$ rpki-client -vvf repo-rpki.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.mft File: 7767CF49D7661AFAB45870341D88D2F3D9A86CE4.mft (raw, json) Hash identifier: JXj/DUjAECwZrFnfpohDl8+GrSypo/FTfRCpLJvY86U= Subject key identifier: B9:A0:7A:B8:80:C5:99:8D:68:44:27:95:58:66:C9:1B:6E:53:57:34 Authority key identifier: 77:67:CF:49:D7:66:1A:FA:B4:58:70:34:1D:88:D2:F3:D9:A8:6C:E4 Certificate issuer: /CN=7767CF49D7661AFAB45870341D88D2F3D9A86CE4 Certificate serial: 0433EDA4648FC64D6B354FF9F1EFF070EDD81579 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.mft Manifest number: 01F1 Signing time: Wed 23 Apr 2025 11:01:42 +0000 Manifest this update: Wed 23 Apr 2025 10:56:42 +0000 Manifest next update: Sat 26 Apr 2025 20:27:42 +0000 Files and hashes: 1: 3130332e3137342e3137352e302f32342d3234203d3e20313437313031.roa (hash: hiVWfFJS+ICMc15b4VDK2HR8eWbWj/hyT+N05K9QMHE=) 2: 7767CF49D7661AFAB45870341D88D2F3D9A86CE4.crl (hash: bjqMM3JS6QXRa1AYhx1PGbCiTf4GowYFcieB8ZtH06E=) 3: 3130332e3137342e3137342e302f32342d3234203d3e20313437313031.roa (hash: mg4/qvSGbk0zDsf0Rx7OQC6CJE6sN8kDzPsI7vMCT4w=) 4: 3130332e3137342e3137342e302f32332d3233203d3e20313437313031.roa (hash: qjco1QI2sNnouAlC+BzAGiX63kc+i+LJElEHwxqlyT4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.crl rsync://repo-rpki.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 12:29:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:33:ed:a4:64:8f:c6:4d:6b:35:4f:f9:f1:ef:f0:70:ed:d8:15:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7767CF49D7661AFAB45870341D88D2F3D9A86CE4 Validity Not Before: Apr 23 10:56:42 2025 GMT Not After : Apr 26 20:27:42 2025 GMT Subject: CN=B9A07AB880C5998D684427955866C91B6E535734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2b:93:e9:6b:54:c9:c3:13:7f:f6:2b:21:1f: de:cc:b0:7b:cc:dc:04:08:c8:73:45:18:5c:97:1f: d8:0b:28:63:2f:dc:eb:09:37:7f:9a:2d:d6:ee:90: e9:ec:41:71:9c:e0:c8:44:34:ec:3d:12:83:8a:a8: da:65:ac:0e:96:2c:ba:af:10:be:06:af:1b:60:03: 3e:9e:95:5a:06:ce:25:d9:a0:2c:05:6f:41:c0:e7: 5b:41:1b:4c:35:00:dd:f7:12:99:1e:82:e1:75:5f: 9b:93:ac:ee:a4:65:54:9b:a1:5a:ca:ac:44:bd:40: 76:6a:04:19:49:4e:33:c9:2b:50:b4:ef:83:64:eb: e5:be:6f:63:23:4d:a4:e9:bc:d3:4f:05:b1:00:1e: 9c:4d:ac:4b:76:31:0f:eb:70:62:5e:58:c6:8d:4a: 86:e0:c9:48:76:17:3a:77:ef:1e:ed:39:49:9d:34: f4:6d:55:64:68:ee:7b:cf:53:26:02:ca:8e:cd:45: bf:5e:5e:9c:48:72:c0:a4:55:20:22:88:11:23:89: cd:e8:2c:8b:2b:2e:d7:41:84:86:fd:47:52:4e:3a: d2:e0:8e:99:c4:42:8c:15:15:9d:10:0a:90:87:e0: 04:b3:59:bb:0d:e9:eb:ff:2f:bb:c1:4a:71:8a:a5: 12:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:A0:7A:B8:80:C5:99:8D:68:44:27:95:58:66:C9:1B:6E:53:57:34 X509v3 Authority Key Identifier: keyid:77:67:CF:49:D7:66:1A:FA:B4:58:70:34:1D:88:D2:F3:D9:A8:6C:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:f7:b0:58:45:c8:ad:cd:c2:e9:ff:e9:1a:0d:8a:f6:64:42: 0f:e4:9d:96:00:30:bf:ee:9a:00:cf:7d:3d:75:a7:f9:d1:2d: 3a:f5:89:5d:7c:d9:c5:3f:59:6f:b1:9f:37:04:e8:7f:67:6b: df:f5:a6:e1:bd:7e:20:b4:36:dd:ac:2d:8a:d8:d8:d9:25:00: 97:55:b2:1b:d0:24:58:33:9c:bc:33:d1:3f:35:5c:bd:dd:39: ee:68:37:a0:28:0f:97:d8:a4:96:ea:38:63:d2:cf:74:91:0f: f9:15:82:b1:63:5f:ed:26:cf:4f:b7:39:a6:5c:e7:52:37:00: c1:90:08:e4:e1:17:c8:54:1c:f9:80:89:8e:8e:1c:3d:56:1f: de:a0:8f:11:e6:c7:ab:ec:a4:2c:c0:f1:1f:4b:10:2b:f5:ad: f1:5a:52:8f:a5:b2:32:19:5e:96:b1:12:2a:f7:e9:e8:46:38: b8:76:b4:52:7d:05:35:de:d4:ed:01:fe:0a:19:df:49:a1:2e: 88:03:5e:df:a4:a5:9c:2f:1f:e0:51:b1:27:70:8a:12:41:da: ef:80:e4:27:41:83:3d:23:c5:60:a9:e7:2e:d1:85:c4:e4:8e: e5:34:ef:83:09:97:37:27:7e:7a:8a:66:97:f6:c5:c9:27:7f: c0:42:d0:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBDPtpGSPxk1rNU/58e/wcO3YFXkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzc2N0NGNDlENzY2MUFGQUI0NTg3MDM0MUQ4OEQyRjNE OUE4NkNFNDAeFw0yNTA0MjMxMDU2NDJaFw0yNTA0MjYyMDI3NDJaMDMxMTAvBgNV BAMTKEI5QTA3QUI4ODBDNTk5OEQ2ODQ0Mjc5NTU4NjZDOTFCNkU1MzU3MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsK5Ppa1TJwxN/9ishH97MsHvM 3AQIyHNFGFyXH9gLKGMv3OsJN3+aLdbukOnsQXGc4MhENOw9EoOKqNplrA6WLLqv EL4GrxtgAz6elVoGziXZoCwFb0HA51tBG0w1AN33EpkeguF1X5uTrO6kZVSboVrK rES9QHZqBBlJTjPJK1C074Nk6+W+b2MjTaTpvNNPBbEAHpxNrEt2MQ/rcGJeWMaN SobgyUh2Fzp37x7tOUmdNPRtVWRo7nvPUyYCyo7NRb9eXpxIcsCkVSAiiBEjic3o LIsrLtdBhIb9R1JOOtLgjpnEQowVFZ0QCpCH4ASzWbsN6ev/L7vBSnGKpRLxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuaB6uIDFmY1oRCeVWGbJG25TVzQwHwYDVR0j BBgwFoAUd2fPSddmGvq0WHA0HYjS89mobOQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTcwZDQ0ZS0wZjcwLTQ1YTMtYWYwNC04MWY0MjlkYjNhNWQvMC83NzY3Q0Y0OUQ3 NjYxQUZBQjQ1ODcwMzQxRDg4RDJGM0Q5QTg2Q0U0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzc2N0NGNDlENzY2MUFGQUI0NTg3MDM0MUQ4OEQyRjNEOUE4 NkNFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2E3MGQ0NGUtMGY3MC00NWEzLWFm MDQtODFmNDI5ZGIzYTVkLzAvNzc2N0NGNDlENzY2MUFGQUI0NTg3MDM0MUQ4OEQy RjNEOUE4NkNFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGH3sFhFyK3Nwun/6RoNivZkQg/knZYAML/u mgDPfT11p/nRLTr1iV182cU/WW+xnzcE6H9na9/1puG9fiC0Nt2sLYrY2NklAJdV shvQJFgznLwz0T81XL3dOe5oN6AoD5fYpJbqOGPSz3SRD/kVgrFjX+0mz0+3OaZc 51I3AMGQCOThF8hUHPmAiY6OHD1WH96gjxHmx6vspCzA8R9LECv1rfFaUo+lsjIZ XpaxEir36ehGOLh2tFJ9BTXe1O0B/goZ30mhLogDXt+kpZwvH+BRsSdwihJB2u+A 5CdBgz0jxWCp5y7RhcTkjuU074MJlzcnfnqKZpf2xcknf8BC0HA= -----END CERTIFICATE-----Generated at Wed Apr 23 13:25:32 2025 by rpki-client on console.sobornost.net