$ rpki-client -vvf repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft File: 688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft (raw, json) Hash identifier: mEhGcYdZpmZG0vNA/uQy6EXmYOQUe8H+DL1bMy8eSuQ= Subject key identifier: E9:CA:DD:E7:E6:55:B0:CF:B1:26:A1:71:63:18:CD:19:15:E5:9B:3F Authority key identifier: 68:86:10:C7:31:A4:E7:A1:D3:5B:3E:26:4D:F9:A0:58:73:F1:E6:C1 Certificate issuer: /CN=688610C731A4E7A1D35B3E264DF9A05873F1E6C1 Certificate serial: 5C0CC8C389945974CF615944FC41557A10F347A4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft Manifest number: 032A Signing time: Thu 24 Apr 2025 06:10:04 +0000 Manifest this update: Thu 24 Apr 2025 06:05:04 +0000 Manifest next update: Sun 27 Apr 2025 11:35:04 +0000 Files and hashes: 1: 688610C731A4E7A1D35B3E264DF9A05873F1E6C1.crl (hash: NUnLUsg/UFy1uykER0ioviCGAlC7N9ECO7raJITuKdU=) 2: 3130332e3136382e32382e302f32342d3234203d3e20313432333132.roa (hash: sx5VJymAvvNUkEeCxfKSGsfVfFxKwy7RBlSVqnNBRV4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.crl rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 08:44:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:0c:c8:c3:89:94:59:74:cf:61:59:44:fc:41:55:7a:10:f3:47:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=688610C731A4E7A1D35B3E264DF9A05873F1E6C1 Validity Not Before: Apr 24 06:05:04 2025 GMT Not After : Apr 27 11:35:04 2025 GMT Subject: CN=E9CADDE7E655B0CFB126A1716318CD1915E59B3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:08:df:55:6b:cf:a3:1e:e2:be:a0:11:03:73: c5:f8:5f:91:f9:f0:58:f7:75:59:46:6c:89:7f:68: c9:9b:bc:f0:72:a4:c3:a1:3e:52:fa:f7:73:89:cf: 76:8a:bc:ed:3b:9c:aa:e5:38:22:8a:95:4a:b0:e5: cd:8f:00:cc:87:5d:36:f4:7a:f8:03:49:d7:7b:c3: dc:d6:7f:5a:af:f0:ae:6c:17:fe:04:2c:e8:83:e0: c5:aa:59:44:13:ba:bd:70:4a:30:f1:65:59:7c:94: 7d:ca:d3:a4:79:99:89:99:96:82:57:7d:21:e3:73: a8:3d:d9:4a:c1:fd:c9:aa:9a:82:10:86:ee:70:48: 70:d3:1a:40:51:55:8e:93:81:b7:4f:68:ef:21:04: 2c:e0:bd:ee:1b:9f:77:5d:07:0b:86:4c:d0:75:0c: f1:47:dd:f5:e2:82:49:8e:eb:35:66:c3:7e:41:10: cb:94:10:b6:d2:41:77:99:6f:a4:4b:20:ed:21:63: 5a:7f:58:5e:c0:b0:fa:3a:91:6d:19:d1:c5:96:47: 34:5b:3a:08:29:70:e7:5b:df:f5:39:6d:12:6f:5d: ac:9e:94:f1:72:7e:00:a4:dd:f9:a4:53:c2:98:d9: a9:7a:27:f3:b8:9c:6e:74:0f:5b:ee:c6:42:ec:0a: d7:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:CA:DD:E7:E6:55:B0:CF:B1:26:A1:71:63:18:CD:19:15:E5:9B:3F X509v3 Authority Key Identifier: keyid:68:86:10:C7:31:A4:E7:A1:D3:5B:3E:26:4D:F9:A0:58:73:F1:E6:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:6b:da:43:f4:e4:e4:81:fd:a1:5d:8e:27:09:8d:c5:c4:62: 63:3b:2b:e3:19:5d:f7:71:18:98:2c:4b:41:a1:6d:91:5d:fc: 85:b0:18:6f:0c:71:aa:81:1a:36:c6:4d:17:65:ee:e1:4e:e0: 6d:74:56:cb:2c:4f:3f:9e:e2:9c:84:8d:80:93:50:c1:84:3c: 4b:f8:2c:8d:e7:be:a8:2f:b1:c0:d5:f0:ab:cd:d8:4c:9f:27: fd:40:f8:36:80:61:a5:56:64:92:35:9d:f5:d9:6b:2a:3f:b4: 4e:9c:42:70:81:36:f2:4f:3d:8c:e5:a1:99:6c:a1:eb:80:0b: d7:fc:cb:37:f6:d3:ba:a0:8c:60:60:62:36:36:c8:0b:ac:18: dc:0d:1d:38:68:59:94:bb:40:03:24:f7:2e:0a:30:20:49:8f: ad:3b:fd:84:ac:7d:a3:f1:ae:62:d3:0f:04:f9:bd:21:bb:98: cc:24:db:5f:ef:95:07:b1:80:cc:69:da:38:00:70:b9:f8:82: 87:4f:4e:c2:5a:2e:4c:cf:b4:83:00:6d:49:d1:b5:eb:6e:07: b2:2a:48:64:69:03:62:2e:14:51:a0:b7:77:a4:05:11:cd:ca: 75:2a:1b:c8:97:64:29:7d:8b:d2:d1:62:0b:84:2e:c9:52:ca: e9:df:47:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXAzIw4mUWXTPYVlE/EFVehDzR6QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg4NjEwQzczMUE0RTdBMUQzNUIzRTI2NERGOUEwNTg3 M0YxRTZDMTAeFw0yNTA0MjQwNjA1MDRaFw0yNTA0MjcxMTM1MDRaMDMxMTAvBgNV BAMTKEU5Q0FEREU3RTY1NUIwQ0ZCMTI2QTE3MTYzMThDRDE5MTVFNTlCM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlCN9Va8+jHuK+oBEDc8X4X5H5 8Fj3dVlGbIl/aMmbvPBypMOhPlL693OJz3aKvO07nKrlOCKKlUqw5c2PAMyHXTb0 evgDSdd7w9zWf1qv8K5sF/4ELOiD4MWqWUQTur1wSjDxZVl8lH3K06R5mYmZloJX fSHjc6g92UrB/cmqmoIQhu5wSHDTGkBRVY6TgbdPaO8hBCzgve4bn3ddBwuGTNB1 DPFH3fXigkmO6zVmw35BEMuUELbSQXeZb6RLIO0hY1p/WF7AsPo6kW0Z0cWWRzRb OggpcOdb3/U5bRJvXayelPFyfgCk3fmkU8KY2al6J/O4nG50D1vuxkLsCtfxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6crd5+ZVsM+xJqFxYxjNGRXlmz8wHwYDVR0j BBgwFoAUaIYQxzGk56HTWz4mTfmgWHPx5sEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWVlNDBkYy01MWJhLTQ3NjktODYxOS0yMjg5Y2NlOTYyOWUvMC82ODg2MTBDNzMx QTRFN0ExRDM1QjNFMjY0REY5QTA1ODczRjFFNkMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjg4NjEwQzczMUE0RTdBMUQzNUIzRTI2NERGOUEwNTg3M0Yx RTZDMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODVlZTQwZGMtNTFiYS00NzY5LTg2 MTktMjI4OWNjZTk2MjllLzAvNjg4NjEwQzczMUE0RTdBMUQzNUIzRTI2NERGOUEw NTg3M0YxRTZDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADhr2kP05OSB/aFdjicJjcXEYmM7K+MZXfdx GJgsS0GhbZFd/IWwGG8McaqBGjbGTRdl7uFO4G10VsssTz+e4pyEjYCTUMGEPEv4 LI3nvqgvscDV8KvN2EyfJ/1A+DaAYaVWZJI1nfXZayo/tE6cQnCBNvJPPYzloZls oeuAC9f8yzf207qgjGBgYjY2yAusGNwNHThoWZS7QAMk9y4KMCBJj607/YSsfaPx rmLTDwT5vSG7mMwk21/vlQexgMxp2jgAcLn4godPTsJaLkzPtIMAbUnRtetuB7Iq SGRpA2IuFFGgt3ekBRHNynUqG8iXZCl9i9LRYguELslSyunfRzA= -----END CERTIFICATE-----Generated at Thu Apr 24 09:03:03 2025 by rpki-client on console.sobornost.net