$ rpki-client -vvf repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft File: DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft (raw, json) Hash identifier: WAZoUGE2mvY5fpPiHUPx1udV2VkSxtycnWQREBC7LC4= Subject key identifier: 7C:1A:B2:E4:15:33:0D:16:06:4A:F9:C4:5E:C8:31:D3:A4:4C:DE:A0 Authority key identifier: DD:5A:CD:C0:B2:D0:91:54:5E:18:5E:B1:FA:80:C0:00:7C:9A:FA:16 Certificate issuer: /CN=DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16 Certificate serial: 1DCD8166808C2FD3BFC35E873DBAE28495786A70 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.cer Subject info access: rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft Manifest number: 0141 Signing time: Wed 23 Apr 2025 21:01:53 +0000 Manifest this update: Wed 23 Apr 2025 20:56:53 +0000 Manifest next update: Sun 27 Apr 2025 00:21:53 +0000 Files and hashes: 1: 3130332e37302e3132322e302f32332d3233203d3e20313530393830.roa (hash: 9NdE9Yt64lHcZmHfcp/BPdUY3C5A8B6IZ0IM6khU6pM=) 2: 3130332e37302e3132332e302f32342d3234203d3e20313530393830.roa (hash: aPx9nZD1wRsR+YuJsPrgngjz+ATISfbMPyPoqRV/0hM=) 3: 3130332e37302e3132322e302f32342d3234203d3e20313530393830.roa (hash: 6+zEkFvJJLps0Ow0oFFDpd+JwPXLZVdctd3PSfCUG8Q=) 4: 323030313a6466323a373463303a3a2f34382d3438203d3e20313530393830.roa (hash: aNAiE73cD/v7tVb+4UuVcbAAh3drncSjCMcGBLb2SJ4=) 5: DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.crl (hash: pfwK9ICIpsXpBpgGaDO5QCPmGV7CmcjrB1qFmrmRelM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.crl rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 00:21:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:cd:81:66:80:8c:2f:d3:bf:c3:5e:87:3d:ba:e2:84:95:78:6a:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16 Validity Not Before: Apr 23 20:56:53 2025 GMT Not After : Apr 27 00:21:53 2025 GMT Subject: CN=7C1AB2E415330D16064AF9C45EC831D3A44CDEA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:9b:48:73:e5:6d:d6:c0:70:c0:22:e8:75:ee: 2c:0f:98:22:18:14:98:06:f5:55:02:36:7b:23:a0: d8:e3:ac:f4:84:56:5f:8c:a7:f6:68:f6:e1:2a:a9: 10:42:76:0d:1f:bb:78:37:6b:63:a7:96:bf:86:5b: fc:59:ea:fb:c5:af:72:35:cc:69:33:e7:69:a1:f4: b7:0f:be:03:49:42:7f:37:f0:a9:30:f6:07:fa:94: e3:c2:32:52:e4:24:43:ec:2d:6f:a7:76:66:70:68: bf:c5:32:8a:29:ee:5b:cb:4c:10:7f:94:dc:7e:ae: 97:32:65:c5:fa:64:3a:4d:31:aa:56:97:9d:35:77: c7:4c:9c:26:23:4d:01:f4:5f:81:ff:b6:a0:14:7c: a0:ef:5e:2e:fd:3d:01:b8:0d:de:17:ca:c7:00:b6: af:83:04:00:00:09:07:a0:da:83:05:a7:28:17:8c: 26:89:70:d1:df:d9:13:8a:cc:aa:5f:25:18:cf:69: 42:cd:03:3d:a6:93:20:e6:0e:02:2d:4c:76:7d:aa: 57:f9:b1:ab:d8:49:10:f3:bc:f3:c6:8c:65:f9:13: 7a:67:17:3e:55:71:8d:5a:12:12:e5:74:56:89:94: d3:de:29:b3:6b:d6:74:c2:95:cb:e7:50:01:a7:1b: 30:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:1A:B2:E4:15:33:0D:16:06:4A:F9:C4:5E:C8:31:D3:A4:4C:DE:A0 X509v3 Authority Key Identifier: keyid:DD:5A:CD:C0:B2:D0:91:54:5E:18:5E:B1:FA:80:C0:00:7C:9A:FA:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:03:af:f8:f2:34:de:8d:26:ca:85:7a:e2:04:37:75:a4:15: cb:31:0e:66:bf:b3:18:59:df:66:0f:45:54:4b:5b:7b:ff:3b: 7e:cd:14:34:23:fe:48:ce:dc:a0:91:ed:ec:d4:9d:fc:26:13: 48:91:71:8f:49:c3:e5:6a:04:19:12:9b:0b:59:b6:47:6c:55: 52:15:e7:4c:22:fe:42:83:57:9f:8e:7f:2a:b9:13:cf:12:31: c2:81:5b:de:3f:de:fd:1c:30:2a:f0:91:e2:68:57:8a:49:68: d4:32:56:e8:a7:bf:73:bd:24:89:58:78:c4:33:6f:b2:be:13: be:be:66:99:23:d5:10:b8:66:64:a7:92:e7:64:ae:ad:56:3c: 3e:6d:56:88:e0:f9:30:5d:cc:e9:02:12:c1:b7:a0:d6:08:d1: 07:16:48:b3:0a:f3:07:15:d5:2a:70:3e:06:da:ed:a5:a2:5e: d8:14:d8:ec:4b:1d:d9:9d:30:7c:57:83:63:fc:aa:52:3f:74: 65:fc:e7:7f:bd:8c:e5:b5:00:ad:c2:e1:e7:02:43:d3:e4:95: dc:ae:d3:cd:15:21:11:01:fb:11:bc:09:0f:9b:c1:8d:5d:7e: 17:75:1f:93:3a:96:29:65:68:59:21:0f:54:e1:93:0f:23:0b: d3:00:a1:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHc2BZoCML9O/w16HPbrihJV4anAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ1QUNEQzBCMkQwOTE1NDVFMTg1RUIxRkE4MEMwMDA3 QzlBRkExNjAeFw0yNTA0MjMyMDU2NTNaFw0yNTA0MjcwMDIxNTNaMDMxMTAvBgNV BAMTKDdDMUFCMkU0MTUzMzBEMTYwNjRBRjlDNDVFQzgzMUQzQTQ0Q0RFQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXm0hz5W3WwHDAIuh17iwPmCIY FJgG9VUCNnsjoNjjrPSEVl+Mp/Zo9uEqqRBCdg0fu3g3a2Onlr+GW/xZ6vvFr3I1 zGkz52mh9LcPvgNJQn838Kkw9gf6lOPCMlLkJEPsLW+ndmZwaL/FMoop7lvLTBB/ lNx+rpcyZcX6ZDpNMapWl501d8dMnCYjTQH0X4H/tqAUfKDvXi79PQG4Dd4XyscA tq+DBAAACQeg2oMFpygXjCaJcNHf2ROKzKpfJRjPaULNAz2mkyDmDgItTHZ9qlf5 savYSRDzvPPGjGX5E3pnFz5VcY1aEhLldFaJlNPeKbNr1nTClcvnUAGnGzAHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfBqy5BUzDRYGSvnEXsgx06RM3qAwHwYDVR0j BBgwFoAU3VrNwLLQkVReGF6x+oDAAHya+hYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MzI1MDY2Mi0zZWVmLTRhYTktOWVkZS01NjI5ZDViNmVhOTUvMC9ERDVBQ0RDMEIy RDA5MTU0NUUxODVFQjFGQTgwQzAwMDdDOUFGQTE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQ1QUNEQzBCMkQwOTE1NDVFMTg1RUIxRkE4MEMwMDA3QzlB RkExNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTMyNTA2NjItM2VlZi00YWE5LTll ZGUtNTYyOWQ1YjZlYTk1LzAvREQ1QUNEQzBCMkQwOTE1NDVFMTg1RUIxRkE4MEMw MDA3QzlBRkExNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH8Dr/jyNN6NJsqFeuIEN3WkFcsxDma/sxhZ 32YPRVRLW3v/O37NFDQj/kjO3KCR7ezUnfwmE0iRcY9Jw+VqBBkSmwtZtkdsVVIV 50wi/kKDV5+Ofyq5E88SMcKBW94/3v0cMCrwkeJoV4pJaNQyVuinv3O9JIlYeMQz b7K+E76+Zpkj1RC4ZmSnkudkrq1WPD5tVojg+TBdzOkCEsG3oNYI0QcWSLMK8wcV 1SpwPgba7aWiXtgU2OxLHdmdMHxXg2P8qlI/dGX853+9jOW1AK3C4ecCQ9Pkldyu 080VIREB+xG8CQ+bwY1dfhd1H5M6lillaFkhD1Thkw8jC9MAofM= -----END CERTIFICATE-----Generated at Thu Apr 24 01:45:10 2025 by rpki-client on console.sobornost.net