$ rpki-client -vvf repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.mft File: 71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.mft (raw, json) Hash identifier: tAkaBygP43dKMzfWAannEPKPwFHjp4a6zfRI6yrc3XU= Subject key identifier: 27:C8:47:8C:B3:A7:12:3C:8D:60:A4:ED:45:85:18:49:CF:82:ED:35 Authority key identifier: 71:FC:3F:7B:27:22:F6:A1:5C:55:7F:63:F8:F4:95:A9:CD:BC:A9:D7 Certificate issuer: /CN=71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7 Certificate serial: 590B623E19D01BDFAF4ADE0031B35883AF0203FE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.mft Manifest number: 04C7 Signing time: Thu 24 Apr 2025 20:41:26 +0000 Manifest this update: Thu 24 Apr 2025 20:36:26 +0000 Manifest next update: Mon 28 Apr 2025 07:58:26 +0000 Files and hashes: 1: 71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.crl (hash: TqgxF2/gC4mkF4w4hkID4xQW0+3elTjRUzTNADmyCgw=) 2: 3130332e3134372e38332e302f32342d3234203d3e20313339393538.roa (hash: /QgT9jMiJ3A/Cz4UQ/df6jb4M7TsfUBIxaTBzKsjfh8=) 3: 3130332e3134372e38322e302f32342d3234203d3e20313339393538.roa (hash: Haq+urxoHujdJEKNTlbGe3YJuf+c1/Gnlks9VtxgPhk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.crl rsync://repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:0b:62:3e:19:d0:1b:df:af:4a:de:00:31:b3:58:83:af:02:03:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7 Validity Not Before: Apr 24 20:36:26 2025 GMT Not After : Apr 28 07:58:26 2025 GMT Subject: CN=27C8478CB3A7123C8D60A4ED45851849CF82ED35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:58:9b:ac:ac:4e:f9:fb:9e:91:41:6e:fa:2d: 1f:10:c9:f6:1e:0f:e4:16:8e:4d:9d:46:c0:38:08: 13:6e:6d:d6:e3:54:6e:89:95:1f:36:ac:c7:17:3d: 22:fa:1a:26:45:6a:4c:71:f1:a2:8d:dd:45:47:88: a4:cd:df:37:56:95:c2:e4:a3:86:37:2c:b0:15:b9: 69:d7:3f:9d:23:0a:0e:10:b0:20:ee:23:17:22:b3: fb:7f:9a:dc:57:0c:db:0e:c3:f6:d0:8f:4d:8b:f7: 19:12:23:bf:f2:d1:1c:d3:52:a8:5e:fd:e4:d4:75: 97:0e:fe:df:31:16:89:fc:8e:96:7f:0d:6b:80:8a: ea:4a:cd:76:5a:13:e2:b1:c4:f1:de:9a:77:59:57: aa:45:bc:dc:52:f2:00:4d:05:de:39:8e:55:7f:bb: 8a:fe:86:3f:e9:aa:1a:03:58:83:51:b1:60:9c:81: 7d:cd:35:a8:4a:9f:8b:52:0c:e2:d7:4c:4a:e7:a9: b5:dd:14:bb:ad:c5:cc:3e:ad:14:0b:5e:28:46:c0: d4:49:32:9d:17:c1:28:6c:39:7b:4b:57:9a:26:ce: 06:5b:7e:26:a7:c1:96:5a:37:26:00:92:bc:d2:38: d8:10:cc:15:3e:e7:ab:cb:4f:44:56:a5:52:31:db: be:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:C8:47:8C:B3:A7:12:3C:8D:60:A4:ED:45:85:18:49:CF:82:ED:35 X509v3 Authority Key Identifier: keyid:71:FC:3F:7B:27:22:F6:A1:5C:55:7F:63:F8:F4:95:A9:CD:BC:A9:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:0b:ab:d8:c3:e9:9d:3c:fa:c5:ac:b3:d2:52:d7:8f:f4:5b: 65:f0:38:5b:7d:86:20:14:c6:39:65:d4:46:63:7b:34:d1:e4: 7d:2f:69:2c:16:18:6a:79:c4:31:f9:b5:9c:66:56:38:4d:66: 9f:6c:4c:6c:ce:07:d5:26:a5:23:ac:50:c7:17:23:dc:be:6a: e0:fa:af:5b:bf:b3:5f:69:bb:29:83:3d:9e:18:63:5c:29:28: 9f:1b:b0:df:9d:38:7e:96:1d:06:af:80:94:5e:34:dc:68:fa: b1:12:fd:ef:81:c6:15:5e:6f:3b:75:df:e0:73:eb:29:2b:3f: c0:56:dd:44:a8:fb:fe:0a:c7:ae:63:f8:ff:07:73:95:21:a9: e0:37:70:0f:23:9c:e1:61:21:75:d5:0f:8a:c7:4d:2a:db:c3: df:c1:00:6a:fd:ee:3d:d0:9b:46:33:75:7c:9c:84:64:79:15: 5c:39:51:5d:36:77:c6:ac:1c:8e:4b:6e:ec:30:38:1a:3a:07: 79:e9:e5:20:50:fa:a4:58:c0:bb:70:6d:ce:17:67:78:ed:51: e0:49:e9:db:9d:23:58:ee:48:85:b9:bd:af:d2:f4:65:b6:4e: c4:13:09:3f:33:47:fe:80:14:8e:94:33:91:35:8d:59:30:2e: af:54:ca:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWQtiPhnQG9+vSt4AMbNYg68CA/4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFGQzNGN0IyNzIyRjZBMTVDNTU3RjYzRjhGNDk1QTlD REJDQTlENzAeFw0yNTA0MjQyMDM2MjZaFw0yNTA0MjgwNzU4MjZaMDMxMTAvBgNV BAMTKDI3Qzg0NzhDQjNBNzEyM0M4RDYwQTRFRDQ1ODUxODQ5Q0Y4MkVEMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEWJusrE75+56RQW76LR8QyfYe D+QWjk2dRsA4CBNubdbjVG6JlR82rMcXPSL6GiZFakxx8aKN3UVHiKTN3zdWlcLk o4Y3LLAVuWnXP50jCg4QsCDuIxcis/t/mtxXDNsOw/bQj02L9xkSI7/y0RzTUqhe /eTUdZcO/t8xFon8jpZ/DWuAiupKzXZaE+KxxPHemndZV6pFvNxS8gBNBd45jlV/ u4r+hj/pqhoDWINRsWCcgX3NNahKn4tSDOLXTErnqbXdFLutxcw+rRQLXihGwNRJ Mp0XwShsOXtLV5omzgZbfianwZZaNyYAkrzSONgQzBU+56vLT0RWpVIx274hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ8hHjLOnEjyNYKTtRYUYSc+C7TUwHwYDVR0j BBgwFoAUcfw/eyci9qFcVX9j+PSVqc28qdcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YWE1YWM2NS02MDcxLTQ2ZTItYmI5ZC1kNzcwZDExN2M0YjQvMC83MUZDM0Y3QjI3 MjJGNkExNUM1NTdGNjNGOEY0OTVBOUNEQkNBOUQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzFGQzNGN0IyNzIyRjZBMTVDNTU3RjYzRjhGNDk1QTlDREJD QTlENy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWFhNWFjNjUtNjA3MS00NmUyLWJi OWQtZDc3MGQxMTdjNGI0LzAvNzFGQzNGN0IyNzIyRjZBMTVDNTU3RjYzRjhGNDk1 QTlDREJDQTlENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABELq9jD6Z08+sWss9JS14/0W2XwOFt9hiAU xjll1EZjezTR5H0vaSwWGGp5xDH5tZxmVjhNZp9sTGzOB9UmpSOsUMcXI9y+auD6 r1u/s19puymDPZ4YY1wpKJ8bsN+dOH6WHQavgJReNNxo+rES/e+BxhVebzt13+Bz 6ykrP8BW3USo+/4Kx65j+P8Hc5UhqeA3cA8jnOFhIXXVD4rHTSrbw9/BAGr97j3Q m0YzdXychGR5FVw5UV02d8asHI5LbuwwOBo6B3np5SBQ+qRYwLtwbc4XZ3jtUeBJ 6dudI1juSIW5va/S9GW2TsQTCT8zR/6AFI6UM5E1jVkwLq9Uym4= -----END CERTIFICATE-----Generated at Fri Apr 25 00:06:29 2025 by rpki-client on console.sobornost.net