$ rpki-client -vvf repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.mft File: 6DA2B28F4391C01434B7229FD4D68E661BF13061.mft (raw, json) Hash identifier: MB6rHmfa0/Lyd/hX7XtJ/C0rBVzKaA/bKCv3ZA9mhYc= Subject key identifier: 2D:A4:46:ED:52:ED:41:8D:EB:1A:33:34:67:03:54:4B:1F:14:34:FE Authority key identifier: 6D:A2:B2:8F:43:91:C0:14:34:B7:22:9F:D4:D6:8E:66:1B:F1:30:61 Certificate issuer: /CN=6DA2B28F4391C01434B7229FD4D68E661BF13061 Certificate serial: 7686810CDD4719BD66B405B2F137F4C23BBE715D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DA2B28F4391C01434B7229FD4D68E661BF13061.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.mft Manifest number: 0238 Signing time: Thu 24 Apr 2025 01:11:23 +0000 Manifest this update: Thu 24 Apr 2025 01:06:23 +0000 Manifest next update: Sun 27 Apr 2025 12:48:23 +0000 Files and hashes: 1: 34392e3233362e3232322e302f32342d3234203d3e203535363638.roa (hash: 7nW2fdNzQ/pw6iueKs/nit/sd4D7nCLJjKMOnmFO3+c=) 2: 34392e3233362e3231372e302f32342d3234203d3e203535363638.roa (hash: SptXDMlN81cXVQItr4QSDBANvjvdA+fjiFu71V/b7e4=) 3: 34392e3233362e3231392e302f32342d3234203d3e203535363638.roa (hash: 3dUHFOcTvL6SRCYfkh3xOumINLAjfoUSiaeyY80AmMU=) 4: 6DA2B28F4391C01434B7229FD4D68E661BF13061.crl (hash: KndRBdEK+qiO5jOSJFbhe13T75qH+tiqQOGWz71GmK4=) 5: 34392e3233362e3232302e302f32342d3234203d3e203535363638.roa (hash: KZESdVYPyK5UDmppEqYu4UgDw6S2JiyC9Aylq3V7KK8=) 6: 34392e3233362e3231362e302f32342d3234203d3e203535363638.roa (hash: C1ful6krFD/D/NQklV2H82Wf+t1lC80LwN0uOUSrxSc=) 7: 34392e3233362e3232332e302f32342d3234203d3e203535363638.roa (hash: 6Ss/J4jbsHWttbGBWZAXrFLeP7zMzLu10fV9oC9kRxs=) 8: 34392e3233362e3232312e302f32342d3234203d3e203535363638.roa (hash: P3qaAQS+9Hmz4InOLYsrCr6O0nuBDwpieqmijzpxLgQ=) 9: 34392e3233362e3231382e302f32342d3234203d3e203535363638.roa (hash: cndHnN7Y2CkZsc1bcXRUS17ntMjtPGamuBmM/0sBScA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.crl rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DA2B28F4391C01434B7229FD4D68E661BF13061.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 08:10:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:86:81:0c:dd:47:19:bd:66:b4:05:b2:f1:37:f4:c2:3b:be:71:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DA2B28F4391C01434B7229FD4D68E661BF13061 Validity Not Before: Apr 24 01:06:23 2025 GMT Not After : Apr 27 12:48:23 2025 GMT Subject: CN=2DA446ED52ED418DEB1A33346703544B1F1434FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0a:e9:5d:05:dc:f2:2b:43:1b:e8:88:1d:4d: 28:4b:94:41:0f:49:a2:c9:3b:08:7e:cc:97:a4:e8: 2f:0c:3b:0b:42:7e:8e:05:3d:3a:98:77:58:b1:81: fe:ac:d0:11:6b:d2:7b:c4:ac:e4:56:0b:77:e0:82: fe:ac:a2:8b:fb:f6:b1:33:51:a5:f3:91:71:40:e8: af:f7:58:52:62:c1:bb:d5:6c:d9:6b:9f:28:d1:77: 2f:9f:75:ab:33:6b:70:8d:f0:37:b2:20:1f:b2:8e: a7:95:26:b0:e1:db:87:8b:fd:4f:b0:56:72:ea:dd: 9c:13:b6:a3:3b:24:cc:a2:b5:17:0a:7d:d8:87:d4: 4c:bb:23:7c:2e:a7:24:90:f0:f1:06:8b:fe:4a:1a: 25:71:d2:de:30:f0:c1:b7:16:29:2f:21:38:8b:f2: d7:4b:87:fa:4a:f7:b6:6c:70:67:ca:67:a7:87:e3: 84:c9:2f:4d:f8:b9:5c:7c:07:f4:52:ea:5e:35:89: 1a:bd:cf:11:61:11:09:23:57:44:f5:5d:b1:3c:fd: a8:64:3d:ee:98:57:f0:55:f2:a8:3e:12:8a:89:e4: 86:10:58:69:82:dc:c4:50:fc:fc:c1:d6:16:9a:d0: a5:28:63:27:5d:c8:a9:b7:24:21:fe:62:c3:92:2f: b5:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:A4:46:ED:52:ED:41:8D:EB:1A:33:34:67:03:54:4B:1F:14:34:FE X509v3 Authority Key Identifier: keyid:6D:A2:B2:8F:43:91:C0:14:34:B7:22:9F:D4:D6:8E:66:1B:F1:30:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DA2B28F4391C01434B7229FD4D68E661BF13061.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:dd:c3:e2:e0:95:da:54:9e:77:26:cc:b8:67:6a:cf:e9:c4: 50:62:90:11:a1:f9:78:18:16:a9:c2:46:35:de:28:ca:0e:31: 2a:5f:5c:5e:65:36:83:be:6f:81:31:e4:ab:aa:40:8d:bd:1f: bb:7f:00:a3:6f:4f:78:2f:a1:f6:c2:ed:51:41:39:38:e0:aa: 02:3a:a3:57:dc:94:2f:ad:d4:14:33:92:52:00:cc:12:6d:90: 2e:19:c8:07:7d:33:8d:83:ea:60:cd:91:aa:5f:cf:fd:00:11: cc:12:28:10:c1:6a:a9:98:03:c9:f1:69:25:fc:48:1f:5c:54: c8:49:b4:13:86:4c:5f:bb:27:c7:89:9c:98:89:48:fd:b8:18: ed:a0:e8:fd:4f:6d:af:99:72:4e:2e:9d:f1:b3:28:ea:c8:bf: 93:6a:41:76:4e:23:e0:3e:a2:96:85:8c:d4:ff:a7:6c:24:a3: 4b:a1:b5:7e:ea:3c:9a:68:fe:dd:2b:36:55:01:09:3b:0a:87: 08:3a:4d:d0:f1:db:d7:27:ac:16:68:3e:04:99:09:37:14:e1: ae:9a:70:fc:e5:95:2b:fd:ed:23:ad:6a:fb:07:63:5b:3c:70: 09:69:a6:3a:42:fb:7c:56:9f:3d:f4:2c:f5:ae:3c:26:c1:cf: 38:fb:c3:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdoaBDN1HGb1mtAWy8Tf0wju+cV0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRBMkIyOEY0MzkxQzAxNDM0QjcyMjlGRDRENjhFNjYx QkYxMzA2MTAeFw0yNTA0MjQwMTA2MjNaFw0yNTA0MjcxMjQ4MjNaMDMxMTAvBgNV BAMTKDJEQTQ0NkVENTJFRDQxOERFQjFBMzMzNDY3MDM1NDRCMUYxNDM0RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJCuldBdzyK0Mb6IgdTShLlEEP SaLJOwh+zJek6C8MOwtCfo4FPTqYd1ixgf6s0BFr0nvErORWC3fggv6soov79rEz UaXzkXFA6K/3WFJiwbvVbNlrnyjRdy+fdasza3CN8DeyIB+yjqeVJrDh24eL/U+w VnLq3ZwTtqM7JMyitRcKfdiH1Ey7I3wupySQ8PEGi/5KGiVx0t4w8MG3FikvITiL 8tdLh/pK97ZscGfKZ6eH44TJL034uVx8B/RS6l41iRq9zxFhEQkjV0T1XbE8/ahk Pe6YV/BV8qg+EoqJ5IYQWGmC3MRQ/PzB1haa0KUoYyddyKm3JCH+YsOSL7WjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULaRG7VLtQY3rGjM0ZwNUSx8UNP4wHwYDVR0j BBgwFoAUbaKyj0ORwBQ0tyKf1NaOZhvxMGEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDBmOTljMy1lNTY3LTQxYWUtYWEwMC0yNmNiOTc4MWZiZTkvMC82REEyQjI4RjQz OTFDMDE0MzRCNzIyOUZENEQ2OEU2NjFCRjEzMDYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkRBMkIyOEY0MzkxQzAxNDM0QjcyMjlGRDRENjhFNjYxQkYx MzA2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2QwZjk5YzMtZTU2Ny00MWFlLWFh MDAtMjZjYjk3ODFmYmU5LzAvNkRBMkIyOEY0MzkxQzAxNDM0QjcyMjlGRDRENjhF NjYxQkYxMzA2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC3dw+LgldpUnncmzLhnas/pxFBikBGh+XgY FqnCRjXeKMoOMSpfXF5lNoO+b4Ex5KuqQI29H7t/AKNvT3gvofbC7VFBOTjgqgI6 o1fclC+t1BQzklIAzBJtkC4ZyAd9M42D6mDNkapfz/0AEcwSKBDBaqmYA8nxaSX8 SB9cVMhJtBOGTF+7J8eJnJiJSP24GO2g6P1Pba+Zck4unfGzKOrIv5NqQXZOI+A+ opaFjNT/p2wko0uhtX7qPJpo/t0rNlUBCTsKhwg6TdDx29cnrBZoPgSZCTcU4a6a cPzllSv97SOtavsHY1s8cAlppjpC+3xWnz30LPWuPCbBzzj7w+U= -----END CERTIFICATE-----Generated at Thu Apr 24 04:31:38 2025 by rpki-client on console.sobornost.net