$ rpki-client -vvf repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft File: 71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft (raw, json) Hash identifier: zgz8Xk/JjJfuNvm3/LU2f8l2KyZiBQ0SPgtfqeZ3bU0= Subject key identifier: 55:D9:55:2B:40:06:A0:F4:D6:0E:C4:7F:4B:58:7B:1A:2A:70:50:9D Authority key identifier: 71:E5:1A:9B:65:D8:A1:23:51:3A:35:0F:0D:99:F9:8D:6C:9B:72:E2 Certificate issuer: /CN=71E51A9B65D8A123513A350F0D99F98D6C9B72E2 Certificate serial: 4F4FE71D09678E742B056270E9CA717C0A8CB1B4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft Manifest number: 0384 Signing time: Mon 28 Apr 2025 06:31:08 +0000 Manifest this update: Mon 28 Apr 2025 06:26:08 +0000 Manifest next update: Thu 01 May 2025 09:05:08 +0000 Files and hashes: 1: 3130332e3130372e3138372e302f32342d3234203d3e20313337333030.roa (hash: KKxu3hPM0InDJZ99FC0Xq3EDadMAbvI+i8LW1aPaZ8E=) 2: 71E51A9B65D8A123513A350F0D99F98D6C9B72E2.crl (hash: you4nuoNNwrabbsfo5NOqvXySUKuYpviAQSIwvVCt4E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.crl rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 09:05:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:4f:e7:1d:09:67:8e:74:2b:05:62:70:e9:ca:71:7c:0a:8c:b1:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71E51A9B65D8A123513A350F0D99F98D6C9B72E2 Validity Not Before: Apr 28 06:26:08 2025 GMT Not After : May 1 09:05:08 2025 GMT Subject: CN=55D9552B4006A0F4D60EC47F4B587B1A2A70509D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1e:84:85:86:e7:29:0d:78:4b:8b:f8:d2:ec: e1:ed:ca:db:66:87:51:2e:1c:1a:b8:61:b8:93:e4: a7:dc:b8:5c:7f:96:5c:3b:64:c6:37:42:98:8b:a4: 7c:6a:a8:2d:45:09:4d:f7:ae:94:2f:61:d9:59:27: 83:55:84:c2:94:1c:ce:35:06:be:2b:b4:ff:b0:29: a8:3e:f5:af:e5:55:ce:e8:56:77:d9:ce:69:54:bd: 31:63:8b:fa:c6:72:4f:90:2b:ba:94:b5:ec:c3:7f: 0b:1b:3a:1c:06:b0:17:68:97:40:01:67:7f:99:85: 43:d7:7b:17:21:94:08:7a:64:dd:89:39:94:28:4c: 56:b2:5e:e6:dd:1e:f8:73:a0:a9:fc:82:c9:42:c6: 55:09:e0:9d:d0:c4:67:7d:6f:80:80:15:24:44:b2: b1:f6:e5:94:e6:7f:74:33:92:4e:11:98:91:52:fb: 49:7f:7d:7d:2a:a9:9c:3d:99:c6:51:bd:86:bb:a2: 84:b8:ec:e2:60:87:12:d6:67:d4:66:e5:07:f9:64: 5e:4c:68:35:74:68:63:77:67:25:8c:d4:17:86:ce: 1d:c6:73:01:4e:c6:2f:29:02:cb:df:b8:57:d1:72: d3:06:2e:87:43:86:27:13:ef:2c:b4:9b:79:37:57: 60:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:D9:55:2B:40:06:A0:F4:D6:0E:C4:7F:4B:58:7B:1A:2A:70:50:9D X509v3 Authority Key Identifier: keyid:71:E5:1A:9B:65:D8:A1:23:51:3A:35:0F:0D:99:F9:8D:6C:9B:72:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:ff:2b:11:09:9d:65:72:2d:c5:fd:1c:25:9d:12:1d:c5:54: 3f:4d:77:e3:75:ba:26:9e:34:55:e2:cf:c6:72:d9:9d:70:aa: d1:b5:b4:1c:96:7a:08:ff:5a:00:16:c1:f9:60:b8:28:f4:53: 8c:56:00:5e:a5:43:2d:ca:66:38:5d:af:b0:22:79:5c:5a:20: 1f:2f:55:65:69:6a:52:4f:d2:6c:76:b2:7b:84:bf:ec:57:b9: a8:63:96:83:cc:46:b5:16:c2:18:99:2a:7b:6c:b8:72:45:b4: e0:7f:ec:31:4a:1b:a7:74:57:05:d9:47:04:ad:50:ef:dd:e3: 0c:26:0d:e9:87:d6:8a:e0:f5:b4:33:a5:0e:85:04:0d:f4:1c: 9f:21:20:b5:78:1e:bf:af:0c:d3:91:15:7d:1a:fd:d4:52:a6: db:e4:cb:42:ca:0a:d0:38:b5:02:2e:d9:19:a9:62:0e:4c:b2: 2a:84:3b:4f:28:d0:37:46:a5:4e:00:69:31:d9:69:d0:4c:c4: 25:45:e6:6b:25:5f:3c:fe:64:bd:c2:ef:51:41:e4:04:4b:59: d3:16:0a:fe:78:74:eb:0b:6c:f6:07:66:51:f9:82:f6:5f:cc: fa:63:bd:9d:c5:02:51:48:4d:f5:36:ea:23:92:bf:e5:95:89: 02:83:c4:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT0/nHQlnjnQrBWJw6cpxfAqMsbQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFFNTFBOUI2NUQ4QTEyMzUxM0EzNTBGMEQ5OUY5OEQ2 QzlCNzJFMjAeFw0yNTA0MjgwNjI2MDhaFw0yNTA1MDEwOTA1MDhaMDMxMTAvBgNV BAMTKDU1RDk1NTJCNDAwNkEwRjRENjBFQzQ3RjRCNTg3QjFBMkE3MDUwOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpHoSFhucpDXhLi/jS7OHtyttm h1EuHBq4YbiT5KfcuFx/llw7ZMY3QpiLpHxqqC1FCU33rpQvYdlZJ4NVhMKUHM41 Br4rtP+wKag+9a/lVc7oVnfZzmlUvTFji/rGck+QK7qUtezDfwsbOhwGsBdol0AB Z3+ZhUPXexchlAh6ZN2JOZQoTFayXubdHvhzoKn8gslCxlUJ4J3QxGd9b4CAFSRE srH25ZTmf3Qzkk4RmJFS+0l/fX0qqZw9mcZRvYa7ooS47OJghxLWZ9Rm5Qf5ZF5M aDV0aGN3ZyWM1BeGzh3GcwFOxi8pAsvfuFfRctMGLodDhicT7yy0m3k3V2A1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVdlVK0AGoPTWDsR/S1h7GipwUJ0wHwYDVR0j BBgwFoAUceUam2XYoSNROjUPDZn5jWybcuIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDQ4YmQwNC1mNzg3LTQxNGEtYTUwMS01MTM4YTZkNmIzZTEvMC83MUU1MUE5QjY1 RDhBMTIzNTEzQTM1MEYwRDk5Rjk4RDZDOUI3MkUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzFFNTFBOUI2NUQ4QTEyMzUxM0EzNTBGMEQ5OUY5OEQ2QzlC NzJFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQ0OGJkMDQtZjc4Ny00MTRhLWE1 MDEtNTEzOGE2ZDZiM2UxLzAvNzFFNTFBOUI2NUQ4QTEyMzUxM0EzNTBGMEQ5OUY5 OEQ2QzlCNzJFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJn/KxEJnWVyLcX9HCWdEh3FVD9Nd+N1uiae NFXiz8Zy2Z1wqtG1tByWegj/WgAWwflguCj0U4xWAF6lQy3KZjhdr7AieVxaIB8v VWVpalJP0mx2snuEv+xXuahjloPMRrUWwhiZKntsuHJFtOB/7DFKG6d0VwXZRwSt UO/d4wwmDemH1org9bQzpQ6FBA30HJ8hILV4Hr+vDNORFX0a/dRSptvky0LKCtA4 tQIu2RmpYg5MsiqEO08o0DdGpU4AaTHZadBMxCVF5mslXzz+ZL3C71FB5ARLWdMW Cv54dOsLbPYHZlH5gvZfzPpjvZ3FAlFITfU26iOSv+WViQKDxI4= -----END CERTIFICATE-----Generated at Mon Apr 28 08:22:19 2025 by rpki-client on console.sobornost.net