$ rpki-client -vvf repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.mft File: 961A52A522DEB902D9CBDDE98AF82B424422F566.mft (raw, json) Hash identifier: kVm5oxRo6jCA58CXnoiDWrVYGGkjr7v7qv8AEHcOrN0= Subject key identifier: C2:1D:53:B2:DF:BE:8E:8F:1B:9B:3A:92:11:48:21:52:A3:0C:58:1F Authority key identifier: 96:1A:52:A5:22:DE:B9:02:D9:CB:DD:E9:8A:F8:2B:42:44:22:F5:66 Certificate issuer: /CN=961A52A522DEB902D9CBDDE98AF82B424422F566 Certificate serial: 2A05EC19BB329983D5AF16DE9107E23E4E2D2A5A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/961A52A522DEB902D9CBDDE98AF82B424422F566.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.mft Manifest number: 5C Signing time: Thu 24 Apr 2025 05:01:48 +0000 Manifest this update: Thu 24 Apr 2025 04:56:48 +0000 Manifest next update: Sun 27 Apr 2025 07:38:48 +0000 Files and hashes: 1: 3136302e32352e3132312e302f32342d3234203d3e20313533303632.roa (hash: JTzBC/tUY4YKAC/+r+uXmWAv3T2JRL+s5BpODc7IPU4=) 2: 961A52A522DEB902D9CBDDE98AF82B424422F566.crl (hash: lRST+S5YqRjHkrsogp4x2NHBNUWVlgNQGogmCWN/Tx0=) 3: 3136302e32352e3132302e302f32342d3234203d3e20313533303632.roa (hash: /2/aGmGUHvyKK7WNmuKzAj0cNzsdhjisomKkikn2mP8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.crl rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/961A52A522DEB902D9CBDDE98AF82B424422F566.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 07:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:05:ec:19:bb:32:99:83:d5:af:16:de:91:07:e2:3e:4e:2d:2a:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=961A52A522DEB902D9CBDDE98AF82B424422F566 Validity Not Before: Apr 24 04:56:48 2025 GMT Not After : Apr 27 07:38:48 2025 GMT Subject: CN=C21D53B2DFBE8E8F1B9B3A9211482152A30C581F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c9:15:9e:af:d3:35:6e:73:1c:16:cd:43:4a: b8:87:ba:16:28:b4:e5:5f:b1:4e:f8:1c:24:e6:db: 4e:20:0f:83:43:57:d0:32:de:7a:c4:da:52:55:ac: 63:cd:4e:9a:f2:5c:1e:fa:32:80:60:e4:55:7e:fa: 7d:7d:1b:3e:c4:2f:6d:2e:11:d3:ef:71:8e:b0:41: 81:e9:a4:87:9e:4c:2a:cb:87:c2:58:8c:f6:cc:b1: 86:7d:fa:39:4b:f3:e3:ec:3d:e4:95:29:3a:61:a8: e0:f3:89:0c:d3:29:93:17:de:fd:0b:b2:e1:5d:66: 9c:77:ca:1a:08:6d:bb:31:0f:65:34:82:02:3d:17: 0f:f5:db:22:fa:3e:b6:d9:1d:7d:18:97:8d:54:3e: 66:c8:f5:02:10:4e:42:d5:40:0d:f2:db:4e:10:3f: 16:c5:df:7f:5c:de:d7:6f:af:2f:e9:d7:13:a2:2b: fe:75:be:7e:2c:5f:8a:98:e7:97:5c:65:ff:f2:87: b9:16:f2:93:fd:f0:58:70:59:b4:f1:47:7f:60:d5: 3a:a3:24:64:a2:36:7f:96:aa:5b:39:65:f7:26:99: cc:b6:85:02:61:5a:08:81:47:49:9c:7c:f2:b9:25: 98:91:70:bf:99:52:ac:08:08:90:2b:0d:ca:4d:76: 3e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:1D:53:B2:DF:BE:8E:8F:1B:9B:3A:92:11:48:21:52:A3:0C:58:1F X509v3 Authority Key Identifier: keyid:96:1A:52:A5:22:DE:B9:02:D9:CB:DD:E9:8A:F8:2B:42:44:22:F5:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/961A52A522DEB902D9CBDDE98AF82B424422F566.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:63:73:60:9e:55:6f:84:91:78:52:88:15:6c:15:dd:33:c6: e0:21:09:8f:e3:ca:b4:f8:b0:c1:4d:3a:6c:46:e3:c8:64:45: e7:08:91:3c:7d:c7:9e:ab:c2:0e:14:c2:8d:34:80:9a:89:fe: 7c:23:a1:fa:be:98:6a:63:1e:1a:08:cc:68:c2:6a:f1:1f:0d: 7d:70:ba:12:e6:59:48:96:4a:a5:15:24:58:7e:2f:f0:d8:44: 1c:e2:1f:1e:f3:0d:24:05:ad:14:cc:0f:d0:4f:d3:56:e0:84: f5:9d:bd:a5:f5:3f:d5:ed:e1:03:a8:d9:22:ac:08:a1:06:39: 43:dc:b6:0b:c2:d2:a5:48:79:0f:c6:a3:22:e9:e5:e4:8b:78: f2:da:ff:59:98:9e:4f:e1:92:9e:31:e5:8c:e5:59:23:1f:a1: 57:23:05:8d:d7:2d:46:45:41:81:74:ab:99:64:92:df:d7:af: d2:58:f0:d7:6b:f4:08:d9:da:19:3d:21:81:dc:1a:4b:97:62: f6:42:64:15:68:2d:1d:43:33:ae:a9:1f:a6:59:f8:f3:72:50: ef:42:7d:d9:be:52:bc:79:f6:f5:46:42:62:4e:e8:8f:f4:54: 96:5a:ec:a2:21:8a:64:71:00:e0:85:2e:97:01:0e:20:9b:9f: d9:9e:a8:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKgXsGbsymYPVrxbekQfiPk4tKlowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTYxQTUyQTUyMkRFQjkwMkQ5Q0JEREU5OEFGODJCNDI0 NDIyRjU2NjAeFw0yNTA0MjQwNDU2NDhaFw0yNTA0MjcwNzM4NDhaMDMxMTAvBgNV BAMTKEMyMUQ1M0IyREZCRThFOEYxQjlCM0E5MjExNDgyMTUyQTMwQzU4MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8yRWer9M1bnMcFs1DSriHuhYo tOVfsU74HCTm204gD4NDV9Ay3nrE2lJVrGPNTpryXB76MoBg5FV++n19Gz7EL20u EdPvcY6wQYHppIeeTCrLh8JYjPbMsYZ9+jlL8+PsPeSVKTphqODziQzTKZMX3v0L suFdZpx3yhoIbbsxD2U0ggI9Fw/12yL6PrbZHX0Yl41UPmbI9QIQTkLVQA3y204Q PxbF339c3tdvry/p1xOiK/51vn4sX4qY55dcZf/yh7kW8pP98FhwWbTxR39g1Tqj JGSiNn+Wqls5Zfcmmcy2hQJhWgiBR0mcfPK5JZiRcL+ZUqwICJArDcpNdj6vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwh1Tst++jo8bmzqSEUghUqMMWB8wHwYDVR0j BBgwFoAUlhpSpSLeuQLZy93pivgrQkQi9WYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZjcyZjAxMi1hNDNhLTRmY2ItODZhOS1hYjNlOTU3M2E4ZDkvMC85NjFBNTJBNTIy REVCOTAyRDlDQkRERTk4QUY4MkI0MjQ0MjJGNTY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTYxQTUyQTUyMkRFQjkwMkQ5Q0JEREU5OEFGODJCNDI0NDIy RjU2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2Y3MmYwMTItYTQzYS00ZmNiLTg2 YTktYWIzZTk1NzNhOGQ5LzAvOTYxQTUyQTUyMkRFQjkwMkQ5Q0JEREU5OEFGODJC NDI0NDIyRjU2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAhjc2CeVW+EkXhSiBVsFd0zxuAhCY/jyrT4 sMFNOmxG48hkRecIkTx9x56rwg4Uwo00gJqJ/nwjofq+mGpjHhoIzGjCavEfDX1w uhLmWUiWSqUVJFh+L/DYRBziHx7zDSQFrRTMD9BP01bghPWdvaX1P9Xt4QOo2SKs CKEGOUPctgvC0qVIeQ/GoyLp5eSLePLa/1mYnk/hkp4x5YzlWSMfoVcjBY3XLUZF QYF0q5lkkt/Xr9JY8Ndr9AjZ2hk9IYHcGkuXYvZCZBVoLR1DM66pH6ZZ+PNyUO9C fdm+Urx59vVGQmJO6I/0VJZa7KIhimRxAOCFLpcBDiCbn9meqOI= -----END CERTIFICATE-----Generated at Thu Apr 24 06:50:02 2025 by rpki-client on console.sobornost.net