$ rpki-client -vvf repo-rpki.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.mft File: FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.mft (raw, json) Hash identifier: W/2dSnPzqFg3qxfRQC16xuyQKTjaq3IIIiXMHVvjdPw= Subject key identifier: 60:5F:40:08:D7:1C:61:36:DF:58:FC:B4:EB:62:42:6C:1B:30:63:2B Authority key identifier: FD:7C:5A:44:A3:CA:AF:7C:D1:40:CF:D1:C6:16:22:BA:5E:A2:E6:23 Certificate issuer: /CN=FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623 Certificate serial: 449F9812A3AEB67CA2D5FC074ABF2C615A08A624 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.mft Manifest number: B1 Signing time: Wed 23 Apr 2025 17:32:11 +0000 Manifest this update: Wed 23 Apr 2025 17:27:11 +0000 Manifest next update: Sat 26 Apr 2025 19:39:11 +0000 Files and hashes: 1: FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.crl (hash: 0x25BXD7H7yiyJCoI/fGluc7DWfeyRjC6TwjoTrJHcI=) 2: 3135372e32302e3132362e302f32332d3234203d3e20313532343130.roa (hash: mIAtzNrfjeKiFzHKpCt4+yI3FhKtEfckYghfutbPb44=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.crl rsync://repo-rpki.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 18:38:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:9f:98:12:a3:ae:b6:7c:a2:d5:fc:07:4a:bf:2c:61:5a:08:a6:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623 Validity Not Before: Apr 23 17:27:11 2025 GMT Not After : Apr 26 19:39:11 2025 GMT Subject: CN=605F4008D71C6136DF58FCB4EB62426C1B30632B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0b:bc:d1:4d:51:44:8b:b9:d1:eb:52:d8:16: a1:0d:d8:fe:ee:83:a0:88:66:45:f2:ba:09:9b:8c: ca:a5:3e:3d:c6:04:b3:03:41:10:0b:03:45:7c:b6: 74:f7:b7:4f:92:04:4b:21:2c:8a:d5:16:8b:6a:48: dd:af:41:9e:4a:b7:29:4f:8b:22:ce:4d:93:9d:e9: b2:7c:85:2e:80:2b:05:ba:b1:9d:60:ef:f7:fe:d2: b2:32:e2:1e:dd:ec:c4:78:18:61:59:78:36:00:88: d4:92:1a:80:a0:18:08:97:99:5c:b0:a7:39:7f:f0: a4:48:84:9b:40:f3:a2:ad:66:41:3a:6e:19:97:f5: d9:fd:d7:dc:c0:4e:b5:b6:b4:b6:ef:f9:59:51:d4: c9:33:ec:d7:c3:81:a7:b9:7c:15:48:1e:da:d1:67: d6:9b:4b:0b:7b:f6:0a:05:db:c8:d8:7b:ee:2d:0d: bd:ba:eb:05:c5:3d:cc:5f:de:a6:f0:8d:95:5b:d2: 43:df:c3:86:2e:36:f1:a2:2f:1b:39:58:d5:b9:e1: 0e:e8:27:a4:76:8d:64:d0:59:a5:33:01:39:41:ec: e9:ef:97:6c:0a:08:54:77:59:e0:1f:f0:52:cf:37: 09:52:a9:5d:02:fe:c9:63:f5:3a:b5:c3:1a:7c:12: 4b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:5F:40:08:D7:1C:61:36:DF:58:FC:B4:EB:62:42:6C:1B:30:63:2B X509v3 Authority Key Identifier: keyid:FD:7C:5A:44:A3:CA:AF:7C:D1:40:CF:D1:C6:16:22:BA:5E:A2:E6:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:7d:91:5e:fe:29:0e:aa:97:b1:f9:d3:62:d5:3e:93:4b:c0: 32:47:6c:f7:b0:58:91:7b:05:84:14:ae:f6:a7:7b:7f:77:e0: 00:6b:02:bd:3e:ee:84:26:aa:1c:e4:42:b5:f0:07:32:ef:07: d2:3b:61:a2:b7:cf:33:f4:cc:2d:4b:0d:4c:ff:73:0e:4e:74: ec:2f:b5:53:83:59:a4:11:10:5a:e7:e1:44:71:45:a7:d8:33: c3:3a:7a:a7:00:22:2a:ae:25:ff:6f:cc:67:6e:d4:50:10:c4: de:86:5a:95:3d:40:ce:97:dd:d0:b9:71:a1:d7:5c:b8:5c:7f: f2:75:e2:0f:dc:ef:22:12:1d:e9:f4:17:ec:f8:78:a3:54:df: 8d:db:42:0c:01:5a:59:11:6d:14:6c:12:07:fc:4f:ef:3b:33: 7c:03:fb:df:35:3b:9f:6b:50:3d:7d:72:d2:c5:d8:8f:68:12: f1:e2:aa:1b:87:8f:66:3f:05:2e:d2:88:46:0b:bc:9c:3e:4a: f4:e2:74:1d:18:d9:36:34:0f:0d:44:cf:4c:6d:37:d9:52:0e: 9a:80:ff:ee:48:6a:2e:0b:be:3d:57:a0:97:43:23:7a:7b:ff: bc:a4:94:94:9a:d6:19:5d:ec:4e:fa:7e:60:69:fa:e2:31:98: c7:31:81:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURJ+YEqOutnyi1fwHSr8sYVoIpiQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQ3QzVBNDRBM0NBQUY3Q0QxNDBDRkQxQzYxNjIyQkE1 RUEyRTYyMzAeFw0yNTA0MjMxNzI3MTFaFw0yNTA0MjYxOTM5MTFaMDMxMTAvBgNV BAMTKDYwNUY0MDA4RDcxQzYxMzZERjU4RkNCNEVCNjI0MjZDMUIzMDYzMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8C7zRTVFEi7nR61LYFqEN2P7u g6CIZkXyugmbjMqlPj3GBLMDQRALA0V8tnT3t0+SBEshLIrVFotqSN2vQZ5KtylP iyLOTZOd6bJ8hS6AKwW6sZ1g7/f+0rIy4h7d7MR4GGFZeDYAiNSSGoCgGAiXmVyw pzl/8KRIhJtA86KtZkE6bhmX9dn919zATrW2tLbv+VlR1Mkz7NfDgae5fBVIHtrR Z9abSwt79goF28jYe+4tDb266wXFPcxf3qbwjZVb0kPfw4YuNvGiLxs5WNW54Q7o J6R2jWTQWaUzATlB7Onvl2wKCFR3WeAf8FLPNwlSqV0C/slj9Tq1wxp8Eks7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYF9ACNccYTbfWPy062JCbBswYyswHwYDVR0j BBgwFoAU/XxaRKPKr3zRQM/RxhYiul6i5iMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MGY3OGJkNC1jMTliLTRkNDAtYWE1NC1lZDhkN2JjNzcyY2EvMC9GRDdDNUE0NEEz Q0FBRjdDRDE0MENGRDFDNjE2MjJCQTVFQTJFNjIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkQ3QzVBNDRBM0NBQUY3Q0QxNDBDRkQxQzYxNjIyQkE1RUEy RTYyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTBmNzhiZDQtYzE5Yi00ZDQwLWFh NTQtZWQ4ZDdiYzc3MmNhLzAvRkQ3QzVBNDRBM0NBQUY3Q0QxNDBDRkQxQzYxNjIy QkE1RUEyRTYyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADp9kV7+KQ6ql7H502LVPpNLwDJHbPewWJF7 BYQUrvane3934ABrAr0+7oQmqhzkQrXwBzLvB9I7YaK3zzP0zC1LDUz/cw5OdOwv tVODWaQREFrn4URxRafYM8M6eqcAIiquJf9vzGdu1FAQxN6GWpU9QM6X3dC5caHX XLhcf/J14g/c7yISHen0F+z4eKNU343bQgwBWlkRbRRsEgf8T+87M3wD+981O59r UD19ctLF2I9oEvHiqhuHj2Y/BS7SiEYLvJw+SvTidB0Y2TY0Dw1Ez0xtN9lSDpqA /+5Iai4Lvj1XoJdDI3p7/7yklJSa1hld7E76fmBp+uIxmMcxgcY= -----END CERTIFICATE-----Generated at Wed Apr 23 19:50:54 2025 by rpki-client on console.sobornost.net