$ rpki-client -vvf repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.mft File: C70A343932991281F91796DB87B011987603BBF4.mft (raw, json) Hash identifier: bmHt9EYuSUkcI3wxRcbVVNGPelXfgZXT1U/l/PnCH8o= Subject key identifier: AC:2C:A7:6B:56:90:A8:AB:EE:0A:EB:17:9F:8F:F7:ED:BD:D2:FF:31 Authority key identifier: C7:0A:34:39:32:99:12:81:F9:17:96:DB:87:B0:11:98:76:03:BB:F4 Certificate issuer: /CN=C70A343932991281F91796DB87B011987603BBF4 Certificate serial: 3848F0F96A6532D577A781D99391241AA6812C27 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C70A343932991281F91796DB87B011987603BBF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.mft Manifest number: 01EB Signing time: Wed 23 Apr 2025 11:41:31 +0000 Manifest this update: Wed 23 Apr 2025 11:36:31 +0000 Manifest next update: Sat 26 Apr 2025 23:17:31 +0000 Files and hashes: 1: C70A343932991281F91796DB87B011987603BBF4.crl (hash: C+z+VGvYR1WToKUz577I6wG0gL9QCbqfMU0N3K2cjDg=) 2: 3130332e3138342e3132302e302f32332d3233203d3e20313439363633.roa (hash: 7CE9BXOCk+npQ95V1OHYui5nCFjD3JZ2DBCvcvu4/Kk=) 3: 3130332e3138342e3132312e302f32342d3234203d3e20313439363633.roa (hash: TB7U9GvlAmHnGk0/8JpxDBGjqTq2O6M0WEaScBuoS/g=) 4: 3130332e3138342e3132302e302f32342d3234203d3e20313439363633.roa (hash: K/te+OOqq38HfLYFBM6maqhYABgY51ViE5jJN8jRKPY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.crl rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C70A343932991281F91796DB87B011987603BBF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 12:29:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:48:f0:f9:6a:65:32:d5:77:a7:81:d9:93:91:24:1a:a6:81:2c:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C70A343932991281F91796DB87B011987603BBF4 Validity Not Before: Apr 23 11:36:31 2025 GMT Not After : Apr 26 23:17:31 2025 GMT Subject: CN=AC2CA76B5690A8ABEE0AEB179F8FF7EDBDD2FF31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:fc:2d:90:45:63:cb:dc:b1:b7:ea:09:9a:cf: 14:38:01:37:21:1b:94:0d:f8:bf:d5:e8:af:10:e7: 35:5f:79:ab:cd:06:60:5e:db:a0:c3:72:88:6b:e6: b4:e0:c2:a8:29:88:c1:1b:5f:7c:b7:b7:89:d1:da: 78:04:a6:bd:ba:d7:40:21:dd:bb:ba:c5:57:62:fc: 64:98:4a:e8:89:7a:f8:fb:c3:23:7c:dd:f2:97:eb: 03:b5:82:ec:88:cc:26:5d:46:e7:11:61:88:5d:51: 1b:2a:b0:33:49:fe:2a:a9:13:75:f1:44:2d:b9:c2: 83:3e:5d:08:48:e6:1d:96:2e:f9:db:fc:14:12:19: d5:d3:0a:ad:80:3d:0a:41:1d:c0:23:27:6c:96:e9: 16:42:0e:80:07:b5:93:fa:66:8c:f0:d0:57:be:a4: 4f:c3:e9:76:da:21:86:a5:4a:32:08:3f:fe:d0:ab: 14:e8:5a:d6:df:b1:ee:90:08:37:88:05:9b:05:ce: e4:b2:2e:ac:dd:ab:b2:b2:7d:6d:88:05:ee:23:3f: b5:1e:1f:25:5c:e8:97:ea:5e:ef:ed:74:b7:14:fd: f7:8e:2a:e3:30:2a:87:ce:75:bf:ac:3d:46:a3:84: 49:13:0d:d1:4e:cf:82:99:96:16:a7:cc:be:a9:72: 3c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:2C:A7:6B:56:90:A8:AB:EE:0A:EB:17:9F:8F:F7:ED:BD:D2:FF:31 X509v3 Authority Key Identifier: keyid:C7:0A:34:39:32:99:12:81:F9:17:96:DB:87:B0:11:98:76:03:BB:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C70A343932991281F91796DB87B011987603BBF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:d9:67:86:0f:59:2f:3e:99:13:54:b0:1c:56:9e:32:03:c9: 07:e8:1a:9e:1a:ea:5c:0c:fb:5f:9b:f9:30:f1:a2:99:75:79: b6:3d:ad:95:e3:70:20:0d:c5:2c:dd:2f:7c:db:b8:8d:3e:0e: 01:09:13:22:4b:d0:ff:59:4e:08:44:f2:8c:4e:08:40:46:53: b6:ff:fc:9c:48:27:ac:d6:92:16:d2:31:4d:c9:15:ac:bb:b7: 2f:3c:24:a0:6d:d9:fb:16:6d:61:01:4f:35:54:cb:2c:29:f3: d7:01:98:d7:81:ab:e8:e7:39:3c:e9:bd:be:3e:da:38:3a:17: ef:01:9b:c9:c2:0b:8c:b1:50:70:97:a8:e9:96:b4:9d:b4:49: e3:da:76:b9:c9:46:27:27:cf:6e:2a:7d:ac:8b:45:6e:72:47: 97:30:70:4b:3c:4c:7d:1f:4e:b6:2d:5a:15:13:62:98:e9:b3: cd:cf:02:c3:e4:6d:83:cd:71:c3:f0:bf:23:2e:3a:0b:65:90: 39:34:79:9d:cf:ea:df:08:6c:dd:d6:d2:6d:4e:ae:73:c7:62: 51:6d:8a:26:6b:7b:0e:4b:60:69:03:d9:0c:7e:0e:c5:42:52: aa:a0:07:e0:75:f7:ed:8c:15:73:ed:9c:20:3b:05:c3:69:eb: 44:5e:f2:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOEjw+WplMtV3p4HZk5EkGqaBLCcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzcwQTM0MzkzMjk5MTI4MUY5MTc5NkRCODdCMDExOTg3 NjAzQkJGNDAeFw0yNTA0MjMxMTM2MzFaFw0yNTA0MjYyMzE3MzFaMDMxMTAvBgNV BAMTKEFDMkNBNzZCNTY5MEE4QUJFRTBBRUIxNzlGOEZGN0VEQkREMkZGMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp/C2QRWPL3LG36gmazxQ4ATch G5QN+L/V6K8Q5zVfeavNBmBe26DDcohr5rTgwqgpiMEbX3y3t4nR2ngEpr2610Ah 3bu6xVdi/GSYSuiJevj7wyN83fKX6wO1guyIzCZdRucRYYhdURsqsDNJ/iqpE3Xx RC25woM+XQhI5h2WLvnb/BQSGdXTCq2APQpBHcAjJ2yW6RZCDoAHtZP6Zozw0Fe+ pE/D6XbaIYalSjIIP/7QqxToWtbfse6QCDeIBZsFzuSyLqzdq7KyfW2IBe4jP7Ue HyVc6JfqXu/tdLcU/feOKuMwKofOdb+sPUajhEkTDdFOz4KZlhanzL6pcjxXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrCyna1aQqKvuCusXn4/37b3S/zEwHwYDVR0j BBgwFoAUxwo0OTKZEoH5F5bbh7ARmHYDu/QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZmMxN2NjMi1mNGEyLTQxNWUtOGVhMi1mOWM0N2Y3NWM0Y2EvMC9DNzBBMzQzOTMy OTkxMjgxRjkxNzk2REI4N0IwMTE5ODc2MDNCQkY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzcwQTM0MzkzMjk5MTI4MUY5MTc5NkRCODdCMDExOTg3NjAz QkJGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmZjMTdjYzItZjRhMi00MTVlLThl YTItZjljNDdmNzVjNGNhLzAvQzcwQTM0MzkzMjk5MTI4MUY5MTc5NkRCODdCMDEx OTg3NjAzQkJGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKbZZ4YPWS8+mRNUsBxWnjIDyQfoGp4a6lwM +1+b+TDxopl1ebY9rZXjcCANxSzdL3zbuI0+DgEJEyJL0P9ZTghE8oxOCEBGU7b/ /JxIJ6zWkhbSMU3JFay7ty88JKBt2fsWbWEBTzVUyywp89cBmNeBq+jnOTzpvb4+ 2jg6F+8Bm8nCC4yxUHCXqOmWtJ20SePadrnJRicnz24qfayLRW5yR5cwcEs8TH0f TrYtWhUTYpjps83PAsPkbYPNccPwvyMuOgtlkDk0eZ3P6t8IbN3W0m1OrnPHYlFt iiZrew5LYGkD2Qx+DsVCUqqgB+B19+2MFXPtnCA7BcNp60Re8uk= -----END CERTIFICATE-----Generated at Wed Apr 23 13:25:44 2025 by rpki-client on console.sobornost.net