$ rpki-client -vvf repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft File: 4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft (raw, json) Hash identifier: fU97DJVhYAwUcUhopFpd+k+VFodS7FD0q/lhE0YeHdA= Subject key identifier: D6:C8:7E:E2:E8:CD:FE:21:3B:A8:B3:8C:9E:8C:96:F6:24:89:6E:C9 Authority key identifier: 4A:C7:DC:D8:EB:12:34:AD:C4:27:AE:BE:39:49:E8:69:16:38:A7:07 Certificate issuer: /CN=4AC7DCD8EB1234ADC427AEBE3949E8691638A707 Certificate serial: 2D63A5241CD481161E6CAF781ABFC90A275AFE73 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer Subject info access: rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft Manifest number: 01D0 Signing time: Wed 23 Apr 2025 16:40:43 +0000 Manifest this update: Wed 23 Apr 2025 16:35:43 +0000 Manifest next update: Sat 26 Apr 2025 18:23:43 +0000 Files and hashes: 1: 4AC7DCD8EB1234ADC427AEBE3949E8691638A707.crl (hash: mON8vs+JxgBuZH5HBaI6+a/+3VufuanOp8S5/oM/2Sg=) 2: 3131392e322e36342e302f31392d3234203d3e203137343530.roa (hash: IjDU6VchKiVRt/VpnNfkp1NDPemNIu86cnCMdMAMgr8=) 3: 3230322e362e3230382e302f32302d3234203d3e203137343530.roa (hash: wpi+A3QiGq0ZlH1T9XK03PNS16oXniLKGOp2khUpYoA=) 4: 3130332e382e39362e302f32322d3234203d3e203137343530.roa (hash: E/ANh8Obcj2c5y2FA6Ly1F0NL4tMRGMfZqDmckfRl5E=) 5: 323030313a6466363a366630303a3a2f34382d3438203d3e20313331373034.roa (hash: 3CBY+1byt2hh1kG4N61+QCfs3v8FSbnr3cgZmaX/kYc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.crl rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 18:23:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:63:a5:24:1c:d4:81:16:1e:6c:af:78:1a:bf:c9:0a:27:5a:fe:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AC7DCD8EB1234ADC427AEBE3949E8691638A707 Validity Not Before: Apr 23 16:35:43 2025 GMT Not After : Apr 26 18:23:43 2025 GMT Subject: CN=D6C87EE2E8CDFE213BA8B38C9E8C96F624896EC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e9:6b:7a:67:e1:d9:ab:e0:33:3f:cb:6b:58: cc:c2:c5:a2:6d:1d:68:0c:2b:f6:8c:bc:59:eb:5b: 61:a2:de:b1:0b:0f:8b:91:56:08:66:7a:19:d6:60: 82:bd:3b:c5:5a:ba:33:91:58:7b:77:93:02:3d:55: ce:7d:b0:73:2a:bb:44:81:b6:90:72:b2:07:af:4a: 92:25:96:cb:d4:3b:70:4d:1f:4c:64:ec:15:d4:f7: 1c:05:84:cb:03:4e:4f:c0:20:75:e6:bb:60:51:9e: 7a:ce:5e:f1:7f:37:c3:a9:4c:79:b0:b8:58:af:e7: c4:24:e2:87:47:76:00:58:ce:c3:90:ef:fa:46:27: 80:37:05:ef:a6:8e:e4:7f:c7:68:97:9c:b1:d4:f7: 47:8e:ad:05:f2:5e:78:a0:67:cc:e7:f7:3f:87:2b: e4:10:0e:91:aa:b6:d0:cf:ee:3a:24:0d:43:6a:34: 43:fb:ea:9b:82:23:fd:f9:0b:a4:8f:32:03:1a:b7: 08:e9:92:e4:3a:ee:f4:46:5c:98:a8:0c:68:13:2c: da:28:e0:d1:95:8f:66:ff:c6:44:bc:7e:ce:53:45: 98:0c:3e:83:88:33:01:eb:24:f4:02:8a:d4:eb:45: dc:b3:f2:05:36:1c:b2:c8:79:41:c2:1c:70:c9:20: 0e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:C8:7E:E2:E8:CD:FE:21:3B:A8:B3:8C:9E:8C:96:F6:24:89:6E:C9 X509v3 Authority Key Identifier: keyid:4A:C7:DC:D8:EB:12:34:AD:C4:27:AE:BE:39:49:E8:69:16:38:A7:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d7:89:5c:af:c1:67:f2:e2:40:13:38:0a:de:ea:96:97:1a:fe: 59:97:0b:54:58:c2:3f:3d:a4:f0:0b:5a:09:87:bd:fb:0a:d5: af:4c:af:af:47:6d:60:ee:79:e8:31:88:ab:f9:7d:59:45:f3: 17:06:88:9d:34:f6:bd:0c:ca:ef:1f:fb:bf:89:9f:7c:c0:e9: 2f:7f:61:36:bd:a8:96:d6:9e:69:55:78:8e:41:8b:75:d0:0f: bd:84:80:6e:4b:d6:27:b0:20:31:5e:41:80:0d:e5:1e:3e:b7: 06:a2:69:d2:f5:db:1e:a8:37:05:9c:5f:13:a8:fa:d8:1b:e5: 9f:e7:9b:60:f5:9b:d9:4f:f5:4f:00:8d:d6:fa:b5:04:5b:94: 28:6b:d1:02:3a:63:b6:67:21:84:46:02:b4:cd:94:02:95:63: 6b:03:46:79:3a:12:95:14:3f:4c:52:17:25:31:77:a4:7e:fd: 97:b4:d0:7d:15:c4:99:dd:e5:64:6a:32:31:22:1a:fe:0d:ea: ca:95:f8:ac:0e:db:5f:21:38:98:bc:04:2c:b8:19:d5:3b:eb: 7b:86:35:ee:e8:7c:34:5f:89:55:ec:fb:95:6b:03:5e:2c:50: b0:ff:f4:c6:61:40:59:a5:41:6c:db:cb:85:80:8c:3d:81:3a: 94:da:7e:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULWOlJBzUgRYebK94Gr/JCida/nMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFDN0RDRDhFQjEyMzRBREM0MjdBRUJFMzk0OUU4Njkx NjM4QTcwNzAeFw0yNTA0MjMxNjM1NDNaFw0yNTA0MjYxODIzNDNaMDMxMTAvBgNV BAMTKEQ2Qzg3RUUyRThDREZFMjEzQkE4QjM4QzlFOEM5NkY2MjQ4OTZFQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC6Wt6Z+HZq+AzP8trWMzCxaJt HWgMK/aMvFnrW2Gi3rELD4uRVghmehnWYIK9O8VaujORWHt3kwI9Vc59sHMqu0SB tpBysgevSpIllsvUO3BNH0xk7BXU9xwFhMsDTk/AIHXmu2BRnnrOXvF/N8OpTHmw uFiv58Qk4odHdgBYzsOQ7/pGJ4A3Be+mjuR/x2iXnLHU90eOrQXyXnigZ8zn9z+H K+QQDpGqttDP7jokDUNqNEP76puCI/35C6SPMgMatwjpkuQ67vRGXJioDGgTLNoo 4NGVj2b/xkS8fs5TRZgMPoOIMwHrJPQCitTrRdyz8gU2HLLIeUHCHHDJIA4fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1sh+4ujN/iE7qLOMnoyW9iSJbskwHwYDVR0j BBgwFoAUSsfc2OsSNK3EJ66+OUnoaRY4pwcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MzgwNjFmMS1mYTMwLTRiZDYtODFhMC0yZWM2NzA4MzZjNDIvMC80QUM3RENEOEVC MTIzNEFEQzQyN0FFQkUzOTQ5RTg2OTE2MzhBNzA3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEFDN0RDRDhFQjEyMzRBREM0MjdBRUJFMzk0OUU4NjkxNjM4 QTcwNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDM4MDYxZjEtZmEzMC00YmQ2LTgx YTAtMmVjNjcwODM2YzQyLzAvNEFDN0RDRDhFQjEyMzRBREM0MjdBRUJFMzk0OUU4 NjkxNjM4QTcwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANeJXK/BZ/LiQBM4Ct7qlpca/lmXC1RYwj89 pPALWgmHvfsK1a9Mr69HbWDueegxiKv5fVlF8xcGiJ009r0Myu8f+7+Jn3zA6S9/ YTa9qJbWnmlVeI5Bi3XQD72EgG5L1iewIDFeQYAN5R4+twaiadL12x6oNwWcXxOo +tgb5Z/nm2D1m9lP9U8Ajdb6tQRblChr0QI6Y7ZnIYRGArTNlAKVY2sDRnk6EpUU P0xSFyUxd6R+/Ze00H0VxJnd5WRqMjEiGv4N6sqV+KwO218hOJi8BCy4GdU763uG Ne7ofDRfiVXs+5VrA14sULD/9MZhQFmlQWzby4WAjD2BOpTafuo= -----END CERTIFICATE-----Generated at Wed Apr 23 19:50:40 2025 by rpki-client on console.sobornost.net