$ rpki-client -vvf repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.mft File: 1095EA78703826ACF5FA2241EB2B1B66A2C4485A.mft (raw, json) Hash identifier: QUxX7wbVvncnQ8i3RSa04MorrR9oY7r8VVEeGxhRGIg= Subject key identifier: CA:AF:4A:D9:27:3F:A2:0E:9E:2A:0A:72:22:78:83:A5:8D:D9:2D:A9 Authority key identifier: 10:95:EA:78:70:38:26:AC:F5:FA:22:41:EB:2B:1B:66:A2:C4:48:5A Certificate issuer: /CN=1095EA78703826ACF5FA2241EB2B1B66A2C4485A Certificate serial: 7FC72A7EEF271BC40DAEA324C399BEE94821B4BC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.mft Manifest number: 04C8 Signing time: Sat 26 Apr 2025 05:31:23 +0000 Manifest this update: Sat 26 Apr 2025 05:26:23 +0000 Manifest next update: Tue 29 Apr 2025 11:01:23 +0000 Files and hashes: 1: 3130332e3231342e3131322e302f32332d3234203d3e20313336303532.roa (hash: dASG0tINhRcp1PwpUynJN9mjoIEKl6bpcmTsmvEFqJA=) 2: 1095EA78703826ACF5FA2241EB2B1B66A2C4485A.crl (hash: IAaxkjhVIwDC9f9CCLAQsBVjX/Dkm3zzfivr1RCnRlI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.crl rsync://repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 09:52:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:c7:2a:7e:ef:27:1b:c4:0d:ae:a3:24:c3:99:be:e9:48:21:b4:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1095EA78703826ACF5FA2241EB2B1B66A2C4485A Validity Not Before: Apr 26 05:26:23 2025 GMT Not After : Apr 29 11:01:23 2025 GMT Subject: CN=CAAF4AD9273FA20E9E2A0A72227883A58DD92DA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:0c:85:3f:4e:9b:bd:34:1d:8a:c4:c8:68:7b: 2b:35:90:46:e4:f0:22:6b:ec:ad:9c:a5:8e:45:4f: 1e:24:d4:ef:bb:5f:84:64:72:20:d7:b1:44:9b:9e: 45:58:90:25:40:e6:6c:e2:96:86:58:0c:be:0c:9c: 1e:18:a0:06:dd:fe:91:84:a9:2b:88:75:dc:bf:1f: 05:19:50:0c:c1:b6:ce:78:54:a7:03:b2:f9:5b:d6: 1e:c5:88:bf:e2:92:9a:6a:f3:dc:e0:a0:aa:e7:69: 83:3a:41:17:48:0b:a1:f6:41:b4:ca:d1:cd:c7:ce: a6:3b:5a:97:ec:7e:64:ab:dd:18:f8:25:36:53:3b: 50:10:ac:60:4a:0b:fd:45:26:f0:1b:01:8a:96:e6: 84:35:d0:d8:95:cb:ea:25:db:b0:6a:99:cf:62:9d: ff:34:bc:ac:d9:75:54:d1:b1:17:46:05:f2:25:78: b6:3a:7a:ba:48:ea:c7:88:a3:d8:8a:3e:b6:6b:a3: cf:d6:2a:0b:d1:ed:e4:91:5c:d1:4d:62:9f:de:bc: 60:08:11:8c:2e:50:00:66:37:3f:ac:6b:3f:07:3e: 42:0c:31:3b:5e:c3:21:6f:ff:9e:94:ce:ac:28:b6: a7:dc:a3:8d:78:fd:7f:f1:64:59:9d:6b:b7:51:66: 1d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:AF:4A:D9:27:3F:A2:0E:9E:2A:0A:72:22:78:83:A5:8D:D9:2D:A9 X509v3 Authority Key Identifier: keyid:10:95:EA:78:70:38:26:AC:F5:FA:22:41:EB:2B:1B:66:A2:C4:48:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:80:78:bb:59:fa:96:c8:02:c1:c1:6b:49:85:d4:e3:fc:ec: 6f:ae:c3:47:37:b5:43:f4:7f:f3:be:6b:5d:ae:5a:f2:b7:2c: 9c:b7:61:ff:da:93:cb:c6:ba:77:fe:af:95:60:33:21:8d:d5: fd:57:53:76:b8:2a:60:ca:b5:e2:57:58:d9:f1:37:63:8f:7d: 50:d2:b6:b3:26:c7:c3:5e:48:d2:84:b8:b3:d6:35:4d:05:46: 1b:53:1c:38:b5:a6:0a:3c:f9:cf:b7:6e:a5:0f:31:02:06:0e: e9:02:59:9d:ff:bb:44:8e:c3:02:a7:31:b3:99:f2:2f:88:1a: 78:d1:ae:c1:95:31:5b:0e:25:1e:80:26:63:b5:90:42:81:63: a2:e3:f5:c5:dc:ed:fc:a7:0d:73:d3:5b:71:5c:dc:ae:02:da: 16:3f:b6:e4:79:3b:84:cb:c4:9d:ce:94:38:f5:87:cc:f9:f6: 36:3f:f8:2a:b5:4d:e7:a5:e9:ff:09:3b:82:79:c1:03:b9:be: 78:a9:14:06:97:22:ce:2f:09:8a:05:d8:f6:16:93:7e:7d:92: 92:12:fe:74:44:ff:4c:67:01:79:e9:4e:90:10:92:2a:4c:81: 9d:07:db:98:ee:25:3f:a7:23:b8:a8:3a:02:87:fe:08:ab:4a: 85:5e:65:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf8cqfu8nG8QNrqMkw5m+6UghtLwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA5NUVBNzg3MDM4MjZBQ0Y1RkEyMjQxRUIyQjFCNjZB MkM0NDg1QTAeFw0yNTA0MjYwNTI2MjNaFw0yNTA0MjkxMTAxMjNaMDMxMTAvBgNV BAMTKENBQUY0QUQ5MjczRkEyMEU5RTJBMEE3MjIyNzg4M0E1OEREOTJEQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcDIU/Tpu9NB2KxMhoeys1kEbk 8CJr7K2cpY5FTx4k1O+7X4RkciDXsUSbnkVYkCVA5mziloZYDL4MnB4YoAbd/pGE qSuIddy/HwUZUAzBts54VKcDsvlb1h7FiL/ikppq89zgoKrnaYM6QRdIC6H2QbTK 0c3HzqY7WpfsfmSr3Rj4JTZTO1AQrGBKC/1FJvAbAYqW5oQ10NiVy+ol27Bqmc9i nf80vKzZdVTRsRdGBfIleLY6erpI6seIo9iKPrZro8/WKgvR7eSRXNFNYp/evGAI EYwuUABmNz+saz8HPkIMMTtewyFv/56Uzqwotqfco414/X/xZFmda7dRZh1TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyq9K2Sc/og6eKgpyIniDpY3ZLakwHwYDVR0j BBgwFoAUEJXqeHA4Jqz1+iJB6ysbZqLESFowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OTVkZDU3My0zMWY0LTQxNmMtYTFiNy02OThkNmIxNjk3YWQvMC8xMDk1RUE3ODcw MzgyNkFDRjVGQTIyNDFFQjJCMUI2NkEyQzQ0ODVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA5NUVBNzg3MDM4MjZBQ0Y1RkEyMjQxRUIyQjFCNjZBMkM0 NDg1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTk1ZGQ1NzMtMzFmNC00MTZjLWEx YjctNjk4ZDZiMTY5N2FkLzAvMTA5NUVBNzg3MDM4MjZBQ0Y1RkEyMjQxRUIyQjFC NjZBMkM0NDg1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI+AeLtZ+pbIAsHBa0mF1OP87G+uw0c3tUP0 f/O+a12uWvK3LJy3Yf/ak8vGunf+r5VgMyGN1f1XU3a4KmDKteJXWNnxN2OPfVDS trMmx8NeSNKEuLPWNU0FRhtTHDi1pgo8+c+3bqUPMQIGDukCWZ3/u0SOwwKnMbOZ 8i+IGnjRrsGVMVsOJR6AJmO1kEKBY6Lj9cXc7fynDXPTW3Fc3K4C2hY/tuR5O4TL xJ3OlDj1h8z59jY/+Cq1Teel6f8JO4J5wQO5vnipFAaXIs4vCYoF2PYWk359kpIS /nRE/0xnAXnpTpAQkipMgZ0H25juJT+nI7ioOgKH/girSoVeZbg= -----END CERTIFICATE-----Generated at Sat Apr 26 08:46:12 2025 by rpki-client on console.sobornost.net