$ rpki-client -vvf repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft File: 401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft (raw, json) Hash identifier: tgtwLfgpHzKcGhMou0l2Gd336I8KlZJ+f2z+tHLBpb8= Subject key identifier: 43:C8:1B:EC:8A:ED:B3:9F:D7:2B:0D:50:A4:4E:12:B0:49:25:7B:D1 Authority key identifier: 40:1A:A5:6A:F5:99:CC:A2:CD:71:A6:84:FF:CF:53:FF:F9:DD:E3:DD Certificate issuer: /CN=401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD Certificate serial: 6A3BB8F70CA8D298B0976E38F0B5E6E2BD94AC07 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft Manifest number: 01AC Signing time: Thu 24 Apr 2025 14:11:51 +0000 Manifest this update: Thu 24 Apr 2025 14:06:51 +0000 Manifest next update: Sun 27 Apr 2025 17:12:51 +0000 Files and hashes: 1: 401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.crl (hash: dvLc2NjQElbgNGvHb5wS5myhCSfAEFEyNcVX2XO+KDE=) 2: 3130332e3136302e36382e302f32342d3234203d3e203438343635.roa (hash: xfIhG1WqC8mycFYz+vcqQY0Ov8VUQ3o8w6al6PEEFwc=) 3: 3130332e3136302e36392e302f32342d3234203d3e203438343635.roa (hash: auLcgmSGCQAKQQp7IS/UW/PKknCFg/ObGvfBAC+PkNE=) 4: 3130332e3136302e36392e302f32342d3234203d3e20313431363037.roa (hash: a7mgV41OX87LjUgmR9JI4fbD1k92EJK28gdqBsIBQfU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.crl rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 17:12:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:3b:b8:f7:0c:a8:d2:98:b0:97:6e:38:f0:b5:e6:e2:bd:94:ac:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD Validity Not Before: Apr 24 14:06:51 2025 GMT Not After : Apr 27 17:12:51 2025 GMT Subject: CN=43C81BEC8AEDB39FD72B0D50A44E12B049257BD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a4:91:a1:c7:42:e1:6a:23:a9:5d:8d:87:19: 07:3f:72:5f:5d:f4:34:31:40:1b:bc:7b:9a:40:f3: 85:5d:49:f4:43:2e:cb:40:51:c5:76:4b:3d:a0:3c: 2b:7f:ad:4e:b9:88:d6:7d:78:cb:e8:21:d2:9a:c6: 11:38:bc:c8:9f:f9:93:ef:03:05:ef:ed:0c:91:32: 19:48:13:51:6a:b3:33:c9:a9:71:b3:7a:9e:0b:13: 36:4b:c3:75:95:b2:2d:11:47:5f:27:04:42:20:4a: 6f:87:9f:55:af:29:af:27:c6:65:60:16:51:1b:75: e0:65:55:82:d4:9f:21:d9:2b:1f:c3:5a:00:fd:e8: b5:2b:86:94:33:be:28:c7:08:ed:b8:9b:25:af:2c: f0:92:44:b6:43:2f:3d:de:49:49:29:bc:6b:df:2c: 49:35:db:c7:c3:de:18:ee:4a:57:69:3e:1b:f7:42: 44:8c:34:85:eb:2c:46:1a:35:c3:51:1d:7b:20:80: dc:e0:40:5d:0b:88:9c:46:d3:c4:21:85:2c:73:e0: ff:e9:f5:eb:fc:55:cd:34:4b:4b:9a:47:cf:3a:b5: 28:a3:85:16:61:11:ea:4b:c6:eb:0f:7f:12:8d:ee: 48:66:dd:f0:b0:0b:30:50:ca:11:97:45:59:01:53: 22:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:C8:1B:EC:8A:ED:B3:9F:D7:2B:0D:50:A4:4E:12:B0:49:25:7B:D1 X509v3 Authority Key Identifier: keyid:40:1A:A5:6A:F5:99:CC:A2:CD:71:A6:84:FF:CF:53:FF:F9:DD:E3:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:82:78:2b:16:d1:47:bd:fb:b7:9a:6b:49:cc:c4:cd:78:47: 70:76:0d:d4:80:15:35:6f:84:2d:31:fc:b4:6d:e6:33:d9:23: 8f:ee:97:44:b5:b5:da:bc:c4:7f:ec:77:9e:35:e6:40:de:55: 23:a0:4b:0e:41:42:9d:02:b3:1a:33:70:70:6a:3e:8f:63:2b: 50:48:df:36:9b:22:8f:66:5c:02:fc:b9:ec:95:85:9c:f7:3c: 03:6d:59:ec:e7:57:02:eb:12:c0:07:26:ad:07:05:be:3b:95: 94:23:cc:35:09:2d:5a:fc:3d:df:b1:3d:c0:24:47:14:83:ec: 45:8f:ea:49:b1:23:33:91:17:88:d1:b6:ce:e7:13:97:a9:d0: eb:98:77:99:64:a3:59:76:15:d6:8a:62:73:4f:75:89:7c:f4: 0a:b4:a0:d7:df:8f:31:4e:3a:4f:7f:ba:ba:82:22:f9:05:8a: 4f:fb:76:a6:7a:66:2f:42:fd:1b:24:96:b9:19:9b:59:b4:a6: 68:7d:af:ea:81:f9:66:b4:83:9a:49:35:86:82:ec:ce:31:2f: 87:e9:f3:19:d2:84:27:7f:57:94:43:30:b1:a8:b2:32:05:57: 16:44:ba:f0:d5:fc:7c:37:df:92:16:c8:ff:62:ec:f6:0a:c1: 4a:d4:2e:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaju49wyo0piwl2448LXm4r2UrAcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDAxQUE1NkFGNTk5Q0NBMkNENzFBNjg0RkZDRjUzRkZG OURERTNERDAeFw0yNTA0MjQxNDA2NTFaFw0yNTA0MjcxNzEyNTFaMDMxMTAvBgNV BAMTKDQzQzgxQkVDOEFFREIzOUZENzJCMEQ1MEE0NEUxMkIwNDkyNTdCRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVpJGhx0LhaiOpXY2HGQc/cl9d 9DQxQBu8e5pA84VdSfRDLstAUcV2Sz2gPCt/rU65iNZ9eMvoIdKaxhE4vMif+ZPv AwXv7QyRMhlIE1FqszPJqXGzep4LEzZLw3WVsi0RR18nBEIgSm+Hn1WvKa8nxmVg FlEbdeBlVYLUnyHZKx/DWgD96LUrhpQzvijHCO24myWvLPCSRLZDLz3eSUkpvGvf LEk128fD3hjuSldpPhv3QkSMNIXrLEYaNcNRHXsggNzgQF0LiJxG08QhhSxz4P/p 9ev8Vc00S0uaR886tSijhRZhEepLxusPfxKN7khm3fCwCzBQyhGXRVkBUyLTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ8gb7Irts5/XKw1QpE4SsEkle9EwHwYDVR0j BBgwFoAUQBqlavWZzKLNcaaE/89T//nd490wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWM3OWZiZS00NzkwLTQ2YmUtYjliMi0wMzU5YjFhMThlMzMvMC80MDFBQTU2QUY1 OTlDQ0EyQ0Q3MUE2ODRGRkNGNTNGRkY5RERFM0RELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDAxQUE1NkFGNTk5Q0NBMkNENzFBNjg0RkZDRjUzRkZGOURE RTNERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFjNzlmYmUtNDc5MC00NmJlLWI5 YjItMDM1OWIxYTE4ZTMzLzAvNDAxQUE1NkFGNTk5Q0NBMkNENzFBNjg0RkZDRjUz RkZGOURERTNERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHWCeCsW0Ue9+7eaa0nMxM14R3B2DdSAFTVv hC0x/LRt5jPZI4/ul0S1tdq8xH/sd5415kDeVSOgSw5BQp0CsxozcHBqPo9jK1BI 3zabIo9mXAL8ueyVhZz3PANtWeznVwLrEsAHJq0HBb47lZQjzDUJLVr8Pd+xPcAk RxSD7EWP6kmxIzORF4jRts7nE5ep0OuYd5lko1l2FdaKYnNPdYl89Aq0oNffjzFO Ok9/urqCIvkFik/7dqZ6Zi9C/RsklrkZm1m0pmh9r+qB+Wa0g5pJNYaC7M4xL4fp 8xnShCd/V5RDMLGosjIFVxZEuvDV/Hw335IWyP9i7PYKwUrULlU= -----END CERTIFICATE-----Generated at Thu Apr 24 15:50:16 2025 by rpki-client on console.sobornost.net