$ rpki-client -vvf repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft File: DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft (raw, json) Hash identifier: UAbP0o8pxuC0PAqh5MgiXuaVMz9LkgSeZvbuGdn9MMg= Subject key identifier: BB:21:53:B1:53:EC:EC:EF:4E:27:9B:9F:7F:96:F3:7A:22:DD:7D:D2 Authority key identifier: DF:68:55:96:DA:F9:D3:65:4A:2E:2F:21:CE:11:AA:0B:B8:0E:45:D1 Certificate issuer: /CN=DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1 Certificate serial: 57F4A7D097CFFAFE6650AB48509081A79014855A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft Manifest number: 0312 Signing time: Wed 23 Apr 2025 15:30:34 +0000 Manifest this update: Wed 23 Apr 2025 15:25:34 +0000 Manifest next update: Sat 26 Apr 2025 19:39:34 +0000 Files and hashes: 1: 3130332e3136392e3235342e302f32332d3233203d3e20313432333730.roa (hash: DLJmEfbL3ZCZVVlEJnye8kD0RQcM/dIeZcFOFRkwePE=) 2: DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.crl (hash: Qce9EQMRXjuBxYkhe0pqe1RdNwvTTeVpaZ9w2CJSe/Y=) 3: 3130332e3136392e3235342e302f32342d3234203d3e20313432333730.roa (hash: cIZW3sdgonys96m+uORVonHJxNU9LIGcE2oXfVXwFxY=) 4: 3130332e3136392e3235352e302f32342d3234203d3e20313432333730.roa (hash: Q/U8Xb/QHxtCn198u1dLTqoleCD0AnXLqgQ7wOdppUk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.crl rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 12:29:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:f4:a7:d0:97:cf:fa:fe:66:50:ab:48:50:90:81:a7:90:14:85:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1 Validity Not Before: Apr 23 15:25:34 2025 GMT Not After : Apr 26 19:39:34 2025 GMT Subject: CN=BB2153B153ECECEF4E279B9F7F96F37A22DD7DD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:6e:02:17:63:39:d3:b1:20:f8:ba:24:66:af: 18:11:70:fb:18:e4:6c:cd:0b:d6:19:02:90:5e:4d: 73:c0:02:c3:6b:ea:79:cd:f5:67:f0:97:b5:41:a2: 2a:1d:bd:a5:bf:60:97:92:c2:62:35:45:ae:ae:93: 88:8a:4b:91:54:f4:a9:7c:2c:53:c8:33:11:e5:4f: ac:a1:97:cb:28:77:04:f4:b6:1c:2b:84:f1:1d:71: 27:f9:1e:6a:ff:ea:3e:d8:0f:a6:f6:73:5a:a2:4f: ed:5b:f3:18:07:3d:9d:b5:8d:8b:1b:61:9f:8a:a5: 8f:47:7b:75:ae:42:37:3c:9c:8b:6a:27:c6:c0:bd: e7:36:cb:77:d6:f4:39:e9:66:6c:0e:60:f0:08:39: 77:60:8d:2a:5f:f8:87:8c:b9:49:c2:27:7a:09:ad: 95:73:70:0e:1c:fb:38:70:f4:af:9b:f1:a0:99:ae: 1c:fb:be:cf:f8:ff:9a:35:c5:05:61:b8:b7:08:12: d5:62:27:f2:e9:50:fe:1a:fc:84:ea:4b:04:a5:94: 4b:23:cd:f5:29:88:5f:a3:db:02:73:0e:5c:a8:93: 2f:86:44:ff:8a:5a:34:4c:cc:6b:2c:56:39:b9:c2: 27:b1:c9:87:32:9d:ca:03:a5:3c:63:b4:5f:7f:c6: bd:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:21:53:B1:53:EC:EC:EF:4E:27:9B:9F:7F:96:F3:7A:22:DD:7D:D2 X509v3 Authority Key Identifier: keyid:DF:68:55:96:DA:F9:D3:65:4A:2E:2F:21:CE:11:AA:0B:B8:0E:45:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:8b:9d:9d:c4:4d:34:48:0d:03:8b:c8:84:85:ed:3e:05:42: ca:bb:15:f8:f1:0a:23:8e:84:11:07:ab:26:de:cc:0d:3f:b1: 5a:86:50:00:f0:db:fd:35:4b:21:80:a5:50:86:6f:71:30:e6: c3:f1:f8:73:2c:53:ac:19:c6:d6:08:33:62:ca:32:91:7b:6a: 9e:2a:6e:c6:73:a6:d8:14:da:3f:78:df:2c:ca:8e:ef:97:b2: a5:70:58:13:50:52:02:8b:7c:6d:75:c0:87:34:09:0a:9d:a0: d1:3c:c0:f4:a8:5b:c8:be:ef:b4:22:52:6e:53:dc:c6:6e:79: 8a:d5:9f:d3:62:f5:88:2d:c5:8e:94:d5:59:6a:b8:25:05:2b: f9:1b:74:e0:2c:dd:9c:3f:be:a9:c4:d7:81:3b:f0:c6:e5:8e: 1e:bb:54:ed:2d:5b:da:82:ee:c2:ea:81:40:8e:42:6a:80:23: 6c:d3:0a:57:37:a7:d3:fb:c6:35:41:17:3b:e0:d1:2f:60:d1: 8f:c0:43:22:5c:55:ea:ee:5b:5a:65:cf:dc:99:27:2a:5d:b5: 37:00:21:81:b9:42:05:3d:86:49:55:32:b0:d6:7a:14:18:ff: b4:0c:92:ca:11:d6:35:fa:b2:30:1b:11:e1:b2:6a:0e:fb:db: 95:fd:d0:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV/Sn0JfP+v5mUKtIUJCBp5AUhVowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY2ODU1OTZEQUY5RDM2NTRBMkUyRjIxQ0UxMUFBMEJC ODBFNDVEMTAeFw0yNTA0MjMxNTI1MzRaFw0yNTA0MjYxOTM5MzRaMDMxMTAvBgNV BAMTKEJCMjE1M0IxNTNFQ0VDRUY0RTI3OUI5RjdGOTZGMzdBMjJERDdERDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdbgIXYznTsSD4uiRmrxgRcPsY 5GzNC9YZApBeTXPAAsNr6nnN9Wfwl7VBoiodvaW/YJeSwmI1Ra6uk4iKS5FU9Kl8 LFPIMxHlT6yhl8sodwT0thwrhPEdcSf5Hmr/6j7YD6b2c1qiT+1b8xgHPZ21jYsb YZ+KpY9He3WuQjc8nItqJ8bAvec2y3fW9DnpZmwOYPAIOXdgjSpf+IeMuUnCJ3oJ rZVzcA4c+zhw9K+b8aCZrhz7vs/4/5o1xQVhuLcIEtViJ/LpUP4a/ITqSwSllEsj zfUpiF+j2wJzDlyoky+GRP+KWjRMzGssVjm5wiexyYcyncoDpTxjtF9/xr1jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuyFTsVPs7O9OJ5uff5bzeiLdfdIwHwYDVR0j BBgwFoAU32hVltr502VKLi8hzhGqC7gORdEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NzUyYjNjMi0zZjMwLTQwNDAtOGIwNS04MzgyMTc3NzA0OGYvMC9ERjY4NTU5NkRB RjlEMzY1NEEyRTJGMjFDRTExQUEwQkI4MEU0NUQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREY2ODU1OTZEQUY5RDM2NTRBMkUyRjIxQ0UxMUFBMEJCODBF NDVEMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjc1MmIzYzItM2YzMC00MDQwLThi MDUtODM4MjE3NzcwNDhmLzAvREY2ODU1OTZEQUY5RDM2NTRBMkUyRjIxQ0UxMUFB MEJCODBFNDVEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFaLnZ3ETTRIDQOLyISF7T4FQsq7FfjxCiOO hBEHqybezA0/sVqGUADw2/01SyGApVCGb3Ew5sPx+HMsU6wZxtYIM2LKMpF7ap4q bsZzptgU2j943yzKju+XsqVwWBNQUgKLfG11wIc0CQqdoNE8wPSoW8i+77QiUm5T 3MZueYrVn9Ni9YgtxY6U1VlquCUFK/kbdOAs3Zw/vqnE14E78Mbljh67VO0tW9qC 7sLqgUCOQmqAI2zTClc3p9P7xjVBFzvg0S9g0Y/AQyJcVeruW1plz9yZJypdtTcA IYG5QgU9hklVMrDWehQY/7QMksoR1jX6sjAbEeGyag7725X90Ds= -----END CERTIFICATE-----Generated at Wed Apr 23 17:38:30 2025 by rpki-client on console.sobornost.net