:90:5c:52:f3:85:26:a8:e5:34:be:32:69:38:05:96:16:cd: 50:e3:57:e4:da:47:68:87:b7:cd:8a:71:9f:fb:1d:69:a0:54: c4:0a:06:b4:09:40:75:68:82:9f:dc:86:dd:e4:99:ba:69:9b: d9:df:46:57:ef:bd:21:f6:57:9a:89:4d:5e:74:57:9b:ab:46: bc:97:75:3c:6c:c6:e2:ec:da:81:56:a2:30:4d:aa:c7:af:13: bc:a0:63:93:40:72:2d:9d:ea:f1:06:63:4c:11:38:4f:49:15: 93:24:ee:5c:57:33:cf:36:e6:4f:00:07:fc:a2:ed:69:66:88: 10:5d:36:8e:77:68:42:e3:72:0d:44:5c:40:ca:29:0e:0b:b1: 61:b5:f1:42:03:27:03:18:ef:fa:15:7c:fd:69:ab:b1:5d:b0: 08:4e:9d:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBbbl6OUn3muDqlZqmW6wi3Ui5zwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTYxNTg1ODc0NzI5QzU4QkI2Mjc0MDY5MkJBOEZBNkVE Mjg2RkRDOTAeFw0yNTA0MjQwMDQ2NTdaFw0yNTA0MjcxMDU0NTdaMDMxMTAvBgNV BAMTKDRFMTI3ODkzMUExMTc1MDVGNjM0RDMzMkQzMkVDQkUzQzk2QUU5MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJew7Igd52+92gsl97KyZSJSXd r+z58bgvGXS4iKBka5MHZrbP5r7c2kCvO43H6N+9XMd2Q6iZVz9ZEm2EqLcr+AlC b5SfNAeUHnSAdYnK1jpYMY+qudVftZQPVEJF360z4FVbh6fAPLKufwTRp3NA5RNj EC6K+yv2/K8ruaFakIS8lPWfnIE/a6vLHo26fIv3FmfZgPSvIjFLz03uDS0RXimR 2fFY8QWQn/PMNK1wGHJ02l/Df3bHh06HG2NmIjIm8a1i9LDyxLP2fM/RrqyepjRP 5T5W3YJoCki5s14uaqekbPOWUYG9P31fvd67EEJ8jdioxqV5H/SS9JpCcJNDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUThJ4kxoRdQX2NNMy0y7L48lq6S0wHwYDVR0j BBgwFoAUphWFh0cpxYu2J0BpK6j6btKG/ckwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NzBjNDc1OS00M2I4LTRlODAtYmU4Yy04M2NiZTlmODIzMWIvMC9BNjE1ODU4NzQ3 MjlDNThCQjYyNzQwNjkyQkE4RkE2RUQyODZGREM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTYxNTg1ODc0NzI5QzU4QkI2Mjc0MDY5MkJBOEZBNkVEMjg2 RkRDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzcwYzQ3NTktNDNiOC00ZTgwLWJl OGMtODNjYmU5ZjgyMzFiLzAvQTYxNTg1ODc0NzI5QzU4QkI2Mjc0MDY5MkJBOEZB NkVEMjg2RkRDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFGk1QUhQISj7VIhmzeOdtfSdqCgQHyo1Z0V hkSGklmGDRrrVHCKRLkdYH79o7Y3IcM8EMbtqGwWlIb9IFztww+sF7Qjc0Z7naTF pUvWrElq0Z7BHk3u/ksZ2UWQXFLzhSao5TS+Mmk4BZYWzVDjV+TaR2iHt82KcZ/7 HWmgVMQKBrQJQHVogp/cht3kmbppm9nfRlfvvSH2V5qJTV50V5urRryXdTxsxuLs 2oFWojBNqsevE7ygY5NAci2d6vEGY0wROE9JFZMk7lxXM8825k8AB/yi7WlmiBBd No53aELjcg1EXEDKKQ4LsWG18UIDJwMY7/oVfP1pq7FdsAhOnRI= -----END CERTIFICATE-----Generated at Thu Apr 24 04:31:37 2025 by rpki-client on console.sobornost.net