$ rpki-client -vvf repo-rpki.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.mft File: DF19949CE17DC116E7B7C2248C933405B7A1AEF2.mft (raw, json) Hash identifier: Y6CCvNupwjBbL8XSPrttnH+iFKtooyWj4sYDR7LGBFE= Subject key identifier: 1E:0D:79:50:1D:FB:6B:85:A8:5C:2E:68:D7:B5:9E:3A:3B:A6:96:69 Authority key identifier: DF:19:94:9C:E1:7D:C1:16:E7:B7:C2:24:8C:93:34:05:B7:A1:AE:F2 Certificate issuer: /CN=DF19949CE17DC116E7B7C2248C933405B7A1AEF2 Certificate serial: 3643B3D5CB3B94BAF27D3E7655EE98E2687E378D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.mft Manifest number: 0208 Signing time: Wed 23 Apr 2025 09:51:52 +0000 Manifest this update: Wed 23 Apr 2025 09:46:52 +0000 Manifest next update: Sat 26 Apr 2025 15:47:52 +0000 Files and hashes: 1: DF19949CE17DC116E7B7C2248C933405B7A1AEF2.crl (hash: HnUtt3FVohiyBy5ht2hZyFo0WyyOJmhFPHPO4jRB3bI=) 2: 3130332e3136362e3233342e302f32342d3234203d3e20313430343037.roa (hash: sMfIE/u5AzCpsIXByAsN/oEvGS84+QQDQwr2MsQjPBU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.crl rsync://repo-rpki.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 12:29:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:43:b3:d5:cb:3b:94:ba:f2:7d:3e:76:55:ee:98:e2:68:7e:37:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF19949CE17DC116E7B7C2248C933405B7A1AEF2 Validity Not Before: Apr 23 09:46:52 2025 GMT Not After : Apr 26 15:47:52 2025 GMT Subject: CN=1E0D79501DFB6B85A85C2E68D7B59E3A3BA69669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:bc:f0:70:8b:8e:6e:99:4a:63:fb:d4:0b:88: 29:00:bd:76:ac:ac:42:be:ed:5c:0f:13:07:2b:06: 43:e3:c9:bb:20:18:2a:64:cb:e1:16:42:9f:bc:21: 76:b5:67:61:ac:b2:ca:dd:d5:90:94:c4:a0:47:e6: ca:0a:5d:5a:e4:ab:ba:05:80:f5:e4:95:33:9e:77: 91:d4:be:b3:fd:8e:ed:94:61:b3:b3:88:b5:d0:cb: d0:dd:32:ae:c3:9b:20:16:eb:0c:29:b7:ab:64:7d: 64:be:1e:a7:26:a6:06:73:13:e4:37:a1:be:7d:aa: 59:18:5b:11:45:34:49:1a:f6:6b:3b:76:07:4a:30: b5:58:d1:24:40:b4:d2:10:2f:f3:7d:77:fa:04:69: e7:59:cb:4a:5c:bd:97:2c:a0:9f:7d:6f:94:34:ac: 6e:7a:77:70:25:72:ea:16:13:0a:7f:43:63:00:ac: ba:c8:04:e7:f4:08:8d:f9:55:c5:04:b5:06:ac:68: 72:4a:41:cf:b8:55:ea:72:0a:ac:d3:d0:bf:64:fe: 72:27:77:41:ac:71:78:6d:06:f7:46:f5:55:bd:df: 9c:b6:ff:d3:7f:fc:b2:f5:34:57:07:6d:0d:24:28: 50:fb:d3:21:22:d6:d7:a3:39:da:10:70:e2:f7:48: fc:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:0D:79:50:1D:FB:6B:85:A8:5C:2E:68:D7:B5:9E:3A:3B:A6:96:69 X509v3 Authority Key Identifier: keyid:DF:19:94:9C:E1:7D:C1:16:E7:B7:C2:24:8C:93:34:05:B7:A1:AE:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:0a:42:47:a0:76:b5:06:0e:d7:32:46:0d:3e:ac:58:6d:d6: 30:7d:17:e8:ae:e2:03:50:b3:40:9b:ec:d6:45:7a:9c:38:93: 70:00:02:c3:0c:8e:f0:be:84:7a:ba:25:42:c9:52:80:12:9d: 47:e1:15:40:1b:ff:b1:ba:86:6c:4b:f7:f0:58:6a:33:b7:39: e2:87:5e:fb:a1:bd:9f:34:d5:c2:94:68:bd:dd:6a:5b:74:1f: 19:b3:47:28:74:f1:2e:47:37:02:e1:df:e3:90:f4:a0:1f:27: 68:75:f1:8c:fb:7b:a1:5d:df:b0:db:cb:9a:50:ca:9e:14:8e: 9f:b8:c1:65:98:42:63:bd:1d:b9:75:32:37:b4:6c:7c:70:26: a6:00:16:73:8f:e4:43:b7:96:7a:8a:53:82:ec:0b:b6:37:5c: de:8e:d6:61:a5:65:be:00:e9:5b:94:b8:30:0f:7b:8a:74:73: 96:ed:e9:7d:1b:b8:95:1f:7c:61:02:68:20:57:82:e0:e5:aa: 6f:dd:54:35:62:17:8e:5e:43:e9:93:1f:12:55:01:3c:05:a9: 45:08:3d:f4:2d:65:8f:cd:b4:7d:34:63:bb:ef:ef:7f:fb:e9: 56:cd:13:f5:7d:5c:bc:a1:96:4f:1c:a4:a3:43:d2:30:be:ba: 88:59:3f:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNkOz1cs7lLryfT52Ve6Y4mh+N40wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYxOTk0OUNFMTdEQzExNkU3QjdDMjI0OEM5MzM0MDVC N0ExQUVGMjAeFw0yNTA0MjMwOTQ2NTJaFw0yNTA0MjYxNTQ3NTJaMDMxMTAvBgNV BAMTKDFFMEQ3OTUwMURGQjZCODVBODVDMkU2OEQ3QjU5RTNBM0JBNjk2NjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRvPBwi45umUpj+9QLiCkAvXas rEK+7VwPEwcrBkPjybsgGCpky+EWQp+8IXa1Z2Gsssrd1ZCUxKBH5soKXVrkq7oF gPXklTOed5HUvrP9ju2UYbOziLXQy9DdMq7DmyAW6wwpt6tkfWS+HqcmpgZzE+Q3 ob59qlkYWxFFNEka9ms7dgdKMLVY0SRAtNIQL/N9d/oEaedZy0pcvZcsoJ99b5Q0 rG56d3AlcuoWEwp/Q2MArLrIBOf0CI35VcUEtQasaHJKQc+4VepyCqzT0L9k/nIn d0GscXhtBvdG9VW935y2/9N//LL1NFcHbQ0kKFD70yEi1tejOdoQcOL3SPz/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHg15UB37a4WoXC5o17WeOjumlmkwHwYDVR0j BBgwFoAU3xmUnOF9wRbnt8IkjJM0BbehrvIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YWVmNzg2Yi02MjI2LTQ0YWYtODUyZC0xZmIwNDVjNGRlYjMvMC9ERjE5OTQ5Q0Ux N0RDMTE2RTdCN0MyMjQ4QzkzMzQwNUI3QTFBRUYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREYxOTk0OUNFMTdEQzExNkU3QjdDMjI0OEM5MzM0MDVCN0Ex QUVGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2FlZjc4NmItNjIyNi00NGFmLTg1 MmQtMWZiMDQ1YzRkZWIzLzAvREYxOTk0OUNFMTdEQzExNkU3QjdDMjI0OEM5MzM0 MDVCN0ExQUVGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMQKQkegdrUGDtcyRg0+rFht1jB9F+iu4gNQ s0Cb7NZFepw4k3AAAsMMjvC+hHq6JULJUoASnUfhFUAb/7G6hmxL9/BYajO3OeKH XvuhvZ801cKUaL3dalt0HxmzRyh08S5HNwLh3+OQ9KAfJ2h18Yz7e6Fd37Dby5pQ yp4Ujp+4wWWYQmO9Hbl1Mje0bHxwJqYAFnOP5EO3lnqKU4LsC7Y3XN6O1mGlZb4A 6VuUuDAPe4p0c5bt6X0buJUffGECaCBXguDlqm/dVDViF45eQ+mTHxJVATwFqUUI PfQtZY/NtH00Y7vv73/76VbNE/V9XLyhlk8cpKND0jC+uohZPwY= -----END CERTIFICATE-----Generated at Wed Apr 23 13:25:32 2025 by rpki-client on console.sobornost.net