$ rpki-client -vvf repo-rpki.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F.mft File: 67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F.mft (raw, json) Hash identifier: OSOhJSgxim/++fmnnVZb961B+12LzAGs/4WI9SeCnB8= Subject key identifier: 14:F0:F3:28:54:57:7F:1E:29:D7:FE:1E:89:A6:2B:C9:12:52:75:18 Authority key identifier: 67:A4:28:D3:DC:89:DD:EF:5B:E7:AC:43:FB:7C:88:17:5E:C3:87:1F Certificate issuer: /CN=67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F Certificate serial: 637599FC8FE4B2B05469626CB4F08E5AD63F5984 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F.mft Manifest number: 017C Signing time: Sat 26 Apr 2025 12:51:18 +0000 Manifest this update: Sat 26 Apr 2025 12:46:18 +0000 Manifest next update: Tue 29 Apr 2025 15:45:18 +0000 Files and hashes: 1: 3130332e35392e39342e302f32332d3234203d3e20313336303532.roa (hash: 1GaxlmyMBH5Av+K+s7DcySXoa/4RweD6yLZx8aQoKzc=) 2: 67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F.crl (hash: ONqEWK5vJpJZYafl4Zd4m8vW4jUtSfLYJRAkW1Ylrv4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F.crl rsync://repo-rpki.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 15:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:75:99:fc:8f:e4:b2:b0:54:69:62:6c:b4:f0:8e:5a:d6:3f:59:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F Validity Not Before: Apr 26 12:46:18 2025 GMT Not After : Apr 29 15:45:18 2025 GMT Subject: CN=14F0F32854577F1E29D7FE1E89A62BC912527518 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:82:52:5f:de:e9:f5:20:4c:36:e4:ce:1e:8c: 01:04:94:9f:11:71:fe:79:eb:3e:b7:5e:8a:b9:47: 5a:a3:18:96:74:a9:8f:5c:cd:89:00:4d:fd:90:2c: b6:d1:26:c6:e2:38:7c:f4:42:ff:09:35:84:3f:11: 5c:62:12:a9:83:23:31:b0:f5:fd:2b:59:af:90:01: 6d:b8:c5:f4:20:b7:ab:f3:50:06:77:06:af:1e:53: 4a:c8:6f:16:3e:63:91:fd:8f:88:8c:4c:89:a7:44: 11:e2:ab:af:c3:1a:46:53:aa:19:1d:e0:c9:4d:86: c2:09:5e:5f:89:8a:03:c6:6d:c1:8c:45:0d:8b:8e: 53:3d:d8:77:e8:0c:93:08:e2:7e:14:e6:3a:99:91: 41:b6:7e:17:e3:65:2a:13:33:3e:a0:31:f9:79:6d: 24:69:6f:eb:98:37:51:76:00:9d:53:88:07:af:16: b3:27:f6:23:41:e2:5d:44:e3:f9:30:9d:ad:bd:af: 1f:2c:74:46:b3:56:9d:dd:b7:2d:a7:9e:4a:8d:9e: da:17:b6:9a:32:5a:f2:a7:e2:2e:34:20:b7:fb:42: 71:97:10:33:3a:2e:6e:fa:2e:23:5a:b2:e0:54:65: 57:66:9a:df:60:e3:2a:b1:55:48:fb:52:ff:4f:b9: 46:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:F0:F3:28:54:57:7F:1E:29:D7:FE:1E:89:A6:2B:C9:12:52:75:18 X509v3 Authority Key Identifier: keyid:67:A4:28:D3:DC:89:DD:EF:5B:E7:AC:43:FB:7C:88:17:5E:C3:87:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a66a8f28-9a03-4376-b612-31f5ad1c1ed6/0/67A428D3DC89DDEF5BE7AC43FB7C88175EC3871F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:b1:bf:2f:c9:a3:03:27:02:06:54:80:f1:1b:29:b8:5a:9e: ca:53:34:3d:9b:41:8b:1d:29:e8:a2:34:32:43:09:d1:2a:9e: f6:00:33:e9:48:57:c1:e8:a7:40:de:44:2f:c2:4b:da:b4:53: 7e:b3:89:e1:1d:46:e0:ea:c1:ef:44:87:ee:63:b3:17:a7:22: 96:e8:56:cc:c8:4e:bc:0f:7e:b4:f0:9c:85:dc:c8:41:98:d7: c0:3e:7e:2e:25:26:c4:ac:06:90:f1:30:5a:65:4a:0d:e6:45: 26:e2:90:31:17:2f:ea:61:9a:1a:fe:eb:18:27:19:0c:e0:af: 03:50:28:e9:d2:dc:6d:67:f4:38:84:a9:45:c0:e9:2d:b6:19: 6d:ca:42:49:be:0d:06:1e:3e:4c:8a:0b:9c:03:06:14:8f:88: ca:af:a7:cd:c3:d0:64:ec:d9:b2:98:08:44:7a:bc:39:fa:4f: b5:ab:da:ab:54:8d:f2:7d:84:c1:81:e4:06:08:e6:13:7c:dd: 70:ef:cf:bc:98:ec:76:f3:8d:0a:7d:a9:91:70:ee:77:c8:d4: 0f:7b:61:9d:e2:ab:76:fd:bf:53:39:92:3c:8a:a3:00:9c:2e: e3:4d:4b:5f:e1:6b:11:8b:1d:49:9b:2a:81:af:7e:c9:99:0a: 5d:2b:16:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY3WZ/I/ksrBUaWJstPCOWtY/WYQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdBNDI4RDNEQzg5RERFRjVCRTdBQzQzRkI3Qzg4MTc1 RUMzODcxRjAeFw0yNTA0MjYxMjQ2MThaFw0yNTA0MjkxNTQ1MThaMDMxMTAvBgNV BAMTKDE0RjBGMzI4NTQ1NzdGMUUyOUQ3RkUxRTg5QTYyQkM5MTI1Mjc1MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3glJf3un1IEw25M4ejAEElJ8R cf556z63Xoq5R1qjGJZ0qY9czYkATf2QLLbRJsbiOHz0Qv8JNYQ/EVxiEqmDIzGw 9f0rWa+QAW24xfQgt6vzUAZ3Bq8eU0rIbxY+Y5H9j4iMTImnRBHiq6/DGkZTqhkd 4MlNhsIJXl+JigPGbcGMRQ2LjlM92HfoDJMI4n4U5jqZkUG2fhfjZSoTMz6gMfl5 bSRpb+uYN1F2AJ1TiAevFrMn9iNB4l1E4/kwna29rx8sdEazVp3dty2nnkqNntoX tpoyWvKn4i40ILf7QnGXEDM6Lm76LiNasuBUZVdmmt9g4yqxVUj7Uv9PuUbxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFPDzKFRXfx4p1/4eiaYryRJSdRgwHwYDVR0j BBgwFoAUZ6Qo09yJ3e9b56xD+3yIF17Dhx8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjZhOGYyOC05YTAzLTQzNzYtYjYxMi0zMWY1YWQxYzFlZDYvMC82N0E0MjhEM0RD ODlEREVGNUJFN0FDNDNGQjdDODgxNzVFQzM4NzFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjdBNDI4RDNEQzg5RERFRjVCRTdBQzQzRkI3Qzg4MTc1RUMz ODcxRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTY2YThmMjgtOWEwMy00Mzc2LWI2 MTItMzFmNWFkMWMxZWQ2LzAvNjdBNDI4RDNEQzg5RERFRjVCRTdBQzQzRkI3Qzg4 MTc1RUMzODcxRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIexvy/JowMnAgZUgPEbKbhanspTND2bQYsd KeiiNDJDCdEqnvYAM+lIV8Hop0DeRC/CS9q0U36zieEdRuDqwe9Eh+5jsxenIpbo VszITrwPfrTwnIXcyEGY18A+fi4lJsSsBpDxMFplSg3mRSbikDEXL+phmhr+6xgn GQzgrwNQKOnS3G1n9DiEqUXA6S22GW3KQkm+DQYePkyKC5wDBhSPiMqvp83D0GTs 2bKYCER6vDn6T7Wr2qtUjfJ9hMGB5AYI5hN83XDvz7yY7HbzjQp9qZFw7nfI1A97 YZ3iq3b9v1M5kjyKowCcLuNNS1/haxGLHUmbKoGvfsmZCl0rFjg= -----END CERTIFICATE-----Generated at Sat Apr 26 15:54:09 2025 by rpki-client on console.sobornost.net