$ rpki-client -vvf repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft File: 29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft (raw, json) Hash identifier: MKwe1bYwpWyctfWzHBX7yVe62kSgA52GwIb0ObGY0Vo= Subject key identifier: BE:36:83:C9:F9:F0:B6:50:F8:F3:51:52:35:27:0D:3A:64:1D:D3:1E Authority key identifier: 29:C0:64:0D:D9:07:6D:C0:4C:F8:A3:90:EA:73:DF:C0:E0:E7:CF:9A Certificate issuer: /CN=29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A Certificate serial: 56FFDAF1DF023A9A2FBAF9C487C3E5431DCC67B8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft Manifest number: 96 Signing time: Thu 24 Apr 2025 06:31:35 +0000 Manifest this update: Thu 24 Apr 2025 06:26:35 +0000 Manifest next update: Sun 27 Apr 2025 10:36:35 +0000 Files and hashes: 1: 29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.crl (hash: inxduprSC0AEUPBv7thyGBu+3KTE1uLGfjzSUf+9PCE=) 2: 32372e3132342e37342e302f32332d3234203d3e20313532303532.roa (hash: m4o9tmG8VWbfYauSbCi6chKVKssFkKAm15xM3xmJaes=) 3: 32372e3132342e37342e302f32342d3234203d3e20313532303532.roa (hash: uwdYr6Vc4obI5UkZd3aysyOqaW/UmE8m3/nxpyz48I4=) 4: 32372e3132342e37352e302f32342d3234203d3e20313532303532.roa (hash: 9m+4v7BYbM9SS9Yvhf+ii+qFUs/B5Cv8TrlKAtlSBSI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.crl rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 08:44:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:ff:da:f1:df:02:3a:9a:2f:ba:f9:c4:87:c3:e5:43:1d:cc:67:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A Validity Not Before: Apr 24 06:26:35 2025 GMT Not After : Apr 27 10:36:35 2025 GMT Subject: CN=BE3683C9F9F0B650F8F3515235270D3A641DD31E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4b:05:5b:d6:99:a8:bd:3b:ea:b0:09:e1:ef: 25:96:68:7e:56:57:6e:d7:9b:9f:ef:42:49:68:ea: 06:f4:43:34:17:f1:65:6c:15:2b:a9:b8:0b:52:07: d1:af:c1:3a:30:8c:00:de:38:50:c0:b7:24:52:89: e8:1d:22:cf:39:a6:50:af:de:ec:47:9e:78:b8:ce: b0:6f:a5:41:f7:a4:fa:99:30:38:7c:7a:55:5b:a1: a6:af:b9:a5:e5:b4:ec:cc:39:7a:d3:45:6d:66:ee: 10:4e:47:1e:9e:4b:6f:96:e0:f8:93:2f:1d:1d:6b: db:29:96:98:8f:b4:31:c6:bb:98:14:e8:6f:35:c1: da:20:f4:22:31:1b:e7:e7:25:dd:54:20:f5:52:de: 36:16:dc:84:5d:e1:57:1a:53:e3:0a:91:4c:6a:cb: d0:51:f6:7c:d9:45:1c:51:71:68:5b:8b:ea:d3:3d: 45:8f:c9:44:36:f0:97:ac:b9:00:d7:1c:66:1c:40: 9b:d2:c9:db:a6:82:4d:ed:c9:df:8a:ee:6d:5d:c7: 61:9b:92:93:d7:4b:b8:a8:84:3f:58:ec:77:7d:4f: 45:dd:bd:53:af:c0:02:36:b6:8d:55:f8:22:de:ee: da:71:f1:60:9a:0b:ab:cb:67:ee:96:1b:12:b5:70: 28:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:36:83:C9:F9:F0:B6:50:F8:F3:51:52:35:27:0D:3A:64:1D:D3:1E X509v3 Authority Key Identifier: keyid:29:C0:64:0D:D9:07:6D:C0:4C:F8:A3:90:EA:73:DF:C0:E0:E7:CF:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:83:86:c9:b3:77:72:c1:83:27:f1:11:99:eb:0c:70:7b:eb: 62:dd:3b:8d:28:40:73:14:aa:92:cc:6b:bf:a1:0d:a9:15:37: 38:6c:e1:18:e9:a7:5e:5b:18:f7:8e:54:17:d6:1d:dd:8d:c2: d8:79:8c:36:de:7d:7d:6a:e4:be:40:01:a1:a0:f4:17:6c:ad: 6a:fe:d5:95:a4:67:86:ed:7a:30:89:1e:8c:74:f6:0b:2f:20: cb:1d:c2:c3:5c:45:36:1b:f2:25:ad:4e:bd:c9:e7:41:52:ed: 1f:4b:54:61:3b:e1:40:c4:be:ad:0d:5e:39:13:35:ba:0d:f0: fa:5b:72:3c:5b:6a:77:a1:ee:2d:b9:1e:ae:cf:05:6a:f4:55: 9d:7c:62:1f:2e:4a:98:2b:0b:24:ff:63:89:1d:c6:ba:8d:2c: 1b:b3:3b:98:e6:cb:6b:53:e9:61:38:b9:24:17:52:e6:18:0b: ab:ea:38:c8:1a:a1:79:87:50:9d:5b:70:69:1c:e7:11:51:a8: 78:3c:89:21:39:fb:ba:7e:f8:ac:17:4e:5f:3c:5f:09:b9:a2: 98:d9:73:11:0a:25:5e:1a:eb:cf:6a:20:c4:3f:1c:be:e8:70: ad:ef:d0:0c:44:fe:82:c6:b8:31:a7:c0:e7:21:85:9a:e0:f0: d9:1d:75:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVv/a8d8COpovuvnEh8PlQx3MZ7gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlDMDY0MEREOTA3NkRDMDRDRjhBMzkwRUE3M0RGQzBF MEU3Q0Y5QTAeFw0yNTA0MjQwNjI2MzVaFw0yNTA0MjcxMDM2MzVaMDMxMTAvBgNV BAMTKEJFMzY4M0M5RjlGMEI2NTBGOEYzNTE1MjM1MjcwRDNBNjQxREQzMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwSwVb1pmovTvqsAnh7yWWaH5W V27Xm5/vQklo6gb0QzQX8WVsFSupuAtSB9GvwTowjADeOFDAtyRSiegdIs85plCv 3uxHnni4zrBvpUH3pPqZMDh8elVboaavuaXltOzMOXrTRW1m7hBORx6eS2+W4PiT Lx0da9splpiPtDHGu5gU6G81wdog9CIxG+fnJd1UIPVS3jYW3IRd4VcaU+MKkUxq y9BR9nzZRRxRcWhbi+rTPUWPyUQ28JesuQDXHGYcQJvSydumgk3tyd+K7m1dx2Gb kpPXS7iohD9Y7Hd9T0XdvVOvwAI2to1V+CLe7tpx8WCaC6vLZ+6WGxK1cCgdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvjaDyfnwtlD481FSNScNOmQd0x4wHwYDVR0j BBgwFoAUKcBkDdkHbcBM+KOQ6nPfwODnz5owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZGFmOWYwZi00ZmIxLTQwYzAtYjM4MC01OWEzOGRiYzlhMTYvMC8yOUMwNjQwREQ5 MDc2REMwNENGOEEzOTBFQTczREZDMEUwRTdDRjlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjlDMDY0MEREOTA3NkRDMDRDRjhBMzkwRUE3M0RGQzBFMEU3 Q0Y5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGRhZjlmMGYtNGZiMS00MGMwLWIz ODAtNTlhMzhkYmM5YTE2LzAvMjlDMDY0MEREOTA3NkRDMDRDRjhBMzkwRUE3M0RG QzBFMEU3Q0Y5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF6Dhsmzd3LBgyfxEZnrDHB762LdO40oQHMU qpLMa7+hDakVNzhs4Rjpp15bGPeOVBfWHd2Nwth5jDbefX1q5L5AAaGg9BdsrWr+ 1ZWkZ4btejCJHox09gsvIMsdwsNcRTYb8iWtTr3J50FS7R9LVGE74UDEvq0NXjkT NboN8Ppbcjxbaneh7i25Hq7PBWr0VZ18Yh8uSpgrCyT/Y4kdxrqNLBuzO5jmy2tT 6WE4uSQXUuYYC6vqOMgaoXmHUJ1bcGkc5xFRqHg8iSE5+7p++KwXTl88Xwm5opjZ cxEKJV4a689qIMQ/HL7ocK3v0AxE/oLGuDGnwOchhZrg8Nkddco= -----END CERTIFICATE-----Generated at Thu Apr 24 09:03:02 2025 by rpki-client on console.sobornost.net