$ rpki-client -vvf repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft File: 95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft (raw, json) Hash identifier: 3mKJL3B4kGGMY10ueuPR0Eus81T7FrQ0zw/plS0HPUg= Subject key identifier: 21:A1:D1:E2:A4:94:8A:24:95:B5:1E:75:2A:26:FC:A1:38:5E:60:A6 Authority key identifier: 95:D9:13:68:45:FA:FA:07:95:73:5D:4A:9B:0F:F9:F7:46:46:1A:B3 Certificate issuer: /CN=95D9136845FAFA0795735D4A9B0FF9F746461AB3 Certificate serial: 5EDAD82BF36384994D33861B47BD243FC9387A37 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95D9136845FAFA0795735D4A9B0FF9F746461AB3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft Manifest number: 04C5 Signing time: Thu 24 Apr 2025 04:32:10 +0000 Manifest this update: Thu 24 Apr 2025 04:27:10 +0000 Manifest next update: Sun 27 Apr 2025 08:38:10 +0000 Files and hashes: 1: 95D9136845FAFA0795735D4A9B0FF9F746461AB3.crl (hash: mReLfhUG78Lfip7sNymGzLtn3N886IDORxiRjKFHjhI=) 2: 3130332e3135312e39382e302f32342d3234203d3e203137353338.roa (hash: XLazE5Vn7z334jOwYoK8rFCOURJrA8ecY+QUwxwWDNY=) 3: 323030313a6466333a623938303a3a2f34382d3438203d3e203137353338.roa (hash: 13BZZGez00+LUIyTx+ZwpCt/BEy8rtR8zU/43gX10+4=) 4: 3130332e3135312e39392e302f32342d3234203d3e203137353338.roa (hash: bRRSscYjeY2YxaSN5983EHi4JM8B0mDZlHR23US7qhc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.crl rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95D9136845FAFA0795735D4A9B0FF9F746461AB3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 08:38:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:da:d8:2b:f3:63:84:99:4d:33:86:1b:47:bd:24:3f:c9:38:7a:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95D9136845FAFA0795735D4A9B0FF9F746461AB3 Validity Not Before: Apr 24 04:27:10 2025 GMT Not After : Apr 27 08:38:10 2025 GMT Subject: CN=21A1D1E2A4948A2495B51E752A26FCA1385E60A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d9:6c:a9:34:12:f0:82:ab:f9:f7:ce:dd:a7: d8:57:d7:89:b6:09:93:40:68:44:d5:9b:8c:a9:da: c3:13:8f:5f:22:68:47:fb:de:2b:ee:22:0b:16:d3: 5b:61:28:2d:bf:21:61:e6:60:5f:9b:56:73:2f:67: 6c:f1:71:5f:5d:51:bb:ba:0e:d6:8b:41:dd:d9:79: 6a:52:59:d5:80:af:ef:41:15:95:20:f4:ec:bd:23: 74:27:96:f8:c9:2e:33:99:59:48:b6:93:d3:52:76: f5:3a:42:2a:61:18:69:f5:0c:da:52:21:33:58:8c: 76:e9:36:4a:d2:a2:5c:87:39:e8:9a:43:04:7a:b7: 2d:93:fa:30:ea:93:2c:1c:9e:88:d2:f8:de:e6:ba: 68:40:c7:85:56:49:96:4e:40:a3:5d:d8:02:94:95: 53:8e:eb:00:e0:e5:1a:2a:db:ad:d6:2d:fb:93:6e: 0a:21:11:e4:6e:01:ca:66:48:a5:e2:3a:95:76:96: 11:9c:f7:76:7d:3e:86:3e:e5:4f:c5:b5:a8:ba:61: 2b:51:3b:74:e9:e9:d4:3a:f5:b5:44:c1:b2:b0:b7: c3:8b:07:ad:b7:ef:98:99:4f:2f:21:10:59:be:2a: 0f:2a:55:69:4d:37:df:06:e3:eb:ce:37:31:f3:a5: a0:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:A1:D1:E2:A4:94:8A:24:95:B5:1E:75:2A:26:FC:A1:38:5E:60:A6 X509v3 Authority Key Identifier: keyid:95:D9:13:68:45:FA:FA:07:95:73:5D:4A:9B:0F:F9:F7:46:46:1A:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95D9136845FAFA0795735D4A9B0FF9F746461AB3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:0f:7b:a8:1a:0f:a5:c1:bd:48:f5:06:e1:ac:8f:59:7b:17: e0:78:ad:c5:2c:8d:2d:2a:7b:3f:f0:62:57:54:c7:ad:2d:b3: 6c:85:a0:b7:00:dc:8c:c7:52:49:e9:79:29:07:97:8e:0b:9e: 29:1d:18:a8:ef:d2:08:16:e4:ad:56:89:7f:fe:61:40:18:da: 3b:80:d6:b0:29:51:f3:31:de:a5:ea:87:3b:92:91:59:b3:30: 20:b1:e3:5a:38:b6:b5:f4:6a:cb:76:c1:45:c5:3a:b2:cc:43: a0:1a:3b:30:5d:50:1f:92:cf:94:d0:0e:a9:1c:9c:33:de:e2: e2:5e:28:e2:ba:4b:74:23:d5:b2:c2:80:13:e8:31:e0:17:92: 45:37:10:69:7d:b6:61:22:52:8b:db:67:11:93:68:64:3b:24: 40:66:1f:93:9e:dd:ba:b8:6e:0e:a8:68:25:ac:b5:ab:a2:13: 98:82:6a:68:43:d6:04:3d:69:7c:6b:db:e6:db:73:b5:14:f6: 6b:68:6d:44:1e:c3:9d:e9:2a:dd:e5:3a:c8:4c:e2:f0:29:da: 3d:b3:6d:96:6d:63:d9:bc:27:89:26:47:ed:04:32:e8:56:05: d0:ef:be:8f:5a:97:58:83:a2:ba:55:b7:b3:8b:a8:bb:76:a4: 86:bd:cf:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXtrYK/NjhJlNM4YbR70kP8k4ejcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVEOTEzNjg0NUZBRkEwNzk1NzM1RDRBOUIwRkY5Rjc0 NjQ2MUFCMzAeFw0yNTA0MjQwNDI3MTBaFw0yNTA0MjcwODM4MTBaMDMxMTAvBgNV BAMTKDIxQTFEMUUyQTQ5NDhBMjQ5NUI1MUU3NTJBMjZGQ0ExMzg1RTYwQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC22WypNBLwgqv5987dp9hX14m2 CZNAaETVm4yp2sMTj18iaEf73ivuIgsW01thKC2/IWHmYF+bVnMvZ2zxcV9dUbu6 DtaLQd3ZeWpSWdWAr+9BFZUg9Oy9I3QnlvjJLjOZWUi2k9NSdvU6QiphGGn1DNpS ITNYjHbpNkrSolyHOeiaQwR6ty2T+jDqkywcnojS+N7mumhAx4VWSZZOQKNd2AKU lVOO6wDg5Roq263WLfuTbgohEeRuAcpmSKXiOpV2lhGc93Z9PoY+5U/Ftai6YStR O3Tp6dQ69bVEwbKwt8OLB62375iZTy8hEFm+Kg8qVWlNN98G4+vONzHzpaD5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIaHR4qSUiiSVtR51Kib8oTheYKYwHwYDVR0j BBgwFoAUldkTaEX6+geVc11Kmw/590ZGGrMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Mzc4NWU2NS01MWUyLTRiMWItODJmOS1lNzUzYWQ0YjI0MGYvMC85NUQ5MTM2ODQ1 RkFGQTA3OTU3MzVENEE5QjBGRjlGNzQ2NDYxQUIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTVEOTEzNjg0NUZBRkEwNzk1NzM1RDRBOUIwRkY5Rjc0NjQ2 MUFCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjM3ODVlNjUtNTFlMi00YjFiLTgy ZjktZTc1M2FkNGIyNDBmLzAvOTVEOTEzNjg0NUZBRkEwNzk1NzM1RDRBOUIwRkY5 Rjc0NjQ2MUFCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKEPe6gaD6XBvUj1BuGsj1l7F+B4rcUsjS0q ez/wYldUx60ts2yFoLcA3IzHUknpeSkHl44LnikdGKjv0ggW5K1WiX/+YUAY2juA 1rApUfMx3qXqhzuSkVmzMCCx41o4trX0ast2wUXFOrLMQ6AaOzBdUB+Sz5TQDqkc nDPe4uJeKOK6S3Qj1bLCgBPoMeAXkkU3EGl9tmEiUovbZxGTaGQ7JEBmH5Oe3bq4 bg6oaCWstauiE5iCamhD1gQ9aXxr2+bbc7UU9mtobUQew53pKt3lOshM4vAp2j2z bZZtY9m8J4kmR+0EMuhWBdDvvo9al1iDorpVt7OLqLt2pIa9z9g= -----END CERTIFICATE-----Generated at Thu Apr 24 06:50:02 2025 by rpki-client on console.sobornost.net