$ rpki-client -vvf repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.mft File: EC973BE13EF324E7D59046CF7690A12F9DF12932.mft (raw, json) Hash identifier: /4p8hJRRMcJIjxNWueT/YLHtKigHqqKyFYtTURGN9RM= Subject key identifier: 31:C5:E1:8A:1D:B2:9A:53:77:DC:A5:5B:19:38:DE:75:FB:32:5F:52 Authority key identifier: EC:97:3B:E1:3E:F3:24:E7:D5:90:46:CF:76:90:A1:2F:9D:F1:29:32 Certificate issuer: /CN=EC973BE13EF324E7D59046CF7690A12F9DF12932 Certificate serial: 3706BDCE19F1D62CC568E813698DDCB56FF6DBC5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC973BE13EF324E7D59046CF7690A12F9DF12932.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.mft Manifest number: 020A Signing time: Thu 24 Apr 2025 20:41:16 +0000 Manifest this update: Thu 24 Apr 2025 20:36:16 +0000 Manifest next update: Mon 28 Apr 2025 06:46:16 +0000 Files and hashes: 1: EC973BE13EF324E7D59046CF7690A12F9DF12932.crl (hash: 9TgPKgZs9VR9jBvMUlbZAHTBMhqMfwg8ZZ7SDJzLwgE=) 2: 3130332e3138312e37362e302f32342d3234203d3e20313439333739.roa (hash: Lkf5GtqCgpM0afLQQBUVM3+/AVTbtZLezFPI9dw/EXw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.crl rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC973BE13EF324E7D59046CF7690A12F9DF12932.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:06:bd:ce:19:f1:d6:2c:c5:68:e8:13:69:8d:dc:b5:6f:f6:db:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC973BE13EF324E7D59046CF7690A12F9DF12932 Validity Not Before: Apr 24 20:36:16 2025 GMT Not After : Apr 28 06:46:16 2025 GMT Subject: CN=31C5E18A1DB29A5377DCA55B1938DE75FB325F52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:fb:83:65:2f:e2:5d:3d:6f:b2:34:62:33:ff: 98:d4:57:52:61:58:2e:9e:c7:9d:85:ce:97:b3:90: 9d:b5:2d:2a:ca:10:93:7d:2f:b4:90:25:c0:fe:c8: c1:0c:74:a2:68:fb:0b:26:74:c4:07:5a:a6:05:50: 19:42:a6:19:d0:5d:1d:0e:00:e6:2c:13:b5:72:59: 47:b9:e4:31:f2:5a:4a:f4:bf:87:01:0e:8a:84:7f: 41:1f:04:ca:81:7f:af:01:6b:ca:02:08:fa:27:09: 86:98:59:45:66:1d:79:51:8e:32:2e:e4:55:e4:ec: 3c:8b:d8:dd:a6:a3:4b:b1:2a:84:33:b8:4e:c0:b2: ed:6a:52:55:9a:c6:4f:9c:7b:3b:8a:56:9f:e9:61: 85:bb:11:85:e1:db:a8:1c:f1:df:c7:8c:8e:58:62: 53:32:5b:7f:5a:e8:17:9f:fc:b5:a3:a4:bf:00:2a: c0:43:ef:37:f5:e7:33:28:9a:ac:5a:6d:3f:5f:fe: 00:4d:fb:d1:2c:7b:d0:2d:af:fc:62:7c:20:87:7f: 66:0d:6b:7a:a0:63:79:93:f1:31:02:0e:86:eb:29: 6a:e0:d2:ec:27:ab:4d:a4:a8:c3:77:a0:79:12:d8: 01:68:5f:ac:93:f7:34:a6:d3:bc:44:39:20:a5:22: 3b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:C5:E1:8A:1D:B2:9A:53:77:DC:A5:5B:19:38:DE:75:FB:32:5F:52 X509v3 Authority Key Identifier: keyid:EC:97:3B:E1:3E:F3:24:E7:D5:90:46:CF:76:90:A1:2F:9D:F1:29:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC973BE13EF324E7D59046CF7690A12F9DF12932.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:14:09:20:39:c2:90:61:c2:52:12:69:64:d0:7a:84:6d:a0: a2:e0:5e:bd:4f:6e:1d:85:c8:ad:41:3c:9f:ef:f9:e7:be:91: cb:0f:b0:54:39:0e:56:61:17:00:6d:e9:90:af:17:53:8e:b4: 06:ad:8e:aa:88:ec:f4:08:5a:85:d0:ee:03:e2:ab:f2:5a:b9: b8:25:64:c1:7b:88:ed:b4:a9:c1:d0:59:9f:0a:dd:16:fd:5a: 83:59:a8:68:0d:c5:6b:02:b7:56:9e:18:00:f9:ed:67:ee:04: 1a:5f:0a:56:47:cd:a7:c2:56:b8:b9:ab:4a:30:da:db:6a:bb: d2:1c:40:35:a7:49:b9:78:6f:08:1e:1d:ac:71:69:e6:94:2b: c3:76:ba:6a:19:e6:2c:ee:26:07:b4:f7:19:04:f4:29:7b:ae: 42:ea:7a:b2:ba:26:3a:1b:76:1f:58:0d:48:d4:be:42:51:ac: 1f:48:4e:11:0d:14:ee:6f:1f:fb:de:c5:1b:52:f4:8e:65:3b: c8:a0:22:9c:46:a9:48:54:4d:4f:94:2f:91:6b:f4:3f:f3:a0: 07:07:5f:8a:7b:8d:7b:db:da:61:bb:2b:0a:a2:62:ae:20:e1: 2e:89:63:b6:7b:2e:6c:5e:84:05:ba:99:30:d7:aa:2f:52:34: 13:56:38:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNwa9zhnx1izFaOgTaY3ctW/228UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM5NzNCRTEzRUYzMjRFN0Q1OTA0NkNGNzY5MEExMkY5 REYxMjkzMjAeFw0yNTA0MjQyMDM2MTZaFw0yNTA0MjgwNjQ2MTZaMDMxMTAvBgNV BAMTKDMxQzVFMThBMURCMjlBNTM3N0RDQTU1QjE5MzhERTc1RkIzMjVGNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe+4NlL+JdPW+yNGIz/5jUV1Jh WC6ex52FzpezkJ21LSrKEJN9L7SQJcD+yMEMdKJo+wsmdMQHWqYFUBlCphnQXR0O AOYsE7VyWUe55DHyWkr0v4cBDoqEf0EfBMqBf68Ba8oCCPonCYaYWUVmHXlRjjIu 5FXk7DyL2N2mo0uxKoQzuE7Asu1qUlWaxk+cezuKVp/pYYW7EYXh26gc8d/HjI5Y YlMyW39a6Bef/LWjpL8AKsBD7zf15zMomqxabT9f/gBN+9Ese9Atr/xifCCHf2YN a3qgY3mT8TECDobrKWrg0uwnq02kqMN3oHkS2AFoX6yT9zSm07xEOSClIjtTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMcXhih2ymlN33KVbGTjedfsyX1IwHwYDVR0j BBgwFoAU7Jc74T7zJOfVkEbPdpChL53xKTIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZTFjYmQ3OS04ZjI2LTRiMGUtOGIzYi1hYjllOTkzOGZjYWUvMC9FQzk3M0JFMTNF RjMyNEU3RDU5MDQ2Q0Y3NjkwQTEyRjlERjEyOTMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUM5NzNCRTEzRUYzMjRFN0Q1OTA0NkNGNzY5MEExMkY5REYx MjkzMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmUxY2JkNzktOGYyNi00YjBlLThi M2ItYWI5ZTk5MzhmY2FlLzAvRUM5NzNCRTEzRUYzMjRFN0Q1OTA0NkNGNzY5MEEx MkY5REYxMjkzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIMUCSA5wpBhwlISaWTQeoRtoKLgXr1Pbh2F yK1BPJ/v+ee+kcsPsFQ5DlZhFwBt6ZCvF1OOtAatjqqI7PQIWoXQ7gPiq/Jaubgl ZMF7iO20qcHQWZ8K3Rb9WoNZqGgNxWsCt1aeGAD57WfuBBpfClZHzafCVri5q0ow 2ttqu9IcQDWnSbl4bwgeHaxxaeaUK8N2umoZ5izuJge09xkE9Cl7rkLqerK6Jjob dh9YDUjUvkJRrB9IThENFO5vH/vexRtS9I5lO8igIpxGqUhUTU+UL5Fr9D/zoAcH X4p7jXvb2mG7KwqiYq4g4S6JY7Z7LmxehAW6mTDXqi9SNBNWODI= -----END CERTIFICATE-----Generated at Fri Apr 25 00:06:29 2025 by rpki-client on console.sobornost.net