$ rpki-client -vvf repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.mft File: 945AD192B10F71CE48362295A9C6281FE3395786.mft (raw, json) Hash identifier: LprmjRavnU7M4yGav0HUqOCVRts9Snx5nCrcqMKsJUQ= Subject key identifier: 29:F3:99:8F:25:F1:8B:0A:EC:9E:85:77:70:CA:E5:B4:8D:BD:ED:97 Authority key identifier: 94:5A:D1:92:B1:0F:71:CE:48:36:22:95:A9:C6:28:1F:E3:39:57:86 Certificate issuer: /CN=945AD192B10F71CE48362295A9C6281FE3395786 Certificate serial: 115623919D32EBCCDBBF53EE89375C21F6AC44EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/945AD192B10F71CE48362295A9C6281FE3395786.cer Subject info access: rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.mft Manifest number: 01D1 Signing time: Fri 25 Apr 2025 10:02:08 +0000 Manifest this update: Fri 25 Apr 2025 09:57:08 +0000 Manifest next update: Mon 28 Apr 2025 18:24:08 +0000 Files and hashes: 1: 945AD192B10F71CE48362295A9C6281FE3395786.crl (hash: qd+VEtXZcMSiM3wIIYCG5utdNWxQII10SP5mdlPfxT8=) 2: 3130332e3138392e39342e302f32332d3234203d3e2034383030.roa (hash: HzhAdkWVPqyzjRfrKdf+sGJ5e8Q6OGeF8fvX/eoLEO8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.crl rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/945AD192B10F71CE48362295A9C6281FE3395786.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 14:02:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:56:23:91:9d:32:eb:cc:db:bf:53:ee:89:37:5c:21:f6:ac:44:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=945AD192B10F71CE48362295A9C6281FE3395786 Validity Not Before: Apr 25 09:57:08 2025 GMT Not After : Apr 28 18:24:08 2025 GMT Subject: CN=29F3998F25F18B0AEC9E857770CAE5B48DBDED97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:88:d2:79:d9:cd:6a:55:19:b3:fc:76:c2:5c: 05:5c:cc:b2:c0:18:f4:e4:9e:bf:dc:4e:6d:71:4f: cd:c4:f4:87:5e:e4:7f:63:06:b9:f9:c9:ca:1c:b0: 46:44:88:1a:b2:7c:f3:86:19:d6:3a:01:bf:c8:8b: 19:44:48:ab:5e:86:cb:f6:22:f0:9c:3e:88:78:ef: 62:30:f6:a5:6c:7a:53:ae:36:e1:c3:5c:34:05:72: 20:30:33:36:7f:4b:ff:f5:3b:df:9e:1a:d7:52:5e: 47:df:e6:39:b2:0a:73:c1:e7:a1:df:58:af:0d:7f: d9:a5:b2:61:fa:fb:ed:f3:06:55:70:4f:87:f0:e1: 6d:4c:36:aa:62:9b:8d:af:3b:14:73:ff:eb:0b:1c: b2:85:28:81:ec:dd:86:17:5c:06:6b:9d:cb:81:7e: 41:5c:8c:77:4e:b1:36:de:70:6e:bf:6f:07:6b:d3: a4:58:70:2e:ea:18:20:81:d3:e8:43:77:b0:3c:5a: f3:a7:69:57:7e:60:88:13:77:93:47:01:97:3c:7d: e7:cd:90:bc:7f:c2:6f:0b:75:4b:77:3e:3c:54:b7: 6f:81:1d:3e:a5:fe:20:d5:49:bc:f8:5e:a2:f2:94: 11:2d:8a:83:9d:21:f4:96:cf:31:24:b4:cb:79:cd: e0:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:F3:99:8F:25:F1:8B:0A:EC:9E:85:77:70:CA:E5:B4:8D:BD:ED:97 X509v3 Authority Key Identifier: keyid:94:5A:D1:92:B1:0F:71:CE:48:36:22:95:A9:C6:28:1F:E3:39:57:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/945AD192B10F71CE48362295A9C6281FE3395786.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:5d:40:7b:e2:a1:89:a2:e0:5a:91:3e:cc:b5:9a:07:7f:c4: af:c0:c7:49:46:2a:67:32:a3:69:8f:d3:0a:60:22:e9:39:f4: b6:64:31:ad:04:cb:ba:85:65:f1:ef:db:9d:0f:13:d9:a3:64: bd:81:bb:f7:c9:65:66:27:08:32:32:a9:f2:f3:0c:8b:2b:3d: 39:47:cc:b1:0a:e6:cc:1c:04:9d:9f:0d:27:e7:bd:3d:40:ee: 60:64:95:ec:61:ac:1c:71:68:ab:7f:f4:82:ab:16:9d:c6:7a: 30:5e:c8:1b:ed:17:53:35:f5:e7:46:5b:11:2e:2f:2c:3b:1b: cd:30:c5:82:3a:37:93:9b:48:4b:f3:00:74:9e:8e:82:4a:9e: 77:b8:6a:e6:c9:bc:f9:54:f2:cf:5f:f8:f3:24:f2:1e:19:81: 0d:12:6c:c1:ff:2c:46:ef:eb:16:3d:d9:b0:91:78:90:d9:af: 4f:01:84:f0:37:93:6c:0c:17:6d:9c:f8:bf:a3:f5:ac:06:7f: 07:82:68:5a:df:3c:c8:b0:76:0e:0b:a2:7e:5b:12:32:30:d5: ff:30:05:3e:a7:fa:e2:92:b5:3d:01:ae:2d:3f:14:4a:46:b9: 8d:f0:c1:52:f7:ce:dc:33:c7:a1:de:ce:29:1a:ab:a1:d7:6d: de:2a:57:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEVYjkZ0y68zbv1PuiTdcIfasROowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQ1QUQxOTJCMTBGNzFDRTQ4MzYyMjk1QTlDNjI4MUZF MzM5NTc4NjAeFw0yNTA0MjUwOTU3MDhaFw0yNTA0MjgxODI0MDhaMDMxMTAvBgNV BAMTKDI5RjM5OThGMjVGMThCMEFFQzlFODU3NzcwQ0FFNUI0OERCREVEOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4iNJ52c1qVRmz/HbCXAVczLLA GPTknr/cTm1xT83E9Ide5H9jBrn5ycocsEZEiBqyfPOGGdY6Ab/IixlESKtehsv2 IvCcPoh472Iw9qVselOuNuHDXDQFciAwMzZ/S//1O9+eGtdSXkff5jmyCnPB56Hf WK8Nf9mlsmH6++3zBlVwT4fw4W1MNqpim42vOxRz/+sLHLKFKIHs3YYXXAZrncuB fkFcjHdOsTbecG6/bwdr06RYcC7qGCCB0+hDd7A8WvOnaVd+YIgTd5NHAZc8fefN kLx/wm8LdUt3PjxUt2+BHT6l/iDVSbz4XqLylBEtioOdIfSWzzEktMt5zeDbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKfOZjyXxiwrsnoV3cMrltI297ZcwHwYDVR0j BBgwFoAUlFrRkrEPcc5INiKVqcYoH+M5V4YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 M2E1MjA0NS1hNmZjLTQ1YjEtYmU1OS04MjU3MzVjOTZmNTQvMC85NDVBRDE5MkIx MEY3MUNFNDgzNjIyOTVBOUM2MjgxRkUzMzk1Nzg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTQ1QUQxOTJCMTBGNzFDRTQ4MzYyMjk1QTlDNjI4MUZFMzM5 NTc4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDNhNTIwNDUtYTZmYy00NWIxLWJl NTktODI1NzM1Yzk2ZjU0LzAvOTQ1QUQxOTJCMTBGNzFDRTQ4MzYyMjk1QTlDNjI4 MUZFMzM5NTc4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADxdQHvioYmi4FqRPsy1mgd/xK/Ax0lGKmcy o2mP0wpgIuk59LZkMa0Ey7qFZfHv250PE9mjZL2Bu/fJZWYnCDIyqfLzDIsrPTlH zLEK5swcBJ2fDSfnvT1A7mBklexhrBxxaKt/9IKrFp3GejBeyBvtF1M19edGWxEu Lyw7G80wxYI6N5ObSEvzAHSejoJKnne4aubJvPlU8s9f+PMk8h4ZgQ0SbMH/LEbv 6xY92bCReJDZr08BhPA3k2wMF22c+L+j9awGfweCaFrfPMiwdg4Lon5bEjIw1f8w BT6n+uKStT0Bri0/FEpGuY3wwVL3ztwzx6Hezikaq6HXbd4qV/I= -----END CERTIFICATE-----Generated at Fri Apr 25 12:54:06 2025 by rpki-client on console.sobornost.net