$ rpki-client -vvf repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.mft File: DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.mft (raw, json) Hash identifier: 9QZJrNfEvNVcXricVX3BV91OGtYSiauCgEWvxFLr5Xs= Subject key identifier: FA:12:7B:75:77:EB:BE:78:20:23:05:EC:DC:D1:B7:3D:45:1C:E2:22 Authority key identifier: DF:77:06:1C:AE:F3:0A:8D:AF:6B:52:D8:A3:D9:FD:80:F3:72:0F:11 Certificate issuer: /CN=DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11 Certificate serial: 523A4ACA6C3EC4143117FE5D5271627753C6FA15 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.mft Manifest number: 87 Signing time: Thu 24 Apr 2025 08:40:35 +0000 Manifest this update: Thu 24 Apr 2025 08:35:35 +0000 Manifest next update: Sun 27 Apr 2025 15:48:35 +0000 Files and hashes: 1: DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.crl (hash: SYt0jSjcqUzpsg62VJ1DedFnnnjJC1Qd/cI7rh17m+o=) 2: 323030313a6466333a663834303a3a2f34382d3438203d3e20313532383330.roa (hash: YS3oqm1Lbyd0/97yvUW9zyotUoDYQl3GyaLAxHR+Jqk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.crl rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 10:42:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:3a:4a:ca:6c:3e:c4:14:31:17:fe:5d:52:71:62:77:53:c6:fa:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11 Validity Not Before: Apr 24 08:35:35 2025 GMT Not After : Apr 27 15:48:35 2025 GMT Subject: CN=FA127B7577EBBE78202305ECDCD1B73D451CE222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ce:43:e7:ec:36:63:0a:66:11:6e:14:3e:07: 20:95:d3:24:f7:91:df:cd:10:18:72:87:08:e6:06: 03:89:27:55:07:cc:7b:85:bd:06:43:40:e4:71:6b: 62:aa:24:8c:5b:2d:9e:8b:a5:ae:fb:8e:bf:c3:ed: 74:0f:38:e0:5e:f1:fb:56:94:1e:52:c7:12:2f:2e: 18:df:53:04:28:12:9f:80:be:96:c5:c7:47:23:8c: 44:a6:a3:be:8c:37:33:49:8f:a3:bf:76:7d:18:39: 84:4a:36:09:8f:e2:d3:a1:c7:c8:96:37:02:c6:0c: 28:3d:a2:e3:b4:ac:a6:90:30:aa:93:24:df:5b:d9: ee:f0:01:5e:43:78:11:65:86:0f:3c:9b:a7:e6:27: 37:be:6d:64:42:44:69:45:b2:01:77:a0:7e:95:7f: 28:fa:01:34:69:36:b3:36:84:a4:57:f8:5e:20:f6: 7f:77:ee:9b:f3:75:af:8c:f3:eb:c5:08:9e:ce:aa: 10:4e:45:a2:ff:cd:ef:a1:a8:fe:4d:02:6b:52:da: 13:2c:9a:f8:ea:95:0d:1c:e2:2d:65:2d:1a:84:d9: 74:63:fc:3e:24:8c:92:60:95:be:db:1e:f3:8d:ee: bf:7f:10:c8:0f:09:71:80:0c:3a:c1:cd:7b:5b:67: 78:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:12:7B:75:77:EB:BE:78:20:23:05:EC:DC:D1:B7:3D:45:1C:E2:22 X509v3 Authority Key Identifier: keyid:DF:77:06:1C:AE:F3:0A:8D:AF:6B:52:D8:A3:D9:FD:80:F3:72:0F:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:13:15:d7:d5:31:8d:ba:95:01:c0:6d:ad:c1:f0:ee:f9:41: 42:b2:a0:5a:06:4f:47:e0:b1:80:f1:06:30:b9:dd:45:1c:21: bf:12:4c:61:a0:0b:be:45:c4:57:05:92:18:5b:b9:58:91:65: 0e:8d:47:69:59:a3:98:84:ef:35:82:6d:cb:aa:84:0d:08:5e: 7a:51:a8:5c:c8:20:28:d1:1d:e1:88:b4:98:f4:f1:d5:50:f2: 48:34:b7:d4:8a:7a:36:ef:ff:8c:d4:5f:74:3d:74:19:4c:c7: a2:a9:bc:d1:6b:6a:f3:79:3b:3d:f7:88:7d:42:b6:7e:04:60: f5:e1:e0:5e:a8:7d:f0:d8:29:cc:37:36:06:a4:68:a0:d5:f9: b7:83:61:6e:ff:a9:e3:44:39:07:c3:78:81:5a:9e:65:18:bc: 43:bf:57:a2:59:63:ae:fe:fd:72:8a:23:4c:00:0c:de:5f:f5: b3:6b:66:bc:4b:1f:17:f7:73:92:46:35:a3:0b:01:f1:73:e3: 20:59:b3:3a:24:16:6a:86:7b:5e:25:10:7a:91:fe:9c:4a:dd: 97:c3:41:77:e9:08:65:26:6c:a9:4a:82:11:65:b5:f6:82:ec: 6c:46:de:b5:b5:ce:a3:59:bc:56:40:1e:d4:c0:73:90:80:7d: fb:e7:96:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUjpKymw+xBQxF/5dUnFid1PG+hUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY3NzA2MUNBRUYzMEE4REFGNkI1MkQ4QTNEOUZEODBG MzcyMEYxMTAeFw0yNTA0MjQwODM1MzVaFw0yNTA0MjcxNTQ4MzVaMDMxMTAvBgNV BAMTKEZBMTI3Qjc1NzdFQkJFNzgyMDIzMDVFQ0RDRDFCNzNENDUxQ0UyMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyzkPn7DZjCmYRbhQ+ByCV0yT3 kd/NEBhyhwjmBgOJJ1UHzHuFvQZDQORxa2KqJIxbLZ6Lpa77jr/D7XQPOOBe8ftW lB5SxxIvLhjfUwQoEp+AvpbFx0cjjESmo76MNzNJj6O/dn0YOYRKNgmP4tOhx8iW NwLGDCg9ouO0rKaQMKqTJN9b2e7wAV5DeBFlhg88m6fmJze+bWRCRGlFsgF3oH6V fyj6ATRpNrM2hKRX+F4g9n937pvzda+M8+vFCJ7OqhBORaL/ze+hqP5NAmtS2hMs mvjqlQ0c4i1lLRqE2XRj/D4kjJJglb7bHvON7r9/EMgPCXGADDrBzXtbZ3j/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+hJ7dXfrvnggIwXs3NG3PUUc4iIwHwYDVR0j BBgwFoAU33cGHK7zCo2va1LYo9n9gPNyDxEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTAyMTBiMy1jY2EyLTQzYzUtODlmOS01YTkwODZhNjA3MDMvMS9ERjc3MDYxQ0FF RjMwQThEQUY2QjUyRDhBM0Q5RkQ4MEYzNzIwRjExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREY3NzA2MUNBRUYzMEE4REFGNkI1MkQ4QTNEOUZEODBGMzcy MEYxMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2EwMjEwYjMtY2NhMi00M2M1LTg5 ZjktNWE5MDg2YTYwNzAzLzEvREY3NzA2MUNBRUYzMEE4REFGNkI1MkQ4QTNEOUZE ODBGMzcyMEYxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAgTFdfVMY26lQHAba3B8O75QUKyoFoGT0fg sYDxBjC53UUcIb8STGGgC75FxFcFkhhbuViRZQ6NR2lZo5iE7zWCbcuqhA0IXnpR qFzIICjRHeGItJj08dVQ8kg0t9SKejbv/4zUX3Q9dBlMx6KpvNFravN5Oz33iH1C tn4EYPXh4F6offDYKcw3NgakaKDV+beDYW7/qeNEOQfDeIFanmUYvEO/V6JZY67+ /XKKI0wADN5f9bNrZrxLHxf3c5JGNaMLAfFz4yBZszokFmqGe14lEHqR/pxK3ZfD QXfpCGUmbKlKghFltfaC7GxG3rW1zqNZvFZAHtTAc5CAffvnln4= -----END CERTIFICATE-----Generated at Thu Apr 24 11:25:12 2025 by rpki-client on console.sobornost.net