$ rpki-client -vvf repo-rpki.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/71054E3C02E22D607A90FACC4DE7369B65367EBD.mft File: 71054E3C02E22D607A90FACC4DE7369B65367EBD.mft (raw, json) Hash identifier: FLfqMGaHVfJ4nTbdgIqrYPVXtHPFFQMWvKUFSTcCA90= Subject key identifier: A3:E8:C1:F9:49:54:D9:DE:B2:BD:76:03:62:5F:5E:44:05:9D:A9:8A Authority key identifier: 71:05:4E:3C:02:E2:2D:60:7A:90:FA:CC:4D:E7:36:9B:65:36:7E:BD Certificate issuer: /CN=71054E3C02E22D607A90FACC4DE7369B65367EBD Certificate serial: 7EFC3EEBBB4AB297F6F47CECD0982AC7A9100E44 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71054E3C02E22D607A90FACC4DE7369B65367EBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/71054E3C02E22D607A90FACC4DE7369B65367EBD.mft Manifest number: 011F Signing time: Fri 25 Apr 2025 12:40:44 +0000 Manifest this update: Fri 25 Apr 2025 12:35:44 +0000 Manifest next update: Mon 28 Apr 2025 20:35:44 +0000 Files and hashes: 1: 3130332e32392e31302e302f32332d3234203d3e20313530323530.roa (hash: WJMrEDY6+yYCu4Iz5tUshsi6eLGdRGAnm2hsfXk5iwc=) 2: 71054E3C02E22D607A90FACC4DE7369B65367EBD.crl (hash: rIziN1qipq58plhyfuTGd72IEcMS7GAkcYbnz4WDWoQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/71054E3C02E22D607A90FACC4DE7369B65367EBD.crl rsync://repo-rpki.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/71054E3C02E22D607A90FACC4DE7369B65367EBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71054E3C02E22D607A90FACC4DE7369B65367EBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 20:35:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:fc:3e:eb:bb:4a:b2:97:f6:f4:7c:ec:d0:98:2a:c7:a9:10:0e:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71054E3C02E22D607A90FACC4DE7369B65367EBD Validity Not Before: Apr 25 12:35:44 2025 GMT Not After : Apr 28 20:35:44 2025 GMT Subject: CN=A3E8C1F94954D9DEB2BD7603625F5E44059DA98A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:86:33:3e:69:46:ec:ef:fd:c4:81:2d:0d:18: 4f:b3:fb:e5:7a:4b:c0:96:b1:94:23:9b:10:fa:d0: 27:17:90:47:1b:d4:8a:76:7c:f6:b7:0d:dc:c1:a1: 85:cb:e8:29:90:e9:f6:76:bc:63:04:66:d4:cb:39: 03:d3:a4:59:cd:c5:ce:4f:a8:3c:33:ed:ed:a1:a8: c6:95:61:e7:66:69:5a:31:b7:c9:5b:74:5c:7c:83: 83:2b:c6:6c:bb:ec:09:6b:48:f1:f6:87:1b:4c:1b: 93:b5:d3:7d:26:a6:f7:2f:0b:12:53:4c:1f:d4:f3: 9b:6a:5c:95:bd:70:c0:f2:6a:ca:5c:2e:47:ce:23: 62:a7:89:d4:80:f7:d2:b4:b9:fa:9f:a4:80:95:d1: 9b:fb:cd:ae:4f:cf:00:5b:c0:6a:16:05:c0:0f:de: b5:43:e9:24:56:4d:fc:3c:7b:78:cc:86:77:1e:9e: d2:23:66:c7:ec:14:18:16:ba:b5:3b:29:4c:68:b5: 77:e6:09:d0:73:93:3e:e3:dc:5c:e6:cb:8c:e2:dc: c3:73:22:1d:f4:cd:64:6a:a1:f2:67:2e:22:18:b2: 91:1a:92:18:53:c9:de:3f:e9:2f:5e:22:bd:b3:91: e6:72:8b:ec:1f:40:c3:98:fe:73:f7:ef:ac:68:f5: 6b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:E8:C1:F9:49:54:D9:DE:B2:BD:76:03:62:5F:5E:44:05:9D:A9:8A X509v3 Authority Key Identifier: keyid:71:05:4E:3C:02:E2:2D:60:7A:90:FA:CC:4D:E7:36:9B:65:36:7E:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/71054E3C02E22D607A90FACC4DE7369B65367EBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71054E3C02E22D607A90FACC4DE7369B65367EBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/71054E3C02E22D607A90FACC4DE7369B65367EBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:ac:b1:f2:97:f6:61:ab:ca:9d:c8:d1:68:b6:79:d3:e8:d5: 18:5e:79:14:26:76:a3:60:d1:18:fe:b9:cb:97:ee:5a:c5:8e: 15:61:98:72:2f:23:ec:f4:63:89:df:4e:66:61:95:01:49:9b: e6:5b:95:b8:99:b5:76:5d:90:23:61:8a:d1:5a:76:5b:89:fd: 35:15:04:a7:61:3c:56:67:7a:a7:5e:85:fe:b3:eb:1e:96:50: 75:6b:ce:99:36:24:72:ca:8c:50:fc:b8:c5:02:f4:f1:13:4f: 79:70:06:a5:7e:64:47:6b:29:cd:b5:83:f1:8f:5a:d3:b8:56: ab:ea:ba:c4:d8:17:3b:75:91:96:9f:f4:c8:4f:e7:ff:d3:eb: 51:27:ee:1f:55:b7:79:4c:02:ca:29:a2:3a:77:2e:33:1b:93: 24:9c:63:5c:8e:c3:21:1a:11:7a:9c:c1:01:14:be:33:95:92: 31:97:61:ac:6a:85:ac:9f:f7:e1:83:63:d7:16:44:a0:73:25: fd:4a:86:2b:1d:03:96:48:85:04:e9:ff:e6:6d:10:12:84:3b: be:b8:7b:07:f6:e0:fa:c9:8a:04:0d:78:b7:41:de:e9:87:28: 8a:0d:b7:ea:76:8a:72:dc:aa:7e:2b:05:63:2d:4e:ee:35:45: dd:76:ca:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfvw+67tKspf29Hzs0Jgqx6kQDkQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzEwNTRFM0MwMkUyMkQ2MDdBOTBGQUNDNERFNzM2OUI2 NTM2N0VCRDAeFw0yNTA0MjUxMjM1NDRaFw0yNTA0MjgyMDM1NDRaMDMxMTAvBgNV BAMTKEEzRThDMUY5NDk1NEQ5REVCMkJENzYwMzYyNUY1RTQ0MDU5REE5OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQhjM+aUbs7/3EgS0NGE+z++V6 S8CWsZQjmxD60CcXkEcb1Ip2fPa3DdzBoYXL6CmQ6fZ2vGMEZtTLOQPTpFnNxc5P qDwz7e2hqMaVYedmaVoxt8lbdFx8g4Mrxmy77AlrSPH2hxtMG5O1030mpvcvCxJT TB/U85tqXJW9cMDyaspcLkfOI2KnidSA99K0ufqfpICV0Zv7za5PzwBbwGoWBcAP 3rVD6SRWTfw8e3jMhncentIjZsfsFBgWurU7KUxotXfmCdBzkz7j3Fzmy4zi3MNz Ih30zWRqofJnLiIYspEakhhTyd4/6S9eIr2zkeZyi+wfQMOY/nP376xo9Wt1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo+jB+UlU2d6yvXYDYl9eRAWdqYowHwYDVR0j BBgwFoAUcQVOPALiLWB6kPrMTec2m2U2fr0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YTUzMmM2NS04MGJlLTRmZGUtODdkMC0zNmM1YmQyODhjZDgvMC83MTA1NEUzQzAy RTIyRDYwN0E5MEZBQ0M0REU3MzY5QjY1MzY3RUJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzEwNTRFM0MwMkUyMkQ2MDdBOTBGQUNDNERFNzM2OUI2NTM2 N0VCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWE1MzJjNjUtODBiZS00ZmRlLTg3 ZDAtMzZjNWJkMjg4Y2Q4LzAvNzEwNTRFM0MwMkUyMkQ2MDdBOTBGQUNDNERFNzM2 OUI2NTM2N0VCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGKssfKX9mGryp3I0Wi2edPo1RheeRQmdqNg 0Rj+ucuX7lrFjhVhmHIvI+z0Y4nfTmZhlQFJm+ZblbiZtXZdkCNhitFadluJ/TUV BKdhPFZneqdehf6z6x6WUHVrzpk2JHLKjFD8uMUC9PETT3lwBqV+ZEdrKc21g/GP WtO4VqvqusTYFzt1kZaf9MhP5//T61En7h9Vt3lMAsopojp3LjMbkyScY1yOwyEa EXqcwQEUvjOVkjGXYaxqhayf9+GDY9cWRKBzJf1KhisdA5ZIhQTp/+ZtEBKEO764 ewf24PrJigQNeLdB3umHKIoNt+p2inLcqn4rBWMtTu41Rd12yvM= -----END CERTIFICATE-----Generated at Fri Apr 25 17:11:50 2025 by rpki-client on console.sobornost.net