$ rpki-client -vvf repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft File: 1A43B9C67646D3B8444E277C64D1FD489A45E536.mft (raw, json) Hash identifier: neZdrry2El25XeLAArOjCvtme8IMOnkRNdx8a+3akFo= Subject key identifier: DD:72:C8:54:85:C1:FB:75:66:DE:F1:F5:1F:EC:66:F9:50:CA:44:6D Authority key identifier: 1A:43:B9:C6:76:46:D3:B8:44:4E:27:7C:64:D1:FD:48:9A:45:E5:36 Certificate issuer: /CN=1A43B9C67646D3B8444E277C64D1FD489A45E536 Certificate serial: 25AE40B84F5BD82C809A431360EC2C7A616E5C46 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1A43B9C67646D3B8444E277C64D1FD489A45E536.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft Manifest number: 8C Signing time: Wed 23 Apr 2025 03:52:05 +0000 Manifest this update: Wed 23 Apr 2025 03:47:05 +0000 Manifest next update: Sat 26 Apr 2025 04:42:05 +0000 Files and hashes: 1: 1A43B9C67646D3B8444E277C64D1FD489A45E536.crl (hash: p2C8INYjFik1O4KRBsudEipwVhOOwPkYSUNdZGxEY6U=) 2: 3135372e36362e3132352e302f32342d3234203d3e20313532373732.roa (hash: GmOFMzAjvKi/R6Ihcjui8Ly/R+qTvmjieLr7Vq9tAb8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.crl rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1A43B9C67646D3B8444E277C64D1FD489A45E536.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 01:36:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:ae:40:b8:4f:5b:d8:2c:80:9a:43:13:60:ec:2c:7a:61:6e:5c:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A43B9C67646D3B8444E277C64D1FD489A45E536 Validity Not Before: Apr 23 03:47:05 2025 GMT Not After : Apr 26 04:42:05 2025 GMT Subject: CN=DD72C85485C1FB7566DEF1F51FEC66F950CA446D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:95:97:4b:96:34:d4:0f:90:fb:63:3f:08:62: 61:cd:a9:35:ed:2e:b0:3a:c6:aa:e4:f3:ec:01:01: 0c:56:62:c0:5a:4c:63:fb:93:1b:12:71:44:d8:88: 4b:16:d6:48:6a:e7:9b:59:a0:5e:92:5e:58:37:a2: 2e:af:2c:62:6b:08:40:a8:64:54:aa:d0:dc:ba:78: 51:20:c2:37:19:3d:8a:2e:39:db:e5:dc:6a:6a:ca: bf:f3:bf:78:79:0e:ca:ae:a5:e4:8b:81:e7:9e:29: 52:e4:28:1e:8d:38:24:ef:d2:81:d8:53:93:c1:eb: 1c:0d:e1:b2:05:49:b8:62:8c:1e:23:fa:23:f9:7f: b7:bc:55:df:8c:51:68:18:a5:ad:9b:27:e7:45:1c: fa:42:83:2e:48:c1:f0:bf:5f:f9:45:e5:f3:c7:4f: 47:11:57:97:3c:b6:bf:7e:fd:1c:0e:ea:5b:0c:ef: 83:af:19:63:e7:34:49:1e:bc:ca:f6:ab:4d:59:60: 31:9e:f3:e0:9f:9f:c4:c2:9e:c3:6d:02:76:ca:b5: f2:6e:b0:8d:41:2b:60:fb:77:21:26:79:bf:9f:f9: b8:ca:33:37:e5:f9:f8:0b:51:74:2d:cd:18:4d:0b: 03:07:43:b5:87:85:ae:b9:70:3a:23:58:c7:43:31: 57:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:72:C8:54:85:C1:FB:75:66:DE:F1:F5:1F:EC:66:F9:50:CA:44:6D X509v3 Authority Key Identifier: keyid:1A:43:B9:C6:76:46:D3:B8:44:4E:27:7C:64:D1:FD:48:9A:45:E5:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1A43B9C67646D3B8444E277C64D1FD489A45E536.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:c2:67:f5:c1:cc:56:5c:c2:91:b5:c4:d3:dc:89:52:b9:6b: 20:0b:2c:4e:6f:5b:c2:84:7c:77:69:8e:a7:b6:38:00:12:87: cf:58:98:96:a3:60:f2:b8:5b:8f:58:fb:39:c4:21:f9:ff:ab: 03:49:0a:20:33:63:0f:ea:99:34:07:b2:69:96:b6:65:ca:17: 4a:6e:5a:5e:b7:42:73:d9:7c:6f:8a:c1:e7:ad:61:00:f0:ea: ad:a4:66:01:64:6e:4f:29:dc:04:d3:66:11:04:60:42:a1:dc: 2e:c5:d3:a5:a7:d9:c5:b3:52:23:23:1d:4d:c3:7f:1c:b7:48: ca:e4:c0:3e:88:ec:5d:f4:6b:ec:d1:f6:d2:e0:9c:30:e8:81: f1:e9:e3:66:88:2d:40:43:3f:65:b6:06:98:94:66:e1:3e:1a: d8:af:29:c2:a5:ea:a6:45:a5:ac:58:b6:00:5e:14:92:14:5d: a7:f3:40:0b:93:fd:4f:49:79:85:84:8b:c7:c0:77:43:68:16: 4c:92:b4:e2:f5:8f:a9:f5:7e:f5:a1:97:57:af:e2:ef:da:4b: 2e:88:33:64:9c:a4:4d:65:1e:da:3c:34:d2:ca:53:c0:a1:f1: 9e:cf:f9:f8:c4:d1:13:84:63:bb:48:6b:ad:57:6a:ca:62:bd: f7:73:7f:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJa5AuE9b2CyAmkMTYOwsemFuXEYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE0M0I5QzY3NjQ2RDNCODQ0NEUyNzdDNjREMUZENDg5 QTQ1RTUzNjAeFw0yNTA0MjMwMzQ3MDVaFw0yNTA0MjYwNDQyMDVaMDMxMTAvBgNV BAMTKERENzJDODU0ODVDMUZCNzU2NkRFRjFGNTFGRUM2NkY5NTBDQTQ0NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1lZdLljTUD5D7Yz8IYmHNqTXt LrA6xqrk8+wBAQxWYsBaTGP7kxsScUTYiEsW1khq55tZoF6SXlg3oi6vLGJrCECo ZFSq0Ny6eFEgwjcZPYouOdvl3Gpqyr/zv3h5DsqupeSLgeeeKVLkKB6NOCTv0oHY U5PB6xwN4bIFSbhijB4j+iP5f7e8Vd+MUWgYpa2bJ+dFHPpCgy5IwfC/X/lF5fPH T0cRV5c8tr9+/RwO6lsM74OvGWPnNEkevMr2q01ZYDGe8+Cfn8TCnsNtAnbKtfJu sI1BK2D7dyEmeb+f+bjKMzfl+fgLUXQtzRhNCwMHQ7WHha65cDojWMdDMVcZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3XLIVIXB+3Vm3vH1H+xm+VDKRG0wHwYDVR0j BBgwFoAUGkO5xnZG07hETid8ZNH9SJpF5TYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Y2YwMWVjNi04ZTg5LTQwMmEtOTBjNy01MGM2ZjE0Y2QyNDIvMC8xQTQzQjlDNjc2 NDZEM0I4NDQ0RTI3N0M2NEQxRkQ0ODlBNDVFNTM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMUE0M0I5QzY3NjQ2RDNCODQ0NEUyNzdDNjREMUZENDg5QTQ1 RTUzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2NmMDFlYzYtOGU4OS00MDJhLTkw YzctNTBjNmYxNGNkMjQyLzAvMUE0M0I5QzY3NjQ2RDNCODQ0NEUyNzdDNjREMUZE NDg5QTQ1RTUzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFrCZ/XBzFZcwpG1xNPciVK5ayALLE5vW8KE fHdpjqe2OAASh89YmJajYPK4W49Y+znEIfn/qwNJCiAzYw/qmTQHsmmWtmXKF0pu Wl63QnPZfG+KweetYQDw6q2kZgFkbk8p3ATTZhEEYEKh3C7F06Wn2cWzUiMjHU3D fxy3SMrkwD6I7F30a+zR9tLgnDDogfHp42aILUBDP2W2BpiUZuE+GtivKcKl6qZF paxYtgBeFJIUXafzQAuT/U9JeYWEi8fAd0NoFkyStOL1j6n1fvWhl1ev4u/aSy6I M2ScpE1lHto8NNLKU8Ch8Z7P+fjE0ROEY7tIa61Xaspivfdzf7w= -----END CERTIFICATE-----Generated at Wed Apr 23 06:31:51 2025 by rpki-client on console.sobornost.net