$ rpki-client -vvf repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.mft File: C94D41BEAEF4A56979753B500D992FE3CAE43727.mft (raw, json) Hash identifier: 956Za25J1SJpK7BFj0ln5MajzRPB1OF4xWEOaUfGx54= Subject key identifier: AC:1D:64:84:46:06:AB:82:0A:C4:9E:28:EA:FD:5D:23:2B:BB:CD:ED Authority key identifier: C9:4D:41:BE:AE:F4:A5:69:79:75:3B:50:0D:99:2F:E3:CA:E4:37:27 Certificate issuer: /CN=C94D41BEAEF4A56979753B500D992FE3CAE43727 Certificate serial: 7C1B8B3AC50EE053828C30D73ECCE952C48BCA94 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C94D41BEAEF4A56979753B500D992FE3CAE43727.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.mft Manifest number: 82 Signing time: Thu 24 Apr 2025 05:51:32 +0000 Manifest this update: Thu 24 Apr 2025 05:46:32 +0000 Manifest next update: Sun 27 Apr 2025 17:30:32 +0000 Files and hashes: 1: C94D41BEAEF4A56979753B500D992FE3CAE43727.crl (hash: Qka5m0rxV+tKD9DlnqYmnjqfkWfB18Gz+qHfNdMr9k8=) 2: 3130332e34362e382e302f32332d3234203d3e20313532303538.roa (hash: 8g3xpmivFCkMM+35rK/Ufc/dzyXuCsYY9zwLfPimwco=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.crl rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C94D41BEAEF4A56979753B500D992FE3CAE43727.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 08:44:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:1b:8b:3a:c5:0e:e0:53:82:8c:30:d7:3e:cc:e9:52:c4:8b:ca:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C94D41BEAEF4A56979753B500D992FE3CAE43727 Validity Not Before: Apr 24 05:46:32 2025 GMT Not After : Apr 27 17:30:32 2025 GMT Subject: CN=AC1D64844606AB820AC49E28EAFD5D232BBBCDED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d7:c9:ec:09:a1:1f:28:e3:d8:4a:73:48:58: 15:d4:a6:4d:41:72:3f:99:ce:a7:22:dd:78:0d:b5: 6a:d5:e1:2e:0a:9a:d0:ba:6a:90:99:11:c4:5a:07: b2:0a:ce:eb:0e:18:8a:06:1f:33:c3:f0:29:11:0f: 0d:07:e2:d9:95:71:15:11:72:03:74:b8:fd:fa:70: 1e:9c:12:5e:91:c6:26:95:52:5b:54:bb:e0:a6:32: 6a:c6:0e:e8:cd:f0:25:78:5a:b2:87:d7:eb:95:9e: f8:03:e6:cc:fa:50:79:3e:ad:a7:9c:3e:bc:83:ae: 76:20:73:28:fb:28:31:2d:74:85:11:4f:5f:b1:dc: f9:af:f3:c2:6b:ba:bc:d3:56:a9:47:c4:f1:80:6f: 66:e2:bc:ae:b1:b3:98:9d:82:2a:78:a6:ce:a5:1c: 49:89:5b:7a:6f:5a:1a:4e:81:7a:18:93:74:fe:4c: 9c:e3:30:1f:f5:71:60:3e:76:1f:fe:90:bb:fa:89: db:95:33:c8:12:96:89:30:d0:62:51:e2:51:05:8c: 6a:1c:2e:aa:f2:1d:02:e9:cc:b9:db:05:8b:a2:93: 15:41:c4:33:82:a2:35:2e:3f:06:d2:00:1a:92:39: a5:9a:5f:df:62:4f:4a:41:ad:2a:6b:fc:cd:ca:70: 03:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:1D:64:84:46:06:AB:82:0A:C4:9E:28:EA:FD:5D:23:2B:BB:CD:ED X509v3 Authority Key Identifier: keyid:C9:4D:41:BE:AE:F4:A5:69:79:75:3B:50:0D:99:2F:E3:CA:E4:37:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C94D41BEAEF4A56979753B500D992FE3CAE43727.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:c4:25:13:ef:51:90:62:7e:3c:ae:14:0b:10:cf:53:03:ee: 37:3c:77:b5:4e:fc:8f:e5:13:58:7c:eb:de:29:f3:9a:4f:28: 2a:23:a6:be:56:0a:af:dc:e3:72:3a:d5:45:fc:3f:36:60:92: 3b:22:52:aa:0d:5b:e4:9b:86:64:a8:ea:1d:d6:be:7c:35:a8: c0:be:4c:94:6e:5f:3d:7c:e0:0d:34:21:e6:41:e0:09:b4:55: 82:d6:6e:09:5d:cd:8f:ac:b4:7b:15:c7:0a:57:4f:40:43:64: 15:ae:37:ec:ef:47:1f:70:4a:74:af:d3:70:06:e1:a4:bb:69: 26:47:9f:1b:91:8d:5a:b9:9f:40:10:ff:00:aa:8b:bf:fa:b2: 58:65:6d:fe:f0:d3:36:96:d5:8d:54:c1:d0:2a:a2:62:51:fb: 23:f4:1c:60:14:59:f8:80:87:83:63:9d:df:ef:23:ce:c2:5a: 63:7d:52:f0:f2:4c:32:0e:43:d8:7c:ff:63:33:73:ca:c0:23: 2b:c8:1f:59:bc:63:51:41:ce:27:8c:72:9d:7b:d8:45:f3:ac: d7:9d:ca:b0:2c:8e:38:35:ed:ac:61:78:e6:0b:71:89:3b:61: 82:df:24:d6:0f:da:0b:06:4b:61:15:e7:68:f9:2b:3c:a6:b4: 99:19:cf:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfBuLOsUO4FOCjDDXPszpUsSLypQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk0RDQxQkVBRUY0QTU2OTc5NzUzQjUwMEQ5OTJGRTND QUU0MzcyNzAeFw0yNTA0MjQwNTQ2MzJaFw0yNTA0MjcxNzMwMzJaMDMxMTAvBgNV BAMTKEFDMUQ2NDg0NDYwNkFCODIwQUM0OUUyOEVBRkQ1RDIzMkJCQkNERUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCT18nsCaEfKOPYSnNIWBXUpk1B cj+Zzqci3XgNtWrV4S4KmtC6apCZEcRaB7IKzusOGIoGHzPD8CkRDw0H4tmVcRUR cgN0uP36cB6cEl6RxiaVUltUu+CmMmrGDujN8CV4WrKH1+uVnvgD5sz6UHk+raec PryDrnYgcyj7KDEtdIURT1+x3Pmv88JrurzTVqlHxPGAb2bivK6xs5idgip4ps6l HEmJW3pvWhpOgXoYk3T+TJzjMB/1cWA+dh/+kLv6iduVM8gSlokw0GJR4lEFjGoc LqryHQLpzLnbBYuikxVBxDOCojUuPwbSABqSOaWaX99iT0pBrSpr/M3KcAO5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrB1khEYGq4IKxJ4o6v1dIyu7ze0wHwYDVR0j BBgwFoAUyU1Bvq70pWl5dTtQDZkv48rkNycwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NmQ4YTBmYS01ZDRhLTQ4M2ItYWY4OS0wZWY0MGRlYjA1ZjMvMC9DOTRENDFCRUFF RjRBNTY5Nzk3NTNCNTAwRDk5MkZFM0NBRTQzNzI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzk0RDQxQkVBRUY0QTU2OTc5NzUzQjUwMEQ5OTJGRTNDQUU0 MzcyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzZkOGEwZmEtNWQ0YS00ODNiLWFm ODktMGVmNDBkZWIwNWYzLzAvQzk0RDQxQkVBRUY0QTU2OTc5NzUzQjUwMEQ5OTJG RTNDQUU0MzcyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH7EJRPvUZBifjyuFAsQz1MD7jc8d7VO/I/l E1h8694p85pPKCojpr5WCq/c43I61UX8PzZgkjsiUqoNW+SbhmSo6h3Wvnw1qMC+ TJRuXz184A00IeZB4Am0VYLWbgldzY+stHsVxwpXT0BDZBWuN+zvRx9wSnSv03AG 4aS7aSZHnxuRjVq5n0AQ/wCqi7/6slhlbf7w0zaW1Y1UwdAqomJR+yP0HGAUWfiA h4Njnd/vI87CWmN9UvDyTDIOQ9h8/2Mzc8rAIyvIH1m8Y1FBzieMcp172EXzrNed yrAsjjg17axheOYLcYk7YYLfJNYP2gsGS2EV52j5KzymtJkZzxc= -----END CERTIFICATE-----Generated at Thu Apr 24 09:03:03 2025 by rpki-client on console.sobornost.net