$ rpki-client -vvf repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft File: 968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft (raw, json) Hash identifier: lIViql9Z64VAG86jVVQNElAwREogfrV9UvzEPnBTeX0= Subject key identifier: AE:70:F4:A9:10:F6:3D:86:BC:73:0E:EA:49:7C:4F:4F:0F:81:E5:BF Authority key identifier: 96:8A:6F:AD:63:7E:47:06:8D:2F:BC:54:7F:BF:2C:1C:12:F8:C5:88 Certificate issuer: /CN=968A6FAD637E47068D2FBC547FBF2C1C12F8C588 Certificate serial: 746466824C006E7A6C1E9468D779FD0AD3FFC4EE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft Manifest number: 0195 Signing time: Sat 26 Apr 2025 18:22:17 +0000 Manifest this update: Sat 26 Apr 2025 18:17:17 +0000 Manifest next update: Wed 30 Apr 2025 03:19:17 +0000 Files and hashes: 1: 968A6FAD637E47068D2FBC547FBF2C1C12F8C588.crl (hash: 4gWks9hXAhDp84h3ShypvaIyQ2kZm7q0jzMIBkGhJeQ=) 2: 3130332e38372e36382e302f32342d3234203d3e20313530323439.roa (hash: wVJ7U3kO7lcUuZMqWok4kQ4i6Qz99jUT+kR0YLkpW1o=) 3: 323030313a6466313a373334303a3a2f34382d3438203d3e20313530323439.roa (hash: l8A0dkUzSxH4N0BqHgL6AzXZfIz+kSzGW/8HoGSl7ao=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.crl rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 20:11:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:64:66:82:4c:00:6e:7a:6c:1e:94:68:d7:79:fd:0a:d3:ff:c4:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=968A6FAD637E47068D2FBC547FBF2C1C12F8C588 Validity Not Before: Apr 26 18:17:17 2025 GMT Not After : Apr 30 03:19:17 2025 GMT Subject: CN=AE70F4A910F63D86BC730EEA497C4F4F0F81E5BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c0:02:b5:53:ef:bd:c7:b5:7e:23:14:73:ee: 6c:e8:17:c7:75:61:33:11:4c:74:77:d2:6a:9b:0a: 6d:4e:1d:fa:14:ce:e1:5c:d9:a3:69:53:63:79:6a: b3:43:f8:9c:4b:6a:26:d7:02:aa:7e:9d:ef:74:0a: 1a:98:31:50:22:8b:93:fa:d1:d7:17:51:b6:eb:ff: 0f:0d:dc:99:e6:aa:0f:cc:35:4d:7f:da:ee:05:b7: 75:68:bc:bf:97:0a:eb:c2:2a:e7:57:1a:54:3a:e1: 97:49:dc:cb:b9:7f:c3:37:be:f5:34:e2:81:6d:c9: 78:1c:3c:bf:a9:50:1c:74:2a:65:c4:c8:43:2e:62: c7:ce:d8:1b:e2:26:cc:17:a9:1c:c3:21:86:c3:8d: 15:96:f0:f3:66:b7:d2:ab:16:f5:0b:71:05:e3:bb: 74:c2:19:1d:31:4d:a0:f6:9c:b9:01:57:91:70:53: 01:dc:8a:75:10:1a:09:23:f6:cb:6c:b1:0d:f7:f7: 55:73:94:b7:ce:95:6c:e6:db:77:c7:d5:cf:3b:d0: 5e:bc:3f:70:b8:58:0c:54:8b:78:12:fe:9d:4e:f1: aa:bb:42:d8:7c:bc:ce:fd:57:51:8a:5e:7c:c2:30: ff:6c:2c:91:cd:82:43:e1:fa:51:d4:15:4d:24:85: 99:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:70:F4:A9:10:F6:3D:86:BC:73:0E:EA:49:7C:4F:4F:0F:81:E5:BF X509v3 Authority Key Identifier: keyid:96:8A:6F:AD:63:7E:47:06:8D:2F:BC:54:7F:BF:2C:1C:12:F8:C5:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:6e:78:c3:f6:2e:c7:1d:23:d2:bb:1f:9d:03:bc:e0:3a:41: 7f:22:28:e0:ef:b2:94:36:3a:99:e1:40:5d:9b:49:56:6e:6a: 8d:4d:0d:a4:2c:09:d1:56:1d:b5:08:56:fc:3a:61:35:9a:3f: 02:39:dc:23:cc:4c:ef:e2:59:c8:76:37:10:8a:a4:90:2f:ae: c2:d3:4f:cf:dc:8a:dc:93:86:9c:e9:50:cb:7d:c3:6d:4e:b7: 3d:9e:88:26:53:06:75:ce:f8:05:cc:32:49:a0:68:94:f1:ad: 46:d0:f5:de:77:c4:1d:87:25:07:af:56:00:96:6f:3d:70:4f: 96:af:88:2a:e4:ab:3f:89:71:13:a2:ef:d3:5c:92:d7:86:dc: 5f:cf:8b:18:4b:5e:70:63:cb:71:c8:41:21:48:ec:82:ea:40: ff:73:95:0a:56:56:5b:38:66:06:7d:52:82:70:3a:bf:de:00: be:1e:bf:41:91:c7:62:ec:70:0b:82:7a:16:5a:18:ca:17:f7: f4:c8:14:f9:38:2d:fc:8f:94:77:15:11:45:02:f7:2a:eb:73: b6:0d:7d:67:7a:8e:a3:78:8b:c3:40:b2:8f:b6:0e:9f:13:2a: 08:75:af:d8:5b:91:f2:65:1e:18:fa:c2:ce:6f:32:63:76:bf: 92:08:ad:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdGRmgkwAbnpsHpRo13n9CtP/xO4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY4QTZGQUQ2MzdFNDcwNjhEMkZCQzU0N0ZCRjJDMUMx MkY4QzU4ODAeFw0yNTA0MjYxODE3MTdaFw0yNTA0MzAwMzE5MTdaMDMxMTAvBgNV BAMTKEFFNzBGNEE5MTBGNjNEODZCQzczMEVFQTQ5N0M0RjRGMEY4MUU1QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqwAK1U++9x7V+IxRz7mzoF8d1 YTMRTHR30mqbCm1OHfoUzuFc2aNpU2N5arND+JxLaibXAqp+ne90ChqYMVAii5P6 0dcXUbbr/w8N3Jnmqg/MNU1/2u4Ft3VovL+XCuvCKudXGlQ64ZdJ3Mu5f8M3vvU0 4oFtyXgcPL+pUBx0KmXEyEMuYsfO2BviJswXqRzDIYbDjRWW8PNmt9KrFvULcQXj u3TCGR0xTaD2nLkBV5FwUwHcinUQGgkj9stssQ3391VzlLfOlWzm23fH1c870F68 P3C4WAxUi3gS/p1O8aq7Qth8vM79V1GKXnzCMP9sLJHNgkPh+lHUFU0khZktAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrnD0qRD2PYa8cw7qSXxPTw+B5b8wHwYDVR0j BBgwFoAUlopvrWN+RwaNL7xUf78sHBL4xYgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MzljNTQ4NC0yZTM3LTQ4ZjktOGViYS0wYWY0ZWY2Mjk0N2QvMC85NjhBNkZBRDYz N0U0NzA2OEQyRkJDNTQ3RkJGMkMxQzEyRjhDNTg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTY4QTZGQUQ2MzdFNDcwNjhEMkZCQzU0N0ZCRjJDMUMxMkY4 QzU4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTM5YzU0ODQtMmUzNy00OGY5LThl YmEtMGFmNGVmNjI5NDdkLzAvOTY4QTZGQUQ2MzdFNDcwNjhEMkZCQzU0N0ZCRjJD MUMxMkY4QzU4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADZueMP2LscdI9K7H50DvOA6QX8iKODvspQ2 OpnhQF2bSVZuao1NDaQsCdFWHbUIVvw6YTWaPwI53CPMTO/iWch2NxCKpJAvrsLT T8/cityThpzpUMt9w21Otz2eiCZTBnXO+AXMMkmgaJTxrUbQ9d53xB2HJQevVgCW bz1wT5aviCrkqz+JcROi79NckteG3F/PixhLXnBjy3HIQSFI7ILqQP9zlQpWVls4 ZgZ9UoJwOr/eAL4ev0GRx2LscAuCehZaGMoX9/TIFPk4LfyPlHcVEUUC9yrrc7YN fWd6jqN4i8NAso+2Dp8TKgh1r9hbkfJlHhj6ws5vMmN2v5IIrVY= -----END CERTIFICATE-----Generated at Sat Apr 26 20:59:55 2025 by rpki-client on console.sobornost.net