$ rpki-client -vvf repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/DC0680824B7F80117B62C239676444B0691128B8.mft File: DC0680824B7F80117B62C239676444B0691128B8.mft (raw, json) Hash identifier: OMX7dXzjzvXjTuF/OeZt8IjEV+j2838T8o2rIjczFTY= Subject key identifier: FC:8B:88:52:35:AC:C7:9E:F9:73:2D:A9:BC:3D:D4:66:21:B3:20:0E Authority key identifier: DC:06:80:82:4B:7F:80:11:7B:62:C2:39:67:64:44:B0:69:11:28:B8 Certificate issuer: /CN=DC0680824B7F80117B62C239676444B0691128B8 Certificate serial: 1A3FB7236D5E779226954C3A4008C5E6F7327907 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DC0680824B7F80117B62C239676444B0691128B8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/DC0680824B7F80117B62C239676444B0691128B8.mft Manifest number: 47 Signing time: Thu 24 Apr 2025 03:53:44 +0000 Manifest this update: Thu 24 Apr 2025 03:48:44 +0000 Manifest next update: Sun 27 Apr 2025 05:53:44 +0000 Files and hashes: 1: DC0680824B7F80117B62C239676444B0691128B8.crl (hash: ZJ6BKDugH3zKWgLgyMlJa+1w80F5rwaoCCwFM9WeP2M=) 2: 3136302e3139312e3130362e302f32332d3234203d3e20313533313433.roa (hash: iw17DMpgfD2nYIWjQL2ZNOlw/a2YjINch68eFMNeuo0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/DC0680824B7F80117B62C239676444B0691128B8.crl rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/DC0680824B7F80117B62C239676444B0691128B8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DC0680824B7F80117B62C239676444B0691128B8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 05:53:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:3f:b7:23:6d:5e:77:92:26:95:4c:3a:40:08:c5:e6:f7:32:79:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC0680824B7F80117B62C239676444B0691128B8 Validity Not Before: Apr 24 03:48:44 2025 GMT Not After : Apr 27 05:53:44 2025 GMT Subject: CN=FC8B885235ACC79EF9732DA9BC3DD46621B3200E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:8e:a3:ba:bc:c8:48:0b:1e:39:b0:db:7f:75: 79:b1:de:cc:14:c3:87:d8:da:5e:66:e0:24:1a:35: cf:5d:f6:f8:fc:7e:61:5b:5b:d1:57:4b:b4:02:c0: 4a:04:11:f7:91:97:74:67:2b:66:9b:54:27:2d:38: 2f:eb:f1:9f:b8:55:ce:92:3d:77:8d:54:fc:a1:12: 8c:c0:7e:7e:13:df:81:e8:91:a1:53:d5:92:fc:26: bb:c7:2e:32:d5:f8:45:47:d1:6d:78:d2:7e:ab:6c: 42:3b:49:fb:a4:87:1a:b5:21:ae:b8:a2:a0:c3:16: b8:2a:5c:fb:f3:5a:a5:e0:f6:de:c5:68:ae:3d:d5: 0d:d6:7e:b2:7c:13:2c:3c:34:7d:7b:f8:5f:00:ce: 94:99:a4:2d:de:dd:a3:09:4f:c6:dd:56:b8:78:65: bf:70:bb:50:dc:6f:40:59:5e:86:6d:2a:57:a4:b2: 24:c2:a2:c1:12:fd:12:75:de:d6:62:3e:22:f0:82: 46:ab:46:45:14:2d:4d:ba:9c:b5:54:5d:ba:67:05: 86:2b:44:4c:72:b8:24:43:13:b5:3d:13:7c:d4:db: 4d:71:d8:d8:cc:93:7b:66:55:ee:50:95:10:69:b0: 85:f3:dc:aa:c8:3f:37:ff:37:e9:a9:61:41:42:ac: a0:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:8B:88:52:35:AC:C7:9E:F9:73:2D:A9:BC:3D:D4:66:21:B3:20:0E X509v3 Authority Key Identifier: keyid:DC:06:80:82:4B:7F:80:11:7B:62:C2:39:67:64:44:B0:69:11:28:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/DC0680824B7F80117B62C239676444B0691128B8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DC0680824B7F80117B62C239676444B0691128B8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/DC0680824B7F80117B62C239676444B0691128B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:0e:c2:6d:b8:e3:8f:f4:1f:df:97:75:67:5d:52:6d:05:b1: c6:44:29:78:16:50:06:1a:7c:20:89:72:aa:ae:93:35:8e:82: 7e:2a:9c:d1:8c:2e:27:23:d8:cf:96:e1:8d:67:37:66:da:69: 70:8b:58:31:0f:ac:c1:83:f2:6a:e4:30:41:31:c6:97:85:b1: 56:a3:11:73:07:19:08:73:ed:2e:fd:2a:84:87:24:fa:55:53: d8:6e:24:a3:7e:5d:44:09:ce:84:20:5d:6f:ae:68:38:c3:2c: f6:28:33:ac:94:e7:cb:45:e8:75:05:59:6e:93:7e:bb:3f:b9: 28:59:af:ce:66:a3:f4:57:a7:9b:a6:e4:06:25:57:c0:3a:8f: 75:7d:87:07:f4:8f:fa:78:b1:f0:29:38:45:1a:3d:15:98:d6: 37:a2:82:6f:51:28:94:4b:9d:90:3b:4e:6c:35:a6:4e:ba:bd: c6:89:7b:fe:d9:58:9b:7d:b7:86:96:d3:5f:98:8a:98:27:b1: 2a:87:4f:9d:65:69:51:e1:8b:a5:0d:67:5a:12:49:46:89:19: 4a:ac:8b:4f:49:ce:cd:f6:0a:aa:96:29:b3:a8:46:07:37:3f: 17:64:ae:53:bc:28:37:32:09:5e:70:62:c5:2d:f9:f0:46:16: e3:b1:37:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGj+3I21ed5ImlUw6QAjF5vcyeQcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMwNjgwODI0QjdGODAxMTdCNjJDMjM5Njc2NDQ0QjA2 OTExMjhCODAeFw0yNTA0MjQwMzQ4NDRaFw0yNTA0MjcwNTUzNDRaMDMxMTAvBgNV BAMTKEZDOEI4ODUyMzVBQ0M3OUVGOTczMkRBOUJDM0RENDY2MjFCMzIwMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqjqO6vMhICx45sNt/dXmx3swU w4fY2l5m4CQaNc9d9vj8fmFbW9FXS7QCwEoEEfeRl3RnK2abVCctOC/r8Z+4Vc6S PXeNVPyhEozAfn4T34HokaFT1ZL8JrvHLjLV+EVH0W140n6rbEI7Sfukhxq1Ia64 oqDDFrgqXPvzWqXg9t7FaK491Q3WfrJ8Eyw8NH17+F8AzpSZpC3e3aMJT8bdVrh4 Zb9wu1Dcb0BZXoZtKleksiTCosES/RJ13tZiPiLwgkarRkUULU26nLVUXbpnBYYr RExyuCRDE7U9E3zU201x2NjMk3tmVe5QlRBpsIXz3KrIPzf/N+mpYUFCrKCBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/IuIUjWsx575cy2pvD3UZiGzIA4wHwYDVR0j BBgwFoAU3AaAgkt/gBF7YsI5Z2REsGkRKLgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTg1NWU4YS0zZmY4LTQ3ZmYtYWFlYy00OGQ4YjM4MGE5MDQvMC9EQzA2ODA4MjRC N0Y4MDExN0I2MkMyMzk2NzY0NDRCMDY5MTEyOEI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvREMwNjgwODI0QjdGODAxMTdCNjJDMjM5Njc2NDQ0QjA2OTEx MjhCOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWU4NTVlOGEtM2ZmOC00N2ZmLWFh ZWMtNDhkOGIzODBhOTA0LzAvREMwNjgwODI0QjdGODAxMTdCNjJDMjM5Njc2NDQ0 QjA2OTExMjhCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD8Owm2444/0H9+XdWddUm0FscZEKXgWUAYa fCCJcqqukzWOgn4qnNGMLicj2M+W4Y1nN2baaXCLWDEPrMGD8mrkMEExxpeFsVaj EXMHGQhz7S79KoSHJPpVU9huJKN+XUQJzoQgXW+uaDjDLPYoM6yU58tF6HUFWW6T frs/uShZr85mo/RXp5um5AYlV8A6j3V9hwf0j/p4sfApOEUaPRWY1jeigm9RKJRL nZA7Tmw1pk66vcaJe/7ZWJt9t4aW01+YipgnsSqHT51laVHhi6UNZ1oSSUaJGUqs i09Jzs32CqqWKbOoRgc3PxdkrlO8KDcyCV5wYsUt+fBGFuOxNxs= -----END CERTIFICATE-----Generated at Thu Apr 24 06:49:49 2025 by rpki-client on console.sobornost.net