$ rpki-client -vvf repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.mft File: DE76C61173801CDB718BA58B1A4A40B5C94E9C70.mft (raw, json) Hash identifier: YIrkxb7vHg0TjG8CiWU8067M9jk6yy2K+CDmzee//mI= Subject key identifier: 52:5D:88:0A:8F:A1:AF:AA:4B:B2:9D:2C:33:E4:07:F7:F1:18:B3:03 Authority key identifier: DE:76:C6:11:73:80:1C:DB:71:8B:A5:8B:1A:4A:40:B5:C9:4E:9C:70 Certificate issuer: /CN=DE76C61173801CDB718BA58B1A4A40B5C94E9C70 Certificate serial: 34664A638388D24D941EA3EF4AF615B4565D8F70 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.mft Manifest number: BA Signing time: Thu 24 Apr 2025 19:40:02 +0000 Manifest this update: Thu 24 Apr 2025 19:35:02 +0000 Manifest next update: Mon 28 Apr 2025 05:13:02 +0000 Files and hashes: 1: 3130332e38302e3234302e302f32322d3234203d3e20313336303534.roa (hash: rxBcvYlSzsa7LvAtTgr9iAlrA1pyphm/JuM/Rkc6s+c=) 2: DE76C61173801CDB718BA58B1A4A40B5C94E9C70.crl (hash: klWs5d81qQl46gqEuOzk6d+/civTTZVNmqGo9b6uAhM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.crl rsync://repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:66:4a:63:83:88:d2:4d:94:1e:a3:ef:4a:f6:15:b4:56:5d:8f:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE76C61173801CDB718BA58B1A4A40B5C94E9C70 Validity Not Before: Apr 24 19:35:02 2025 GMT Not After : Apr 28 05:13:02 2025 GMT Subject: CN=525D880A8FA1AFAA4BB29D2C33E407F7F118B303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:13:d3:c3:77:72:97:78:75:56:1e:1b:02:38: d6:d2:eb:6b:25:4e:3c:eb:52:54:cc:74:04:a6:51: ee:b9:58:74:c9:2f:d0:69:a6:b2:5d:92:cb:14:b9: d0:da:6a:b0:43:fc:d2:3f:57:c3:01:6e:84:a7:b0: 3a:f5:15:34:cf:fd:fd:a2:ff:cd:ea:be:c0:7e:3b: 29:d7:67:82:24:9f:27:e6:07:db:82:12:4f:fc:3f: 0f:80:d0:d8:25:6d:ed:e3:28:4e:b7:53:52:f5:d5: 56:3d:a6:60:21:91:8b:cd:91:97:c9:36:e4:7d:b9: 79:cf:f5:38:d2:51:9f:70:1d:69:56:74:8a:da:d0: af:f9:f6:d7:0b:69:df:b1:dd:6a:09:60:ed:05:25: 8b:d4:9b:36:cc:65:ac:6c:9e:fd:5b:05:35:a6:ac: 5b:63:83:8c:a7:8d:89:3b:e1:77:90:bf:41:65:3c: 91:47:49:f2:63:ca:12:e7:f6:42:41:6d:50:03:b5: 91:ca:67:c2:07:b4:98:27:00:55:28:43:6c:75:b9: 3f:9c:ed:4b:ea:21:ab:a2:a0:2d:34:a8:11:b8:fd: 78:0f:5c:1f:b4:e7:8f:d4:25:9e:67:ed:ce:3e:52: 62:62:10:9f:88:0e:bc:0f:46:0c:7b:ab:00:37:df: bc:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:5D:88:0A:8F:A1:AF:AA:4B:B2:9D:2C:33:E4:07:F7:F1:18:B3:03 X509v3 Authority Key Identifier: keyid:DE:76:C6:11:73:80:1C:DB:71:8B:A5:8B:1A:4A:40:B5:C9:4E:9C:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:fa:6d:86:bf:3b:c3:f6:b2:3e:63:56:53:35:a3:4a:56:46: 97:9f:45:3a:6a:75:76:36:e8:bd:1d:0d:62:e1:c0:9a:77:d6: 2f:1d:98:19:7a:b3:07:0e:5f:25:de:3a:3b:e3:ce:c0:88:1d: d0:0e:46:91:f8:f8:45:be:a3:11:93:46:18:9b:b2:da:2d:73: 5d:29:a8:ad:c1:c3:f1:86:d3:d9:1a:f9:63:9e:2e:94:46:66: 37:79:2f:40:f0:1e:94:6e:e6:ac:18:b6:f9:66:d9:62:8c:44: eb:90:48:0b:1d:62:77:2b:76:1f:16:5e:07:35:2a:98:df:82: 22:0a:02:78:b2:3d:b6:12:e3:78:a5:d7:f1:20:8f:c9:f4:57: 2b:f3:8c:ae:b6:fa:ca:8b:bf:b2:00:9b:a0:3d:30:c4:ee:b6: 80:bc:30:cf:6b:10:84:66:c3:27:ba:c3:4b:ca:be:94:00:07: 67:65:76:b6:aa:7e:4f:8a:e8:c1:bb:51:8e:18:1c:ac:74:83: d3:e5:15:e6:82:52:bd:0c:8a:a8:fc:ef:40:4d:c3:e8:16:a8: f3:67:1f:3f:87:6f:21:89:bf:d9:2d:66:7e:43:1e:e1:4e:ee: 18:72:3d:4a:bf:37:48:41:c1:52:61:cb:42:87:6b:15:3c:60: 6a:ca:9a:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNGZKY4OI0k2UHqPvSvYVtFZdj3AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU3NkM2MTE3MzgwMUNEQjcxOEJBNThCMUE0QTQwQjVD OTRFOUM3MDAeFw0yNTA0MjQxOTM1MDJaFw0yNTA0MjgwNTEzMDJaMDMxMTAvBgNV BAMTKDUyNUQ4ODBBOEZBMUFGQUE0QkIyOUQyQzMzRTQwN0Y3RjExOEIzMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiE9PDd3KXeHVWHhsCONbS62sl TjzrUlTMdASmUe65WHTJL9BpprJdkssUudDaarBD/NI/V8MBboSnsDr1FTTP/f2i /83qvsB+OynXZ4IknyfmB9uCEk/8Pw+A0Nglbe3jKE63U1L11VY9pmAhkYvNkZfJ NuR9uXnP9TjSUZ9wHWlWdIra0K/59tcLad+x3WoJYO0FJYvUmzbMZaxsnv1bBTWm rFtjg4ynjYk74XeQv0FlPJFHSfJjyhLn9kJBbVADtZHKZ8IHtJgnAFUoQ2x1uT+c 7UvqIauioC00qBG4/XgPXB+054/UJZ5n7c4+UmJiEJ+IDrwPRgx7qwA337x7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUl2ICo+hr6pLsp0sM+QH9/EYswMwHwYDVR0j BBgwFoAU3nbGEXOAHNtxi6WLGkpAtclOnHAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjA5Y2JiOS0xYWFkLTRiMWEtYmQ0ZS0wNmZkODQ0NzJmZDcvMC9ERTc2QzYxMTcz ODAxQ0RCNzE4QkE1OEIxQTRBNDBCNUM5NEU5QzcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREU3NkM2MTE3MzgwMUNEQjcxOEJBNThCMUE0QTQwQjVDOTRF OUM3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGYwOWNiYjktMWFhZC00YjFhLWJk NGUtMDZmZDg0NDcyZmQ3LzAvREU3NkM2MTE3MzgwMUNEQjcxOEJBNThCMUE0QTQw QjVDOTRFOUM3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAET6bYa/O8P2sj5jVlM1o0pWRpefRTpqdXY2 6L0dDWLhwJp31i8dmBl6swcOXyXeOjvjzsCIHdAORpH4+EW+oxGTRhibstotc10p qK3Bw/GG09ka+WOeLpRGZjd5L0DwHpRu5qwYtvlm2WKMROuQSAsdYncrdh8WXgc1 KpjfgiIKAniyPbYS43il1/Egj8n0VyvzjK62+sqLv7IAm6A9MMTutoC8MM9rEIRm wye6w0vKvpQAB2dldraqfk+K6MG7UY4YHKx0g9PlFeaCUr0Miqj870BNw+gWqPNn Hz+HbyGJv9ktZn5DHuFO7hhyPUq/N0hBwVJhy0KHaxU8YGrKmkA= -----END CERTIFICATE-----Generated at Fri Apr 25 00:06:28 2025 by rpki-client on console.sobornost.net