$ rpki-client -vvf repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft File: 7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft (raw, json) Hash identifier: Opc/NTqAMMtpkjpme+cNGFtijagwfOn3mAMmcfgj6XY= Subject key identifier: BA:16:61:D3:20:24:75:5A:FC:5A:52:76:3A:C6:2A:E6:90:BE:8D:11 Authority key identifier: 7D:6E:DF:DB:21:B8:B7:E6:A7:5A:99:0A:7B:EC:AD:85:E8:BE:B9:53 Certificate issuer: /CN=7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953 Certificate serial: 4D2AD69CEFAED85DED954D087E2D81B02FC838C7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft Manifest number: 0173 Signing time: Thu 24 Apr 2025 01:30:04 +0000 Manifest this update: Thu 24 Apr 2025 01:25:04 +0000 Manifest next update: Sun 27 Apr 2025 04:14:04 +0000 Files and hashes: 1: 7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.crl (hash: jykKSrxli5BF5Htig7uQmTgWmMgmQW3yCusBdjew6C0=) 2: 3130332e34362e342e302f32342d3234203d3e20313530343630.roa (hash: 70RFcRoz1w22nVDdjd8xwvOHx9oaAPRDsiAFJSjZRVk=) 3: 3130332e34362e352e302f32342d3234203d3e20313530343630.roa (hash: OiXuaCFeHNTNKTkxwDwZ/IJjAlYs+aZs7qWhd3mySzg=) 4: 3130332e34362e342e302f32332d3233203d3e20313530343630.roa (hash: NXHMc5cBUZitTQZ4ST9s7lp3tsPIg2LlkZ5yYQ7KPUA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.crl rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 04:14:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:2a:d6:9c:ef:ae:d8:5d:ed:95:4d:08:7e:2d:81:b0:2f:c8:38:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953 Validity Not Before: Apr 24 01:25:04 2025 GMT Not After : Apr 27 04:14:04 2025 GMT Subject: CN=BA1661D32024755AFC5A52763AC62AE690BE8D11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:cc:dd:4b:7f:3b:77:bc:7d:33:ae:b5:b7:31: 8e:c2:53:47:eb:78:78:ca:6a:17:11:c9:1f:fb:da: df:b3:a7:8e:cc:c9:cc:67:75:55:7a:e4:20:10:ed: 59:c8:2a:bd:53:4d:94:60:d8:bb:e8:c8:3f:06:8f: 0c:80:a2:1e:c1:34:e9:4b:70:67:6a:18:b9:b2:20: b6:d2:85:67:7e:27:84:d1:e7:9d:8b:0f:07:b4:d4: 9e:8c:b9:73:66:c8:60:ab:0e:76:b7:4e:f0:db:1d: d0:ef:19:ea:1f:46:a4:6e:53:f1:8d:95:e6:ce:b1: 77:dc:72:49:08:15:ec:ed:cc:c0:e0:f9:6f:78:71: f8:2f:a9:0e:4d:23:38:a3:46:b2:7d:00:39:ec:ee: bf:b5:9b:32:9a:b3:a5:cd:17:13:79:f7:39:ae:cd: 36:f2:6e:5d:d5:0e:20:2e:3b:af:f5:25:e9:34:81: 98:40:b0:2f:78:a1:1a:dc:80:88:4b:af:85:72:34: a1:71:96:2d:e6:76:11:f0:ba:8a:54:e9:a5:1b:a3: 01:17:36:68:58:eb:2d:65:e2:6c:59:a3:27:5d:fa: f8:a7:60:0a:26:1a:f5:1a:1b:7f:2e:fb:77:0e:92: ac:39:2d:7e:64:73:71:43:45:a2:9e:d1:ad:30:d3: ca:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:16:61:D3:20:24:75:5A:FC:5A:52:76:3A:C6:2A:E6:90:BE:8D:11 X509v3 Authority Key Identifier: keyid:7D:6E:DF:DB:21:B8:B7:E6:A7:5A:99:0A:7B:EC:AD:85:E8:BE:B9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:e3:6f:2c:ea:21:71:e8:f0:45:4c:5c:69:e2:c1:5a:8e:47: db:d4:f1:3b:28:ba:46:f7:21:e5:87:b4:19:ff:d3:5c:15:fc: 08:fe:ee:97:ed:ee:88:64:90:bc:52:4b:fe:88:9d:2f:d1:7a: 81:73:39:93:3b:dc:59:f6:72:78:ec:9a:d7:26:f9:48:b9:d9: 42:5e:e8:7f:cd:85:d8:d0:ae:22:c3:79:c5:4b:55:ef:5d:91: db:85:1b:c8:c1:78:ca:91:e7:12:5f:48:44:5f:e3:80:6c:3c: aa:cd:4c:25:b7:e1:4c:03:6e:6e:c7:72:5f:fd:b8:4b:2f:58: 5c:c4:1d:64:4c:d0:d7:bc:31:1a:ec:50:ed:cc:04:d5:ff:c9: be:f9:28:07:99:67:32:d0:be:ef:43:d9:c4:26:5b:92:e4:17: cd:e9:da:53:b4:d7:b3:40:a8:2b:8f:2f:15:d9:01:ee:28:3c: 9c:d1:cf:71:d5:70:7c:82:4c:c4:cb:92:c2:8c:36:9b:c1:1e: 92:d2:cb:07:b9:11:e8:81:20:a2:ae:07:a3:c1:a0:c7:d1:cc: 6d:d9:24:52:51:e8:5c:a2:20:c3:2a:44:15:c7:b6:4a:8c:f7: 63:44:29:46:35:2d:a1:29:f8:50:09:1f:d2:ea:da:ec:cc:78: 3d:5e:57:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTSrWnO+u2F3tlU0Ifi2BsC/IOMcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q2RURGREIyMUI4QjdFNkE3NUE5OTBBN0JFQ0FEODVF OEJFQjk1MzAeFw0yNTA0MjQwMTI1MDRaFw0yNTA0MjcwNDE0MDRaMDMxMTAvBgNV BAMTKEJBMTY2MUQzMjAyNDc1NUFGQzVBNTI3NjNBQzYyQUU2OTBCRThEMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClzN1Lfzt3vH0zrrW3MY7CU0fr eHjKahcRyR/72t+zp47MycxndVV65CAQ7VnIKr1TTZRg2LvoyD8GjwyAoh7BNOlL cGdqGLmyILbShWd+J4TR552LDwe01J6MuXNmyGCrDna3TvDbHdDvGeofRqRuU/GN lebOsXfcckkIFeztzMDg+W94cfgvqQ5NIzijRrJ9ADns7r+1mzKas6XNFxN59zmu zTbybl3VDiAuO6/1Jek0gZhAsC94oRrcgIhLr4VyNKFxli3mdhHwuopU6aUbowEX NmhY6y1l4mxZoydd+vinYAomGvUaG38u+3cOkqw5LX5kc3FDRaKe0a0w08rlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuhZh0yAkdVr8WlJ2OsYq5pC+jREwHwYDVR0j BBgwFoAUfW7f2yG4t+anWpkKe+ythei+uVMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmM4Y2RhNS0zNDgzLTQyYjAtYjM4NS1mYzA3MDcxNmZiY2MvMC83RDZFREZEQjIx QjhCN0U2QTc1QTk5MEE3QkVDQUQ4NUU4QkVCOTUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q2RURGREIyMUI4QjdFNkE3NUE5OTBBN0JFQ0FEODVFOEJF Qjk1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJjOGNkYTUtMzQ4My00MmIwLWIz ODUtZmMwNzA3MTZmYmNjLzAvN0Q2RURGREIyMUI4QjdFNkE3NUE5OTBBN0JFQ0FE ODVFOEJFQjk1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB/jbyzqIXHo8EVMXGniwVqOR9vU8Tsoukb3 IeWHtBn/01wV/Aj+7pft7ohkkLxSS/6InS/ReoFzOZM73Fn2cnjsmtcm+Ui52UJe 6H/NhdjQriLDecVLVe9dkduFG8jBeMqR5xJfSERf44BsPKrNTCW34UwDbm7Hcl/9 uEsvWFzEHWRM0Ne8MRrsUO3MBNX/yb75KAeZZzLQvu9D2cQmW5LkF83p2lO017NA qCuPLxXZAe4oPJzRz3HVcHyCTMTLksKMNpvBHpLSywe5EeiBIKKuB6PBoMfRzG3Z JFJR6FyiIMMqRBXHtkqM92NEKUY1LaEp+FAJH9Lq2uzMeD1eV80= -----END CERTIFICATE-----Generated at Thu Apr 24 04:31:37 2025 by rpki-client on console.sobornost.net