$ rpki-client -vvf repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft File: 4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft (raw, json) Hash identifier: AwiXR0aCdyTi6y+lRvolvrelwYBiJB25tcZAnUmoFQs= Subject key identifier: 5F:C3:EB:7F:20:73:A0:63:C8:EA:55:20:A7:69:50:87:43:00:A0:D7 Authority key identifier: 4A:9E:8C:61:BE:36:70:D8:65:B8:A7:9D:7D:32:79:85:50:E6:4F:2B Certificate issuer: /CN=4A9E8C61BE3670D865B8A79D7D32798550E64F2B Certificate serial: 414858D97ED7D1A621FA44C1CB579C3362D2D1D8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft Manifest number: F4 Signing time: Wed 23 Apr 2025 14:32:20 +0000 Manifest this update: Wed 23 Apr 2025 14:27:20 +0000 Manifest next update: Sat 26 Apr 2025 23:58:20 +0000 Files and hashes: 1: 3130332e3234352e33382e302f32332d3234203d3e203535363838.roa (hash: sfkJ0JTL5ebL+3NyzyS4seDOCuegsswJp2YAbd6RC9s=) 2: 4A9E8C61BE3670D865B8A79D7D32798550E64F2B.crl (hash: UxGArmzbEff8UxjeZafNjAM1vKVoHxGwADuUVk753XU=) 3: 323030313a6466323a656434303a3a2f34382d3438203d3e203535363838.roa (hash: 3LwTWTq6lR7/gbSdsCbSOqta9JhN0Eij75z5muuvESg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.crl rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 12:29:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:48:58:d9:7e:d7:d1:a6:21:fa:44:c1:cb:57:9c:33:62:d2:d1:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A9E8C61BE3670D865B8A79D7D32798550E64F2B Validity Not Before: Apr 23 14:27:20 2025 GMT Not After : Apr 26 23:58:20 2025 GMT Subject: CN=5FC3EB7F2073A063C8EA5520A76950874300A0D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ce:c3:23:02:ad:ad:b6:10:8f:16:1f:d1:bf: 27:6c:7f:d1:54:68:57:56:73:01:c7:e4:f3:75:12: 7b:90:53:f3:ee:de:b5:54:fe:25:c9:70:67:e8:bd: a6:1e:aa:72:b8:96:2c:03:77:cb:32:4a:c2:81:a8: 87:ab:75:e7:8b:a4:9b:36:a4:13:d5:e7:d1:17:ca: 44:87:f8:5b:5a:0a:b6:14:de:b9:20:e2:6d:a8:cf: e1:17:24:b9:2e:b0:cf:3c:c9:1a:39:68:de:f0:ba: de:19:72:7a:ff:0b:13:78:7d:47:0f:48:87:72:fb: 68:87:a0:ad:4e:c9:23:1c:80:21:d5:9b:a9:ba:b7: 52:d9:d8:a3:5e:e4:1a:79:8b:95:78:60:6c:50:f7: 24:33:a1:e6:f9:25:fc:97:7b:fb:b2:c7:ad:7b:4e: 9b:b7:dd:8e:89:fb:df:d1:00:3e:c9:db:94:2c:01: 43:8b:82:e1:3c:f8:3a:20:1b:f1:01:6b:9d:28:80: 4a:f4:e5:31:10:d9:bb:84:62:7d:19:85:0c:64:b3: c3:d6:2b:bf:56:a2:cc:f2:1e:f5:ba:2e:06:c0:a4: fa:52:96:64:66:75:c4:c3:53:b4:a4:69:19:dd:ec: 99:f1:bb:f9:45:85:ce:4f:60:39:80:c3:bd:a9:8e: df:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:C3:EB:7F:20:73:A0:63:C8:EA:55:20:A7:69:50:87:43:00:A0:D7 X509v3 Authority Key Identifier: keyid:4A:9E:8C:61:BE:36:70:D8:65:B8:A7:9D:7D:32:79:85:50:E6:4F:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:84:e2:c7:14:e6:7f:b3:b6:b2:b8:18:ca:56:7f:6f:e6:91: 41:40:53:d1:03:4b:eb:2b:dc:30:27:41:b4:dd:68:1f:e3:04: 9d:bb:8b:7a:a5:08:71:f3:55:0e:7e:ec:08:10:93:41:bc:3e: 89:54:4d:ce:7f:09:c0:e4:9b:f6:f4:60:75:17:6e:b9:fd:da: cd:1b:ad:9e:e5:69:76:02:53:0d:2f:6d:b7:3f:ec:70:01:e9: 67:08:4a:0d:ad:18:1a:8b:66:2b:f2:26:f7:a5:6d:4f:6f:f5: 5b:0c:3a:25:99:cb:0c:ed:bd:28:eb:8f:44:69:2b:3d:2b:33: 44:4b:b6:53:48:03:80:b8:d2:65:ab:5a:cb:76:25:8b:3a:7c: b6:ed:a6:89:13:3a:21:eb:16:69:5a:82:0c:2a:c1:31:f4:50: ab:6e:dd:37:23:4d:b1:95:76:22:7f:5c:c0:e6:d7:62:13:8e: f1:19:b2:df:d9:77:08:56:00:33:d2:c8:ee:26:53:13:21:7b: c0:09:d5:a1:6a:f6:de:89:b9:5d:8f:3d:ea:c7:55:f3:78:72: 90:f9:0a:46:83:13:79:8b:49:c1:a7:5a:3e:d7:77:ab:47:dd: 9b:1d:b0:23:94:2a:b2:64:dd:8c:f0:51:fe:df:af:9e:32:38: 03:78:c5:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQUhY2X7X0aYh+kTBy1ecM2LS0dgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE5RThDNjFCRTM2NzBEODY1QjhBNzlEN0QzMjc5ODU1 MEU2NEYyQjAeFw0yNTA0MjMxNDI3MjBaFw0yNTA0MjYyMzU4MjBaMDMxMTAvBgNV BAMTKDVGQzNFQjdGMjA3M0EwNjNDOEVBNTUyMEE3Njk1MDg3NDMwMEEwRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGzsMjAq2tthCPFh/Rvydsf9FU aFdWcwHH5PN1EnuQU/Pu3rVU/iXJcGfovaYeqnK4liwDd8sySsKBqIerdeeLpJs2 pBPV59EXykSH+FtaCrYU3rkg4m2oz+EXJLkusM88yRo5aN7wut4Zcnr/CxN4fUcP SIdy+2iHoK1OySMcgCHVm6m6t1LZ2KNe5Bp5i5V4YGxQ9yQzoeb5JfyXe/uyx617 Tpu33Y6J+9/RAD7J25QsAUOLguE8+DogG/EBa50ogEr05TEQ2buEYn0ZhQxks8PW K79WoszyHvW6LgbApPpSlmRmdcTDU7SkaRnd7Jnxu/lFhc5PYDmAw72pjt9jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX8PrfyBzoGPI6lUgp2lQh0MAoNcwHwYDVR0j BBgwFoAUSp6MYb42cNhluKedfTJ5hVDmTyswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YzQ5MzVkOC05NmEyLTQ1NjQtODVhMy0zMmE1MzE4OTM2N2UvMC80QTlFOEM2MUJF MzY3MEQ4NjVCOEE3OUQ3RDMyNzk4NTUwRTY0RjJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEE5RThDNjFCRTM2NzBEODY1QjhBNzlEN0QzMjc5ODU1MEU2 NEYyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2M0OTM1ZDgtOTZhMi00NTY0LTg1 YTMtMzJhNTMxODkzNjdlLzAvNEE5RThDNjFCRTM2NzBEODY1QjhBNzlEN0QzMjc5 ODU1MEU2NEYyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAICE4scU5n+ztrK4GMpWf2/mkUFAU9EDS+sr 3DAnQbTdaB/jBJ27i3qlCHHzVQ5+7AgQk0G8PolUTc5/CcDkm/b0YHUXbrn92s0b rZ7laXYCUw0vbbc/7HAB6WcISg2tGBqLZivyJvelbU9v9VsMOiWZywztvSjrj0Rp Kz0rM0RLtlNIA4C40mWrWst2JYs6fLbtpokTOiHrFmlaggwqwTH0UKtu3TcjTbGV diJ/XMDm12ITjvEZst/ZdwhWADPSyO4mUxMhe8AJ1aFq9t6JuV2PPerHVfN4cpD5 CkaDE3mLScGnWj7Xd6tH3ZsdsCOUKrJk3YzwUf7fr54yOAN4xWU= -----END CERTIFICATE-----Generated at Wed Apr 23 17:38:31 2025 by rpki-client on console.sobornost.net