$ rpki-client -vvf repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft File: 0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft (raw, json) Hash identifier: tXwzY1d44/4OzMYkCPe06HkKO4cTJfuGv6PORUhWUU4= Subject key identifier: A3:E2:E6:AA:52:86:BF:8C:65:98:85:C7:27:F4:3B:EC:02:24:8E:4C Authority key identifier: 0D:F8:1F:0E:E9:9B:2E:06:DB:6C:AE:E0:5C:C3:01:BE:3A:23:D1:37 Certificate issuer: /CN=0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137 Certificate serial: 06D7664BBC425BD5A1B3C00EA8402EE6C800E3DB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft Manifest number: 04CA Signing time: Thu 24 Apr 2025 03:01:49 +0000 Manifest this update: Thu 24 Apr 2025 02:56:49 +0000 Manifest next update: Sun 27 Apr 2025 12:37:49 +0000 Files and hashes: 1: 3130332e3132362e32382e302f32322d3234203d3e20313338313139.roa (hash: vaCug1qVwQYV4Eir0Vlivt2Eyx887UV2TVWoqX0yQVI=) 2: 0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.crl (hash: r1lbwMaRJfwcSshxSEne9K2tEWxLxZtUorbinmrMV8M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.crl rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 08:44:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:d7:66:4b:bc:42:5b:d5:a1:b3:c0:0e:a8:40:2e:e6:c8:00:e3:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137 Validity Not Before: Apr 24 02:56:49 2025 GMT Not After : Apr 27 12:37:49 2025 GMT Subject: CN=A3E2E6AA5286BF8C659885C727F43BEC02248E4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:19:a1:c2:7f:ab:53:5f:1e:9f:e3:fa:75:ab: f1:67:9c:ac:fd:22:45:b5:10:e5:00:dd:36:6c:80: e6:06:c6:e2:8a:ab:3f:49:3d:78:48:0b:f2:40:78: b6:8b:29:f5:2f:f1:23:e4:40:16:ba:8d:f7:27:fb: 0c:94:e5:d1:1e:c8:08:35:28:0c:87:60:9f:83:aa: c3:2a:dc:66:ac:7b:61:5c:8d:5c:36:96:25:b2:ca: 2b:43:bb:16:c5:1c:33:af:d6:64:90:41:58:00:76: cf:d4:14:d1:60:75:d4:9f:49:7f:c1:39:69:99:38: f5:cf:54:bb:37:a6:b5:f7:ca:e8:70:be:ad:04:27: 35:71:99:3d:30:b0:89:f1:14:cf:83:9a:b5:1e:d2: 6a:b9:bf:70:50:ef:8d:2b:fa:37:c3:ae:3c:44:e6: 55:63:e2:5a:9a:c1:dc:14:84:b5:08:5c:45:7e:83: 68:77:9f:c1:c4:c4:d9:41:e9:cf:7a:9f:ef:49:31: 79:89:94:5d:fc:a5:22:7d:3e:df:96:77:db:2d:d8: 4b:3f:25:79:fa:ee:16:34:24:90:a7:c7:90:a5:82: a4:d6:5c:61:ce:54:f3:79:26:5f:3a:3e:fc:06:f4: 4c:5f:4e:af:24:12:84:14:bf:3c:06:b0:c6:fc:19: 65:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:E2:E6:AA:52:86:BF:8C:65:98:85:C7:27:F4:3B:EC:02:24:8E:4C X509v3 Authority Key Identifier: keyid:0D:F8:1F:0E:E9:9B:2E:06:DB:6C:AE:E0:5C:C3:01:BE:3A:23:D1:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:5c:2c:0d:0d:b5:cc:5d:67:bd:c3:d8:73:6a:96:63:83:ef: 3e:dd:74:6c:f8:0f:38:f9:28:1a:c8:ca:cb:c1:64:32:3b:c1: f3:e6:5b:78:8c:6e:a4:2d:c1:8e:d3:e2:46:bc:e2:26:40:dc: c2:c2:9e:a2:bd:59:2f:6d:42:05:e0:9e:78:d7:87:e3:b8:2f: 78:9c:a7:f8:73:42:68:cc:e2:7e:21:41:8f:13:82:31:08:db: 8f:38:00:93:bf:9d:6e:e3:fd:3b:92:09:0c:d9:58:9e:94:02: 4a:6c:0c:12:24:15:4c:d9:e0:02:f3:fc:05:5d:8b:58:d1:21: 80:4e:8c:03:49:84:60:4d:b2:7d:b8:76:05:91:c5:c2:04:c7: 01:9d:40:f4:4a:d1:fc:ca:6c:ae:2b:a6:5d:50:8f:b4:25:64: b4:f1:57:53:a7:be:d0:35:62:2d:96:b8:a7:46:56:5d:7f:a9: 80:db:47:fc:33:bb:bc:9a:ab:4e:dc:bb:f1:5d:01:91:00:89: 92:7d:2b:36:81:04:51:df:e4:6a:64:1b:58:c4:7d:53:a9:88: d1:4f:69:1b:75:68:53:20:cb:12:c4:3e:27:62:96:70:4f:35: 3c:06:1a:f7:fb:c0:06:5a:28:3d:87:79:38:18:0c:58:d5:0b: 7f:96:02:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBtdmS7xCW9Whs8AOqEAu5sgA49swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMERGODFGMEVFOTlCMkUwNkRCNkNBRUUwNUNDMzAxQkUz QTIzRDEzNzAeFw0yNTA0MjQwMjU2NDlaFw0yNTA0MjcxMjM3NDlaMDMxMTAvBgNV BAMTKEEzRTJFNkFBNTI4NkJGOEM2NTk4ODVDNzI3RjQzQkVDMDIyNDhFNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKGaHCf6tTXx6f4/p1q/FnnKz9 IkW1EOUA3TZsgOYGxuKKqz9JPXhIC/JAeLaLKfUv8SPkQBa6jfcn+wyU5dEeyAg1 KAyHYJ+DqsMq3Gase2FcjVw2liWyyitDuxbFHDOv1mSQQVgAds/UFNFgddSfSX/B OWmZOPXPVLs3prX3yuhwvq0EJzVxmT0wsInxFM+DmrUe0mq5v3BQ740r+jfDrjxE 5lVj4lqawdwUhLUIXEV+g2h3n8HExNlB6c96n+9JMXmJlF38pSJ9Pt+Wd9st2Es/ JXn67hY0JJCnx5ClgqTWXGHOVPN5Jl86PvwG9ExfTq8kEoQUvzwGsMb8GWWDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo+LmqlKGv4xlmIXHJ/Q77AIkjkwwHwYDVR0j BBgwFoAUDfgfDumbLgbbbK7gXMMBvjoj0TcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZjZlYTIyMS03N2I3LTQ3OTEtYThhOC1iNTE2NGIwMGYxYzUvMC8wREY4MUYwRUU5 OUIyRTA2REI2Q0FFRTA1Q0MzMDFCRTNBMjNEMTM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMERGODFGMEVFOTlCMkUwNkRCNkNBRUUwNUNDMzAxQkUzQTIz RDEzNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2Y2ZWEyMjEtNzdiNy00NzkxLWE4 YTgtYjUxNjRiMDBmMWM1LzAvMERGODFGMEVFOTlCMkUwNkRCNkNBRUUwNUNDMzAx QkUzQTIzRDEzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH5cLA0NtcxdZ73D2HNqlmOD7z7ddGz4Dzj5 KBrIysvBZDI7wfPmW3iMbqQtwY7T4ka84iZA3MLCnqK9WS9tQgXgnnjXh+O4L3ic p/hzQmjM4n4hQY8TgjEI2484AJO/nW7j/TuSCQzZWJ6UAkpsDBIkFUzZ4ALz/AVd i1jRIYBOjANJhGBNsn24dgWRxcIExwGdQPRK0fzKbK4rpl1Qj7QlZLTxV1OnvtA1 Yi2WuKdGVl1/qYDbR/wzu7yaq07cu/FdAZEAiZJ9KzaBBFHf5GpkG1jEfVOpiNFP aRt1aFMgyxLEPidilnBPNTwGGvf7wAZaKD2HeTgYDFjVC3+WAoY= -----END CERTIFICATE-----Generated at Thu Apr 24 06:49:50 2025 by rpki-client on console.sobornost.net