$ rpki-client -vvf repo-rpki.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/78702A768CA1E1867D543013BB6186EDA3C06C16.mft File: 78702A768CA1E1867D543013BB6186EDA3C06C16.mft (raw, json) Hash identifier: 3/Z5vnweYj2+Sv8/CdSqhxXGmWlA5UM6dNTcA6Ylfpo= Subject key identifier: 45:E5:9F:67:17:51:BD:A6:43:7C:7C:D4:E7:46:8B:57:E1:71:95:44 Authority key identifier: 78:70:2A:76:8C:A1:E1:86:7D:54:30:13:BB:61:86:ED:A3:C0:6C:16 Certificate issuer: /CN=78702A768CA1E1867D543013BB6186EDA3C06C16 Certificate serial: 2AE78CB5B41F2A4A6A4579D67D4AED4C1FD38D26 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78702A768CA1E1867D543013BB6186EDA3C06C16.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/78702A768CA1E1867D543013BB6186EDA3C06C16.mft Manifest number: 57 Signing time: Thu 24 Apr 2025 16:51:16 +0000 Manifest this update: Thu 24 Apr 2025 16:46:16 +0000 Manifest next update: Mon 28 Apr 2025 00:06:16 +0000 Files and hashes: 1: 78702A768CA1E1867D543013BB6186EDA3C06C16.crl (hash: 4KN7924Sl36wc3+uEpiQubwlZzU87bdKPjN7zFWq/9o=) 2: 3135372e36362e3134312e302f32342d3234203d3e20313532373539.roa (hash: FkpJvfAJZskSw2RpW6IZFlM3nRvWIXVzCCgCII/z76M=) 3: 3135372e36362e3134302e302f32342d3234203d3e20313532373539.roa (hash: EKlQMXAk89f+RqS3m5jQwamdkWyWCWcqlaMFgz2WrOg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/78702A768CA1E1867D543013BB6186EDA3C06C16.crl rsync://repo-rpki.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/78702A768CA1E1867D543013BB6186EDA3C06C16.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78702A768CA1E1867D543013BB6186EDA3C06C16.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 19:57:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:e7:8c:b5:b4:1f:2a:4a:6a:45:79:d6:7d:4a:ed:4c:1f:d3:8d:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78702A768CA1E1867D543013BB6186EDA3C06C16 Validity Not Before: Apr 24 16:46:16 2025 GMT Not After : Apr 28 00:06:16 2025 GMT Subject: CN=45E59F671751BDA6437C7CD4E7468B57E1719544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:95:be:d2:15:e7:bf:d9:28:6c:87:bc:f4:10: 2d:1c:cb:1f:c2:97:af:84:8a:82:c8:c9:b4:ab:de: 90:00:f6:cb:1d:2f:2f:2d:6d:18:c9:e4:35:73:68: 79:31:a1:f9:40:0d:b3:70:b1:48:0f:2b:2f:c3:f8: 2e:b4:c6:54:3c:44:54:3f:10:e5:dc:9b:f2:dd:54: 0f:ad:b9:34:e7:e2:72:aa:73:1f:6c:81:0f:b5:59: f6:ba:cf:07:f5:46:0c:9c:44:de:f1:38:3c:1c:41: a9:05:ba:38:c5:75:4a:9b:7c:3d:95:e6:74:c9:43: d8:7e:37:34:af:08:95:77:4a:30:0a:36:be:f3:86: a5:f7:26:6f:e0:fe:6b:07:12:45:d4:1c:80:ef:98: c6:c8:a4:7e:d4:46:36:3c:4c:4c:89:ec:48:4e:aa: 9d:f8:f4:8b:bc:15:56:0b:e1:6b:5e:f7:de:7b:dc: 51:93:71:59:8b:f4:b4:87:4b:53:9c:5b:6b:d8:94: 93:b1:85:c8:ae:ef:34:85:92:1c:7c:90:1e:db:30: 9a:14:ec:d3:35:6c:b7:02:c2:8f:15:34:39:c1:da: cf:2d:3a:76:35:80:25:bb:09:fc:7a:08:6e:88:a7: 7b:a9:e5:85:24:dd:91:e4:ff:df:27:64:c6:72:fd: 10:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:E5:9F:67:17:51:BD:A6:43:7C:7C:D4:E7:46:8B:57:E1:71:95:44 X509v3 Authority Key Identifier: keyid:78:70:2A:76:8C:A1:E1:86:7D:54:30:13:BB:61:86:ED:A3:C0:6C:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/78702A768CA1E1867D543013BB6186EDA3C06C16.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78702A768CA1E1867D543013BB6186EDA3C06C16.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/78702A768CA1E1867D543013BB6186EDA3C06C16.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:b0:e4:5d:ce:c0:30:95:47:1a:b5:10:27:07:a7:10:cf:31: b4:19:50:48:42:ea:fd:8e:a2:db:bb:50:08:94:6e:ae:fd:e3: 4d:81:4c:c1:11:c8:87:be:0a:2b:d7:02:c6:d3:41:88:4d:37: 46:63:71:43:2c:be:84:45:a5:ef:65:b4:57:22:08:f2:c6:3d: 85:41:74:43:a4:94:57:ca:70:e4:8a:fe:45:b7:71:a2:8e:05: af:38:3a:70:37:3b:de:82:28:e1:e3:86:43:14:28:1d:1a:d3: ed:78:3c:d9:10:89:84:e6:1b:3e:3e:d0:87:be:58:19:9d:65: 55:6f:9e:9e:cf:6e:d9:79:82:21:6f:6c:f0:c2:d0:e0:25:c9: 51:e4:68:37:b2:58:3d:3b:38:f8:33:73:6b:cf:c9:a0:fc:6b: 98:81:66:05:19:fb:65:98:01:1f:39:46:8b:0d:c1:4e:38:f5: 4e:62:dc:fb:91:57:64:dc:b4:11:e9:92:4a:2f:c9:b8:b7:d6: 10:53:9b:16:d2:78:e4:0b:01:99:7e:b5:a4:4b:6f:94:0c:72: ac:0b:25:c9:f1:d8:a0:41:0d:34:cc:52:d4:cf:1c:cc:9e:50: 11:f5:7a:ea:18:ff:24:f9:02:88:ef:e7:9b:10:58:04:8c:01: ed:50:04:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKueMtbQfKkpqRXnWfUrtTB/TjSYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg3MDJBNzY4Q0ExRTE4NjdENTQzMDEzQkI2MTg2RURB M0MwNkMxNjAeFw0yNTA0MjQxNjQ2MTZaFw0yNTA0MjgwMDA2MTZaMDMxMTAvBgNV BAMTKDQ1RTU5RjY3MTc1MUJEQTY0MzdDN0NENEU3NDY4QjU3RTE3MTk1NDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/lb7SFee/2Shsh7z0EC0cyx/C l6+EioLIybSr3pAA9ssdLy8tbRjJ5DVzaHkxoflADbNwsUgPKy/D+C60xlQ8RFQ/ EOXcm/LdVA+tuTTn4nKqcx9sgQ+1Wfa6zwf1RgycRN7xODwcQakFujjFdUqbfD2V 5nTJQ9h+NzSvCJV3SjAKNr7zhqX3Jm/g/msHEkXUHIDvmMbIpH7URjY8TEyJ7EhO qp349Iu8FVYL4Wte99573FGTcVmL9LSHS1OcW2vYlJOxhciu7zSFkhx8kB7bMJoU 7NM1bLcCwo8VNDnB2s8tOnY1gCW7Cfx6CG6Ip3up5YUk3ZHk/98nZMZy/RARAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUReWfZxdRvaZDfHzU50aLV+FxlUQwHwYDVR0j BBgwFoAUeHAqdoyh4YZ9VDATu2GG7aPAbBYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YmE5ZjRlMi1jNzNiLTQ0MjctOTgyOS0xZGExYmFhYjg3MGIvMC83ODcwMkE3NjhD QTFFMTg2N0Q1NDMwMTNCQjYxODZFREEzQzA2QzE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzg3MDJBNzY4Q0ExRTE4NjdENTQzMDEzQkI2MTg2RURBM0Mw NkMxNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGJhOWY0ZTItYzczYi00NDI3LTk4 MjktMWRhMWJhYWI4NzBiLzAvNzg3MDJBNzY4Q0ExRTE4NjdENTQzMDEzQkI2MTg2 RURBM0MwNkMxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJSw5F3OwDCVRxq1ECcHpxDPMbQZUEhC6v2O otu7UAiUbq79402BTMERyIe+CivXAsbTQYhNN0ZjcUMsvoRFpe9ltFciCPLGPYVB dEOklFfKcOSK/kW3caKOBa84OnA3O96CKOHjhkMUKB0a0+14PNkQiYTmGz4+0Ie+ WBmdZVVvnp7Pbtl5giFvbPDC0OAlyVHkaDeyWD07OPgzc2vPyaD8a5iBZgUZ+2WY AR85RosNwU449U5i3PuRV2TctBHpkkovybi31hBTmxbSeOQLAZl+taRLb5QMcqwL Jcnx2KBBDTTMUtTPHMyeUBH1euoY/yT5Aojv55sQWASMAe1QBJo= -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:24 2025 by rpki-client on console.sobornost.net