$ rpki-client -vvf repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft File: 456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft (raw, json) Hash identifier: UH+HaY1WN7I6yuPlFH8NhxmNeJ3HHquaMJeFWijH4Y8= Subject key identifier: BC:96:38:23:14:48:C6:66:51:EC:FD:10:60:FC:07:9A:DE:96:74:4F Authority key identifier: 45:69:57:B6:E3:2A:BD:15:76:13:6B:F4:B3:9E:C4:CC:AD:97:2F:CD Certificate issuer: /CN=456957B6E32ABD1576136BF4B39EC4CCAD972FCD Certificate serial: 5BC732EED522BCD3AFE3419204089D904D86A597 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft Manifest number: 016B Signing time: Thu 24 Apr 2025 09:11:17 +0000 Manifest this update: Thu 24 Apr 2025 09:06:17 +0000 Manifest next update: Sun 27 Apr 2025 14:21:17 +0000 Files and hashes: 1: 323030313a6466303a623538303a3a2f34382d3438203d3e20313338383736.roa (hash: EztX/pCLRjxuGDD5KwhPpuJplaVIMLa9IH/IjmNzx0U=) 2: 3130332e3134302e39312e302f32342d3234203d3e20313338383736.roa (hash: 99LHlaqlJvFBEChHJUY+/SooMeB1+Go2teO3Iar+WnU=) 3: 3130332e3134302e39302e302f32342d3234203d3e20313338383736.roa (hash: TgFFHo7ru8wPRV9QoxZjMRgufeQSRNupm9ex/WNdqlE=) 4: 456957B6E32ABD1576136BF4B39EC4CCAD972FCD.crl (hash: +u2ZEl2A0shKpB7Ev/x1VV2cn0wsyaYndq1gEZq6Trk=) 5: 3130332e3134302e39302e302f32332d3234203d3e20313338383736.roa (hash: UiT4seYGc2LRhlDHPZFCHvfBBtdW1FREPb29P5n03i8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.crl rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 10:42:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:c7:32:ee:d5:22:bc:d3:af:e3:41:92:04:08:9d:90:4d:86:a5:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=456957B6E32ABD1576136BF4B39EC4CCAD972FCD Validity Not Before: Apr 24 09:06:17 2025 GMT Not After : Apr 27 14:21:17 2025 GMT Subject: CN=BC9638231448C66651ECFD1060FC079ADE96744F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:cf:88:c5:16:96:bd:81:f9:aa:20:ff:01:09: e2:fa:dc:b3:ae:54:fb:0d:da:33:86:2b:d0:19:45: 21:f0:84:db:c0:d8:53:a5:94:3d:ee:16:a1:30:15: f8:7a:89:e3:29:bf:e0:92:f4:9d:55:f5:48:fa:44: 73:d3:94:ec:3c:80:4a:e1:04:8b:60:3a:eb:e6:d8: 9f:c4:74:0a:e8:05:fe:9c:e1:2c:be:ac:0d:b8:b3: b3:ec:be:b9:72:54:4c:af:3a:51:74:cd:a7:65:42: bd:6a:3f:f3:1a:76:d6:ac:8a:ea:bd:b2:0b:33:1e: 97:2d:b8:67:ab:7e:ed:b3:33:e8:42:77:62:a9:e2: b4:bd:8a:f5:d9:d7:37:44:b2:4b:24:db:30:4a:b5: 0e:98:2c:d2:2d:9f:4e:79:7c:68:d7:1f:c6:55:a8: 5b:72:0b:81:41:54:2e:cc:c0:8f:ed:cb:00:fd:47: ec:f5:07:e3:21:64:4d:97:7a:94:fb:4f:62:a8:d2: d8:16:e0:d1:22:2f:45:3a:61:a6:c1:c4:8c:c8:02: 09:81:ff:1b:7b:01:f6:33:4a:30:21:7b:da:63:76: 9f:f9:21:55:85:b8:03:9e:ce:fd:b3:38:b7:48:be: 0a:5f:15:db:57:81:d1:e8:91:0e:9a:48:a6:65:4f: 89:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:96:38:23:14:48:C6:66:51:EC:FD:10:60:FC:07:9A:DE:96:74:4F X509v3 Authority Key Identifier: keyid:45:69:57:B6:E3:2A:BD:15:76:13:6B:F4:B3:9E:C4:CC:AD:97:2F:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:1f:6e:20:e7:8e:74:0e:09:11:d4:3b:3f:ff:71:84:34:2b: 98:f8:1d:06:fc:22:cd:03:09:a4:14:2a:92:cb:8a:7e:e6:f8: 52:81:41:ec:8c:be:ec:53:7c:7a:4c:0c:bc:8a:84:f1:1e:b3: b9:12:1c:7b:4e:bf:0c:bf:80:55:4e:44:c9:a4:7b:da:0b:7c: d8:02:9c:43:b1:3b:c6:7d:03:56:09:1c:e5:8f:2e:77:17:83: 48:21:d9:a7:01:62:99:d1:ae:9c:ab:6b:3f:d9:f3:af:18:24: 42:cc:87:16:3f:18:3f:d4:c7:0e:b6:de:21:0e:e6:6c:fe:38: 75:75:6e:2e:c3:d2:75:f8:6e:0f:32:9c:0f:30:aa:85:31:30: ed:98:0d:88:49:58:de:f2:63:69:54:94:0a:96:4e:ce:d5:b9: ad:f5:8d:75:ad:c7:c5:fe:ad:31:83:ac:73:e7:2a:6b:90:28: cd:b8:b6:b1:fb:fb:ac:fa:48:cc:82:3c:71:43:12:6a:36:39: e5:c2:59:08:06:47:b1:0d:c9:3d:4a:31:b1:9f:7f:d7:e1:a2: 4d:0c:ea:1a:0d:3d:b4:31:17:35:9e:d7:72:de:5c:64:d0:81: 1a:a7:b2:f4:f6:da:f7:ba:6b:13:ec:fb:1a:ee:50:f6:5f:4d: 01:dd:02:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW8cy7tUivNOv40GSBAidkE2GpZcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU2OTU3QjZFMzJBQkQxNTc2MTM2QkY0QjM5RUM0Q0NB RDk3MkZDRDAeFw0yNTA0MjQwOTA2MTdaFw0yNTA0MjcxNDIxMTdaMDMxMTAvBgNV BAMTKEJDOTYzODIzMTQ0OEM2NjY1MUVDRkQxMDYwRkMwNzlBREU5Njc0NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9z4jFFpa9gfmqIP8BCeL63LOu VPsN2jOGK9AZRSHwhNvA2FOllD3uFqEwFfh6ieMpv+CS9J1V9Uj6RHPTlOw8gErh BItgOuvm2J/EdAroBf6c4Sy+rA24s7PsvrlyVEyvOlF0zadlQr1qP/Madtasiuq9 sgszHpctuGerfu2zM+hCd2Kp4rS9ivXZ1zdEsksk2zBKtQ6YLNItn055fGjXH8ZV qFtyC4FBVC7MwI/tywD9R+z1B+MhZE2XepT7T2Ko0tgW4NEiL0U6YabBxIzIAgmB /xt7AfYzSjAhe9pjdp/5IVWFuAOezv2zOLdIvgpfFdtXgdHokQ6aSKZlT4mHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvJY4IxRIxmZR7P0QYPwHmt6WdE8wHwYDVR0j BBgwFoAURWlXtuMqvRV2E2v0s57EzK2XL80wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NmE5ZGRmNy01NzZhLTRhNTgtODliYi03ZTg5Mjg5MDIyNzAvMC80NTY5NTdCNkUz MkFCRDE1NzYxMzZCRjRCMzlFQzRDQ0FEOTcyRkNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU2OTU3QjZFMzJBQkQxNTc2MTM2QkY0QjM5RUM0Q0NBRDk3 MkZDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTZhOWRkZjctNTc2YS00YTU4LTg5 YmItN2U4OTI4OTAyMjcwLzAvNDU2OTU3QjZFMzJBQkQxNTc2MTM2QkY0QjM5RUM0 Q0NBRDk3MkZDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI0fbiDnjnQOCRHUOz//cYQ0K5j4HQb8Is0D CaQUKpLLin7m+FKBQeyMvuxTfHpMDLyKhPEes7kSHHtOvwy/gFVORMmke9oLfNgC nEOxO8Z9A1YJHOWPLncXg0gh2acBYpnRrpyraz/Z868YJELMhxY/GD/Uxw623iEO 5mz+OHV1bi7D0nX4bg8ynA8wqoUxMO2YDYhJWN7yY2lUlAqWTs7Vua31jXWtx8X+ rTGDrHPnKmuQKM24trH7+6z6SMyCPHFDEmo2OeXCWQgGR7ENyT1KMbGff9fhok0M 6hoNPbQxFzWe13LeXGTQgRqnsvT22ve6axPs+xruUPZfTQHdAi0= -----END CERTIFICATE-----Generated at Thu Apr 24 11:25:24 2025 by rpki-client on console.sobornost.net