$ rpki-client -vvf repo-rpki.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.mft File: CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.mft (raw, json) Hash identifier: XNpH7jkgu/j2v2HgKHLtRT2KCEBO1JpkJZvITwdmeEU= Subject key identifier: BE:C1:1F:94:1A:48:FB:86:FD:2C:04:87:D4:C2:1D:00:65:44:AA:7A Authority key identifier: CA:70:4F:78:5E:A5:8B:3F:65:9E:6E:3C:8F:71:E2:D4:CF:D7:E2:6C Certificate issuer: /CN=CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C Certificate serial: 2FDA9135AD9D0100E73DC8AEB9507A80793484B8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.mft Manifest number: 033D Signing time: Wed 23 Apr 2025 18:22:11 +0000 Manifest this update: Wed 23 Apr 2025 18:17:11 +0000 Manifest next update: Sun 27 Apr 2025 05:03:11 +0000 Files and hashes: 1: CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.crl (hash: YbxgTSdMxCm5PGHXHArR5zpoK53rdv8CuyK9CfB7CXU=) 2: 323030313a6466303a663730303a3a2f34382d3438203d3e20313339333939.roa (hash: iv2SAjyHSWCSm/Qp+qCzqgF4lXDrzm6Us1pHd8OSMEA=) 3: 3132332e3235332e3234342e302f32322d3234203d3e20313339333939.roa (hash: rNa2on5+DMAnzayjr8XpEII8JqHWgOprf/5TlZrlTb0=) 4: 3130332e39312e32382e302f32322d3234203d3e203338343936.roa (hash: fYk1A/6JlSofdoRQTxZ35IGs4jax1F7uqVxTxU6HBk4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.crl rsync://repo-rpki.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 02:40:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:da:91:35:ad:9d:01:00:e7:3d:c8:ae:b9:50:7a:80:79:34:84:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C Validity Not Before: Apr 23 18:17:11 2025 GMT Not After : Apr 27 05:03:11 2025 GMT Subject: CN=BEC11F941A48FB86FD2C0487D4C21D006544AA7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b0:51:30:5c:5e:89:19:c3:63:a8:9b:79:e3: cb:38:25:cd:50:a4:c4:25:bb:d0:f7:cd:bf:05:c7: 05:59:5d:01:47:4d:e0:ef:31:7c:f6:3e:aa:2f:11: 9e:81:cf:61:cf:43:01:28:54:a6:ee:a0:96:29:5a: 3f:35:6b:c2:ec:fd:41:38:fe:f1:d0:31:04:d5:ca: 0f:5b:73:de:c0:f2:d0:d6:ad:3e:b0:89:1b:32:ba: 6d:b6:71:bb:67:e1:4d:0a:33:74:ba:89:38:19:38: 85:64:8e:64:6c:2a:51:f9:16:9b:d4:47:84:0f:c9: c6:c8:f2:a6:0f:af:1f:ee:d5:7c:21:b5:a6:88:db: 8a:e9:0f:10:ad:c1:70:e6:12:b9:d0:3f:92:ab:de: 15:c1:c6:89:93:9f:bd:91:b8:19:3f:25:1b:c2:4e: a5:d2:7d:d5:52:b2:4b:0d:2f:55:fe:d3:c6:6a:00: 83:c2:b2:e9:b5:b5:63:e3:16:d1:d0:f8:27:03:61: 3e:9f:81:48:1e:cf:52:51:85:57:fb:57:0b:b1:0a: 61:a0:23:ba:5a:e4:15:76:e7:95:c1:de:58:67:80: 30:7a:8e:ad:c9:52:b1:4a:3b:fe:e2:17:ef:8e:c8: c5:33:26:21:e0:55:b5:63:74:d1:9a:e7:45:5f:19: 5c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:C1:1F:94:1A:48:FB:86:FD:2C:04:87:D4:C2:1D:00:65:44:AA:7A X509v3 Authority Key Identifier: keyid:CA:70:4F:78:5E:A5:8B:3F:65:9E:6E:3C:8F:71:E2:D4:CF:D7:E2:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:66:50:6b:ea:d6:d0:75:fd:28:db:ed:af:a2:1f:d3:c2:08: fa:c6:96:dd:b1:14:b7:09:9d:15:aa:0b:4f:8e:68:ca:c4:36: d0:90:02:4e:63:90:1e:06:eb:db:60:c3:fe:5d:a9:31:7f:17: ba:70:18:ad:e3:3b:9c:f7:1b:bd:95:f6:b7:df:3a:28:d8:9f: df:ad:c7:b5:7d:f2:d8:39:8f:9b:95:42:4b:da:de:b3:21:12: 2e:8a:a6:59:e6:75:d2:47:7d:1d:ee:88:16:c4:a3:1f:1c:50: 9b:ae:5b:94:65:af:f3:ad:f5:80:f0:8e:0d:41:d6:4b:d2:ae: f9:6f:8a:ab:a4:e7:c5:71:25:fa:12:36:e1:6c:27:95:27:53: 91:b2:b0:eb:9f:4f:95:dc:ea:0c:e3:20:3c:32:51:82:fd:fd: 56:d3:24:02:08:6f:04:e9:e0:1a:84:e0:7a:6c:8d:69:2d:61: 9f:1b:3f:3e:a8:64:2e:d5:3a:8d:fe:a4:60:9d:8e:46:3a:1f: 0f:42:5a:12:41:fa:7d:23:bb:b3:37:87:ad:1d:49:8a:12:1d: 66:d5:67:44:b6:db:48:af:fa:41:f9:15:e0:91:27:41:a4:04: d7:f1:a1:43:19:e4:75:aa:97:8b:f1:32:0c:b0:19:a6:a0:ab: 09:1d:26:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL9qRNa2dAQDnPciuuVB6gHk0hLgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E3MDRGNzg1RUE1OEIzRjY1OUU2RTNDOEY3MUUyRDRD RkQ3RTI2QzAeFw0yNTA0MjMxODE3MTFaFw0yNTA0MjcwNTAzMTFaMDMxMTAvBgNV BAMTKEJFQzExRjk0MUE0OEZCODZGRDJDMDQ4N0Q0QzIxRDAwNjU0NEFBN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRsFEwXF6JGcNjqJt548s4Jc1Q pMQlu9D3zb8FxwVZXQFHTeDvMXz2PqovEZ6Bz2HPQwEoVKbuoJYpWj81a8Ls/UE4 /vHQMQTVyg9bc97A8tDWrT6wiRsyum22cbtn4U0KM3S6iTgZOIVkjmRsKlH5FpvU R4QPycbI8qYPrx/u1XwhtaaI24rpDxCtwXDmErnQP5Kr3hXBxomTn72RuBk/JRvC TqXSfdVSsksNL1X+08ZqAIPCsum1tWPjFtHQ+CcDYT6fgUgez1JRhVf7VwuxCmGg I7pa5BV255XB3lhngDB6jq3JUrFKO/7iF++OyMUzJiHgVbVjdNGa50VfGVyVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvsEflBpI+4b9LASH1MIdAGVEqnowHwYDVR0j BBgwFoAUynBPeF6liz9lnm48j3Hi1M/X4mwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDIxOTg1Yi1hMGU2LTRlMDUtYmVmNi1mZTZmNWE2ZTJmNDMvMC9DQTcwNEY3ODVF QTU4QjNGNjU5RTZFM0M4RjcxRTJENENGRDdFMjZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0E3MDRGNzg1RUE1OEIzRjY1OUU2RTNDOEY3MUUyRDRDRkQ3 RTI2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQyMTk4NWItYTBlNi00ZTA1LWJl ZjYtZmU2ZjVhNmUyZjQzLzAvQ0E3MDRGNzg1RUE1OEIzRjY1OUU2RTNDOEY3MUUy RDRDRkQ3RTI2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGtmUGvq1tB1/Sjb7a+iH9PCCPrGlt2xFLcJ nRWqC0+OaMrENtCQAk5jkB4G69tgw/5dqTF/F7pwGK3jO5z3G72V9rffOijYn9+t x7V98tg5j5uVQkva3rMhEi6KplnmddJHfR3uiBbEox8cUJuuW5Rlr/Ot9YDwjg1B 1kvSrvlviquk58VxJfoSNuFsJ5UnU5GysOufT5Xc6gzjIDwyUYL9/VbTJAIIbwTp 4BqE4HpsjWktYZ8bPz6oZC7VOo3+pGCdjkY6Hw9CWhJB+n0ju7M3h60dSYoSHWbV Z0S220iv+kH5FeCRJ0GkBNfxoUMZ5HWql4vxMgywGaagqwkdJqM= -----END CERTIFICATE-----Generated at Wed Apr 23 19:50:40 2025 by rpki-client on console.sobornost.net