$ rpki-client -vvf repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.mft File: 73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.mft (raw, json) Hash identifier: x/7TX4eQFT5mWq0WzngYo8bcTpKjYQT/T5gT/wwc+d4= Subject key identifier: 13:B0:44:A5:E5:E7:AE:25:91:15:92:A3:C1:27:B5:57:5A:D1:11:82 Authority key identifier: 73:AF:94:5E:FF:5E:A9:D1:EF:DC:26:17:FA:43:43:0E:87:E1:9A:B6 Certificate issuer: /CN=73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6 Certificate serial: 62CDB47D92F39FE1D17F58B6A619E732BBF9C3B0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.mft Manifest number: 80 Signing time: Thu 24 Apr 2025 07:21:13 +0000 Manifest this update: Thu 24 Apr 2025 07:16:13 +0000 Manifest next update: Sun 27 Apr 2025 14:14:13 +0000 Files and hashes: 1: 3135372e36362e3137302e302f32342d3234203d3e20313532373737.roa (hash: hq3R1HOZbvpzX61BwkQ2JB9n3R+dDdAs494qH92cpTI=) 2: 3135372e36362e3137302e302f32332d3233203d3e20313532373737.roa (hash: kkfWGgBDhBj9LbPcLWN3LfoUckDAFJQR8XFtjGluTfk=) 3: 73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.crl (hash: /lo85mNXFx8efwlb4aQrWyIklZ0O/urXsZGLDxgeBno=) 4: 3135372e36362e3137312e302f32342d3234203d3e20313532373737.roa (hash: 4avm3eGfo7pdZ4wCw97CSHHOC8jKriOntJd1LBlXxkc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.crl rsync://repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 11:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:cd:b4:7d:92:f3:9f:e1:d1:7f:58:b6:a6:19:e7:32:bb:f9:c3:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6 Validity Not Before: Apr 24 07:16:13 2025 GMT Not After : Apr 27 14:14:13 2025 GMT Subject: CN=13B044A5E5E7AE25911592A3C127B5575AD11182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ca:11:d2:5f:ac:55:b7:55:9a:e2:87:ac:12: e2:f5:65:5a:1b:f7:61:5f:66:d4:ef:50:e5:3f:36: 8d:5a:1c:e9:38:5f:65:1f:66:10:29:e4:37:0d:b9: 1d:99:20:c2:59:a2:0c:7b:8e:23:1b:48:4a:df:3f: 61:d3:4c:53:64:7d:cb:e2:83:17:e6:9d:30:24:80: 77:36:39:f7:c5:da:9b:da:31:d0:44:cc:18:c1:c7: 1a:fe:74:ab:73:76:b2:09:ce:18:72:a1:30:33:0e: 1b:9d:bc:f6:3b:30:f4:c2:63:e0:55:df:c0:59:a2: 8e:92:80:fa:c8:4e:28:81:45:00:ac:46:95:f1:ed: aa:79:09:4b:7f:f1:4f:c3:80:72:b0:7e:02:40:2a: 01:b9:e1:2b:e8:23:a5:b5:29:23:bc:88:5c:99:7a: 83:65:e1:fd:1e:2e:55:de:a2:a9:49:21:c9:2c:12: 21:58:0f:df:74:5f:01:a4:46:c0:32:e0:46:e4:a6: 52:2a:c4:1a:7a:fc:a6:3a:01:b2:29:2a:e8:b4:be: 95:6b:61:f9:f7:53:80:9a:a5:bb:d9:89:22:72:ec: a3:f5:85:73:00:af:dd:68:cf:77:9c:aa:09:aa:9a: d7:ba:d9:a8:a6:e2:46:62:e4:2b:9e:be:62:89:da: 0e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:B0:44:A5:E5:E7:AE:25:91:15:92:A3:C1:27:B5:57:5A:D1:11:82 X509v3 Authority Key Identifier: keyid:73:AF:94:5E:FF:5E:A9:D1:EF:DC:26:17:FA:43:43:0E:87:E1:9A:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:1d:97:9b:00:bc:17:1e:a7:e5:b2:f6:75:83:8c:af:4d:4f: 3d:28:9e:c8:3e:20:dc:d0:96:90:a0:63:39:21:f8:94:76:a6: 71:c8:97:d9:e0:eb:38:92:ca:63:b9:ff:3f:86:97:a4:61:59: 97:7d:83:83:b4:98:40:5f:13:f3:88:43:cb:b3:33:89:27:77: 47:27:98:60:df:cb:92:ef:24:82:f7:92:f5:55:c2:c4:81:1f: d1:1d:cb:45:dc:28:e4:23:35:ba:a4:9e:f2:97:fb:cb:f2:85: 55:65:da:80:51:3d:c7:0a:9d:95:f3:ee:5d:2e:05:9d:0a:5a: da:96:9f:75:7b:ce:b0:7b:9e:90:7d:68:6e:db:4d:19:6f:be: eb:c8:9f:ea:02:a5:cf:26:9b:80:93:58:1e:6d:d8:d9:75:ab: 12:6b:75:1f:d9:32:0b:9e:6a:57:04:72:c3:02:28:10:2f:95: e3:2d:01:1a:dc:3b:88:0a:97:b4:f5:a9:c3:fb:e5:20:9c:51: 2e:ca:d2:79:ae:a7:fc:94:35:f3:4c:3f:78:d3:da:ab:25:d6: 98:48:67:cf:7f:34:04:c1:9c:0d:f5:f9:b4:4d:2c:1d:1c:7a: da:5c:9e:ba:32:9a:4e:5a:b6:a7:c6:97:8f:f7:db:17:8d:27: c2:c7:08:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYs20fZLzn+HRf1i2phnnMrv5w7AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzNBRjk0NUVGRjVFQTlEMUVGREMyNjE3RkE0MzQzMEU4 N0UxOUFCNjAeFw0yNTA0MjQwNzE2MTNaFw0yNTA0MjcxNDE0MTNaMDMxMTAvBgNV BAMTKDEzQjA0NEE1RTVFN0FFMjU5MTE1OTJBM0MxMjdCNTU3NUFEMTExODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzyhHSX6xVt1Wa4oesEuL1ZVob 92FfZtTvUOU/No1aHOk4X2UfZhAp5DcNuR2ZIMJZogx7jiMbSErfP2HTTFNkfcvi gxfmnTAkgHc2OffF2pvaMdBEzBjBxxr+dKtzdrIJzhhyoTAzDhudvPY7MPTCY+BV 38BZoo6SgPrITiiBRQCsRpXx7ap5CUt/8U/DgHKwfgJAKgG54SvoI6W1KSO8iFyZ eoNl4f0eLlXeoqlJIcksEiFYD990XwGkRsAy4EbkplIqxBp6/KY6AbIpKui0vpVr Yfn3U4CapbvZiSJy7KP1hXMAr91oz3ecqgmqmte62aim4kZi5CuevmKJ2g7DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE7BEpeXnriWRFZKjwSe1V1rREYIwHwYDVR0j BBgwFoAUc6+UXv9eqdHv3CYX+kNDDofhmrYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NTQ4MTYwNi1kNWZkLTQxOTYtYWJjZC01OGU2Yzc2MjQzYzUvMC83M0FGOTQ1RUZG NUVBOUQxRUZEQzI2MTdGQTQzNDMwRTg3RTE5QUI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzNBRjk0NUVGRjVFQTlEMUVGREMyNjE3RkE0MzQzMEU4N0Ux OUFCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTU0ODE2MDYtZDVmZC00MTk2LWFi Y2QtNThlNmM3NjI0M2M1LzAvNzNBRjk0NUVGRjVFQTlEMUVGREMyNjE3RkE0MzQz MEU4N0UxOUFCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADodl5sAvBcep+Wy9nWDjK9NTz0onsg+INzQ lpCgYzkh+JR2pnHIl9ng6ziSymO5/z+Gl6RhWZd9g4O0mEBfE/OIQ8uzM4knd0cn mGDfy5LvJIL3kvVVwsSBH9Edy0XcKOQjNbqknvKX+8vyhVVl2oBRPccKnZXz7l0u BZ0KWtqWn3V7zrB7npB9aG7bTRlvvuvIn+oCpc8mm4CTWB5t2Nl1qxJrdR/ZMgue alcEcsMCKBAvleMtARrcO4gKl7T1qcP75SCcUS7K0nmup/yUNfNMP3jT2qsl1phI Z89/NATBnA31+bRNLB0cetpcnroymk5atqfGl4/32xeNJ8LHCFM= -----END CERTIFICATE-----Generated at Thu Apr 24 09:03:03 2025 by rpki-client on console.sobornost.net