$ rpki-client -vvf repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft File: 95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft (raw, json) Hash identifier: 2ZVld9K7+9Arw1TZJvvbjy/ocxsgkMO00HSV88ffTKw= Subject key identifier: 31:93:01:99:DA:B1:4B:6F:1C:40:2E:CC:F8:7F:84:E0:A7:74:B8:08 Authority key identifier: 95:E8:00:EB:FF:64:70:98:92:CB:57:41:D9:ED:C7:5E:E7:4E:2A:6D Certificate issuer: /CN=95E800EBFF64709892CB5741D9EDC75EE74E2A6D Certificate serial: 0D25887DA66D02D3EE635A25BBDB61E792AED35E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft Manifest number: 04C7 Signing time: Thu 24 Apr 2025 13:11:41 +0000 Manifest this update: Thu 24 Apr 2025 13:06:41 +0000 Manifest next update: Sun 27 Apr 2025 20:50:41 +0000 Files and hashes: 1: 3130332e3133342e3130342e302f32322d3232203d3e203633343937.roa (hash: sLu7RqiRGzYnQBrSMZHIelJFjQSR1Hs3pZgdklGokNI=) 2: 95E800EBFF64709892CB5741D9EDC75EE74E2A6D.crl (hash: TueU330fXB698IGnCST9wMaf6v2yjJmP9VfCXKCargw=) 3: 3130332e3133342e3130372e302f32342d3234203d3e203633343937.roa (hash: AzI/2bJav2Aj60o9IPwEY1AeK6Tbpch8Oq7GrpIqn/o=) 4: 3130332e3133342e3130342e302f32342d3234203d3e203633343937.roa (hash: DhsUJ+0QPmB3umy124lOVAjIsaGFsn7lzyzelnOboow=) 5: 3130332e3133342e3130362e302f32332d3233203d3e203633343937.roa (hash: IQUiR0JlPz/+uykrQRdA9C7xBIr9HwH3lFNNO16XUss=) 6: 3130332e3133342e3130352e302f32342d3234203d3e203633343937.roa (hash: PxZnjWPfJrMlHFV+vFpu4lzDV/NqacyuVyPH6Bygl6s=) 7: 3130332e3133342e3130362e302f32342d3234203d3e203633343937.roa (hash: ayWxpT8yZl1hhBQSv+ekeM1m9KqAyHCeTFs073YkKvk=) 8: 3130332e3133342e3130342e302f32332d3233203d3e203633343937.roa (hash: j8AfGsExf9Z1d3r0akft+56xnsz2WsBFBLfSdrsxdS8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.crl rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 17:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:25:88:7d:a6:6d:02:d3:ee:63:5a:25:bb:db:61:e7:92:ae:d3:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95E800EBFF64709892CB5741D9EDC75EE74E2A6D Validity Not Before: Apr 24 13:06:41 2025 GMT Not After : Apr 27 20:50:41 2025 GMT Subject: CN=31930199DAB14B6F1C402ECCF87F84E0A774B808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:80:2a:fa:51:c4:98:12:0f:df:2b:01:1f:13: ff:93:b3:a0:92:2f:47:3d:a3:f9:37:d8:83:9c:f3: d9:99:45:8c:d2:65:07:f6:87:f7:9a:ae:3d:d0:de: 29:85:4a:e0:31:b7:0c:bd:07:bd:4e:5b:d0:51:8c: 5c:98:4c:23:42:e2:e1:b8:34:55:46:8c:88:20:be: b7:6e:c0:6d:3b:24:a8:f7:62:b2:34:e8:96:1c:86: e5:82:03:cf:ff:eb:08:76:11:1e:df:be:f2:bb:83: 9a:c7:9d:31:65:ad:7f:07:90:1f:cf:d7:bb:10:75: de:78:57:95:1b:4f:24:57:01:7b:11:e1:9a:47:1b: 41:7c:18:61:7e:e5:92:b4:4e:45:c5:aa:39:92:f1: 8f:7f:cb:b1:8e:c2:e9:00:39:8d:f4:c3:41:7f:ed: b1:89:38:68:4f:88:92:bb:d4:87:2e:f2:02:90:7b: 7f:25:7b:62:d8:76:9f:09:2e:d3:3c:81:b4:b3:42: ad:ac:f8:90:ca:3d:4b:0b:7b:1f:b6:a8:fa:f7:a0: 19:25:3f:fe:4c:bd:12:82:e7:66:cd:ba:b5:d4:df: fc:a6:37:30:55:0f:82:0e:9e:4b:58:b5:b4:f6:54: e3:22:19:fd:83:36:36:5a:76:ae:71:0f:47:28:07: 1e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:93:01:99:DA:B1:4B:6F:1C:40:2E:CC:F8:7F:84:E0:A7:74:B8:08 X509v3 Authority Key Identifier: keyid:95:E8:00:EB:FF:64:70:98:92:CB:57:41:D9:ED:C7:5E:E7:4E:2A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:d6:a3:2e:4f:08:ba:85:85:db:f6:fd:bc:50:cc:bc:72:03: 10:60:05:59:6e:8d:b1:fb:7c:68:82:19:57:ef:84:6b:4e:dd: 0a:b9:79:22:bf:5d:83:db:44:d2:6b:c6:99:56:94:3f:83:b3: f6:42:79:99:0f:f2:c6:a7:3f:3f:ad:c1:a4:71:e3:c9:02:d5: 10:95:07:fa:bb:ac:93:d0:be:05:6f:a1:ec:e1:de:d6:48:60: 82:36:28:b4:f7:74:42:42:f7:7c:c2:38:90:e2:ec:36:c9:0e: 2a:8e:50:4d:33:da:7c:76:2f:dd:cb:b4:d7:17:4e:e4:37:14: 1e:3a:67:5f:1d:80:d6:e3:d4:6c:75:b1:41:03:49:d5:4b:8e: 31:29:75:8e:d2:d9:ea:49:79:8f:6e:9d:26:fd:fd:fe:c9:12: 50:73:96:80:ff:fb:45:45:8e:c9:83:b2:3b:52:85:46:74:bc: d6:4e:7d:dd:61:b7:b1:a9:24:c3:75:34:d4:8d:6b:ec:0f:11: cf:b6:8f:04:31:10:dc:25:9c:08:c3:2a:59:c1:0e:f2:89:9c: b8:bb:aa:0b:2d:6b:7f:99:8e:ec:b9:1d:cd:d3:8c:68:f8:93: 64:3d:4f:0f:c9:23:4c:82:80:37:71:fc:a8:9f:8d:9f:a2:c1: 30:ed:a2:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDSWIfaZtAtPuY1olu9th55Ku014wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVFODAwRUJGRjY0NzA5ODkyQ0I1NzQxRDlFREM3NUVF NzRFMkE2RDAeFw0yNTA0MjQxMzA2NDFaFw0yNTA0MjcyMDUwNDFaMDMxMTAvBgNV BAMTKDMxOTMwMTk5REFCMTRCNkYxQzQwMkVDQ0Y4N0Y4NEUwQTc3NEI4MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOgCr6UcSYEg/fKwEfE/+Ts6CS L0c9o/k32IOc89mZRYzSZQf2h/earj3Q3imFSuAxtwy9B71OW9BRjFyYTCNC4uG4 NFVGjIggvrduwG07JKj3YrI06JYchuWCA8//6wh2ER7fvvK7g5rHnTFlrX8HkB/P 17sQdd54V5UbTyRXAXsR4ZpHG0F8GGF+5ZK0TkXFqjmS8Y9/y7GOwukAOY30w0F/ 7bGJOGhPiJK71Icu8gKQe38le2LYdp8JLtM8gbSzQq2s+JDKPUsLex+2qPr3oBkl P/5MvRKC52bNurXU3/ymNzBVD4IOnktYtbT2VOMiGf2DNjZadq5xD0coBx4nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMZMBmdqxS28cQC7M+H+E4Kd0uAgwHwYDVR0j BBgwFoAUlegA6/9kcJiSy1dB2e3HXudOKm0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NmI1YWUxZS1iZTY2LTRhMzAtYTk0OC03ZDQ3OGMyMmVhMmIvMC85NUU4MDBFQkZG NjQ3MDk4OTJDQjU3NDFEOUVEQzc1RUU3NEUyQTZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTVFODAwRUJGRjY0NzA5ODkyQ0I1NzQxRDlFREM3NUVFNzRF MkE2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjZiNWFlMWUtYmU2Ni00YTMwLWE5 NDgtN2Q0NzhjMjJlYTJiLzAvOTVFODAwRUJGRjY0NzA5ODkyQ0I1NzQxRDlFREM3 NUVFNzRFMkE2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADvWoy5PCLqFhdv2/bxQzLxyAxBgBVlujbH7 fGiCGVfvhGtO3Qq5eSK/XYPbRNJrxplWlD+Ds/ZCeZkP8sanPz+twaRx48kC1RCV B/q7rJPQvgVvoezh3tZIYII2KLT3dEJC93zCOJDi7DbJDiqOUE0z2nx2L93LtNcX TuQ3FB46Z18dgNbj1Gx1sUEDSdVLjjEpdY7S2epJeY9unSb9/f7JElBzloD/+0VF jsmDsjtShUZ0vNZOfd1ht7GpJMN1NNSNa+wPEc+2jwQxENwlnAjDKlnBDvKJnLi7 qgsta3+Zjuy5Hc3TjGj4k2Q9Tw/JI0yCgDdx/KifjZ+iwTDtopI= -----END CERTIFICATE-----Generated at Thu Apr 24 15:50:16 2025 by rpki-client on console.sobornost.net