$ rpki-client -vvf repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.mft File: 6D2120D281865021E16D49A2451DC53A851B5BBD.mft (raw, json) Hash identifier: PrshHQtybgJ0ocR6dSdP7DFW4F8LIS6ur+w6aTHDj2A= Subject key identifier: 32:7E:67:39:E6:3A:CD:1E:D5:CE:17:26:55:F8:70:81:34:9F:D8:B7 Authority key identifier: 6D:21:20:D2:81:86:50:21:E1:6D:49:A2:45:1D:C5:3A:85:1B:5B:BD Certificate issuer: /CN=6D2120D281865021E16D49A2451DC53A851B5BBD Certificate serial: 530948692D34BD7F6CE6E3B342FA9F1AB1A4D09D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D2120D281865021E16D49A2451DC53A851B5BBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.mft Manifest number: 50 Signing time: Thu 24 Apr 2025 03:53:43 +0000 Manifest this update: Thu 24 Apr 2025 03:48:43 +0000 Manifest next update: Sun 27 Apr 2025 12:43:43 +0000 Files and hashes: 1: 3130332e3234352e31362e302f32342d3234203d3e203436303233.roa (hash: oc7a2yZBp9q1BdzfUR+tIB5Dtqa/efadojr7/o0DfQ4=) 2: 3130332e3234352e31392e302f32342d3234203d3e203436303233.roa (hash: GFImrwcqsA1f+8jAtf3KA9NFE2jyS21niSNaMCPf864=) 3: 3130332e3234352e31362e302f32332d3234203d3e203436303233.roa (hash: r+Lb1druh87TuPBvbGkUhC/GpzU18DRigq7n/TRclBo=) 4: 3130332e3234352e31362e302f32322d3234203d3e203436303233.roa (hash: PpALimtbBE16UsxvYAE3t7KXuw0rzaxc/sz7ukHKaaU=) 5: 6D2120D281865021E16D49A2451DC53A851B5BBD.crl (hash: WC//1ZO3iTwz+td2wa2+BNt3DKJJvLvief3be15M+lM=) 6: 3130332e3234352e31382e302f32332d3234203d3e203436303233.roa (hash: LiUE5E5NP3y/9rJb+3iR5iXWUeVWyAD0Ol8W0BAVcIY=) 7: 3130332e3234352e31372e302f32342d3234203d3e203436303233.roa (hash: b+Xtzw+6na2a+xMS20wYCYPacvkf2l2PSoCEFblC4OY=) 8: 3130332e3234352e31382e302f32342d3234203d3e203436303233.roa (hash: AShL+HPisPSiiNmtbZE+edgEgIJDv3kNOSZOwH9eeKo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.crl rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D2120D281865021E16D49A2451DC53A851B5BBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 08:44:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:09:48:69:2d:34:bd:7f:6c:e6:e3:b3:42:fa:9f:1a:b1:a4:d0:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D2120D281865021E16D49A2451DC53A851B5BBD Validity Not Before: Apr 24 03:48:43 2025 GMT Not After : Apr 27 12:43:43 2025 GMT Subject: CN=327E6739E63ACD1ED5CE172655F87081349FD8B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:00:6f:0f:51:c1:db:4e:6c:0c:42:76:7c:97: 9b:bc:a9:f2:41:2c:77:fd:41:94:11:fe:0c:29:fd: 03:af:9b:15:c9:11:2f:9e:db:86:84:0b:fe:35:20: 6e:00:f2:9c:b9:a6:94:ee:49:c8:d5:7d:5d:49:de: b8:48:29:aa:45:51:18:68:25:eb:02:81:d5:58:b6: 8b:3e:0d:58:2b:c3:23:1a:46:49:ac:49:58:b4:7a: af:d3:28:bf:5c:55:b8:62:3e:9d:dd:bb:b3:3c:4a: f7:9d:11:21:d4:86:fb:ac:0d:28:67:bd:97:e9:6f: ec:a0:c8:81:e8:ae:cf:42:d0:86:c1:c7:a3:c7:34: ed:b5:ab:9c:e0:46:e1:6a:a7:a3:91:06:98:56:74: f6:46:91:ad:2f:d4:07:46:ff:59:a5:1c:9e:38:66: d6:87:ab:c0:bd:a8:f8:e4:65:b6:eb:29:34:a8:ae: 06:58:a2:f5:ae:89:08:6c:a6:b5:27:af:df:a1:f5: 9c:7d:3f:f3:e9:ef:ca:c0:f3:59:35:6d:1e:5e:e3: 4c:cc:c8:58:4d:45:7b:b5:74:62:ef:d6:ba:5d:93: 51:4d:ed:2d:15:5c:69:1a:04:66:fc:ae:2e:1c:8a: 50:bc:d7:dd:8d:25:4b:ab:86:41:75:c2:70:0c:a9: 4a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:7E:67:39:E6:3A:CD:1E:D5:CE:17:26:55:F8:70:81:34:9F:D8:B7 X509v3 Authority Key Identifier: keyid:6D:21:20:D2:81:86:50:21:E1:6D:49:A2:45:1D:C5:3A:85:1B:5B:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D2120D281865021E16D49A2451DC53A851B5BBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:97:50:b9:4b:42:14:29:12:b8:8b:54:8e:9d:5c:6e:bc:5a: 29:ed:86:e9:fb:ff:86:32:3b:1c:ac:68:19:e7:8b:7a:fa:79: 5e:43:e1:9d:23:a6:af:06:26:b3:a5:ac:37:26:c6:28:24:e2: bd:f9:c2:cd:0c:7e:15:e2:eb:9b:5a:ad:5f:4f:3c:33:0d:54: 1e:36:0c:35:04:2d:a7:d5:5b:5f:c5:c4:1e:c7:e0:ce:43:ea: 7e:9d:11:80:58:0b:6b:97:06:04:31:51:cc:ce:8a:37:fb:2f: a4:7f:b4:41:07:0c:0a:4b:05:b3:23:d4:1e:99:aa:3c:42:a2: a7:5b:61:86:cb:34:4c:8b:64:88:6c:af:da:d1:b3:8a:c3:7a: c4:96:aa:be:b1:f2:90:83:c6:c0:31:5e:48:be:74:3b:71:4b: b9:5e:e0:48:44:d4:21:06:87:da:cc:e1:02:93:a9:9d:40:7d: 6d:61:c8:79:5a:75:dd:86:1b:26:98:85:fa:10:b5:6b:fd:e6: a1:94:4e:9f:95:f1:45:4d:51:18:a0:ee:17:ab:55:f7:25:db: 80:e1:48:03:a0:05:ff:74:78:06:a3:12:15:8d:b5:a7:73:3a: 65:c9:7c:b9:ed:af:10:a0:a2:eb:e3:9f:e7:ce:f4:c8:d7:1d: 21:99:9e:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUwlIaS00vX9s5uOzQvqfGrGk0J0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQyMTIwRDI4MTg2NTAyMUUxNkQ0OUEyNDUxREM1M0E4 NTFCNUJCRDAeFw0yNTA0MjQwMzQ4NDNaFw0yNTA0MjcxMjQzNDNaMDMxMTAvBgNV BAMTKDMyN0U2NzM5RTYzQUNEMUVENUNFMTcyNjU1Rjg3MDgxMzQ5RkQ4QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3AG8PUcHbTmwMQnZ8l5u8qfJB LHf9QZQR/gwp/QOvmxXJES+e24aEC/41IG4A8py5ppTuScjVfV1J3rhIKapFURho JesCgdVYtos+DVgrwyMaRkmsSVi0eq/TKL9cVbhiPp3du7M8SvedESHUhvusDShn vZfpb+ygyIHors9C0IbBx6PHNO21q5zgRuFqp6ORBphWdPZGka0v1AdG/1mlHJ44 ZtaHq8C9qPjkZbbrKTSorgZYovWuiQhsprUnr9+h9Zx9P/Pp78rA81k1bR5e40zM yFhNRXu1dGLv1rpdk1FN7S0VXGkaBGb8ri4cilC8192NJUurhkF1wnAMqUodAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMn5nOeY6zR7VzhcmVfhwgTSf2LcwHwYDVR0j BBgwFoAUbSEg0oGGUCHhbUmiRR3FOoUbW70wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NTI3MmY3Yi1kNjU2LTQwNTgtYTdiNi1mMjVhZGYzZWQxYmUvMC82RDIxMjBEMjgx ODY1MDIxRTE2RDQ5QTI0NTFEQzUzQTg1MUI1QkJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkQyMTIwRDI4MTg2NTAyMUUxNkQ0OUEyNDUxREM1M0E4NTFC NUJCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTUyNzJmN2ItZDY1Ni00MDU4LWE3 YjYtZjI1YWRmM2VkMWJlLzAvNkQyMTIwRDI4MTg2NTAyMUUxNkQ0OUEyNDUxREM1 M0E4NTFCNUJCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJuXULlLQhQpEriLVI6dXG68Winthun7/4Yy OxysaBnni3r6eV5D4Z0jpq8GJrOlrDcmxigk4r35ws0MfhXi65tarV9PPDMNVB42 DDUELafVW1/FxB7H4M5D6n6dEYBYC2uXBgQxUczOijf7L6R/tEEHDApLBbMj1B6Z qjxCoqdbYYbLNEyLZIhsr9rRs4rDesSWqr6x8pCDxsAxXki+dDtxS7le4EhE1CEG h9rM4QKTqZ1AfW1hyHladd2GGyaYhfoQtWv95qGUTp+V8UVNURig7herVfcl24Dh SAOgBf90eAajEhWNtadzOmXJfLntrxCgouvjn+fO9MjXHSGZnsM= -----END CERTIFICATE-----Generated at Thu Apr 24 06:49:50 2025 by rpki-client on console.sobornost.net