$ rpki-client -vvf repo-rpki.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/6D3440FA38B51321C8A8FD8136BA70597A8686E0.mft File: 6D3440FA38B51321C8A8FD8136BA70597A8686E0.mft (raw, json) Hash identifier: qpBZQaUIYrQ57w29UzicPv64LaLpV1EVdweMWWcwfaY= Subject key identifier: CA:A4:C6:97:15:C7:56:67:FD:55:51:70:D7:7A:90:44:C9:1E:9F:11 Authority key identifier: 6D:34:40:FA:38:B5:13:21:C8:A8:FD:81:36:BA:70:59:7A:86:86:E0 Certificate issuer: /CN=6D3440FA38B51321C8A8FD8136BA70597A8686E0 Certificate serial: 11344A8A79A7935E3772A1853457BA70E992F28C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D3440FA38B51321C8A8FD8136BA70597A8686E0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/6D3440FA38B51321C8A8FD8136BA70597A8686E0.mft Manifest number: 0140 Signing time: Thu 24 Apr 2025 07:00:36 +0000 Manifest this update: Thu 24 Apr 2025 06:55:36 +0000 Manifest next update: Sun 27 Apr 2025 07:28:36 +0000 Files and hashes: 1: 3130332e3136302e3139332e302f32342d3234203d3e20313530353433.roa (hash: 4Rc4ZkmdbbdveQiTO9ywjy41ILEiG5tUChzvFR34zXM=) 2: 6D3440FA38B51321C8A8FD8136BA70597A8686E0.crl (hash: baNYIvqNsWb1p4Rmg4jtNV0yTdnHHhnCYcjz6r6tWXs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/6D3440FA38B51321C8A8FD8136BA70597A8686E0.crl rsync://repo-rpki.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/6D3440FA38B51321C8A8FD8136BA70597A8686E0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D3440FA38B51321C8A8FD8136BA70597A8686E0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 07:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:34:4a:8a:79:a7:93:5e:37:72:a1:85:34:57:ba:70:e9:92:f2:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D3440FA38B51321C8A8FD8136BA70597A8686E0 Validity Not Before: Apr 24 06:55:36 2025 GMT Not After : Apr 27 07:28:36 2025 GMT Subject: CN=CAA4C69715C75667FD555170D77A9044C91E9F11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:a9:ea:ae:0e:05:98:05:07:fa:63:4d:d6:5c: d6:80:ab:8e:8a:4c:9f:31:1e:53:d1:c6:3f:34:73: e5:6d:dd:3f:2b:9d:f5:e0:72:88:0e:da:34:70:ed: 8a:a5:27:8f:c9:a7:f2:6a:e2:cd:75:fb:db:42:47: 64:94:b3:a2:3c:55:c6:dc:4b:a2:3d:9b:14:98:e1: d8:16:3e:6d:a6:63:74:7f:30:a4:40:63:74:dd:8c: f7:76:1f:1e:ee:99:2f:f5:9e:a6:fd:98:bf:07:43: e2:90:f5:99:ac:c5:44:1b:fb:8f:d3:1b:96:bb:d7: d9:ff:df:bf:ce:f5:45:9b:09:9e:ae:c6:22:fd:cf: 15:3b:79:8e:a0:b5:71:9d:67:71:54:8d:ac:da:85: 41:b7:f5:0b:b1:3e:16:c4:37:2a:fe:fd:55:e3:81: eb:6b:64:ce:47:8d:7a:99:61:4e:aa:39:fa:d6:d5: a0:69:30:c4:c0:0f:80:96:0f:55:d9:5f:ef:a4:70: 71:af:d6:a0:ed:3d:a0:c7:1d:35:62:c0:3e:c7:9b: a8:c7:97:b0:ae:d6:31:58:0d:69:00:b8:89:e3:ba: 00:6d:68:64:9e:5f:04:16:9f:16:35:1e:c8:a1:1e: dc:e5:2d:81:58:ac:64:9f:35:e1:41:e3:fc:20:d1: e1:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:A4:C6:97:15:C7:56:67:FD:55:51:70:D7:7A:90:44:C9:1E:9F:11 X509v3 Authority Key Identifier: keyid:6D:34:40:FA:38:B5:13:21:C8:A8:FD:81:36:BA:70:59:7A:86:86:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/6D3440FA38B51321C8A8FD8136BA70597A8686E0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D3440FA38B51321C8A8FD8136BA70597A8686E0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cb3b00b-ad7b-4849-b0b2-e249a2fa604a/0/6D3440FA38B51321C8A8FD8136BA70597A8686E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:cd:ee:aa:16:4b:aa:37:db:e9:aa:27:0e:23:8a:fa:68:af: 1d:8d:1b:91:e2:ec:f8:85:f0:c1:b7:ab:eb:6f:ca:87:fe:04: c0:41:3f:95:de:10:39:e4:7d:c3:f6:41:f4:10:f0:4d:d5:fb: 39:ad:65:e7:74:c7:65:5e:e5:32:2f:35:04:28:b1:c2:8a:34: 06:9e:59:26:60:58:da:e1:18:26:be:3c:3a:f9:b6:27:f3:7f: 72:48:2e:25:a8:bc:f1:68:b0:9b:09:5f:51:bb:47:65:2f:04: 45:79:ba:0b:7c:05:e7:38:d4:cd:e9:55:ca:30:eb:dc:fa:33: 1e:f7:90:6e:7d:f8:44:fd:93:cb:d7:15:d4:bc:20:1d:af:0f: 6e:73:bc:53:55:24:8c:32:f9:cb:b4:2c:e9:e5:2d:63:d5:36: 3a:b0:da:d5:c8:4e:15:4a:6b:0b:66:fb:8d:47:29:39:55:90: b7:8a:3c:fb:e4:9a:c6:60:b8:b0:f2:ce:56:a1:84:65:59:fa: 1d:4f:11:07:89:34:bc:a4:f1:31:e7:74:72:d4:77:cf:12:06: 3c:5c:f6:ec:1f:91:de:25:0b:9c:43:99:db:21:94:a0:44:b9: 14:03:21:a5:2f:e6:5f:27:2a:e7:bd:e5:83:83:50:23:df:92: a4:31:50:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUETRKinmnk143cqGFNFe6cOmS8owwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQzNDQwRkEzOEI1MTMyMUM4QThGRDgxMzZCQTcwNTk3 QTg2ODZFMDAeFw0yNTA0MjQwNjU1MzZaFw0yNTA0MjcwNzI4MzZaMDMxMTAvBgNV BAMTKENBQTRDNjk3MTVDNzU2NjdGRDU1NTE3MEQ3N0E5MDQ0QzkxRTlGMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6qequDgWYBQf6Y03WXNaAq46K TJ8xHlPRxj80c+Vt3T8rnfXgcogO2jRw7YqlJ4/Jp/Jq4s11+9tCR2SUs6I8Vcbc S6I9mxSY4dgWPm2mY3R/MKRAY3TdjPd2Hx7umS/1nqb9mL8HQ+KQ9ZmsxUQb+4/T G5a719n/37/O9UWbCZ6uxiL9zxU7eY6gtXGdZ3FUjazahUG39QuxPhbENyr+/VXj getrZM5HjXqZYU6qOfrW1aBpMMTAD4CWD1XZX++kcHGv1qDtPaDHHTViwD7Hm6jH l7Cu1jFYDWkAuInjugBtaGSeXwQWnxY1HsihHtzlLYFYrGSfNeFB4/wg0eFjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyqTGlxXHVmf9VVFw13qQRMkenxEwHwYDVR0j BBgwFoAUbTRA+ji1EyHIqP2BNrpwWXqGhuAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Y2IzYjAwYi1hZDdiLTQ4NDktYjBiMi1lMjQ5YTJmYTYwNGEvMC82RDM0NDBGQTM4 QjUxMzIxQzhBOEZEODEzNkJBNzA1OTdBODY4NkUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkQzNDQwRkEzOEI1MTMyMUM4QThGRDgxMzZCQTcwNTk3QTg2 ODZFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2NiM2IwMGItYWQ3Yi00ODQ5LWIw YjItZTI0OWEyZmE2MDRhLzAvNkQzNDQwRkEzOEI1MTMyMUM4QThGRDgxMzZCQTcw NTk3QTg2ODZFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFDN7qoWS6o32+mqJw4jivporx2NG5Hi7PiF 8MG3q+tvyof+BMBBP5XeEDnkfcP2QfQQ8E3V+zmtZed0x2Ve5TIvNQQoscKKNAae WSZgWNrhGCa+PDr5tifzf3JILiWovPFosJsJX1G7R2UvBEV5ugt8Bec41M3pVcow 69z6Mx73kG59+ET9k8vXFdS8IB2vD25zvFNVJIwy+cu0LOnlLWPVNjqw2tXIThVK awtm+41HKTlVkLeKPPvkmsZguLDyzlahhGVZ+h1PEQeJNLyk8THndHLUd88SBjxc 9uwfkd4lC5xDmdshlKBEuRQDIaUv5l8nKue95YODUCPfkqQxUAg= -----END CERTIFICATE-----Generated at Thu Apr 24 09:03:02 2025 by rpki-client on console.sobornost.net