$ rpki-client -vvf repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft File: A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft (raw, json) Hash identifier: 4bDOyrUC3lBTlQQMfZ5NYX8QoyI4UDZnr4IsddSJifs= Subject key identifier: 2A:94:0C:BC:03:D5:CF:8A:33:A7:B6:D4:BD:16:2C:47:0B:95:9F:48 Authority key identifier: A9:CC:42:A0:5B:0D:6C:A3:79:60:F7:C2:AB:E4:B4:64:DB:56:AC:AC Certificate issuer: /CN=A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC Certificate serial: 03A7DAC9FD23E464B3772E64B4F162F252B305B5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft Manifest number: 012B Signing time: Sat 26 Apr 2025 13:30:49 +0000 Manifest this update: Sat 26 Apr 2025 13:25:49 +0000 Manifest next update: Tue 29 Apr 2025 19:38:49 +0000 Files and hashes: 1: A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.crl (hash: s8u4SsXNDQb9SDSpQdiyEBQuCR9qK4GdpvudjvtjzyA=) 2: 3130332e3137322e3134342e302f32342d3234203d3e20313432333839.roa (hash: 7cXszIEC7Z7nD1ldnqKl+8siMGel8w55J7g/+p+W100=) 3: 3130332e3137382e3132352e302f32342d3234203d3e20313432333839.roa (hash: XFsIo6zuwz17xqiKOSEFnvK2Jc1wZXg/6Dw1KB4MNIs=) 4: 323030313a6466323a383163303a3a2f34382d3438203d3e20313432333839.roa (hash: 5eQlD68HaKHERHfII59DwwAA8bgfmp1d8Ez+zw7QzCU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.crl rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 19:38:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:a7:da:c9:fd:23:e4:64:b3:77:2e:64:b4:f1:62:f2:52:b3:05:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC Validity Not Before: Apr 26 13:25:49 2025 GMT Not After : Apr 29 19:38:49 2025 GMT Subject: CN=2A940CBC03D5CF8A33A7B6D4BD162C470B959F48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:13:32:22:c4:cd:d2:e1:16:f2:a4:a4:22:11: 06:28:33:11:2a:b9:d5:f6:09:37:22:b3:5c:3b:2a: 47:38:77:c4:4c:9f:a3:e7:e5:ed:65:cf:08:9e:a2: eb:fc:22:0a:1c:dc:f7:22:3f:21:d9:9f:99:54:c6: 88:11:65:25:66:f8:84:9b:32:f3:81:41:0b:38:bf: a6:9b:a4:34:7b:e7:da:2e:46:ee:7d:2f:9a:9a:72: 52:e6:3d:62:a6:76:c2:17:3c:42:9a:a4:b3:3f:90: 44:7b:25:77:b3:35:9b:9c:bb:cf:f8:54:2c:54:c6: 9f:a3:a4:90:0c:88:cf:95:2b:c4:00:c0:ed:a8:bb: 3f:fd:5d:ac:b7:b4:bb:ea:f5:a4:73:54:55:dc:8c: 9a:de:1b:63:ee:2b:28:db:3f:b9:27:dc:b5:a9:65: e2:0e:30:11:8e:22:c6:23:4a:c2:03:b3:53:ff:15: d3:b9:8c:9f:f6:55:7c:0d:00:e5:53:06:31:58:e7: e8:74:82:c7:8d:f5:cd:b2:6b:c2:1c:8a:5e:94:b3: aa:80:83:a6:a5:29:bc:ef:07:b7:d8:9a:91:8b:f4: e8:3d:c2:4b:0c:46:1f:5b:ab:7d:95:c7:2c:db:08: d8:9c:57:ee:7c:41:ff:ce:bd:82:de:d3:b5:0f:b7: c9:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:94:0C:BC:03:D5:CF:8A:33:A7:B6:D4:BD:16:2C:47:0B:95:9F:48 X509v3 Authority Key Identifier: keyid:A9:CC:42:A0:5B:0D:6C:A3:79:60:F7:C2:AB:E4:B4:64:DB:56:AC:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:9d:fe:0b:f1:75:e8:db:c2:9d:78:62:ea:b1:50:78:53:2a: 2d:22:fe:4d:aa:bf:ee:9f:26:bf:99:52:0e:d3:fa:9b:a7:f9: 6a:02:76:ab:e2:a0:61:bb:63:d6:fd:55:69:d1:19:fe:9d:1e: 10:8f:63:b0:89:71:0e:a1:66:a3:07:da:33:2b:49:79:27:89: 39:1f:84:7d:8f:62:41:b0:93:21:b4:98:25:99:e9:a9:75:b5: f4:9e:bb:49:e8:ad:36:d8:77:27:0e:75:42:a3:ab:12:d9:6b: 57:43:fb:b8:96:6d:23:67:1f:ea:dd:22:8e:58:c2:21:a3:28: 56:78:26:0c:4b:ed:80:a3:53:73:47:40:1c:00:1a:ba:56:51: c4:ca:16:dc:1c:9d:0f:e0:5f:9d:ab:7d:ec:4c:78:aa:55:9c: 3d:0f:62:74:99:d8:7d:3a:12:6e:d5:0f:24:1e:04:6a:48:27: bf:8b:aa:f0:e8:4a:3f:7a:e8:50:4d:0e:da:e9:c2:ca:66:5d: 6e:0a:4d:3e:a1:e3:a1:60:7a:e2:8d:4c:57:ee:fe:4b:a1:c5: fb:27:3b:07:41:a8:f4:7c:0e:de:57:4c:ca:dc:88:35:8f:9a: a1:d8:41:82:dc:50:4d:5a:4f:8b:a8:89:7b:01:4a:2b:6d:52: 0a:a4:08:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA6fayf0j5GSzdy5ktPFi8lKzBbUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlDQzQyQTA1QjBENkNBMzc5NjBGN0MyQUJFNEI0NjRE QjU2QUNBQzAeFw0yNTA0MjYxMzI1NDlaFw0yNTA0MjkxOTM4NDlaMDMxMTAvBgNV BAMTKDJBOTQwQ0JDMDNENUNGOEEzM0E3QjZENEJEMTYyQzQ3MEI5NTlGNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuEzIixM3S4RbypKQiEQYoMxEq udX2CTcis1w7Kkc4d8RMn6Pn5e1lzwieouv8Igoc3PciPyHZn5lUxogRZSVm+ISb MvOBQQs4v6abpDR759ouRu59L5qaclLmPWKmdsIXPEKapLM/kER7JXezNZucu8/4 VCxUxp+jpJAMiM+VK8QAwO2ouz/9Xay3tLvq9aRzVFXcjJreG2PuKyjbP7kn3LWp ZeIOMBGOIsYjSsIDs1P/FdO5jJ/2VXwNAOVTBjFY5+h0gseN9c2ya8Icil6Us6qA g6alKbzvB7fYmpGL9Og9wksMRh9bq32VxyzbCNicV+58Qf/OvYLe07UPt8kfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKpQMvAPVz4ozp7bUvRYsRwuVn0gwHwYDVR0j BBgwFoAUqcxCoFsNbKN5YPfCq+S0ZNtWrKwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZDc5ZTdhNy0xYWFlLTRlNTItYmFjMy04ZjdjNjdhZTBhMDQvMC9BOUNDNDJBMDVC MEQ2Q0EzNzk2MEY3QzJBQkU0QjQ2NERCNTZBQ0FDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlDQzQyQTA1QjBENkNBMzc5NjBGN0MyQUJFNEI0NjREQjU2 QUNBQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGQ3OWU3YTctMWFhZS00ZTUyLWJh YzMtOGY3YzY3YWUwYTA0LzAvQTlDQzQyQTA1QjBENkNBMzc5NjBGN0MyQUJFNEI0 NjREQjU2QUNBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF6d/gvxdejbwp14YuqxUHhTKi0i/k2qv+6f Jr+ZUg7T+pun+WoCdqvioGG7Y9b9VWnRGf6dHhCPY7CJcQ6hZqMH2jMrSXkniTkf hH2PYkGwkyG0mCWZ6al1tfSeu0norTbYdycOdUKjqxLZa1dD+7iWbSNnH+rdIo5Y wiGjKFZ4JgxL7YCjU3NHQBwAGrpWUcTKFtwcnQ/gX52rfexMeKpVnD0PYnSZ2H06 Em7VDyQeBGpIJ7+LqvDoSj966FBNDtrpwspmXW4KTT6h46FgeuKNTFfu/kuhxfsn OwdBqPR8Dt5XTMrciDWPmqHYQYLcUE1aT4uoiXsBSittUgqkCBM= -----END CERTIFICATE-----Generated at Sat Apr 26 15:53:57 2025 by rpki-client on console.sobornost.net