$ rpki-client -vvf repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft File: 68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft (raw, json) Hash identifier: U2TOcWnwf2f4CLouDyHmLXDpLk4+gp7DsZKypxw2wZg= Subject key identifier: A9:4E:68:01:22:FC:74:AF:50:CD:6D:C7:2A:69:8A:72:92:65:5F:0F Authority key identifier: 68:D5:78:2F:BA:DB:91:4C:FD:74:AE:28:DA:59:78:4A:5A:AE:AA:F8 Certificate issuer: /CN=68D5782FBADB914CFD74AE28DA59784A5AAEAAF8 Certificate serial: 3CFDA7C1DAD7677A6B6C371BEF287799A2B8349A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft Manifest number: 042F Signing time: Wed 23 Apr 2025 19:20:58 +0000 Manifest this update: Wed 23 Apr 2025 19:15:58 +0000 Manifest next update: Sat 26 Apr 2025 21:31:58 +0000 Files and hashes: 1: 3130332e3136312e3131312e302f32342d3234203d3e20313431363135.roa (hash: DSCdhRjgPhVc7GP3hYwZBTxGLDzPYuxYKap6JH0m82g=) 2: 68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.crl (hash: vtl4Ue/PWKSjF6JLb5Zc+Cp1tE2oRE+hRb+jtU6ITxE=) 3: 3130332e3136312e3131302e302f32342d3234203d3e20313431363135.roa (hash: I1rDYvqqFg4aRnuf/vWK5XXOGVBK8suZyd8orlilX60=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.crl rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 21:31:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:fd:a7:c1:da:d7:67:7a:6b:6c:37:1b:ef:28:77:99:a2:b8:34:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68D5782FBADB914CFD74AE28DA59784A5AAEAAF8 Validity Not Before: Apr 23 19:15:58 2025 GMT Not After : Apr 26 21:31:58 2025 GMT Subject: CN=A94E680122FC74AF50CD6DC72A698A7292655F0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:02:93:f3:ff:1c:80:03:9d:74:c6:f7:50:1d: 01:d3:f8:0c:1d:cd:ef:de:c0:38:a9:59:a9:d4:47: fd:45:32:23:2b:17:78:a7:02:bd:3a:39:01:19:2d: 67:a1:72:2a:05:f0:08:7f:08:96:67:01:fa:ef:b7: 77:e3:21:41:98:98:94:87:aa:32:45:0b:24:dc:f2: dc:fb:4a:a6:4c:f2:d8:9f:44:cd:67:69:b8:50:46: d7:6f:1c:f2:37:c1:3b:5e:f6:f6:48:4c:f4:e3:af: 79:49:a1:3a:88:a2:82:8c:bc:cc:03:f8:ff:b5:ff: 64:4c:27:a1:ea:6d:1a:06:74:4a:af:03:87:2f:1c: 2a:0a:6f:f3:e7:95:70:fc:cb:7e:be:d2:d2:e4:e4: 30:ae:12:4f:a0:f4:00:81:37:52:c6:be:97:ad:e0: 71:f1:82:f1:a8:c5:a8:e5:79:ff:63:6c:8b:f9:f2: f0:fb:dd:21:6c:90:d7:cf:81:c3:2f:f2:25:e6:2e: de:80:9e:b7:1a:50:00:a7:8d:be:ad:af:04:e8:8b: 23:40:0b:07:78:a5:a3:9f:cf:74:76:1f:0c:42:c0: 23:62:e7:23:09:66:7c:2a:c6:57:cc:63:00:d3:d2: ce:d5:14:51:8b:81:26:4b:1f:cf:29:d1:75:0f:df: 7c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:4E:68:01:22:FC:74:AF:50:CD:6D:C7:2A:69:8A:72:92:65:5F:0F X509v3 Authority Key Identifier: keyid:68:D5:78:2F:BA:DB:91:4C:FD:74:AE:28:DA:59:78:4A:5A:AE:AA:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:a8:51:b4:d7:dc:d4:08:2c:c9:74:ec:32:f3:e7:59:9a:58: 76:ad:87:0d:b5:be:39:1d:f0:04:1d:c2:e7:35:85:0f:ee:00: 50:64:14:c6:04:ab:f7:2c:a8:92:1f:d0:22:e5:a4:28:03:12: 61:be:4a:ac:f3:78:78:9f:df:ab:35:60:54:34:32:1b:a3:f1: a5:a8:39:19:77:ab:a0:87:a8:5f:15:36:75:57:93:37:5d:d3: 4f:04:c2:db:1a:6f:36:64:16:a6:47:ad:58:66:e0:0b:a8:ac: 5c:c9:e8:98:4b:b8:dc:c4:ba:ca:51:bd:11:f4:b2:1d:45:21: 7e:40:1b:dd:95:b6:f9:1e:87:be:5b:99:61:fa:ee:9f:d2:3c: fd:75:5e:0e:04:d7:49:28:9d:72:ba:30:38:bb:06:1e:b6:e3: c2:65:aa:89:09:66:e6:9a:89:3c:c4:1d:3c:d2:a0:86:15:9a: fc:1f:0f:b6:90:a7:61:d7:19:32:d4:18:f0:99:6d:8f:6d:d5: df:c1:fa:01:83:97:fc:05:66:99:1a:5d:c7:1f:86:74:2b:7d: ce:91:18:e3:c7:2f:fe:b7:ba:fb:b3:67:77:9e:4a:59:78:cd: 9e:a6:37:c5:72:e4:c7:cb:70:ba:b5:68:a6:5d:ca:84:86:af: 5d:cd:9c:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPP2nwdrXZ3prbDcb7yh3maK4NJowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhENTc4MkZCQURCOTE0Q0ZENzRBRTI4REE1OTc4NEE1 QUFFQUFGODAeFw0yNTA0MjMxOTE1NThaFw0yNTA0MjYyMTMxNThaMDMxMTAvBgNV BAMTKEE5NEU2ODAxMjJGQzc0QUY1MENENkRDNzJBNjk4QTcyOTI2NTVGMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoApPz/xyAA510xvdQHQHT+Awd ze/ewDipWanUR/1FMiMrF3inAr06OQEZLWehcioF8Ah/CJZnAfrvt3fjIUGYmJSH qjJFCyTc8tz7SqZM8tifRM1nabhQRtdvHPI3wTte9vZITPTjr3lJoTqIooKMvMwD +P+1/2RMJ6HqbRoGdEqvA4cvHCoKb/PnlXD8y36+0tLk5DCuEk+g9ACBN1LGvpet 4HHxgvGoxajlef9jbIv58vD73SFskNfPgcMv8iXmLt6AnrcaUACnjb6trwToiyNA Cwd4paOfz3R2HwxCwCNi5yMJZnwqxlfMYwDT0s7VFFGLgSZLH88p0XUP33xLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqU5oASL8dK9QzW3HKmmKcpJlXw8wHwYDVR0j BBgwFoAUaNV4L7rbkUz9dK4o2ll4SlquqvgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZjQwOGU0NC0zZTljLTQ1ZTUtYmNhNC01ZGZiZDRiMjcxMzAvMC82OEQ1NzgyRkJB REI5MTRDRkQ3NEFFMjhEQTU5Nzg0QTVBQUVBQUY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjhENTc4MkZCQURCOTE0Q0ZENzRBRTI4REE1OTc4NEE1QUFF QUFGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2Y0MDhlNDQtM2U5Yy00NWU1LWJj YTQtNWRmYmQ0YjI3MTMwLzAvNjhENTc4MkZCQURCOTE0Q0ZENzRBRTI4REE1OTc4 NEE1QUFFQUFGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAyoUbTX3NQILMl07DLz51maWHathw21vjkd 8AQdwuc1hQ/uAFBkFMYEq/csqJIf0CLlpCgDEmG+SqzzeHif36s1YFQ0Mhuj8aWo ORl3q6CHqF8VNnVXkzdd008EwtsabzZkFqZHrVhm4AuorFzJ6JhLuNzEuspRvRH0 sh1FIX5AG92Vtvkeh75bmWH67p/SPP11Xg4E10konXK6MDi7Bh6248JlqokJZuaa iTzEHTzSoIYVmvwfD7aQp2HXGTLUGPCZbY9t1d/B+gGDl/wFZpkaXccfhnQrfc6R GOPHL/63uvuzZ3eeSll4zZ6mN8Vy5MfLcLq1aKZdyoSGr13NnEw= -----END CERTIFICATE-----Generated at Wed Apr 23 22:12:04 2025 by rpki-client on console.sobornost.net