$ rpki-client -vvf repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft File: 6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft (raw, json) Hash identifier: zPmiwytOHg0D5yQJ7yX1EIVBLagcpCnQ79en/gizc8E= Subject key identifier: E3:3E:29:D8:0B:62:53:AE:9D:60:48:20:70:44:F1:59:54:5F:EE:6F Authority key identifier: 6C:DF:5C:D1:FD:DF:F2:C0:24:C1:3A:29:26:4D:70:FA:51:F9:58:7A Certificate issuer: /CN=6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A Certificate serial: 5064A05A29752E2990E7F881D16F148A6321AC44 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft Manifest number: 0211 Signing time: Fri 25 Apr 2025 09:50:53 +0000 Manifest this update: Fri 25 Apr 2025 09:45:53 +0000 Manifest next update: Mon 28 Apr 2025 16:06:53 +0000 Files and hashes: 1: 3130332e3136322e3231382e302f32342d3234203d3e20313331373433.roa (hash: fAK2te0TEqpzJhgXSb4XwSxQseg6/EYiZ8aBe9jp008=) 2: 3130332e3136322e3231392e302f32342d3234203d3e20313331373433.roa (hash: xf2I9h8KQwy/WwpQfY5CtYlpiMXIfz8b66L3e8+iRiw=) 3: 6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.crl (hash: gduFmgcQG8E/pt3GKh0/rZN2X2StcaNkT7rrpTgyqkU=) 4: 3130332e3136322e3231382e302f32332d3233203d3e20313331373433.roa (hash: rN6d1jXWm1z/gjcEJrJ6azpXdwiJ6TxL4YRERmja/s8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.crl rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 14:02:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:64:a0:5a:29:75:2e:29:90:e7:f8:81:d1:6f:14:8a:63:21:ac:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A Validity Not Before: Apr 25 09:45:53 2025 GMT Not After : Apr 28 16:06:53 2025 GMT Subject: CN=E33E29D80B6253AE9D6048207044F159545FEE6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2a:c5:3f:23:3f:be:e6:ac:a4:6f:62:a0:0f: df:68:ab:3a:db:c3:d6:a5:4a:98:75:72:a0:f2:39: 5a:91:1f:4f:ce:bf:a1:44:e9:a5:f8:31:c9:0c:f6: ee:19:e1:e0:c3:b2:8f:39:f2:fc:6f:12:4b:1d:f7: b5:22:a7:1f:65:df:ec:4f:ae:b6:32:03:d4:fa:3d: a9:c1:1b:5d:09:bd:b7:90:b4:34:e1:82:99:6b:1e: 9d:66:55:c5:49:e0:10:cc:b0:35:4d:49:05:8d:22: 56:b7:65:73:72:f2:1d:e1:d0:d5:0c:7f:ec:a8:99: d2:e8:ce:8c:00:d2:1a:b0:6b:1c:74:86:e5:99:bb: da:05:01:ce:dc:86:ed:66:77:68:c6:0b:41:72:05: b1:a1:2c:68:1e:97:04:df:d5:e2:bb:bf:f0:9d:7e: 81:ec:9c:68:8c:ef:54:1d:c7:71:b3:c7:4d:10:1a: 17:1d:6e:a1:6a:e8:54:4a:87:17:85:db:63:e4:d0: 60:46:43:02:15:5a:9d:54:4f:29:8e:e7:e4:cd:b9: f6:54:4f:37:c9:69:e5:94:5d:c2:5e:90:2d:84:16: 97:17:ee:68:50:d4:62:0f:5f:28:58:b7:b8:49:e1: e5:46:e5:74:c3:69:dc:03:19:69:2a:da:23:8e:bc: 9f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:3E:29:D8:0B:62:53:AE:9D:60:48:20:70:44:F1:59:54:5F:EE:6F X509v3 Authority Key Identifier: keyid:6C:DF:5C:D1:FD:DF:F2:C0:24:C1:3A:29:26:4D:70:FA:51:F9:58:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:ec:d0:fa:63:b7:c1:e3:21:d2:e8:d2:c1:e8:28:b2:1b:f4: 03:2b:8c:94:75:47:dc:07:a2:69:bb:5c:f8:57:91:35:aa:44: 1a:83:82:3c:c7:97:39:c2:be:ee:f3:57:3d:e2:b0:d0:3a:90: 91:2d:9b:82:8e:d7:bb:9d:54:bb:c2:56:87:55:70:85:6f:a1: a2:5f:ca:69:23:65:0b:b9:c0:12:ff:e2:82:bd:74:31:61:b8: 38:9b:95:7e:39:bf:cb:c3:91:ad:a7:88:1c:b8:2f:a2:48:e0: be:0a:f6:90:f7:b7:79:ef:57:d3:51:8d:b9:cb:6a:10:1a:b3: 07:f6:e9:cc:8f:ac:d8:79:d5:69:f0:5f:a6:8e:4e:a4:56:24: 54:4a:91:6f:61:df:a8:69:94:b6:5e:60:61:ae:81:3c:cb:50: 60:f7:94:1b:df:35:48:34:58:8f:7b:60:6e:2d:4c:0a:39:2b: ca:ff:6e:7c:d6:66:39:c7:a1:04:85:2e:ce:1e:63:53:f7:87: b9:98:f7:b3:b8:04:3b:19:71:3a:d0:5b:6e:52:53:d9:df:1f: 8a:05:bb:a0:bb:a0:74:5d:2e:45:cf:ba:b6:e7:88:45:7d:3f: 40:a7:66:f8:4b:97:f4:36:88:c1:81:bd:79:bc:12:e9:46:13: 09:be:e4:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUGSgWil1LimQ5/iB0W8UimMhrEQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkNERjVDRDFGRERGRjJDMDI0QzEzQTI5MjY0RDcwRkE1 MUY5NTg3QTAeFw0yNTA0MjUwOTQ1NTNaFw0yNTA0MjgxNjA2NTNaMDMxMTAvBgNV BAMTKEUzM0UyOUQ4MEI2MjUzQUU5RDYwNDgyMDcwNDRGMTU5NTQ1RkVFNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0KsU/Iz++5qykb2KgD99oqzrb w9alSph1cqDyOVqRH0/Ov6FE6aX4MckM9u4Z4eDDso858vxvEksd97Uipx9l3+xP rrYyA9T6PanBG10JvbeQtDThgplrHp1mVcVJ4BDMsDVNSQWNIla3ZXNy8h3h0NUM f+yomdLozowA0hqwaxx0huWZu9oFAc7chu1md2jGC0FyBbGhLGgelwTf1eK7v/Cd foHsnGiM71Qdx3Gzx00QGhcdbqFq6FRKhxeF22Pk0GBGQwIVWp1UTymO5+TNufZU TzfJaeWUXcJekC2EFpcX7mhQ1GIPXyhYt7hJ4eVG5XTDadwDGWkq2iOOvJ/tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4z4p2AtiU66dYEggcETxWVRf7m8wHwYDVR0j BBgwFoAUbN9c0f3f8sAkwTopJk1w+lH5WHowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDI2NjUxMS02MzllLTRjMmItOTYzNC05Y2MxZTIyZmE3MDgvMC82Q0RGNUNEMUZE REZGMkMwMjRDMTNBMjkyNjRENzBGQTUxRjk1ODdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkNERjVDRDFGRERGRjJDMDI0QzEzQTI5MjY0RDcwRkE1MUY5 NTg3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2QyNjY1MTEtNjM5ZS00YzJiLTk2 MzQtOWNjMWUyMmZhNzA4LzAvNkNERjVDRDFGRERGRjJDMDI0QzEzQTI5MjY0RDcw RkE1MUY5NTg3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFHs0Ppjt8HjIdLo0sHoKLIb9AMrjJR1R9wH omm7XPhXkTWqRBqDgjzHlznCvu7zVz3isNA6kJEtm4KO17udVLvCVodVcIVvoaJf ymkjZQu5wBL/4oK9dDFhuDiblX45v8vDka2niBy4L6JI4L4K9pD3t3nvV9NRjbnL ahAaswf26cyPrNh51WnwX6aOTqRWJFRKkW9h36hplLZeYGGugTzLUGD3lBvfNUg0 WI97YG4tTAo5K8r/bnzWZjnHoQSFLs4eY1P3h7mY97O4BDsZcTrQW25SU9nfH4oF u6C7oHRdLkXPurbniEV9P0CnZvhLl/Q2iMGBvXm8EulGEwm+5IY= -----END CERTIFICATE-----Generated at Fri Apr 25 12:54:06 2025 by rpki-client on console.sobornost.net