$ rpki-client -vvf repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.mft File: DBE91560EBE58F31F01F543D751B03FC02EA7D9E.mft (raw, json) Hash identifier: 6IZAbtJ+3r7eZ1ahNvLAjcP22YrXBZ/o9mQUNyEH3tk= Subject key identifier: 69:A5:50:F0:72:79:64:F1:CB:5F:DD:F0:B0:59:52:1A:70:E5:F0:C3 Authority key identifier: DB:E9:15:60:EB:E5:8F:31:F0:1F:54:3D:75:1B:03:FC:02:EA:7D:9E Certificate issuer: /CN=DBE91560EBE58F31F01F543D751B03FC02EA7D9E Certificate serial: 4B331FA7EF8FE7EB4BCFF698BB0B95D90400AB1A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.mft Manifest number: 04C5 Signing time: Wed 23 Apr 2025 11:01:24 +0000 Manifest this update: Wed 23 Apr 2025 10:56:24 +0000 Manifest next update: Sat 26 Apr 2025 12:02:24 +0000 Files and hashes: 1: 323030313a6466333a666438303a3a2f34382d3438203d3e20313430343432.roa (hash: kic57aXXLWATxjKS0QIxUZVlZJ5rlzeUQ8B0nZVuNJE=) 2: 3130332e3135322e37322e302f32332d3234203d3e20313430343432.roa (hash: yQ8r9aTimM+1fU3cDxtTiC5piuG7uhQf6ZdHLgllIPI=) 3: DBE91560EBE58F31F01F543D751B03FC02EA7D9E.crl (hash: KGwjYQw5AHGkI9aLkWxoW9vc7MAx/WI5NysR/TsL9Mo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.crl rsync://repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 12:02:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:33:1f:a7:ef:8f:e7:eb:4b:cf:f6:98:bb:0b:95:d9:04:00:ab:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBE91560EBE58F31F01F543D751B03FC02EA7D9E Validity Not Before: Apr 23 10:56:24 2025 GMT Not After : Apr 26 12:02:24 2025 GMT Subject: CN=69A550F0727964F1CB5FDDF0B059521A70E5F0C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:1d:fe:84:30:9f:42:b1:64:d1:de:bf:27:52: 8d:3e:93:29:66:cf:cd:72:6e:b0:6c:d9:d7:7e:e1: a9:67:68:37:08:ad:40:61:ff:61:79:b9:2a:ad:47: af:4b:9e:72:08:1c:79:4a:66:6e:a5:fd:6e:25:e8: 00:49:85:24:13:86:9f:19:37:84:ce:03:2a:68:09: a0:3e:b6:ae:fc:30:84:c5:58:f7:5e:7b:4a:c9:dd: 4a:0a:95:67:2b:40:ba:e3:9d:b2:98:b3:5d:4a:23: 7b:4a:9e:98:10:fb:ac:7b:13:18:cb:68:24:84:7f: b0:8f:d7:25:77:b6:f9:c3:14:ee:52:b0:ef:78:8c: de:82:c1:42:7b:16:65:49:3d:74:e6:ca:9a:cf:6e: a9:3c:71:31:60:61:f3:bb:56:7e:ac:42:90:07:a0: 06:9b:9c:a7:cc:92:00:91:d3:18:08:e5:bf:4d:cd: d0:a9:35:fd:25:72:8d:8f:3e:68:d9:de:87:93:18: b7:c4:8b:60:51:30:92:80:27:11:f6:3b:b1:1f:69: 0d:5f:d5:04:12:ec:e7:7d:fa:c9:df:76:61:48:ac: 30:12:dc:c5:aa:7e:3c:e7:e2:b4:d2:de:f2:95:b8: be:24:fb:40:4c:b7:73:3f:23:ab:1d:40:88:02:ab: db:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:A5:50:F0:72:79:64:F1:CB:5F:DD:F0:B0:59:52:1A:70:E5:F0:C3 X509v3 Authority Key Identifier: keyid:DB:E9:15:60:EB:E5:8F:31:F0:1F:54:3D:75:1B:03:FC:02:EA:7D:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:51:8a:d4:d5:dd:59:7c:a7:12:2e:8a:e7:b9:04:2c:bd:3f: ff:dd:73:a0:30:ff:a9:70:21:1c:31:b9:bf:10:28:5a:e7:24: f1:4c:a8:f2:d5:79:66:3f:86:dc:9f:83:1b:0f:3d:c9:b3:32: af:77:7b:2d:45:0f:fa:50:50:4b:18:3d:55:64:b8:01:15:1b: f9:22:b7:f8:d5:c4:c5:4a:25:e5:6e:44:b8:12:2a:d9:64:d1: 1b:c8:a6:ef:29:31:dd:4c:0f:84:cb:bd:bf:52:62:f3:48:6e: 62:39:7d:e2:40:f9:ca:07:77:fb:96:98:6a:6a:bf:a4:a9:09: 50:6b:f9:3f:9d:26:94:2a:8b:f1:29:e1:eb:91:de:52:2f:17: 94:d4:29:30:ca:63:db:52:87:73:11:8f:cb:7d:75:08:30:99: c3:66:bf:97:e3:a5:86:10:06:49:23:a9:2b:16:f9:e3:2c:90: 56:bc:33:fd:13:ee:d8:2a:5a:cb:a4:5e:df:6f:be:61:97:80: 08:fd:c2:b3:3b:76:9a:29:fe:35:3d:ca:24:d5:8d:f7:ab:9d: bd:c2:49:b7:ee:47:2f:99:38:9e:73:0c:00:c4:6a:d2:bc:7f: 6d:c9:f7:2a:5a:05:0e:ea:79:95:ac:ea:38:44:e5:fb:1c:29: 2f:29:99:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSzMfp++P5+tLz/aYuwuV2QQAqxowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJFOTE1NjBFQkU1OEYzMUYwMUY1NDNENzUxQjAzRkMw MkVBN0Q5RTAeFw0yNTA0MjMxMDU2MjRaFw0yNTA0MjYxMjAyMjRaMDMxMTAvBgNV BAMTKDY5QTU1MEYwNzI3OTY0RjFDQjVGRERGMEIwNTk1MjFBNzBFNUYwQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVHf6EMJ9CsWTR3r8nUo0+kylm z81ybrBs2dd+4alnaDcIrUBh/2F5uSqtR69LnnIIHHlKZm6l/W4l6ABJhSQThp8Z N4TOAypoCaA+tq78MITFWPdee0rJ3UoKlWcrQLrjnbKYs11KI3tKnpgQ+6x7ExjL aCSEf7CP1yV3tvnDFO5SsO94jN6CwUJ7FmVJPXTmyprPbqk8cTFgYfO7Vn6sQpAH oAabnKfMkgCR0xgI5b9NzdCpNf0lco2PPmjZ3oeTGLfEi2BRMJKAJxH2O7EfaQ1f 1QQS7Od9+snfdmFIrDAS3MWqfjzn4rTS3vKVuL4k+0BMt3M/I6sdQIgCq9t5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaaVQ8HJ5ZPHLX93wsFlSGnDl8MMwHwYDVR0j BBgwFoAU2+kVYOvljzHwH1Q9dRsD/ALqfZ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NzI4Yzc3Yi0yMTAwLTRmMmEtOTBkOS0wOGM1M2U4NDFlMWIvMC9EQkU5MTU2MEVC RTU4RjMxRjAxRjU0M0Q3NTFCMDNGQzAyRUE3RDlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREJFOTE1NjBFQkU1OEYzMUYwMUY1NDNENzUxQjAzRkMwMkVB N0Q5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjcyOGM3N2ItMjEwMC00ZjJhLTkw ZDktMDhjNTNlODQxZTFiLzAvREJFOTE1NjBFQkU1OEYzMUYwMUY1NDNENzUxQjAz RkMwMkVBN0Q5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGBRitTV3Vl8pxIuiue5BCy9P//dc6Aw/6lw IRwxub8QKFrnJPFMqPLVeWY/htyfgxsPPcmzMq93ey1FD/pQUEsYPVVkuAEVG/ki t/jVxMVKJeVuRLgSKtlk0RvIpu8pMd1MD4TLvb9SYvNIbmI5feJA+coHd/uWmGpq v6SpCVBr+T+dJpQqi/Ep4euR3lIvF5TUKTDKY9tSh3MRj8t9dQgwmcNmv5fjpYYQ BkkjqSsW+eMskFa8M/0T7tgqWsukXt9vvmGXgAj9wrM7dpop/jU9yiTVjfernb3C SbfuRy+ZOJ5zDADEatK8f23J9ypaBQ7qeZWs6jhE5fscKS8pmcE= -----END CERTIFICATE-----Generated at Wed Apr 23 13:25:32 2025 by rpki-client on console.sobornost.net