$ rpki-client -vvf repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.mft File: FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.mft (raw, json) Hash identifier: zCPPsV4gx49PXfUcpOulZtYuxGycyqkJUPfXynpOAK8= Subject key identifier: 55:03:8A:81:9E:1C:DA:53:84:92:F2:CF:58:7C:6F:FA:01:07:91:4A Authority key identifier: FE:79:E5:6C:BE:99:C7:73:CD:72:1D:F7:AB:0E:5C:A2:80:9D:07:39 Certificate issuer: /CN=FE79E56CBE99C773CD721DF7AB0E5CA2809D0739 Certificate serial: 33A25F6B310E13BEA1141EB19934F102BD2245F2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.mft Manifest number: AD Signing time: Fri 25 Apr 2025 08:21:13 +0000 Manifest this update: Fri 25 Apr 2025 08:16:13 +0000 Manifest next update: Mon 28 Apr 2025 17:48:13 +0000 Files and hashes: 1: 3135372e32302e3232332e302f32342d3234203d3e20313532343337.roa (hash: 5GSItKW1Uev+r4sjeuM7sDgT4sKp9lv/DJNQC/LM3pw=) 2: 3135372e32302e3232322e302f32342d3234203d3e20313532343337.roa (hash: +Kj/yNSvqJkzfZHG0YjF5fj4VUnhw1dhWNDzyeVm7oE=) 3: FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.crl (hash: lNzVBw+gUjx/CnJimAkaKk81SF8uSc3uG9lLf1fA6Ok=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.crl rsync://repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 19:57:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:a2:5f:6b:31:0e:13:be:a1:14:1e:b1:99:34:f1:02:bd:22:45:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FE79E56CBE99C773CD721DF7AB0E5CA2809D0739 Validity Not Before: Apr 25 08:16:13 2025 GMT Not After : Apr 28 17:48:13 2025 GMT Subject: CN=55038A819E1CDA538492F2CF587C6FFA0107914A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:20:f4:d7:20:0b:c7:5e:70:56:e0:37:db:84: 38:05:f5:bb:95:80:be:02:f2:da:c9:32:52:97:c0: 75:30:40:41:0c:cd:75:5f:7b:21:6c:0e:f5:e7:8f: 95:bb:31:0a:27:54:7a:ea:bb:44:67:23:ff:6c:cc: d5:97:31:b7:e1:5a:f6:a8:9f:7f:d0:59:0f:f1:34: 15:30:ff:73:3f:3e:35:3e:ea:f1:7d:42:67:7b:59: 30:e8:25:bc:5e:31:d0:76:02:5e:26:3d:bf:22:fa: 4c:d9:23:30:6d:39:90:c0:81:09:76:3a:0c:cf:9a: 6b:a1:0a:41:c7:b3:bb:e9:44:94:74:44:a2:53:02: c7:7f:27:b3:b8:08:00:20:6d:d0:1b:3b:44:f6:8a: f5:46:9c:7d:e0:e3:1a:4c:43:61:10:3f:fc:19:58: 81:69:52:81:69:3b:45:48:98:cd:3a:da:2c:13:d0: 56:25:58:26:d8:d8:13:17:6f:47:4f:6a:b9:7a:c9: 3e:6d:65:36:02:de:4d:46:79:01:fb:24:18:ee:2f: 76:30:a4:35:4e:f0:cf:3d:2c:ab:8d:8e:57:7f:02: dd:40:27:5c:6f:50:4f:6c:05:d1:f6:b8:d8:9a:6e: ab:b8:bc:17:0d:19:ea:b5:db:b8:12:6d:9a:51:dd: 4e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:03:8A:81:9E:1C:DA:53:84:92:F2:CF:58:7C:6F:FA:01:07:91:4A X509v3 Authority Key Identifier: keyid:FE:79:E5:6C:BE:99:C7:73:CD:72:1D:F7:AB:0E:5C:A2:80:9D:07:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:10:fb:e7:64:d1:fe:77:80:14:3d:1c:74:ef:40:62:59:e7: a3:cd:96:6e:ab:ce:c2:d4:84:bc:9b:81:c7:4d:9a:dc:9b:a2: b3:b7:9d:0d:cf:7e:ed:4b:a9:6b:e3:36:c1:01:ac:a1:41:37: 98:a9:db:42:78:c0:37:f7:59:aa:fc:7f:a4:ef:38:55:10:bf: 11:d8:8b:5f:8f:45:72:a7:ab:0a:2b:33:d8:63:c7:44:19:35: b3:d1:91:a6:8c:ac:72:52:9e:08:c7:94:fd:61:db:8b:cc:13: a3:30:92:db:4f:58:be:93:24:65:87:10:30:0d:ac:3a:f0:82: 62:b0:09:e9:72:d1:81:8e:ec:cf:4a:43:f8:13:1a:db:b5:f2: b0:5a:31:e6:66:42:af:f2:e1:89:d6:79:cd:6d:73:9d:52:20: be:c6:25:f5:a8:1b:87:f5:71:93:9d:56:52:6f:a2:f1:62:8d: 9e:0e:8f:ee:98:fd:d8:b6:0d:4c:08:3b:e6:a9:87:98:e4:85: d4:fd:5c:bf:b4:93:e5:63:d4:f2:09:9b:f5:c4:c1:be:5c:29: cd:2d:16:c0:98:0c:81:2d:01:ff:58:c1:d5:81:8c:ef:05:de: dd:d1:59:59:35:af:3b:ad:64:25:6a:3a:e9:96:49:46:b3:b9: 7b:d2:b2:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM6JfazEOE76hFB6xmTTxAr0iRfIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkU3OUU1NkNCRTk5Qzc3M0NENzIxREY3QUIwRTVDQTI4 MDlEMDczOTAeFw0yNTA0MjUwODE2MTNaFw0yNTA0MjgxNzQ4MTNaMDMxMTAvBgNV BAMTKDU1MDM4QTgxOUUxQ0RBNTM4NDkyRjJDRjU4N0M2RkZBMDEwNzkxNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOIPTXIAvHXnBW4DfbhDgF9buV gL4C8trJMlKXwHUwQEEMzXVfeyFsDvXnj5W7MQonVHrqu0RnI/9szNWXMbfhWvao n3/QWQ/xNBUw/3M/PjU+6vF9Qmd7WTDoJbxeMdB2Al4mPb8i+kzZIzBtOZDAgQl2 OgzPmmuhCkHHs7vpRJR0RKJTAsd/J7O4CAAgbdAbO0T2ivVGnH3g4xpMQ2EQP/wZ WIFpUoFpO0VImM062iwT0FYlWCbY2BMXb0dParl6yT5tZTYC3k1GeQH7JBjuL3Yw pDVO8M89LKuNjld/At1AJ1xvUE9sBdH2uNiabqu4vBcNGeq127gSbZpR3U4RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVQOKgZ4c2lOEkvLPWHxv+gEHkUowHwYDVR0j BBgwFoAU/nnlbL6Zx3PNch33qw5cooCdBzkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MWYxNWExZC01ZGFjLTRjYzktODExYS1lNDljYjRlN2JjZTEvMC9GRTc5RTU2Q0JF OTlDNzczQ0Q3MjFERjdBQjBFNUNBMjgwOUQwNzM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkU3OUU1NkNCRTk5Qzc3M0NENzIxREY3QUIwRTVDQTI4MDlE MDczOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTFmMTVhMWQtNWRhYy00Y2M5LTgx MWEtZTQ5Y2I0ZTdiY2UxLzAvRkU3OUU1NkNCRTk5Qzc3M0NENzIxREY3QUIwRTVD QTI4MDlEMDczOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF0Q++dk0f53gBQ9HHTvQGJZ56PNlm6rzsLU hLybgcdNmtyborO3nQ3Pfu1LqWvjNsEBrKFBN5ip20J4wDf3War8f6TvOFUQvxHY i1+PRXKnqworM9hjx0QZNbPRkaaMrHJSngjHlP1h24vME6MwkttPWL6TJGWHEDAN rDrwgmKwCely0YGO7M9KQ/gTGtu18rBaMeZmQq/y4YnWec1tc51SIL7GJfWoG4f1 cZOdVlJvovFijZ4Oj+6Y/di2DUwIO+aph5jkhdT9XL+0k+Vj1PIJm/XEwb5cKc0t FsCYDIEtAf9YwdWBjO8F3t3RWVk1rzutZCVqOumWSUazuXvSsow= -----END CERTIFICATE-----Generated at Fri Apr 25 10:36:52 2025 by rpki-client on console.sobornost.net