$ rpki-client -vvf repo-rpki.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/651790FFFC1688AFA384D136FC4792AD18879019.mft File: 651790FFFC1688AFA384D136FC4792AD18879019.mft (raw, json) Hash identifier: EsbpjxfERenrc4BiWR0T55k4NxE/X5HPOgWRZproZ5s= Subject key identifier: 5E:0A:EF:BC:F2:13:79:87:2C:61:E7:8C:71:EC:64:A0:81:FA:60:D2 Authority key identifier: 65:17:90:FF:FC:16:88:AF:A3:84:D1:36:FC:47:92:AD:18:87:90:19 Certificate issuer: /CN=651790FFFC1688AFA384D136FC4792AD18879019 Certificate serial: 345EB3C4872D8F296DBF451620BB3FF7AD17A960 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/651790FFFC1688AFA384D136FC4792AD18879019.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/651790FFFC1688AFA384D136FC4792AD18879019.mft Manifest number: 04C6 Signing time: Thu 24 Apr 2025 23:42:09 +0000 Manifest this update: Thu 24 Apr 2025 23:37:09 +0000 Manifest next update: Mon 28 Apr 2025 07:05:09 +0000 Files and hashes: 1: 651790FFFC1688AFA384D136FC4792AD18879019.crl (hash: 9hbh22TV39l/Wc+iQfRlxtTXxdAx/MwRKUZKoUOyG6w=) 2: 3130332e35332e37362e302f32322d3234203d3e20313333383137.roa (hash: VG/ACRZPp2r0hedLnYSdIksDAv+Mc1H+dIKcuSQ562M=) 3: 323430323a353538303a3a2f33322d3438203d3e20313333383137.roa (hash: O3Y+5RJi4o9TrR1ZmK3//jjnrYZ80KLbj1eFOI6ijfM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/651790FFFC1688AFA384D136FC4792AD18879019.crl rsync://repo-rpki.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/651790FFFC1688AFA384D136FC4792AD18879019.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/651790FFFC1688AFA384D136FC4792AD18879019.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:5e:b3:c4:87:2d:8f:29:6d:bf:45:16:20:bb:3f:f7:ad:17:a9:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=651790FFFC1688AFA384D136FC4792AD18879019 Validity Not Before: Apr 24 23:37:09 2025 GMT Not After : Apr 28 07:05:09 2025 GMT Subject: CN=5E0AEFBCF21379872C61E78C71EC64A081FA60D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:bf:2b:e0:ac:7b:fb:a5:f8:1c:95:90:a1:b3: 00:af:fe:0b:24:0b:fb:a9:7f:4e:aa:94:75:80:54: 88:69:b3:22:cd:23:9c:3d:1e:ad:fa:e9:02:6e:1c: 2c:a9:e2:de:4f:32:99:a3:49:fa:37:dd:6b:be:9e: 6e:cf:d4:6e:53:7f:da:10:ea:ec:39:99:cc:a5:4e: 56:0f:9f:d1:ea:4d:a8:ae:51:31:62:41:a9:8b:38: d6:da:05:ee:a2:36:59:1e:d2:f4:0a:f2:e1:8b:dd: 3b:64:d2:a4:ae:97:e0:86:d7:a9:66:5e:5b:f5:1e: 31:76:7e:0e:09:be:9a:58:0b:ba:ed:28:f1:7b:f1: da:4a:54:76:2f:5e:16:7a:93:74:61:88:3f:f8:d9: 69:62:6a:c1:70:d7:91:a5:c6:ee:f6:47:1c:91:db: c6:bd:a6:b8:e5:52:34:0b:63:78:b4:06:f3:d3:f0: 41:c3:93:57:44:e7:b9:5e:92:36:43:51:1e:3a:b8: d4:ea:97:ca:a4:eb:91:25:2e:9a:84:bf:92:62:5b: 47:e6:91:39:6e:32:5a:a1:20:0e:16:e4:ae:a1:cb: 62:e2:cb:f1:3c:b3:9b:79:5b:cd:d2:6c:87:10:41: ac:2a:a9:8e:22:73:fc:b7:e6:cc:f1:b5:42:6a:81: 13:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:0A:EF:BC:F2:13:79:87:2C:61:E7:8C:71:EC:64:A0:81:FA:60:D2 X509v3 Authority Key Identifier: keyid:65:17:90:FF:FC:16:88:AF:A3:84:D1:36:FC:47:92:AD:18:87:90:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/651790FFFC1688AFA384D136FC4792AD18879019.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/651790FFFC1688AFA384D136FC4792AD18879019.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/651790FFFC1688AFA384D136FC4792AD18879019.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:69:6f:aa:bd:0a:a5:09:fd:87:ee:b3:b2:f2:fd:ad:63:e9: 0e:ef:c0:eb:84:4f:58:54:1f:d4:7d:f2:7f:0b:25:47:09:0c: b5:57:7d:7d:4a:e0:aa:73:9b:94:2d:b7:c2:19:e9:1e:c9:54: 61:2e:97:e6:ff:c1:6d:c7:38:e7:af:5a:4d:8d:9f:8b:bc:02: 1c:33:8c:d9:17:ce:47:ba:e0:0a:a9:ef:14:16:ee:b6:d9:8f: 46:89:77:bf:3a:ed:7e:1b:22:45:78:a7:07:82:8f:0f:b6:08: d7:e4:c9:26:4f:e2:eb:2d:5d:13:a4:e4:12:90:67:aa:f8:4c: 10:73:42:34:9f:51:20:1f:ce:1e:17:2f:02:fc:30:8f:29:b9: 3b:76:8c:d3:cd:24:8c:62:2e:4e:66:77:70:da:0e:09:36:7d: 53:97:65:5f:49:97:0c:7b:fe:d6:71:15:e7:57:a2:1a:cd:0a: db:6c:9f:dd:f3:bd:67:8b:1d:d7:b6:b9:e7:3f:4c:b0:c3:fa: 74:ee:a0:3a:10:38:24:c5:3e:5c:fc:d2:40:30:01:4f:e4:e5: 9f:03:27:12:22:27:7e:ed:07:e5:f0:da:91:63:da:1a:24:93: e9:27:95:ac:63:82:0d:97:97:59:33:10:f3:39:eb:73:e8:e4: 91:b8:28:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNF6zxIctjyltv0UWILs/960XqWAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjUxNzkwRkZGQzE2ODhBRkEzODREMTM2RkM0NzkyQUQx ODg3OTAxOTAeFw0yNTA0MjQyMzM3MDlaFw0yNTA0MjgwNzA1MDlaMDMxMTAvBgNV BAMTKDVFMEFFRkJDRjIxMzc5ODcyQzYxRTc4QzcxRUM2NEEwODFGQTYwRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1vyvgrHv7pfgclZChswCv/gsk C/upf06qlHWAVIhpsyLNI5w9Hq366QJuHCyp4t5PMpmjSfo33Wu+nm7P1G5Tf9oQ 6uw5mcylTlYPn9HqTaiuUTFiQamLONbaBe6iNlke0vQK8uGL3Ttk0qSul+CG16lm Xlv1HjF2fg4JvppYC7rtKPF78dpKVHYvXhZ6k3RhiD/42WliasFw15Glxu72RxyR 28a9prjlUjQLY3i0BvPT8EHDk1dE57lekjZDUR46uNTql8qk65ElLpqEv5JiW0fm kTluMlqhIA4W5K6hy2Liy/E8s5t5W83SbIcQQawqqY4ic/y35szxtUJqgRN1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXgrvvPITeYcsYeeMcexkoIH6YNIwHwYDVR0j BBgwFoAUZReQ//wWiK+jhNE2/EeSrRiHkBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NmY3ZWYzNC00OTkxLTRiYjEtOTZiNC1iZTQzZjFlY2FiYjQvMC82NTE3OTBGRkZD MTY4OEFGQTM4NEQxMzZGQzQ3OTJBRDE4ODc5MDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjUxNzkwRkZGQzE2ODhBRkEzODREMTM2RkM0NzkyQUQxODg3 OTAxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjZmN2VmMzQtNDk5MS00YmIxLTk2 YjQtYmU0M2YxZWNhYmI0LzAvNjUxNzkwRkZGQzE2ODhBRkEzODREMTM2RkM0Nzky QUQxODg3OTAxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEFpb6q9CqUJ/Yfus7Ly/a1j6Q7vwOuET1hU H9R98n8LJUcJDLVXfX1K4Kpzm5Qtt8IZ6R7JVGEul+b/wW3HOOevWk2Nn4u8Ahwz jNkXzke64Aqp7xQW7rbZj0aJd7867X4bIkV4pweCjw+2CNfkySZP4ustXROk5BKQ Z6r4TBBzQjSfUSAfzh4XLwL8MI8puTt2jNPNJIxiLk5md3DaDgk2fVOXZV9Jlwx7 /tZxFedXohrNCttsn93zvWeLHde2uec/TLDD+nTuoDoQOCTFPlz80kAwAU/k5Z8D JxIiJ37tB+Xw2pFj2hokk+knlaxjgg2Xl1kzEPM563Po5JG4KH4= -----END CERTIFICATE-----Generated at Fri Apr 25 03:46:17 2025 by rpki-client on console.sobornost.net