$ rpki-client -vvf repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft File: 6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft (raw, json) Hash identifier: dkyVS4ASA9YvE0kMayKvWLwONiN6gy2mxLNoe3H8f+M= Subject key identifier: D8:C7:8D:F6:51:8B:57:27:5F:A7:E9:4F:FE:F5:CC:42:9F:62:74:4C Authority key identifier: 62:47:D1:AA:F3:B1:5B:50:D3:A7:3E:44:E5:9E:2C:00:0B:94:F8:A4 Certificate issuer: /CN=6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4 Certificate serial: 7C76F8087992A354EB407AF6F1649A27B34EFFAA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft Manifest number: 47 Signing time: Sat 26 Apr 2025 06:41:18 +0000 Manifest this update: Sat 26 Apr 2025 06:36:18 +0000 Manifest next update: Tue 29 Apr 2025 12:55:18 +0000 Files and hashes: 1: 3136302e3139312e3138312e302f32342d3234203d3e20313533313530.roa (hash: R1Eo64irF2fqBU24QMOkIR4K/Db3F6prGasQKdzareI=) 2: 3136302e3139312e3138302e302f32342d3234203d3e20313338303839.roa (hash: lqWm7H1VLaNogQYDvPWFxyEVAtvNrhxj3L3hhsj87j0=) 3: 6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.crl (hash: 6/S5dvS9FPyviO7MLbiy7pgnU0ZaF+/NG0Y/hY38djo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.crl rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 03:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:76:f8:08:79:92:a3:54:eb:40:7a:f6:f1:64:9a:27:b3:4e:ff:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4 Validity Not Before: Apr 26 06:36:18 2025 GMT Not After : Apr 29 12:55:18 2025 GMT Subject: CN=D8C78DF6518B57275FA7E94FFEF5CC429F62744C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:33:b8:9e:51:87:47:2d:75:f8:a3:f0:6a:6c: 86:a5:e4:9c:ec:55:44:af:4f:44:ae:96:fc:06:39: b8:4b:58:bc:5f:32:81:09:2f:a0:81:10:26:4b:04: e8:de:0d:20:b0:38:aa:8d:30:39:04:1e:f5:5a:92: 9c:1b:fb:3d:43:8b:01:8a:25:68:bd:b7:4d:22:2f: 23:e4:0c:31:43:0c:91:64:36:11:e1:f7:ff:f6:71: 22:a2:83:23:d6:e8:6f:47:ae:b0:32:ee:2f:1c:71: c6:bc:40:ef:94:97:98:51:f9:9a:95:0e:0b:04:26: ff:c9:b0:fe:e2:59:a0:05:8e:eb:7f:93:c7:80:39: 65:8a:c2:02:3f:ee:d0:57:d9:a1:e0:d3:c3:57:c4: 9e:25:ca:2a:16:4e:24:c3:f4:6e:75:e0:d1:78:a2: 3c:b6:a6:43:a6:a2:e2:32:98:3f:9e:e3:4b:a5:13: f4:81:b3:1d:53:3b:b0:d8:e3:ee:0c:58:7f:2b:42: 5e:a7:56:1b:0a:e2:d7:e8:49:45:f7:4d:85:ba:69: 97:ec:0d:77:80:cf:7e:ab:35:d8:51:18:6f:0e:e0: 09:31:06:29:d7:f7:34:96:ae:59:da:3f:0e:f8:c5: ee:a5:c2:f8:2a:d8:4e:84:74:fa:c9:15:9a:39:aa: 25:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:C7:8D:F6:51:8B:57:27:5F:A7:E9:4F:FE:F5:CC:42:9F:62:74:4C X509v3 Authority Key Identifier: keyid:62:47:D1:AA:F3:B1:5B:50:D3:A7:3E:44:E5:9E:2C:00:0B:94:F8:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:41:d3:ef:72:07:45:1b:be:b9:3d:23:da:74:ac:b2:1a:3f: 25:6f:a0:db:be:ba:0b:a6:a7:b2:29:b2:aa:45:8d:23:85:b4: 30:70:3e:ae:7a:38:ef:4c:ed:57:dc:af:f9:31:df:df:3b:f3: 52:dd:e4:8e:8a:60:1a:f1:24:5d:b2:61:e4:b8:d3:63:b8:a1: 56:4b:f6:d7:66:d6:72:6f:78:50:68:9b:59:f1:7e:f7:df:0a: df:bc:97:d9:84:84:52:9c:30:7b:03:05:5f:76:c1:f4:b9:db: 55:92:93:ac:c9:29:98:2c:9e:86:e5:bd:bc:94:64:46:b6:8b: 4c:41:38:38:21:56:71:dd:26:b0:93:8a:d9:b0:00:50:92:70: ed:10:ec:05:82:9d:09:5e:f4:7f:93:b1:f2:7b:e3:00:34:01: c7:eb:b0:dc:b3:48:a4:1b:f4:46:69:40:1e:b6:be:67:16:06: b2:d2:2c:70:8a:0b:4a:6f:35:4d:75:04:45:da:13:26:ba:61: 12:f8:6c:c3:fb:fc:84:c2:d6:40:ad:d8:cb:c5:4c:75:cb:6c: e7:31:1c:64:a3:97:96:63:87:8f:f4:b4:d7:bf:3a:e0:1d:ef: e0:57:fe:c5:d9:e2:78:02:34:46:d9:4b:e7:6c:68:1e:ff:4a: bc:90:4f:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfHb4CHmSo1TrQHr28WSaJ7NO/6owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjI0N0QxQUFGM0IxNUI1MEQzQTczRTQ0RTU5RTJDMDAw Qjk0RjhBNDAeFw0yNTA0MjYwNjM2MThaFw0yNTA0MjkxMjU1MThaMDMxMTAvBgNV BAMTKEQ4Qzc4REY2NTE4QjU3Mjc1RkE3RTk0RkZFRjVDQzQyOUY2Mjc0NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXM7ieUYdHLXX4o/BqbIal5Jzs VUSvT0SulvwGObhLWLxfMoEJL6CBECZLBOjeDSCwOKqNMDkEHvVakpwb+z1DiwGK JWi9t00iLyPkDDFDDJFkNhHh9//2cSKigyPW6G9HrrAy7i8ccca8QO+Ul5hR+ZqV DgsEJv/JsP7iWaAFjut/k8eAOWWKwgI/7tBX2aHg08NXxJ4lyioWTiTD9G514NF4 ojy2pkOmouIymD+e40ulE/SBsx1TO7DY4+4MWH8rQl6nVhsK4tfoSUX3TYW6aZfs DXeAz36rNdhRGG8O4AkxBinX9zSWrlnaPw74xe6lwvgq2E6EdPrJFZo5qiXdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2MeN9lGLVydfp+lP/vXMQp9idEwwHwYDVR0j BBgwFoAUYkfRqvOxW1DTpz5E5Z4sAAuU+KQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NTk2MTJhMi00NDMzLTQyYjktOGY0Zi1iODQ3Nzc2YWNhZmQvMC82MjQ3RDFBQUYz QjE1QjUwRDNBNzNFNDRFNTlFMkMwMDBCOTRGOEE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjI0N0QxQUFGM0IxNUI1MEQzQTczRTQ0RTU5RTJDMDAwQjk0 RjhBNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTU5NjEyYTItNDQzMy00MmI5LThm NGYtYjg0Nzc3NmFjYWZkLzAvNjI0N0QxQUFGM0IxNUI1MEQzQTczRTQ0RTU5RTJD MDAwQjk0RjhBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGFB0+9yB0Ubvrk9I9p0rLIaPyVvoNu+ugum p7IpsqpFjSOFtDBwPq56OO9M7Vfcr/kx398781Ld5I6KYBrxJF2yYeS402O4oVZL 9tdm1nJveFBom1nxfvffCt+8l9mEhFKcMHsDBV92wfS521WSk6zJKZgsnoblvbyU ZEa2i0xBODghVnHdJrCTitmwAFCScO0Q7AWCnQle9H+TsfJ74wA0AcfrsNyzSKQb 9EZpQB62vmcWBrLSLHCKC0pvNU11BEXaEya6YRL4bMP7/ITC1kCt2MvFTHXLbOcx HGSjl5Zjh4/0tNe/OuAd7+BX/sXZ4ngCNEbZS+dsaB7/SryQT20= -----END CERTIFICATE-----Generated at Sat Apr 26 08:46:12 2025 by rpki-client on console.sobornost.net