$ rpki-client -vvf repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft File: A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft (raw, json) Hash identifier: 5wBrKf2b30Gs5rnor0V0kA6gVcQGEktA3HJtXQIyOtQ= Subject key identifier: E6:4D:2E:72:3B:AE:7C:C4:36:A6:FF:A7:5C:A4:5D:AA:0C:68:3F:89 Authority key identifier: A6:49:57:71:5E:7D:CE:EC:3A:7D:4C:31:76:CC:97:ED:8E:5D:B3:1A Certificate issuer: /CN=A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A Certificate serial: 51DDFA57058E68E6FF7065A81B328D0334C5EF16 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft Manifest number: 0153 Signing time: Sat 26 Apr 2025 10:12:06 +0000 Manifest this update: Sat 26 Apr 2025 10:07:06 +0000 Manifest next update: Tue 29 Apr 2025 18:32:06 +0000 Files and hashes: 1: A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.crl (hash: xb9cxYGylMcr6Q0BTfmYGkcXzqIs1XbkmSyAaUut++g=) 2: 3130332e3230332e39302e302f32342d3234203d3e20313530393236.roa (hash: lH+IV1VjfExz6EgaEksT/6x5pW3sOfiOZbcnKLG8hUk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.crl rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 09:52:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:dd:fa:57:05:8e:68:e6:ff:70:65:a8:1b:32:8d:03:34:c5:ef:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A Validity Not Before: Apr 26 10:07:06 2025 GMT Not After : Apr 29 18:32:06 2025 GMT Subject: CN=E64D2E723BAE7CC436A6FFA75CA45DAA0C683F89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:7f:60:34:dd:d4:61:3c:f9:b4:69:68:ba:f2: 39:2e:e8:83:f2:40:50:e4:91:2b:6c:1a:c1:20:fe: d6:63:05:3c:a8:e3:b4:86:c8:30:ea:0f:5e:c0:50: 1a:6b:0b:fa:85:fb:a0:b4:0f:cb:0f:34:f3:be:40: 4b:50:62:c7:63:5b:69:db:2f:6a:2d:08:e7:b1:31: ad:e3:74:3d:2f:f2:b3:94:ea:37:ff:88:b1:3e:56: 22:a2:87:bf:89:94:86:44:d5:90:17:9f:cb:e4:81: 6d:58:5f:d7:a4:df:25:32:90:9c:7a:40:48:4c:b9: b6:c4:49:9f:d0:3a:ab:a7:e6:32:5b:24:b3:4c:33: 8c:7c:ac:75:41:b3:b2:71:16:e7:82:49:c4:67:60: 44:f0:9e:dd:07:d9:36:79:c3:11:3a:96:ea:e1:81: de:09:99:be:c6:0c:9f:39:9e:67:09:0c:53:53:68: db:fc:0d:2f:79:26:5b:a3:08:24:36:8b:d5:bf:54: bc:03:31:5d:31:76:39:f4:5f:49:ee:93:19:ba:72: 65:35:9e:50:85:97:2c:71:97:18:28:88:1a:d8:5f: c7:4d:1d:6a:ff:c9:36:6c:54:b5:cd:28:e5:0c:41: cb:16:d9:91:b0:95:db:62:14:5f:7c:a0:72:48:d4: 6f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:4D:2E:72:3B:AE:7C:C4:36:A6:FF:A7:5C:A4:5D:AA:0C:68:3F:89 X509v3 Authority Key Identifier: keyid:A6:49:57:71:5E:7D:CE:EC:3A:7D:4C:31:76:CC:97:ED:8E:5D:B3:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:19:62:66:dc:21:09:bf:c0:cd:e5:72:9d:84:dd:f2:e6:16: bb:23:33:0f:1f:6a:3b:67:2f:85:88:b3:4a:6c:16:fa:96:45: 78:e9:2f:ef:d2:01:08:b3:e0:fd:f0:c9:79:71:85:fb:9c:c1: 23:73:12:ae:bc:ec:4e:d4:26:42:2a:7f:08:da:a6:14:cf:f8: bc:04:03:b1:36:96:09:c5:b7:a4:14:96:dc:24:10:93:d1:95: 9b:6d:67:09:83:4f:40:a0:ae:77:c2:cf:ec:45:69:a8:ca:c0: 76:48:87:69:7f:8f:3a:4d:43:47:23:3c:9f:ec:15:21:3c:75: 0c:69:87:ae:62:9c:50:3f:2f:93:2d:8b:3d:da:a6:25:2c:7d: 89:50:cf:f6:35:84:ad:78:10:66:92:69:2b:b9:74:6d:09:1f: 36:56:22:b6:fb:4b:28:e9:39:3c:90:88:79:46:09:36:6f:cd: 87:73:e7:11:ad:6b:44:42:0f:7a:a7:bb:50:e2:ef:46:63:09: 64:66:a3:05:e7:99:89:8a:50:f9:4a:50:63:1c:cd:42:14:c3: 9e:0c:b6:c8:d0:17:74:70:a1:8e:a6:d3:ef:88:66:aa:9a:52: 88:36:60:e4:75:bd:77:fa:64:93:2b:02:f6:22:e1:08:2a:ae: f2:76:9b:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUd36VwWOaOb/cGWoGzKNAzTF7xYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY0OTU3NzE1RTdEQ0VFQzNBN0Q0QzMxNzZDQzk3RUQ4 RTVEQjMxQTAeFw0yNTA0MjYxMDA3MDZaFw0yNTA0MjkxODMyMDZaMDMxMTAvBgNV BAMTKEU2NEQyRTcyM0JBRTdDQzQzNkE2RkZBNzVDQTQ1REFBMEM2ODNGODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhf2A03dRhPPm0aWi68jku6IPy QFDkkStsGsEg/tZjBTyo47SGyDDqD17AUBprC/qF+6C0D8sPNPO+QEtQYsdjW2nb L2otCOexMa3jdD0v8rOU6jf/iLE+ViKih7+JlIZE1ZAXn8vkgW1YX9ek3yUykJx6 QEhMubbESZ/QOqun5jJbJLNMM4x8rHVBs7JxFueCScRnYETwnt0H2TZ5wxE6lurh gd4Jmb7GDJ85nmcJDFNTaNv8DS95JlujCCQ2i9W/VLwDMV0xdjn0X0nukxm6cmU1 nlCFlyxxlxgoiBrYX8dNHWr/yTZsVLXNKOUMQcsW2ZGwldtiFF98oHJI1G/vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5k0ucjuufMQ2pv+nXKRdqgxoP4kwHwYDVR0j BBgwFoAUpklXcV59zuw6fUwxdsyX7Y5dsxowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YTAxMjlhOC0yN2U4LTQwNDYtODk4OS04NjViMjU3ZWE2Y2EvMC9BNjQ5NTc3MTVF N0RDRUVDM0E3RDRDMzE3NkNDOTdFRDhFNURCMzFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTY0OTU3NzE1RTdEQ0VFQzNBN0Q0QzMxNzZDQzk3RUQ4RTVE QjMxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWEwMTI5YTgtMjdlOC00MDQ2LTg5 ODktODY1YjI1N2VhNmNhLzAvQTY0OTU3NzE1RTdEQ0VFQzNBN0Q0QzMxNzZDQzk3 RUQ4RTVEQjMxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA8ZYmbcIQm/wM3lcp2E3fLmFrsjMw8fajtn L4WIs0psFvqWRXjpL+/SAQiz4P3wyXlxhfucwSNzEq687E7UJkIqfwjaphTP+LwE A7E2lgnFt6QUltwkEJPRlZttZwmDT0CgrnfCz+xFaajKwHZIh2l/jzpNQ0cjPJ/s FSE8dQxph65inFA/L5Mtiz3apiUsfYlQz/Y1hK14EGaSaSu5dG0JHzZWIrb7Syjp OTyQiHlGCTZvzYdz5xGta0RCD3qnu1Di70ZjCWRmowXnmYmKUPlKUGMczUIUw54M tsjQF3RwoY6m0++IZqqaUog2YOR1vXf6ZJMrAvYi4QgqrvJ2m9A= -----END CERTIFICATE-----Generated at Sat Apr 26 13:37:03 2025 by rpki-client on console.sobornost.net