$ rpki-client -vvf repo-rpki.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/645C9D445B2796662EE98A03E50C124F3E962CAB.mft File: 645C9D445B2796662EE98A03E50C124F3E962CAB.mft (raw, json) Hash identifier: cLKqewAO/EjgG9zN9ooXG1lOAjAdP0VAMMggmJ2gEGA= Subject key identifier: D6:5A:63:1B:C5:BA:96:57:D8:D3:BE:FA:2C:23:58:35:83:3B:92:5C Authority key identifier: 64:5C:9D:44:5B:27:96:66:2E:E9:8A:03:E5:0C:12:4F:3E:96:2C:AB Certificate issuer: /CN=645C9D445B2796662EE98A03E50C124F3E962CAB Certificate serial: 177D25CF9A1229A8C3259CC786DFC3AFE39051C4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/645C9D445B2796662EE98A03E50C124F3E962CAB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/645C9D445B2796662EE98A03E50C124F3E962CAB.mft Manifest number: 036C Signing time: Fri 25 Apr 2025 09:11:06 +0000 Manifest this update: Fri 25 Apr 2025 09:06:06 +0000 Manifest next update: Mon 28 Apr 2025 14:40:06 +0000 Files and hashes: 1: 3130332e3130302e3137342e302f32342d3234203d3e20313336383431.roa (hash: pfMM3/ygiEY34vdGoVOYeg8tWN4ZaCnJmX0NJOGEX00=) 2: 3130332e3130302e3137322e302f32342d3234203d3e20313336383431.roa (hash: ehP408+CXUe13X4F5TvwPj6ddCoH7T+4InUUhWjVyGw=) 3: 3130332e3130302e3137332e302f32342d3234203d3e20313336383431.roa (hash: Yo/r10NdHpCyWdp4iTpRbnPv2TKKyCyVTnBiO8AmbDc=) 4: 323430313a626534303a3a2f33322d3332203d3e20313336383431.roa (hash: fqov0BDCIixBi9VcnBXwyfgiMxOlqrXxcfdLtIYOthI=) 5: 3130332e3130302e3137352e302f32342d3234203d3e20313336383431.roa (hash: qbkH1qedbuL2nkb9oW2AlysgwJB8XaNgGrzurioAZP0=) 6: 645C9D445B2796662EE98A03E50C124F3E962CAB.crl (hash: jTcUI5eJ8jBalUVym18jj3hCnVhatTxLSO2ZjsDCXIY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/645C9D445B2796662EE98A03E50C124F3E962CAB.crl rsync://repo-rpki.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/645C9D445B2796662EE98A03E50C124F3E962CAB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/645C9D445B2796662EE98A03E50C124F3E962CAB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 14:02:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:7d:25:cf:9a:12:29:a8:c3:25:9c:c7:86:df:c3:af:e3:90:51:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=645C9D445B2796662EE98A03E50C124F3E962CAB Validity Not Before: Apr 25 09:06:06 2025 GMT Not After : Apr 28 14:40:06 2025 GMT Subject: CN=D65A631BC5BA9657D8D3BEFA2C235835833B925C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8c:7a:86:a3:a3:77:ac:e0:4a:d3:4a:38:0d: e9:09:4a:71:30:f1:97:e3:e1:65:54:8d:b2:48:70: b3:6a:8e:25:bc:e1:d8:5c:51:de:13:6b:55:71:81: e9:7f:d4:a3:f9:97:7b:d2:f8:90:53:ce:f9:8c:d7: a3:52:2e:bb:9b:b6:86:b7:33:2d:6a:63:13:dc:9c: de:89:5c:e0:36:e3:da:57:a6:92:b7:05:01:c3:04: f1:0d:62:7a:5f:cb:07:21:d2:a5:18:9a:c1:d2:61: 42:20:4b:e9:4a:78:a4:3c:c6:2a:46:63:9e:41:6d: d4:71:20:74:ed:f6:68:61:1f:1a:4f:21:1a:22:52: 3d:81:6d:7a:54:4e:d7:b7:b9:1f:c9:4d:4f:a0:0c: 1d:8c:c9:19:82:e6:cc:cb:53:fc:03:ff:6a:18:f6: b7:e5:fb:08:9c:1c:a4:d0:bf:13:20:a3:b3:11:8c: bb:0d:ad:4b:82:79:2c:1c:eb:c3:fe:52:db:94:e1: a3:4b:fd:98:e8:e9:01:13:75:3c:7b:57:8c:7f:c3: 73:52:0e:22:33:3f:91:ef:01:9b:fb:2e:bd:67:15: 96:1b:b0:01:2c:6b:0c:ce:f2:b0:27:7f:2d:29:18: 0c:e8:b7:1a:9c:4c:97:54:64:86:7d:dd:2e:10:ae: dc:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:5A:63:1B:C5:BA:96:57:D8:D3:BE:FA:2C:23:58:35:83:3B:92:5C X509v3 Authority Key Identifier: keyid:64:5C:9D:44:5B:27:96:66:2E:E9:8A:03:E5:0C:12:4F:3E:96:2C:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/645C9D445B2796662EE98A03E50C124F3E962CAB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/645C9D445B2796662EE98A03E50C124F3E962CAB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/645C9D445B2796662EE98A03E50C124F3E962CAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:04:d9:e1:93:14:83:6f:19:72:1b:f3:b0:96:6c:b5:41:a3: 37:21:8f:da:0f:aa:e0:66:b8:57:bc:8a:d8:5c:16:4b:47:90: 0b:3c:67:b7:75:44:72:3d:62:d1:8a:25:ce:94:30:f0:5c:01: 13:08:48:e1:c4:cd:ff:ca:13:9f:de:19:c6:89:f9:12:72:e7: 0e:af:6c:41:18:7e:af:7e:9b:5f:25:91:87:67:ff:45:15:b1: 87:05:f8:e1:03:70:f6:fd:80:63:18:4b:bb:6b:85:9c:dd:ac: 65:fa:a1:65:c0:0a:7c:82:9e:34:1a:46:ad:d3:c9:02:70:b7: f5:eb:e6:f0:b7:8c:5d:d3:78:c9:cf:f3:8f:a1:d3:cd:8c:d5: 90:20:3a:d5:1a:3e:ea:12:0e:6c:a5:8b:36:1c:8f:77:66:85: f2:67:a0:14:83:db:d0:c3:61:5e:c7:00:54:d8:4a:5e:b3:b6: c8:1b:04:ee:a1:f2:90:3d:d6:a3:1f:a7:aa:03:bb:0f:05:ec: 5f:c1:6d:8c:67:5b:bd:78:03:db:c9:95:c6:b1:cd:1c:88:21: c2:aa:71:84:ee:9b:63:d2:7a:96:fb:65:5d:d6:3a:ad:39:5f: 1f:6d:75:7c:55:7b:f3:05:6a:a3:d6:0e:34:5c:a1:23:53:2c: 17:f6:7a:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF30lz5oSKajDJZzHht/Dr+OQUcQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQ1QzlENDQ1QjI3OTY2NjJFRTk4QTAzRTUwQzEyNEYz RTk2MkNBQjAeFw0yNTA0MjUwOTA2MDZaFw0yNTA0MjgxNDQwMDZaMDMxMTAvBgNV BAMTKEQ2NUE2MzFCQzVCQTk2NTdEOEQzQkVGQTJDMjM1ODM1ODMzQjkyNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6jHqGo6N3rOBK00o4DekJSnEw 8Zfj4WVUjbJIcLNqjiW84dhcUd4Ta1Vxgel/1KP5l3vS+JBTzvmM16NSLrubtoa3 My1qYxPcnN6JXOA249pXppK3BQHDBPENYnpfywch0qUYmsHSYUIgS+lKeKQ8xipG Y55BbdRxIHTt9mhhHxpPIRoiUj2BbXpUTte3uR/JTU+gDB2MyRmC5szLU/wD/2oY 9rfl+wicHKTQvxMgo7MRjLsNrUuCeSwc68P+UtuU4aNL/Zjo6QETdTx7V4x/w3NS DiIzP5HvAZv7Lr1nFZYbsAEsawzO8rAnfy0pGAzotxqcTJdUZIZ93S4QrtybAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1lpjG8W6llfY0776LCNYNYM7klwwHwYDVR0j BBgwFoAUZFydRFsnlmYu6YoD5QwSTz6WLKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NzMwNGI4My0zMGFhLTRiYmYtOWZkNy0yZmNlYWRiZjAwMzAvMC82NDVDOUQ0NDVC Mjc5NjY2MkVFOThBMDNFNTBDMTI0RjNFOTYyQ0FCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjQ1QzlENDQ1QjI3OTY2NjJFRTk4QTAzRTUwQzEyNEYzRTk2 MkNBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDczMDRiODMtMzBhYS00YmJmLTlm ZDctMmZjZWFkYmYwMDMwLzAvNjQ1QzlENDQ1QjI3OTY2NjJFRTk4QTAzRTUwQzEy NEYzRTk2MkNBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI8E2eGTFINvGXIb87CWbLVBozchj9oPquBm uFe8ithcFktHkAs8Z7d1RHI9YtGKJc6UMPBcARMISOHEzf/KE5/eGcaJ+RJy5w6v bEEYfq9+m18lkYdn/0UVsYcF+OEDcPb9gGMYS7trhZzdrGX6oWXACnyCnjQaRq3T yQJwt/Xr5vC3jF3TeMnP84+h082M1ZAgOtUaPuoSDmylizYcj3dmhfJnoBSD29DD YV7HAFTYSl6ztsgbBO6h8pA91qMfp6oDuw8F7F/BbYxnW714A9vJlcaxzRyIIcKq cYTum2PSepb7ZV3WOq05Xx9tdXxVe/MFaqPWDjRcoSNTLBf2eqw= -----END CERTIFICATE-----Generated at Fri Apr 25 12:54:05 2025 by rpki-client on console.sobornost.net