$ rpki-client -vvf repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft File: 2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft (raw, json) Hash identifier: owudlAyw6ICxOSEh1IHAq1cvlsTDmdHlCAYeuR+8gZY= Subject key identifier: 97:69:22:13:04:9A:40:A0:11:24:88:1D:3B:14:28:75:04:98:F7:1F Authority key identifier: 29:76:AD:C7:44:8B:F0:CA:9B:57:DC:D7:88:49:A1:E0:F9:5F:2B:45 Certificate issuer: /CN=2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45 Certificate serial: 13BA31ABD81DCDE0ECCFB0BBDECED5E44F95BA4F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft Manifest number: 84 Signing time: Sat 26 Apr 2025 08:50:53 +0000 Manifest this update: Sat 26 Apr 2025 08:45:53 +0000 Manifest next update: Tue 29 Apr 2025 10:47:53 +0000 Files and hashes: 1: 3136302e32352e3137382e302f32332d3234203d3e20313533303735.roa (hash: I9nwed3s5J9MWCC1UAp67S/MVhHR3W/rsqME52e0/a0=) 2: 2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.crl (hash: mq7gGqb0VpLhj+2nhFPqEcPjp3gtcUMAj8cWvV0n/as=) 3: 3136302e32352e3137392e302f32342d3234203d3e20313533303735.roa (hash: GhxR22sRqPsgSQoLpKAI7yTQVizLaGLPWzCytQ0r9cY=) 4: 3136302e32352e3137382e302f32342d3234203d3e20313533303735.roa (hash: Ws7wk8GBBz6uaKUyE3UI35E9XGkDiFZKCxUfK3/rPNE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.crl rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 03:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:ba:31:ab:d8:1d:cd:e0:ec:cf:b0:bb:de:ce:d5:e4:4f:95:ba:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45 Validity Not Before: Apr 26 08:45:53 2025 GMT Not After : Apr 29 10:47:53 2025 GMT Subject: CN=97692213049A40A01124881D3B1428750498F71F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:05:4c:13:84:77:30:63:b8:d3:f5:69:38:a6: 98:49:de:7a:12:75:38:e0:87:68:76:10:37:e0:ef: 48:5a:88:6a:72:1c:08:7e:7f:59:3b:ac:80:87:72: c1:8b:bf:88:30:09:9d:91:e3:3f:db:56:79:0b:8e: 97:94:54:dd:ba:de:60:5a:ca:b6:b2:8e:a2:1d:1c: ba:98:36:94:0f:0e:08:79:a5:db:45:a7:ae:05:03: 6e:ca:e1:14:ab:04:58:17:c7:3f:20:93:dc:21:ce: 42:12:28:bb:19:60:a8:87:88:71:a9:4d:bf:0a:3d: f3:4d:d7:02:4e:44:7a:57:cb:d5:ec:3b:85:01:4b: d1:17:bb:c7:13:46:d4:88:01:8e:e4:a5:15:a6:7d: 08:d7:fa:ab:d6:29:d3:51:b2:ad:1b:0f:33:2a:d1: 37:28:f0:e2:62:08:db:33:a3:b3:07:1c:c5:48:75: 76:42:2b:2a:91:e1:bf:9f:da:ac:c1:eb:bb:5a:13: 01:20:a3:8b:e1:f4:c7:ac:ff:f9:29:a4:de:66:8d: ec:83:b0:62:ac:10:b3:4c:ff:82:55:a4:11:2d:25: 7d:33:51:0b:d3:ce:3f:e0:59:c5:af:32:74:02:14: ee:eb:12:8a:ee:dd:05:8d:54:ef:43:ed:df:cd:b4: 45:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:69:22:13:04:9A:40:A0:11:24:88:1D:3B:14:28:75:04:98:F7:1F X509v3 Authority Key Identifier: keyid:29:76:AD:C7:44:8B:F0:CA:9B:57:DC:D7:88:49:A1:E0:F9:5F:2B:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:18:95:7a:d8:90:82:9a:f7:d2:43:5d:ba:86:69:53:57:7c: 09:b4:90:bc:1f:93:fb:2d:51:09:4e:80:06:97:03:53:ae:19: 43:57:a4:50:48:5a:45:c2:d6:fc:b4:fc:9e:11:31:40:05:1d: 0a:05:a5:c7:53:be:5a:c9:36:0e:d3:47:ee:3b:ed:85:6d:ff: 78:e8:56:8c:50:8a:33:d8:76:b8:71:07:92:62:62:86:73:c4: 5c:2a:b6:cd:0d:f1:94:be:6e:1b:50:17:bf:53:34:e5:12:16: e8:d8:f9:38:b8:7f:e1:85:46:29:21:1f:45:9b:60:d4:10:f5: b2:ae:23:83:22:e2:d3:c8:37:06:9c:53:89:03:d2:0a:a1:95: cd:81:2a:9d:6b:fb:49:b6:32:e2:1f:47:f3:91:82:cb:7d:e5: 9e:83:83:dd:0a:52:e8:e0:42:68:5e:9f:2c:79:60:bd:78:79: 5a:7e:65:60:8f:a4:3c:94:0d:b0:51:62:f5:32:3b:b9:b7:1e: b1:56:e4:25:c6:3a:ff:f8:cb:67:08:86:58:18:3a:bc:cb:74: cf:b1:28:86:18:40:ac:89:77:7d:0b:7e:85:a0:cf:21:90:05: 8a:e6:40:eb:bc:30:c0:e1:ca:7d:3d:f7:eb:d3:f0:d4:8a:bf: 34:f3:8e:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE7oxq9gdzeDsz7C73s7V5E+Vuk8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk3NkFEQzc0NDhCRjBDQTlCNTdEQ0Q3ODg0OUExRTBG OTVGMkI0NTAeFw0yNTA0MjYwODQ1NTNaFw0yNTA0MjkxMDQ3NTNaMDMxMTAvBgNV BAMTKDk3NjkyMjEzMDQ5QTQwQTAxMTI0ODgxRDNCMTQyODc1MDQ5OEY3MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDBUwThHcwY7jT9Wk4pphJ3noS dTjgh2h2EDfg70haiGpyHAh+f1k7rICHcsGLv4gwCZ2R4z/bVnkLjpeUVN263mBa yrayjqIdHLqYNpQPDgh5pdtFp64FA27K4RSrBFgXxz8gk9whzkISKLsZYKiHiHGp Tb8KPfNN1wJORHpXy9XsO4UBS9EXu8cTRtSIAY7kpRWmfQjX+qvWKdNRsq0bDzMq 0Tco8OJiCNszo7MHHMVIdXZCKyqR4b+f2qzB67taEwEgo4vh9Mes//kppN5mjeyD sGKsELNM/4JVpBEtJX0zUQvTzj/gWcWvMnQCFO7rEoru3QWNVO9D7d/NtEUFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl2kiEwSaQKARJIgdOxQodQSY9x8wHwYDVR0j BBgwFoAUKXatx0SL8MqbV9zXiEmh4PlfK0UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 N2M0MzJlMC1kYzNlLTQyY2MtYmNjMC02MjliMTYyMDZjOWEvMC8yOTc2QURDNzQ0 OEJGMENBOUI1N0RDRDc4ODQ5QTFFMEY5NUYyQjQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjk3NkFEQzc0NDhCRjBDQTlCNTdEQ0Q3ODg0OUExRTBGOTVG MkI0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODdjNDMyZTAtZGMzZS00MmNjLWJj YzAtNjI5YjE2MjA2YzlhLzAvMjk3NkFEQzc0NDhCRjBDQTlCNTdEQ0Q3ODg0OUEx RTBGOTVGMkI0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACwYlXrYkIKa99JDXbqGaVNXfAm0kLwfk/st UQlOgAaXA1OuGUNXpFBIWkXC1vy0/J4RMUAFHQoFpcdTvlrJNg7TR+477YVt/3jo VoxQijPYdrhxB5JiYoZzxFwqts0N8ZS+bhtQF79TNOUSFujY+Ti4f+GFRikhH0Wb YNQQ9bKuI4Mi4tPINwacU4kD0gqhlc2BKp1r+0m2MuIfR/ORgst95Z6Dg90KUujg Qmhenyx5YL14eVp+ZWCPpDyUDbBRYvUyO7m3HrFW5CXGOv/4y2cIhlgYOrzLdM+x KIYYQKyJd30LfoWgzyGQBYrmQOu8MMDhyn099+vT8NSKvzTzjqg= -----END CERTIFICATE-----Generated at Sat Apr 26 11:16:29 2025 by rpki-client on console.sobornost.net