$ rpki-client -vvf repo-rpki.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.mft File: D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.mft (raw, json) Hash identifier: 22CDFodk77beOYJ7BXHudUhXiqxhqGfyl11K9MvY9Gw= Subject key identifier: D5:D7:CE:07:CC:EA:9D:62:29:FF:2D:75:86:A3:2B:E1:4D:AA:DD:EB Authority key identifier: D0:F7:9D:82:6E:43:EA:B6:1A:7A:83:4E:6A:27:77:C5:EC:82:1F:FD Certificate issuer: /CN=D0F79D826E43EAB61A7A834E6A2777C5EC821FFD Certificate serial: 3B4768DCE5286ED917E3D948A41240FA4A672A1A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.mft Manifest number: 0181 Signing time: Fri 25 Apr 2025 07:52:14 +0000 Manifest this update: Fri 25 Apr 2025 07:47:14 +0000 Manifest next update: Mon 28 Apr 2025 10:36:14 +0000 Files and hashes: 1: 3130332e37352e3133362e302f32342d3234203d3e20313530353233.roa (hash: q6SY7dMZTZK38tnoR+pXFf7kzoZFDF5ifDK7XqxUw8c=) 2: 3130332e37352e3133372e302f32342d3234203d3e20313530353233.roa (hash: Qa1udsECIRHsg1OUvc+qS4VEGfZjWwfHSm/JuoyHhYg=) 3: 3130332e37352e3133362e302f32332d3233203d3e20313530353233.roa (hash: YcSRTKOMF12aOzXL8N5UR6kDF37yCb3W4QZONTd7a9A=) 4: 323030313a6466313a646663303a3a2f34382d3438203d3e20313530353233.roa (hash: 6/CFAgI9fYm2h+bpsbThjdmYrbI1a+tEsxm7cMbpBNY=) 5: D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.crl (hash: 8FtmDKKDhUkjpAAXkpAOrjbYVKmNfYB5jq8FGYmOP0c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.crl rsync://repo-rpki.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 10:36:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:47:68:dc:e5:28:6e:d9:17:e3:d9:48:a4:12:40:fa:4a:67:2a:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0F79D826E43EAB61A7A834E6A2777C5EC821FFD Validity Not Before: Apr 25 07:47:14 2025 GMT Not After : Apr 28 10:36:14 2025 GMT Subject: CN=D5D7CE07CCEA9D6229FF2D7586A32BE14DAADDEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:22:57:20:84:6e:16:ff:90:bd:2a:9a:c3:2a: a3:f7:c1:ef:a9:14:ef:ce:d8:09:1c:f8:97:3c:a8: 8e:28:58:0c:fd:39:dd:ea:26:0a:31:8e:e5:68:8b: 54:03:c5:8c:df:36:37:04:c0:fc:da:de:e5:73:bc: 41:ab:b5:bf:37:02:e8:be:2f:ac:9b:51:09:42:2d: 0f:57:14:a2:3b:d5:40:0c:ff:46:eb:7b:dd:ef:e7: bf:04:9d:e3:b2:f9:9b:0c:26:6c:f2:8a:db:b2:d7: 86:8a:b4:63:24:71:9d:aa:0b:00:cd:13:fe:e3:f8: af:e2:7a:b3:f5:aa:c3:67:5a:e5:0a:91:e4:7a:77: af:66:11:6c:7e:a0:a1:68:f9:cc:b7:51:62:e7:b7: 51:ae:e3:a3:9c:bc:84:74:4f:65:84:d4:b2:42:9d: a7:f6:0e:f3:3e:36:40:b4:cf:dd:31:49:41:82:e2: 4f:83:d6:b3:e4:79:04:e1:0e:ae:e5:ff:8c:8c:f5: b0:2c:c5:b5:a7:13:0a:f3:80:c1:18:d5:04:69:f9: 51:25:13:5e:f1:a4:59:b9:30:b6:77:26:9e:15:83: ae:6c:3d:b5:8b:21:b6:5a:66:d8:db:8b:23:62:10: d4:df:a4:3a:d4:5f:c8:7e:26:b1:49:1e:9e:fc:48: 55:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:D7:CE:07:CC:EA:9D:62:29:FF:2D:75:86:A3:2B:E1:4D:AA:DD:EB X509v3 Authority Key Identifier: keyid:D0:F7:9D:82:6E:43:EA:B6:1A:7A:83:4E:6A:27:77:C5:EC:82:1F:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:93:75:3d:6a:75:27:68:ac:fd:8d:5e:d9:d9:db:30:7a:b7: 16:66:1d:c3:8d:f4:b0:c4:75:b5:26:d5:7b:23:5c:c7:ac:f4: e5:f8:4f:d3:8e:5c:6b:23:30:3b:25:4d:c6:be:2d:39:e8:13: 69:b4:45:21:ff:f2:57:29:41:c2:69:ce:e7:ca:9d:14:26:1a: 58:bd:0e:b8:20:52:f6:47:0d:5b:d4:20:12:c3:9e:14:38:36: 28:31:8d:0a:9e:ac:d9:b6:4c:10:77:42:8f:61:6b:10:b8:9e: e6:9d:8a:11:0f:9a:6d:6c:e9:4d:0c:c3:cc:ac:03:04:d1:a5: f2:73:1b:99:a2:c7:4f:7d:f9:56:3b:a0:31:e2:9c:a2:cd:9b: 79:b4:8c:a8:78:3a:ee:72:cb:67:af:de:0a:f5:9f:71:e5:b2: 93:54:2c:b2:87:dd:a3:a4:b5:3b:e1:5c:b0:b5:ee:de:e2:36: 43:6d:23:bb:17:dd:d9:cf:03:b9:e5:32:b8:13:4c:cb:71:36: f2:05:97:08:32:f1:b2:5d:58:ce:91:81:97:c9:e9:d6:03:b8: 61:33:d9:28:d9:9c:bb:aa:4e:01:a6:00:56:49:48:01:b9:19: 4e:8e:41:fe:30:1e:dc:04:86:cc:06:bc:08:79:b4:b6:6e:12: 83:00:00:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO0do3OUobtkX49lIpBJA+kpnKhowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBGNzlEODI2RTQzRUFCNjFBN0E4MzRFNkEyNzc3QzVF QzgyMUZGRDAeFw0yNTA0MjUwNzQ3MTRaFw0yNTA0MjgxMDM2MTRaMDMxMTAvBgNV BAMTKEQ1RDdDRTA3Q0NFQTlENjIyOUZGMkQ3NTg2QTMyQkUxNERBQURERUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDIlcghG4W/5C9KprDKqP3we+p FO/O2Akc+Jc8qI4oWAz9Od3qJgoxjuVoi1QDxYzfNjcEwPza3uVzvEGrtb83Aui+ L6ybUQlCLQ9XFKI71UAM/0bre93v578EneOy+ZsMJmzyituy14aKtGMkcZ2qCwDN E/7j+K/ierP1qsNnWuUKkeR6d69mEWx+oKFo+cy3UWLnt1Gu46OcvIR0T2WE1LJC naf2DvM+NkC0z90xSUGC4k+D1rPkeQThDq7l/4yM9bAsxbWnEwrzgMEY1QRp+VEl E17xpFm5MLZ3Jp4Vg65sPbWLIbZaZtjbiyNiENTfpDrUX8h+JrFJHp78SFV3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1dfOB8zqnWIp/y11hqMr4U2q3eswHwYDVR0j BBgwFoAU0Pedgm5D6rYaeoNOaid3xeyCH/0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODQ2MzI4NS03YzI4LTQzNWEtODJiYi1mY2MzMmQ1ODAyMGUvMC9EMEY3OUQ4MjZF NDNFQUI2MUE3QTgzNEU2QTI3NzdDNUVDODIxRkZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBGNzlEODI2RTQzRUFCNjFBN0E4MzRFNkEyNzc3QzVFQzgy MUZGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjg0NjMyODUtN2MyOC00MzVhLTgy YmItZmNjMzJkNTgwMjBlLzAvRDBGNzlEODI2RTQzRUFCNjFBN0E4MzRFNkEyNzc3 QzVFQzgyMUZGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB+TdT1qdSdorP2NXtnZ2zB6txZmHcON9LDE dbUm1XsjXMes9OX4T9OOXGsjMDslTca+LTnoE2m0RSH/8lcpQcJpzufKnRQmGli9 DrggUvZHDVvUIBLDnhQ4NigxjQqerNm2TBB3Qo9haxC4nuadihEPmm1s6U0Mw8ys AwTRpfJzG5mix099+VY7oDHinKLNm3m0jKh4Ou5yy2ev3gr1n3HlspNULLKH3aOk tTvhXLC17t7iNkNtI7sX3dnPA7nlMrgTTMtxNvIFlwgy8bJdWM6RgZfJ6dYDuGEz 2SjZnLuqTgGmAFZJSAG5GU6OQf4wHtwEhswGvAh5tLZuEoMAAMg= -----END CERTIFICATE-----Generated at Fri Apr 25 10:36:40 2025 by rpki-client on console.sobornost.net