$ rpki-client -vvf repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.mft File: 7DA5F7B42931EE3A414B9A5B7996703DF70BD897.mft (raw, json) Hash identifier: mcqx/TEbIm5cztvk283AVuE1K7/r00/baeuvLK8GxTs= Subject key identifier: 9C:75:6F:F0:8B:40:06:86:83:FC:0B:5E:B4:FA:15:88:17:B8:5F:3C Authority key identifier: 7D:A5:F7:B4:29:31:EE:3A:41:4B:9A:5B:79:96:70:3D:F7:0B:D8:97 Certificate issuer: /CN=7DA5F7B42931EE3A414B9A5B7996703DF70BD897 Certificate serial: 703524B782C05EE0052AE3710F01AA3312EACA02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.mft Manifest number: 018F Signing time: Thu 24 Apr 2025 07:40:47 +0000 Manifest this update: Thu 24 Apr 2025 07:35:47 +0000 Manifest next update: Sun 27 Apr 2025 17:21:47 +0000 Files and hashes: 1: 3130332e32372e3139332e302f32342d3234203d3e20313530323632.roa (hash: DIKWNEryKaLoYGYF33QjHgw88mY9IHI7dTm6jY/RF2g=) 2: 3130332e32372e3139322e302f32342d3234203d3e20313530323632.roa (hash: +MyXIra1tEzUh3Bqp100pCTB+NpiC7GT2NfbRpY5B8s=) 3: 7DA5F7B42931EE3A414B9A5B7996703DF70BD897.crl (hash: fjgiAAQgna5mG8SqWfdXvaZ7Sg9HbTvwST6HASQRxpc=) 4: 3130332e32372e3139322e302f32332d3233203d3e20313530323632.roa (hash: BnJZN8kM3S7TwdBig6pEraKaEILe1NjioWa2vU9OOYk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.crl rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 10:42:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:35:24:b7:82:c0:5e:e0:05:2a:e3:71:0f:01:aa:33:12:ea:ca:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7DA5F7B42931EE3A414B9A5B7996703DF70BD897 Validity Not Before: Apr 24 07:35:47 2025 GMT Not After : Apr 27 17:21:47 2025 GMT Subject: CN=9C756FF08B40068683FC0B5EB4FA158817B85F3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:42:b1:11:21:83:e7:ab:61:3f:e1:0e:5b:fa: c9:b1:87:ee:7d:b6:4d:07:79:31:f0:8c:02:21:32: f4:b8:11:23:a3:b8:f6:63:f1:79:bf:f6:ac:e4:98: b9:06:b5:30:51:ab:0c:c9:a4:cf:0c:c9:03:b0:b9: 5b:1b:1d:1b:74:53:bc:14:11:03:4c:09:1a:c6:a2: 5f:fb:3a:94:82:64:e1:86:a1:51:86:b7:ea:6f:3e: ef:06:b7:65:e0:b6:e5:ae:bb:e5:2f:a8:b5:fa:a7: 6f:2d:a4:7f:70:0d:3e:85:11:f7:60:fb:a5:8c:0d: 72:f4:7e:11:6a:18:09:83:67:2f:cb:be:b1:ee:d2: 27:27:a7:0d:07:57:86:48:cd:26:b7:93:32:20:df: d8:fc:01:57:ae:22:6b:fa:b3:7f:1f:18:08:e1:54: 99:ac:1a:06:75:97:12:c3:46:f7:c2:8c:1b:fd:48: a0:31:ed:5e:e5:9f:ba:ca:39:dc:b4:9e:b8:48:28: 81:25:ab:f6:9f:38:1d:dc:da:06:4c:25:1e:22:8a: a6:21:77:56:6c:f5:ed:21:bb:a5:39:65:18:c5:59: 2f:47:30:52:e4:26:42:37:1b:de:56:ab:db:34:b6: 23:03:7c:e8:66:e0:c4:38:be:f4:4a:fa:2a:54:cc: b1:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:75:6F:F0:8B:40:06:86:83:FC:0B:5E:B4:FA:15:88:17:B8:5F:3C X509v3 Authority Key Identifier: keyid:7D:A5:F7:B4:29:31:EE:3A:41:4B:9A:5B:79:96:70:3D:F7:0B:D8:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:4c:b7:61:1e:19:de:1a:f1:f2:37:d8:dc:19:73:73:cf:71: 11:48:93:d3:27:77:1e:9b:47:cf:c0:2f:20:c0:68:d8:27:98: 9a:af:76:d3:85:39:d6:97:70:cd:11:cd:6e:62:e6:f9:34:a7: cb:c4:93:5e:a5:d6:0d:66:6d:72:bc:ae:c0:b9:08:77:32:60: de:64:ef:fa:9f:35:5a:1e:df:28:65:de:3f:ca:f8:e7:a2:5a: 61:db:56:da:2b:0d:a5:25:74:54:0f:a7:c1:5b:3b:fe:a2:d2: 20:83:f8:33:43:c4:7e:4b:89:8a:a1:f2:62:4e:72:6c:23:cd: 94:c4:b0:f2:7c:5c:78:1b:0d:28:30:2b:cb:84:44:7d:e5:c6: c4:d1:3a:1d:8b:b2:fc:94:19:8b:cb:f9:00:76:ed:61:02:1b: 30:be:44:c5:29:48:51:1e:07:38:03:f9:48:4b:c1:2a:1d:ee: 8c:e3:2b:c5:50:44:c6:d5:6c:16:02:54:ce:33:31:0c:60:b3: e3:10:70:07:b9:27:4c:95:c3:3a:2c:91:40:85:b0:c7:7c:4c: 5a:a7:79:bf:84:e5:5a:5c:16:70:02:56:2d:65:c7:77:c7:e7: 30:a8:52:e8:b1:87:f3:6f:4f:a9:1d:58:29:ea:8b:a3:de:36: 4b:c7:b5:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcDUkt4LAXuAFKuNxDwGqMxLqygIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0RBNUY3QjQyOTMxRUUzQTQxNEI5QTVCNzk5NjcwM0RG NzBCRDg5NzAeFw0yNTA0MjQwNzM1NDdaFw0yNTA0MjcxNzIxNDdaMDMxMTAvBgNV BAMTKDlDNzU2RkYwOEI0MDA2ODY4M0ZDMEI1RUI0RkExNTg4MTdCODVGM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNQrERIYPnq2E/4Q5b+smxh+59 tk0HeTHwjAIhMvS4ESOjuPZj8Xm/9qzkmLkGtTBRqwzJpM8MyQOwuVsbHRt0U7wU EQNMCRrGol/7OpSCZOGGoVGGt+pvPu8Gt2XgtuWuu+UvqLX6p28tpH9wDT6FEfdg +6WMDXL0fhFqGAmDZy/LvrHu0icnpw0HV4ZIzSa3kzIg39j8AVeuImv6s38fGAjh VJmsGgZ1lxLDRvfCjBv9SKAx7V7ln7rKOdy0nrhIKIElq/afOB3c2gZMJR4iiqYh d1Zs9e0hu6U5ZRjFWS9HMFLkJkI3G95Wq9s0tiMDfOhm4MQ4vvRK+ipUzLEVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnHVv8ItABoaD/AtetPoViBe4XzwwHwYDVR0j BBgwFoAUfaX3tCkx7jpBS5pbeZZwPfcL2JcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjI3YjE3Ni00YzE3LTQyNDQtYmFkZi1mNDk2YmNiMTVlMjAvMC83REE1RjdCNDI5 MzFFRTNBNDE0QjlBNUI3OTk2NzAzREY3MEJEODk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0RBNUY3QjQyOTMxRUUzQTQxNEI5QTVCNzk5NjcwM0RGNzBC RDg5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDIyN2IxNzYtNGMxNy00MjQ0LWJh ZGYtZjQ5NmJjYjE1ZTIwLzAvN0RBNUY3QjQyOTMxRUUzQTQxNEI5QTVCNzk5Njcw M0RGNzBCRDg5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD5Mt2EeGd4a8fI32NwZc3PPcRFIk9Mndx6b R8/ALyDAaNgnmJqvdtOFOdaXcM0RzW5i5vk0p8vEk16l1g1mbXK8rsC5CHcyYN5k 7/qfNVoe3yhl3j/K+OeiWmHbVtorDaUldFQPp8FbO/6i0iCD+DNDxH5LiYqh8mJO cmwjzZTEsPJ8XHgbDSgwK8uERH3lxsTROh2LsvyUGYvL+QB27WECGzC+RMUpSFEe BzgD+UhLwSod7ozjK8VQRMbVbBYCVM4zMQxgs+MQcAe5J0yVwzoskUCFsMd8TFqn eb+E5VpcFnACVi1lx3fH5zCoUuixh/NvT6kdWCnqi6PeNkvHtSQ= -----END CERTIFICATE-----Generated at Thu Apr 24 11:25:12 2025 by rpki-client on console.sobornost.net