$ rpki-client -vvf repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.mft File: 95966A8DB250307CF9852483F96922EE520F6E2A.mft (raw, json) Hash identifier: xotPyaoRplENiPu1qY3wxkePJIbpNRTqzK2dRwFgXd0= Subject key identifier: A3:76:B7:4F:CF:C0:B2:A0:F1:6C:5B:7F:A3:72:AF:B8:25:D0:BD:0F Authority key identifier: 95:96:6A:8D:B2:50:30:7C:F9:85:24:83:F9:69:22:EE:52:0F:6E:2A Certificate issuer: /CN=95966A8DB250307CF9852483F96922EE520F6E2A Certificate serial: 0EDC69ABAB7ADB7CB8EBC3E4933E342E4ED1000F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95966A8DB250307CF9852483F96922EE520F6E2A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.mft Manifest number: 02B5 Signing time: Thu 24 Apr 2025 14:00:00 +0000 Manifest this update: Thu 24 Apr 2025 13:55:00 +0000 Manifest next update: Sun 27 Apr 2025 15:44:00 +0000 Files and hashes: 1: 95966A8DB250307CF9852483F96922EE520F6E2A.crl (hash: jXcnc0PpYQIYquGffkqr1B0++5UPVPvJs3+LbjTuOFg=) 2: 3130332e31392e3232382e302f32342d3234203d3e20313332363638.roa (hash: 2Tm0gdcz+myuN01m+Uce2N/XVde2LN8VW21KDbbagQI=) 3: 3130332e31392e3232392e302f32342d3234203d3e20313332363638.roa (hash: yijgZGAzH5m/suHYf+93ec2StnmCRT8aHziW14hBnJ4=) 4: 3130332e31392e3233312e302f32342d3234203d3e20313332363638.roa (hash: PdjinzPpF/36hO9HHqQU4IxHNvTYYZFMsZTPnz+oEJM=) 5: 3130332e31392e3233302e302f32342d3234203d3e20313332363638.roa (hash: JsesZ2XEjGD90Q6rb53op1u+M0C8ZTvk1vBXUWFrpwg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.crl rsync://repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95966A8DB250307CF9852483F96922EE520F6E2A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 15:44:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:dc:69:ab:ab:7a:db:7c:b8:eb:c3:e4:93:3e:34:2e:4e:d1:00:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95966A8DB250307CF9852483F96922EE520F6E2A Validity Not Before: Apr 24 13:55:00 2025 GMT Not After : Apr 27 15:44:00 2025 GMT Subject: CN=A376B74FCFC0B2A0F16C5B7FA372AFB825D0BD0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:a8:3b:7d:00:fa:e8:8b:a3:e7:f3:37:8d:b3: 9e:c8:3c:78:86:1c:b8:c5:90:5b:62:21:ca:6f:0b: 99:40:07:19:61:fc:c3:ea:d8:8b:17:d2:64:6c:02: d8:bf:06:0c:72:fd:e5:66:cf:9a:9c:1e:79:86:9f: 8e:c2:a5:ba:dd:d8:a1:32:62:23:a5:b0:d6:f3:f3: fe:e0:ad:bf:be:0b:14:bb:e7:8f:19:cd:04:ec:41: fc:6c:2d:a1:97:e1:50:26:49:61:cb:21:ab:44:91: 9b:2e:7c:49:3d:06:4e:3d:42:bb:3f:b1:3d:dd:c3: fa:3b:e0:de:43:29:64:c6:dc:4b:57:b7:8d:1c:12: eb:93:5e:d0:4f:2f:c1:e7:f6:17:be:91:a7:a2:d8: 5c:a0:80:9e:6d:6a:ac:1c:4d:4c:34:84:c9:0a:d8: 7a:98:db:a6:a3:83:84:79:a9:fe:48:9e:25:04:6c: 48:5f:5b:7d:9b:98:ae:9d:de:4c:95:29:b0:79:87: ba:0a:44:a6:39:a1:48:27:9c:d6:52:4f:e4:24:29: f4:a7:7d:dc:d1:23:e7:5f:0f:53:1c:3e:84:d5:ca: dd:83:92:62:4e:32:5d:6a:15:e6:f2:92:8a:2c:a9: 63:0a:a1:fd:b9:23:22:b3:0c:2a:54:3e:1a:a9:73: 23:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:76:B7:4F:CF:C0:B2:A0:F1:6C:5B:7F:A3:72:AF:B8:25:D0:BD:0F X509v3 Authority Key Identifier: keyid:95:96:6A:8D:B2:50:30:7C:F9:85:24:83:F9:69:22:EE:52:0F:6E:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95966A8DB250307CF9852483F96922EE520F6E2A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:8f:52:dd:c8:06:d4:20:4e:68:b8:a1:9c:c9:65:2f:b4:7c: 7a:be:f3:fc:e1:3c:ab:34:48:5c:0e:c5:1c:41:e3:eb:e1:0c: db:3e:17:42:a1:52:3e:e2:bd:a3:31:61:d1:c1:96:07:53:45: 6d:29:f7:09:b5:17:a4:ad:80:9d:a3:9b:2a:84:d4:1c:f0:ea: 06:15:c1:3c:1e:6f:9e:bf:7c:07:d1:7b:2b:b9:94:35:a2:13: f9:39:2d:52:cf:a0:51:35:9d:c8:f0:3e:81:bd:c2:5f:e2:6e: 83:ac:6d:45:b1:bd:38:9a:ab:f6:a0:a2:37:70:71:b2:28:83: db:5e:0c:6d:9d:69:20:d9:67:3a:26:7e:43:3a:57:fa:f1:5b: 55:18:49:ca:c2:35:58:37:fd:1a:1c:28:67:3b:95:fa:de:ff: df:b6:1c:28:f6:89:be:8d:12:dc:ac:5e:78:89:3b:5b:7c:26: 33:59:67:1a:dc:83:c7:50:13:f9:5e:81:10:bf:7d:0e:ab:c5: 05:99:42:b2:88:0e:3f:e3:8c:6c:d9:f2:c9:7d:ac:b2:18:7e: 80:6b:6a:e6:ad:b0:4a:2f:41:95:60:dd:ca:ba:e4:8b:be:96: a6:48:ae:90:68:1b:5d:2a:70:33:77:15:d5:52:f3:75:ea:02: d3:20:81:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDtxpq6t623y468Pkkz40Lk7RAA8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU5NjZBOERCMjUwMzA3Q0Y5ODUyNDgzRjk2OTIyRUU1 MjBGNkUyQTAeFw0yNTA0MjQxMzU1MDBaFw0yNTA0MjcxNTQ0MDBaMDMxMTAvBgNV BAMTKEEzNzZCNzRGQ0ZDMEIyQTBGMTZDNUI3RkEzNzJBRkI4MjVEMEJEMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlqDt9AProi6Pn8zeNs57IPHiG HLjFkFtiIcpvC5lABxlh/MPq2IsX0mRsAti/Bgxy/eVmz5qcHnmGn47Cpbrd2KEy YiOlsNbz8/7grb++CxS7548ZzQTsQfxsLaGX4VAmSWHLIatEkZsufEk9Bk49Qrs/ sT3dw/o74N5DKWTG3EtXt40cEuuTXtBPL8Hn9he+kaei2FyggJ5taqwcTUw0hMkK 2HqY26ajg4R5qf5IniUEbEhfW32bmK6d3kyVKbB5h7oKRKY5oUgnnNZST+QkKfSn fdzRI+dfD1McPoTVyt2DkmJOMl1qFebykoosqWMKof25IyKzDCpUPhqpcyN5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo3a3T8/AsqDxbFt/o3KvuCXQvQ8wHwYDVR0j BBgwFoAUlZZqjbJQMHz5hSSD+Wki7lIPbiowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MmYxNDE3YS01NzE4LTQwNzEtOWYzNS1jMTIyNTU1ZGFjN2EvMC85NTk2NkE4REIy NTAzMDdDRjk4NTI0ODNGOTY5MjJFRTUyMEY2RTJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTU5NjZBOERCMjUwMzA3Q0Y5ODUyNDgzRjk2OTIyRUU1MjBG NkUyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDJmMTQxN2EtNTcxOC00MDcxLTlm MzUtYzEyMjU1NWRhYzdhLzAvOTU5NjZBOERCMjUwMzA3Q0Y5ODUyNDgzRjk2OTIy RUU1MjBGNkUyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACaPUt3IBtQgTmi4oZzJZS+0fHq+8/zhPKs0 SFwOxRxB4+vhDNs+F0KhUj7ivaMxYdHBlgdTRW0p9wm1F6StgJ2jmyqE1Bzw6gYV wTweb56/fAfReyu5lDWiE/k5LVLPoFE1ncjwPoG9wl/iboOsbUWxvTiaq/agojdw cbIog9teDG2daSDZZzomfkM6V/rxW1UYScrCNVg3/RocKGc7lfre/9+2HCj2ib6N EtysXniJO1t8JjNZZxrcg8dQE/legRC/fQ6rxQWZQrKIDj/jjGzZ8sl9rLIYfoBr auatsEovQZVg3cq65Iu+lqZIrpBoG10qcDN3FdVS83XqAtMggXo= -----END CERTIFICATE-----Generated at Thu Apr 24 15:50:16 2025 by rpki-client on console.sobornost.net