$ rpki-client -vvf repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.mft File: D68CA7C6F514D7168C00790717FB869AF68B125E.mft (raw, json) Hash identifier: PKjP4LkSzSU9OgdWDdfBCgVHp+a6WOAP80x4hVs33Lc= Subject key identifier: F7:D7:AA:2B:3E:9F:F9:15:96:90:37:1F:BC:94:5F:34:40:C7:6B:44 Authority key identifier: D6:8C:A7:C6:F5:14:D7:16:8C:00:79:07:17:FB:86:9A:F6:8B:12:5E Certificate issuer: /CN=D68CA7C6F514D7168C00790717FB869AF68B125E Certificate serial: 0F4A617E72BB60510D2A2905F4DE5216CFA301B1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D68CA7C6F514D7168C00790717FB869AF68B125E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.mft Manifest number: 020C Signing time: Fri 25 Apr 2025 01:50:50 +0000 Manifest this update: Fri 25 Apr 2025 01:45:50 +0000 Manifest next update: Mon 28 Apr 2025 05:52:50 +0000 Files and hashes: 1: 3130332e3134322e3235342e302f32342d3234203d3e203435333035.roa (hash: 5099uAR6KmDcIfNiZmfT8BCVcKIiSE/bkHtUTKJ/KOQ=) 2: 3130332e3134322e3235342e302f32332d3234203d3e203435333035.roa (hash: 7O8N58po+0JxePzNZclEQ2AJgxG8+dzNwmbyqc3JseQ=) 3: 323030313a6466313a363338303a3a2f34382d3438203d3e203435333035.roa (hash: 9QQ+2QkEe5ZH/Gx9crXFjTQMx7fu4j8ocdzuLtt+l68=) 4: 3130332e3134322e3235342e302f32342d3234203d3e20313339333831.roa (hash: dqH/h3KP8VbL1imk1+sCwLW1Fbde9SEkgS3WsJD6a4Q=) 5: 3130332e3134322e3235352e302f32342d3234203d3e203435333035.roa (hash: QxcRI59eBP9vOZvPd8UtIm8nunAIQZZkvPnGGZ6af2w=) 6: 3130332e3134322e3235352e302f32342d3234203d3e20313339333831.roa (hash: VNXiSw/mkVU/eaep8UiaH3pF3+R/bpIMEPNGotq1Wno=) 7: 3130332e3134322e3235342e302f32332d3234203d3e20313339333831.roa (hash: ouXIX9GF2bsN7u33KTbYLbJVbRNSQKEsMqHEdl/mkaw=) 8: 323030313a6466313a363338303a3a2f34382d3438203d3e20313339333831.roa (hash: +AMBcTRDOItbHkoJjd3Z20zd7vvhBKXQR154gJmvfP8=) 9: D68CA7C6F514D7168C00790717FB869AF68B125E.crl (hash: XTmwS5oQ3ER8jPNq9UCNgouCkS3sWH/ghymtJbhOCtg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.crl rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D68CA7C6F514D7168C00790717FB869AF68B125E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:4a:61:7e:72:bb:60:51:0d:2a:29:05:f4:de:52:16:cf:a3:01:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D68CA7C6F514D7168C00790717FB869AF68B125E Validity Not Before: Apr 25 01:45:50 2025 GMT Not After : Apr 28 05:52:50 2025 GMT Subject: CN=F7D7AA2B3E9FF9159690371FBC945F3440C76B44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:07:6a:8b:ae:3a:50:dc:ad:7a:be:6a:43:d5: a9:6c:43:c1:43:07:09:3d:d2:9e:d1:cd:57:8c:85: 80:bd:9f:ce:f5:41:ef:ca:93:25:89:d6:f6:0d:a9: 3d:83:42:e6:ac:2a:72:5b:97:d6:a4:b1:40:67:30: 0f:86:bd:14:a0:06:cc:c0:3b:29:a7:06:9b:d5:4d: 82:8a:3b:e0:26:86:a8:67:a4:c2:31:e9:8b:b9:69: d3:ca:1b:cc:57:c8:92:ba:71:af:f4:15:7e:4b:43: 84:20:ef:47:2e:8e:ff:1c:1e:8b:86:14:62:c3:02: 11:03:aa:60:b4:10:83:48:52:90:c7:d4:50:cc:79: ec:c7:35:56:cd:12:7a:19:69:ba:51:87:0d:2c:3d: f2:2e:eb:dc:7d:cc:95:3a:19:dd:68:ae:3c:04:ed: 4d:7f:b5:36:26:f4:e8:58:37:5c:65:52:e1:4c:25: 7a:e0:bc:2b:17:26:99:0c:09:a2:d7:76:5f:26:89: 07:7d:3d:e7:f6:dc:69:02:9e:be:93:be:7e:56:9d: 89:07:eb:8c:ab:34:0c:c2:ea:ff:c5:8e:7c:73:d7: 8a:16:bc:1e:35:ee:d6:d6:5c:f1:f3:b7:c3:9a:61: 74:0f:42:7d:f2:65:da:38:54:cc:c6:ac:c5:1b:62: b1:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:D7:AA:2B:3E:9F:F9:15:96:90:37:1F:BC:94:5F:34:40:C7:6B:44 X509v3 Authority Key Identifier: keyid:D6:8C:A7:C6:F5:14:D7:16:8C:00:79:07:17:FB:86:9A:F6:8B:12:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D68CA7C6F514D7168C00790717FB869AF68B125E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:cd:a3:5f:66:57:ac:b8:63:d9:20:c3:1f:c9:c8:63:37:b0: dc:96:78:de:5d:11:41:ed:90:1f:e1:7b:3a:7c:22:d0:44:1a: c0:f2:ee:07:3c:9d:d1:40:a1:b4:0d:ce:30:d3:57:33:f4:c5: 8a:f3:3f:1a:fb:0e:a6:c2:4d:17:04:6f:2a:d2:79:a3:86:a7: d4:dd:bf:b1:2b:8b:28:13:67:c8:16:1b:a1:b8:c6:7b:64:80: 3a:ac:a2:17:39:bd:b9:69:b5:c8:0a:7f:22:aa:63:ec:c9:3c: b5:75:09:79:81:07:e6:2a:52:1b:52:f9:f2:91:e6:7b:ab:d9: 89:a6:ae:26:bb:75:42:ae:8d:68:ea:a2:50:99:7e:0d:01:39: df:a9:fb:e8:e0:3b:87:b4:3e:b7:41:56:8e:42:4c:f8:7e:20: e2:45:83:84:61:6e:29:c2:2e:6f:00:82:e4:d4:b8:3f:98:a8: a5:6c:b3:7a:e7:3d:bb:ec:3a:50:68:a2:64:84:72:82:0b:df: 41:87:fc:ba:c4:13:17:75:04:7b:59:ad:b5:ca:f7:0e:ac:5e: 92:a1:fc:82:b5:02:c2:2e:c3:a8:85:f9:39:d6:74:7c:25:ee: 26:dd:f7:3a:8e:3f:a7:00:d9:96:25:a6:11:87:97:e4:ef:ac: 9d:9c:36:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD0phfnK7YFENKikF9N5SFs+jAbEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY4Q0E3QzZGNTE0RDcxNjhDMDA3OTA3MTdGQjg2OUFG NjhCMTI1RTAeFw0yNTA0MjUwMTQ1NTBaFw0yNTA0MjgwNTUyNTBaMDMxMTAvBgNV BAMTKEY3RDdBQTJCM0U5RkY5MTU5NjkwMzcxRkJDOTQ1RjM0NDBDNzZCNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYB2qLrjpQ3K16vmpD1alsQ8FD Bwk90p7RzVeMhYC9n871Qe/KkyWJ1vYNqT2DQuasKnJbl9aksUBnMA+GvRSgBszA OymnBpvVTYKKO+AmhqhnpMIx6Yu5adPKG8xXyJK6ca/0FX5LQ4Qg70cujv8cHouG FGLDAhEDqmC0EINIUpDH1FDMeezHNVbNEnoZabpRhw0sPfIu69x9zJU6Gd1orjwE 7U1/tTYm9OhYN1xlUuFMJXrgvCsXJpkMCaLXdl8miQd9Pef23GkCnr6Tvn5WnYkH 64yrNAzC6v/Fjnxz14oWvB417tbWXPHzt8OaYXQPQn3yZdo4VMzGrMUbYrHZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU99eqKz6f+RWWkDcfvJRfNEDHa0QwHwYDVR0j BBgwFoAU1oynxvUU1xaMAHkHF/uGmvaLEl4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGRjMWRkOC02ZDI1LTQ3YzctYWFhNC1iZGRmMWI5ZDY3N2UvMC9ENjhDQTdDNkY1 MTRENzE2OEMwMDc5MDcxN0ZCODY5QUY2OEIxMjVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDY4Q0E3QzZGNTE0RDcxNjhDMDA3OTA3MTdGQjg2OUFGNjhC MTI1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWRkYzFkZDgtNmQyNS00N2M3LWFh YTQtYmRkZjFiOWQ2NzdlLzAvRDY4Q0E3QzZGNTE0RDcxNjhDMDA3OTA3MTdGQjg2 OUFGNjhCMTI1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIXNo19mV6y4Y9kgwx/JyGM3sNyWeN5dEUHt kB/hezp8ItBEGsDy7gc8ndFAobQNzjDTVzP0xYrzPxr7DqbCTRcEbyrSeaOGp9Td v7EriygTZ8gWG6G4xntkgDqsohc5vblptcgKfyKqY+zJPLV1CXmBB+YqUhtS+fKR 5nur2Ymmria7dUKujWjqolCZfg0BOd+p++jgO4e0PrdBVo5CTPh+IOJFg4RhbinC Lm8AguTUuD+YqKVss3rnPbvsOlBoomSEcoIL30GH/LrEExd1BHtZrbXK9w6sXpKh /IK1AsIuw6iF+TnWdHwl7ibd9zqOP6cA2ZYlphGHl+TvrJ2cNm8= -----END CERTIFICATE-----Generated at Fri Apr 25 06:02:21 2025 by rpki-client on console.sobornost.net