$ rpki-client -vvf repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.mft File: 70FE5658A7C2993DC505F75545A128384472227E.mft (raw, json) Hash identifier: JuD2UYpPr0OeSStJWLc4TEMgynJQNiq460BTB/d2ruo= Subject key identifier: FF:9E:FB:76:3E:40:82:28:EB:2E:FB:FD:68:5A:06:27:22:ED:A9:C2 Authority key identifier: 70:FE:56:58:A7:C2:99:3D:C5:05:F7:55:45:A1:28:38:44:72:22:7E Certificate issuer: /CN=70FE5658A7C2993DC505F75545A128384472227E Certificate serial: 6DDA055770C4ACC1A514962B2578B0673026C3AE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70FE5658A7C2993DC505F75545A128384472227E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.mft Manifest number: 0226 Signing time: Wed 23 Apr 2025 19:21:12 +0000 Manifest this update: Wed 23 Apr 2025 19:16:12 +0000 Manifest next update: Sat 26 Apr 2025 20:09:12 +0000 Files and hashes: 1: 70FE5658A7C2993DC505F75545A128384472227E.crl (hash: qNYbIia3jyTxskYFkaJU+DlmTjUDbVFYrbI1dihdDYU=) 2: 3130332e3137392e3234392e302f32342d3234203d3e2039333431.roa (hash: VpIKxGpnGG5kY+TxgaFm5MAMJ5OPwOweNd+seLyS58Q=) 3: 3130332e3137392e3234382e302f32342d3234203d3e2039333431.roa (hash: gLStYnptht5TyqoGXBL5Rk0CVBS4ZoGmnO4HsnZPkL0=) 4: 3130332e3137392e3234382e302f32332d3233203d3e2039333431.roa (hash: Q5pvwdFKL1lgBG6fYcr2yl0tesQth6vA5guIwHg8TXM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.crl rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70FE5658A7C2993DC505F75545A128384472227E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 20:09:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:da:05:57:70:c4:ac:c1:a5:14:96:2b:25:78:b0:67:30:26:c3:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70FE5658A7C2993DC505F75545A128384472227E Validity Not Before: Apr 23 19:16:12 2025 GMT Not After : Apr 26 20:09:12 2025 GMT Subject: CN=FF9EFB763E408228EB2EFBFD685A062722EDA9C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d6:62:4b:db:ef:50:fb:ef:22:c4:f4:e9:e3: 47:31:28:a4:1a:fe:ff:35:08:8f:84:e9:44:50:e7: f7:f5:91:5a:e1:ed:38:60:92:22:6c:34:26:ca:08: b9:d2:3b:cf:27:dd:16:df:64:01:3b:77:71:a8:b5: e1:81:e0:e5:0f:05:08:3d:04:98:60:ff:b3:40:28: 38:f2:d5:55:f9:62:30:b6:66:1e:38:4b:09:99:91: da:07:0c:8a:b5:94:ce:f8:5b:fa:37:65:f6:eb:9a: 0e:83:74:2b:8a:e4:d3:2c:db:85:cf:95:d7:49:1e: 6e:08:32:52:9f:e3:69:1c:b4:c7:1a:87:e7:c1:46: 46:40:b1:25:f9:24:4b:37:08:2a:44:c8:27:4e:56: 8b:6d:f2:bc:c6:1d:1c:0d:f3:3d:dc:06:20:54:79: 0f:ae:b5:5d:8f:08:36:df:35:5f:c2:63:15:23:04: 07:7e:1a:f9:cf:8d:08:c3:f3:75:c6:7f:b2:c4:53: 12:67:f9:ba:3e:9e:e1:dc:bc:16:5e:5e:d5:83:03: 89:8d:0a:45:63:b5:68:1b:e6:01:f5:6b:6f:ba:a4: 4b:43:b9:68:c2:e7:54:01:a0:4a:8c:c4:3e:67:e5: 87:81:e8:4f:fd:4d:c6:f5:52:1b:cf:31:13:91:8f: 11:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:9E:FB:76:3E:40:82:28:EB:2E:FB:FD:68:5A:06:27:22:ED:A9:C2 X509v3 Authority Key Identifier: keyid:70:FE:56:58:A7:C2:99:3D:C5:05:F7:55:45:A1:28:38:44:72:22:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70FE5658A7C2993DC505F75545A128384472227E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:c2:db:92:16:09:d0:f8:e4:c6:5d:a3:e7:7f:7c:07:c9:64: b9:df:da:35:31:34:15:ee:de:d9:ce:19:f1:b1:6d:c1:15:38: de:d4:79:0f:e9:c8:48:d7:a6:1e:4f:e5:d7:41:99:ab:80:e4: ca:c8:04:2b:7a:61:7a:d6:4a:ea:4c:e9:41:fd:4b:9c:e3:4f: f3:06:b7:4a:23:6f:23:1d:e8:f4:88:65:bc:48:05:a8:4d:bc: 74:fc:29:1c:d4:3e:1a:b0:9e:25:3c:48:1b:6a:3f:a7:96:30: eb:84:d6:77:38:f2:e9:a6:5f:5b:18:5a:07:74:94:f2:f6:0b: 1a:88:e7:bd:d5:b4:86:98:e8:3c:e2:6b:0e:d1:77:a8:b5:50: cc:f5:cb:7c:89:e2:d5:52:08:eb:3d:6f:1a:17:fc:d0:7e:e1: 66:13:78:ca:2e:cc:dc:e6:f1:c0:80:c6:25:f3:3f:b1:32:e8: 2e:c1:c0:fa:7d:3a:b0:eb:74:eb:7b:55:76:ef:1d:50:c8:09: f5:45:50:ac:a1:83:e8:55:6f:ab:81:29:31:29:ec:ca:69:98: 36:ac:df:66:6d:55:bb:1e:63:32:5c:52:94:97:c4:cc:16:ea: 2f:8d:1c:69:38:db:57:12:20:b0:fb:84:6f:d9:54:f8:bb:91: 31:92:fc:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbdoFV3DErMGlFJYrJXiwZzAmw64wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBGRTU2NThBN0MyOTkzREM1MDVGNzU1NDVBMTI4Mzg0 NDcyMjI3RTAeFw0yNTA0MjMxOTE2MTJaFw0yNTA0MjYyMDA5MTJaMDMxMTAvBgNV BAMTKEZGOUVGQjc2M0U0MDgyMjhFQjJFRkJGRDY4NUEwNjI3MjJFREE5QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+1mJL2+9Q++8ixPTp40cxKKQa /v81CI+E6URQ5/f1kVrh7ThgkiJsNCbKCLnSO88n3RbfZAE7d3GoteGB4OUPBQg9 BJhg/7NAKDjy1VX5YjC2Zh44SwmZkdoHDIq1lM74W/o3Zfbrmg6DdCuK5NMs24XP lddJHm4IMlKf42kctMcah+fBRkZAsSX5JEs3CCpEyCdOVott8rzGHRwN8z3cBiBU eQ+utV2PCDbfNV/CYxUjBAd+GvnPjQjD83XGf7LEUxJn+bo+nuHcvBZeXtWDA4mN CkVjtWgb5gH1a2+6pEtDuWjC51QBoEqMxD5n5YeB6E/9Tcb1UhvPMRORjxEpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/577dj5AgijrLvv9aFoGJyLtqcIwHwYDVR0j BBgwFoAUcP5WWKfCmT3FBfdVRaEoOERyIn4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTU5MDFjYy0xYjhlLTRmM2YtYTNkMC0zMjY5ZjBlMTZjNDEvMC83MEZFNTY1OEE3 QzI5OTNEQzUwNUY3NTU0NUExMjgzODQ0NzIyMjdFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzBGRTU2NThBN0MyOTkzREM1MDVGNzU1NDVBMTI4Mzg0NDcy MjI3RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTk1OTAxY2MtMWI4ZS00ZjNmLWEz ZDAtMzI2OWYwZTE2YzQxLzAvNzBGRTU2NThBN0MyOTkzREM1MDVGNzU1NDVBMTI4 Mzg0NDcyMjI3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALvC25IWCdD45MZdo+d/fAfJZLnf2jUxNBXu 3tnOGfGxbcEVON7UeQ/pyEjXph5P5ddBmauA5MrIBCt6YXrWSupM6UH9S5zjT/MG t0ojbyMd6PSIZbxIBahNvHT8KRzUPhqwniU8SBtqP6eWMOuE1nc48ummX1sYWgd0 lPL2CxqI573VtIaY6Dziaw7Rd6i1UMz1y3yJ4tVSCOs9bxoX/NB+4WYTeMouzNzm 8cCAxiXzP7Ey6C7BwPp9OrDrdOt7VXbvHVDICfVFUKyhg+hVb6uBKTEp7MppmDas 32ZtVbseYzJcUpSXxMwW6i+NHGk421cSILD7hG/ZVPi7kTGS/Mo= -----END CERTIFICATE-----Generated at Wed Apr 23 22:12:04 2025 by rpki-client on console.sobornost.net