$ rpki-client -vvf repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.mft File: 4A688B72A804A426A9096ECA60105A4D831C5FA8.mft (raw, json) Hash identifier: WWoY1EyfuTjBrDwQllL5qR44b7qCiEES85m9I1BZxQY= Subject key identifier: 0A:7C:6B:49:60:06:1E:F7:A0:1B:42:E9:53:51:C1:A4:22:69:D4:7D Authority key identifier: 4A:68:8B:72:A8:04:A4:26:A9:09:6E:CA:60:10:5A:4D:83:1C:5F:A8 Certificate issuer: /CN=4A688B72A804A426A9096ECA60105A4D831C5FA8 Certificate serial: 639C070AA4EA3F64F8B2E619D93D13D32DE3A0C9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A688B72A804A426A9096ECA60105A4D831C5FA8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.mft Manifest number: 02A7 Signing time: Fri 25 Apr 2025 20:11:39 +0000 Manifest this update: Fri 25 Apr 2025 20:06:39 +0000 Manifest next update: Tue 29 Apr 2025 06:55:39 +0000 Files and hashes: 1: 3130332e3137352e3230372e302f32342d3234203d3e20313437313234.roa (hash: mcyagvywDhFYxC9mjPanY2s5lpKa+0hAXlf4jFVn9eM=) 2: 4A688B72A804A426A9096ECA60105A4D831C5FA8.crl (hash: HF2BDgb4dUYayiZpmTjPhllpNmnjD/yZWk2ViB3kdAI=) 3: 3130332e3137352e3230362e302f32332d3234203d3e20313437313234.roa (hash: FLVGwqj4yD54Hf3ac0cSht3WEYb1ToOJ+k3OEsbAbwE=) 4: 3130332e3137352e3230362e302f32342d3234203d3e20313437313234.roa (hash: D4EkIlEcE1wtYu4llvh2kzSAskHUdWXvwrriG+hYUDU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.crl rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A688B72A804A426A9096ECA60105A4D831C5FA8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 00:35:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:9c:07:0a:a4:ea:3f:64:f8:b2:e6:19:d9:3d:13:d3:2d:e3:a0:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A688B72A804A426A9096ECA60105A4D831C5FA8 Validity Not Before: Apr 25 20:06:39 2025 GMT Not After : Apr 29 06:55:39 2025 GMT Subject: CN=0A7C6B4960061EF7A01B42E95351C1A42269D47D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a6:fb:5d:e0:fb:34:6b:01:a1:15:5b:b9:34: 03:a5:13:4a:02:c1:b6:2c:06:30:71:52:66:87:0f: a3:ad:4a:14:45:1e:5e:75:d8:14:01:a0:6c:1e:da: 7d:ea:82:0a:56:a0:d9:b0:4f:a3:1d:6f:87:68:a7: 99:63:06:c9:c8:dd:3f:c6:2c:9b:84:0e:51:47:af: 32:97:0d:f7:72:c8:3c:73:e2:c6:30:c6:32:d0:16: e6:14:5c:39:e0:82:8a:3e:bf:9f:79:2d:ed:09:c5: 83:bd:e7:a2:32:0c:31:dd:c8:b8:0c:bc:3f:45:b8: 41:a0:d1:b5:d6:ab:5f:b0:ed:88:3d:ea:e8:d8:be: 61:1d:6a:14:3c:57:b3:80:ee:8e:b8:02:8f:e2:54: 9a:e0:64:40:d7:17:2e:24:03:d9:dc:97:b9:d5:e4: c6:57:87:1c:16:8b:12:0a:18:08:2f:e7:be:68:77: 0e:6f:b3:aa:a2:55:f2:59:88:08:e3:a3:00:29:2a: ea:45:27:e7:ab:ab:62:96:8e:d8:12:2d:da:93:32: 70:7b:2e:24:d4:ec:4b:9a:88:fe:30:5c:97:8c:ab: 49:b4:39:7e:8a:4d:e2:9a:59:7c:cb:61:d3:b7:d4: 22:66:d4:fa:7f:31:a9:3a:10:ab:de:64:51:0d:56: fc:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:7C:6B:49:60:06:1E:F7:A0:1B:42:E9:53:51:C1:A4:22:69:D4:7D X509v3 Authority Key Identifier: keyid:4A:68:8B:72:A8:04:A4:26:A9:09:6E:CA:60:10:5A:4D:83:1C:5F:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A688B72A804A426A9096ECA60105A4D831C5FA8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:cd:14:7b:06:aa:8c:68:a3:8b:ad:e4:7b:3f:cf:f8:8c:a6: ee:24:97:61:f3:5e:87:e6:a2:f8:3b:42:84:07:a8:b2:07:ad: bb:c5:4d:b7:32:46:a2:24:8f:28:4b:cb:e8:49:a5:4f:d9:18: 94:31:0a:56:ea:e8:69:49:07:a1:6a:dd:84:50:a3:3f:42:5f: dd:60:b1:b1:26:d2:22:c9:84:e9:82:a9:c0:a1:4b:a1:28:7b: a7:22:23:d1:f5:4a:30:de:ed:69:22:de:20:cd:91:b4:14:ce: fe:fe:09:96:13:b2:60:3a:6a:9a:b8:9d:8d:54:38:c4:dd:6f: 30:25:fc:d1:39:c0:93:3d:89:1a:90:60:64:b1:9b:9b:42:69: 32:87:da:4b:6a:db:fc:06:5c:29:b2:20:87:e2:5b:f1:e3:0a: 61:46:54:3d:96:56:83:1a:72:b7:a7:3a:c1:8d:71:1c:ee:d3: 32:9c:e8:23:99:a6:e3:60:40:ae:8d:16:47:ed:0e:41:9f:aa: 51:56:e1:32:a5:70:7b:be:01:5e:8c:11:4d:f3:1a:19:a2:c4: bf:f8:b4:31:3e:11:cf:68:c2:d9:ea:57:a7:d7:20:4a:b2:91: 8a:6f:f4:c0:df:a8:c8:e1:d0:f3:29:dc:a7:e4:ad:00:91:2f: 8e:c0:95:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY5wHCqTqP2T4suYZ2T0T0y3joMkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE2ODhCNzJBODA0QTQyNkE5MDk2RUNBNjAxMDVBNEQ4 MzFDNUZBODAeFw0yNTA0MjUyMDA2MzlaFw0yNTA0MjkwNjU1MzlaMDMxMTAvBgNV BAMTKDBBN0M2QjQ5NjAwNjFFRjdBMDFCNDJFOTUzNTFDMUE0MjI2OUQ0N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCpvtd4Ps0awGhFVu5NAOlE0oC wbYsBjBxUmaHD6OtShRFHl512BQBoGwe2n3qggpWoNmwT6Mdb4dop5ljBsnI3T/G LJuEDlFHrzKXDfdyyDxz4sYwxjLQFuYUXDnggoo+v595Le0JxYO956IyDDHdyLgM vD9FuEGg0bXWq1+w7Yg96ujYvmEdahQ8V7OA7o64Ao/iVJrgZEDXFy4kA9ncl7nV 5MZXhxwWixIKGAgv575odw5vs6qiVfJZiAjjowApKupFJ+erq2KWjtgSLdqTMnB7 LiTU7EuaiP4wXJeMq0m0OX6KTeKaWXzLYdO31CJm1Pp/Mak6EKveZFENVvwFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCnxrSWAGHvegG0LpU1HBpCJp1H0wHwYDVR0j BBgwFoAUSmiLcqgEpCapCW7KYBBaTYMcX6gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YWE2YTY3ZC1jYmEzLTQyN2ItOTA1NS01ZjUyOGYyZDIzMmYvMC80QTY4OEI3MkE4 MDRBNDI2QTkwOTZFQ0E2MDEwNUE0RDgzMUM1RkE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEE2ODhCNzJBODA0QTQyNkE5MDk2RUNBNjAxMDVBNEQ4MzFD NUZBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmFhNmE2N2QtY2JhMy00MjdiLTkw NTUtNWY1MjhmMmQyMzJmLzAvNEE2ODhCNzJBODA0QTQyNkE5MDk2RUNBNjAxMDVB NEQ4MzFDNUZBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADvNFHsGqoxoo4ut5Hs/z/iMpu4kl2HzXofm ovg7QoQHqLIHrbvFTbcyRqIkjyhLy+hJpU/ZGJQxClbq6GlJB6Fq3YRQoz9CX91g sbEm0iLJhOmCqcChS6Eoe6ciI9H1SjDe7Wki3iDNkbQUzv7+CZYTsmA6apq4nY1U OMTdbzAl/NE5wJM9iRqQYGSxm5tCaTKH2ktq2/wGXCmyIIfiW/HjCmFGVD2WVoMa crenOsGNcRzu0zKc6COZpuNgQK6NFkftDkGfqlFW4TKlcHu+AV6MEU3zGhmixL/4 tDE+Ec9owtnqV6fXIEqykYpv9MDfqMjh0PMp3KfkrQCRL47AlYA= -----END CERTIFICATE-----Generated at Fri Apr 25 22:07:26 2025 by rpki-client on console.sobornost.net