$ rpki-client -vvf repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft File: 708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft (raw, json) Hash identifier: Xz0T7BJxEiYHkA8dn51LYr/BS5TazcEz4XGcf4Q9O1Y= Subject key identifier: D7:38:36:37:1F:0D:0D:1F:5B:69:2E:21:4F:71:41:E7:7F:6D:7C:9D Authority key identifier: 70:8D:1F:99:C0:BD:2A:17:83:D1:CE:42:6B:BF:E8:3C:9C:0C:C5:20 Certificate issuer: /CN=708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520 Certificate serial: 3CF55CE26400857CA1536BDC9A0249FEAC1EEA30 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.cer Subject info access: rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft Manifest number: E9 Signing time: Thu 24 Apr 2025 04:41:01 +0000 Manifest this update: Thu 24 Apr 2025 04:36:01 +0000 Manifest next update: Sun 27 Apr 2025 10:08:01 +0000 Files and hashes: 1: 708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.crl (hash: WPhUKePbeubDFJdg0b9WmZ14YxIlCiHDQiyAev7pw3w=) 2: 3131352e3138372e32382e302f32332d3234203d3e20313532303334.roa (hash: xFoVEBixfaV59f5eLoKvzCfI+maBpFsE/LQmHoFGuNo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.crl rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 08:44:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:f5:5c:e2:64:00:85:7c:a1:53:6b:dc:9a:02:49:fe:ac:1e:ea:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520 Validity Not Before: Apr 24 04:36:01 2025 GMT Not After : Apr 27 10:08:01 2025 GMT Subject: CN=D73836371F0D0D1F5B692E214F7141E77F6D7C9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:53:ab:59:41:60:25:8e:ef:38:85:cd:3d:fc: 31:5f:c0:51:fd:bd:a4:07:a0:a6:78:15:2d:35:60: 6f:8f:a8:27:0b:f9:74:e7:e2:7d:39:83:23:06:34: 29:0f:88:b7:ee:29:ed:36:ff:b1:3f:d5:3d:3c:de: 8f:91:1c:33:eb:a8:6a:3c:a0:4b:ad:b2:a9:84:02: 4e:de:3f:d4:fb:73:5a:30:d3:b7:33:88:95:a4:5a: f4:79:be:f3:e4:40:5f:c5:70:0e:70:9b:fa:ea:be: ee:7d:e8:e4:03:63:0d:a7:f4:b9:5b:72:48:37:d7: ca:03:29:28:66:74:54:4c:a1:ac:58:19:7b:88:a8: ae:01:dd:ea:f3:f8:66:93:08:64:e5:87:49:ec:44: c1:d2:eb:c6:34:5a:62:a0:4c:86:54:ea:81:2a:f8: 4c:a7:f2:af:03:e7:31:01:d2:0d:19:0e:8e:53:6e: 84:b1:5a:d4:20:60:de:66:36:22:a1:62:ab:12:0d: 32:78:d6:68:96:2b:16:63:08:36:b1:f9:1c:b8:67: d6:28:46:e5:4b:a9:6d:4b:c0:51:11:62:79:41:ca: 03:aa:27:8f:00:d7:44:6a:7b:fb:d5:81:01:ca:f4: e6:d5:2e:bc:9f:88:ed:af:01:e9:24:93:3f:8a:67: bb:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:38:36:37:1F:0D:0D:1F:5B:69:2E:21:4F:71:41:E7:7F:6D:7C:9D X509v3 Authority Key Identifier: keyid:70:8D:1F:99:C0:BD:2A:17:83:D1:CE:42:6B:BF:E8:3C:9C:0C:C5:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:e1:eb:b3:89:81:08:9b:46:0d:e2:77:94:bf:de:a0:7a:c2: f9:fd:57:5f:91:99:54:05:49:35:b1:6d:f8:05:43:92:90:68: bf:2a:12:33:b0:09:54:1b:5c:41:d4:d1:03:72:36:f9:a7:09: 74:f0:b1:ab:53:7a:66:a4:c1:5d:58:47:59:ee:45:b5:13:cd: 31:8d:a6:cc:46:d5:f4:c6:45:18:9a:89:fb:ec:d3:29:eb:37: 16:32:69:d0:46:74:c1:4a:c4:aa:92:32:fd:c1:3f:ed:5e:02: e0:d7:4a:7d:33:73:d1:eb:db:24:dd:20:94:0e:65:79:36:09: 02:aa:c5:22:4f:51:ee:d5:df:17:8e:8b:b2:45:20:8a:16:b0: 9b:94:a6:fe:3d:42:7d:54:9e:a2:ae:0c:bc:37:da:b4:56:df: e5:00:91:ce:6f:6f:57:98:33:56:3b:73:51:ba:d7:1b:63:7b: 07:fb:28:0a:6e:38:a4:2e:2c:43:fa:18:ba:d9:8b:ec:0f:11: c3:30:4c:5f:bc:13:fc:66:f6:ff:11:4b:6f:e9:00:b5:90:32: 65:85:af:e7:0f:4b:a7:06:13:3b:57:2f:24:2e:71:8e:df:73: c8:9d:91:66:5f:46:73:f2:d1:7b:cb:f6:4a:10:33:95:d7:d7: cb:95:ac:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPPVc4mQAhXyhU2vcmgJJ/qwe6jAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA4RDFGOTlDMEJEMkExNzgzRDFDRTQyNkJCRkU4M0M5 QzBDQzUyMDAeFw0yNTA0MjQwNDM2MDFaFw0yNTA0MjcxMDA4MDFaMDMxMTAvBgNV BAMTKEQ3MzgzNjM3MUYwRDBEMUY1QjY5MkUyMTRGNzE0MUU3N0Y2RDdDOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLU6tZQWAlju84hc09/DFfwFH9 vaQHoKZ4FS01YG+PqCcL+XTn4n05gyMGNCkPiLfuKe02/7E/1T083o+RHDPrqGo8 oEutsqmEAk7eP9T7c1ow07cziJWkWvR5vvPkQF/FcA5wm/rqvu596OQDYw2n9Llb ckg318oDKShmdFRMoaxYGXuIqK4B3erz+GaTCGTlh0nsRMHS68Y0WmKgTIZU6oEq +Eyn8q8D5zEB0g0ZDo5TboSxWtQgYN5mNiKhYqsSDTJ41miWKxZjCDax+Ry4Z9Yo RuVLqW1LwFERYnlBygOqJ48A10Rqe/vVgQHK9ObVLryfiO2vAekkkz+KZ7sJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1zg2Nx8NDR9baS4hT3FB539tfJ0wHwYDVR0j BBgwFoAUcI0fmcC9KheD0c5Ca7/oPJwMxSAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Yjc0ZWNlNi04ODBjLTRjZWYtYWRkMi03NzcxOWViZWRlYzkvMC83MDhEMUY5OUMw QkQyQTE3ODNEMUNFNDI2QkJGRTgzQzlDMENDNTIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzA4RDFGOTlDMEJEMkExNzgzRDFDRTQyNkJCRkU4M0M5QzBD QzUyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWI3NGVjZTYtODgwYy00Y2VmLWFk ZDItNzc3MTllYmVkZWM5LzAvNzA4RDFGOTlDMEJEMkExNzgzRDFDRTQyNkJCRkU4 M0M5QzBDQzUyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABLh67OJgQibRg3id5S/3qB6wvn9V1+RmVQF STWxbfgFQ5KQaL8qEjOwCVQbXEHU0QNyNvmnCXTwsatTemakwV1YR1nuRbUTzTGN psxG1fTGRRiaifvs0ynrNxYyadBGdMFKxKqSMv3BP+1eAuDXSn0zc9Hr2yTdIJQO ZXk2CQKqxSJPUe7V3xeOi7JFIIoWsJuUpv49Qn1UnqKuDLw32rRW3+UAkc5vb1eY M1Y7c1G61xtjewf7KApuOKQuLEP6GLrZi+wPEcMwTF+8E/xm9v8RS2/pALWQMmWF r+cPS6cGEztXLyQucY7fc8idkWZfRnPy0XvL9koQM5XX18uVrJE= -----END CERTIFICATE-----Generated at Thu Apr 24 06:50:02 2025 by rpki-client on console.sobornost.net