$ rpki-client -vvf repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft File: 6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft (raw, json) Hash identifier: w0yE+Vm6KkxEl4hbrYYWd3akXBDDRCbJmXdt+IPVWZ0= Subject key identifier: F2:1F:DF:90:E9:4E:9B:63:28:A4:CF:D0:C1:03:D2:7E:82:2F:50:06 Authority key identifier: 6D:6B:AE:DB:FD:BB:AA:46:BF:3D:A2:18:55:70:77:16:27:BE:7B:19 Certificate issuer: /CN=6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19 Certificate serial: 24199450FBFD3A010CE45B359468F6A0427E39A5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.cer Subject info access: rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft Manifest number: 04C5 Signing time: Wed 23 Apr 2025 02:40:36 +0000 Manifest this update: Wed 23 Apr 2025 02:35:36 +0000 Manifest next update: Sat 26 Apr 2025 08:02:36 +0000 Files and hashes: 1: 3130332e35322e3137312e302f32342d3234203d3e203633383732.roa (hash: VhIRSNOJ0LS9ugIXorAVroZ6Ii8ZakamTst0aaxHSug=) 2: 323030313a6466333a6330303a3a2f34382d3438203d3e203633383732.roa (hash: 8Z0pSGSnkKlaMC3s0SAaLzt4eONtxvATdsVtNdjluzw=) 3: 3130332e35322e3137302e302f32332d3233203d3e203633383732.roa (hash: z2+zxRk+wf+jCSmrNsYyUGK/oYQNa8ev2JDVJrHXjrA=) 4: 6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.crl (hash: v18EpvYqwY3iCJRoRdniGsHAlT23fpM3hqafMNv9et0=) 5: 3130332e3132372e3134342e302f32332d3233203d3e203633383732.roa (hash: WwxwZlv3TUa9yicqgZtEOiKWXTIZnKX9bVQhI95JUio=) 6: 3130332e35322e3137302e302f32342d3234203d3e203633383732.roa (hash: HepAw4B8lBUh/Y3MMVp/+7NfuqMoWhVFmRARv6c88zY=) 7: 3130332e3132372e3134342e302f32342d3234203d3e203633383732.roa (hash: iCtud+99K04t88wHjjWM0jAOS2yFCCNFegL4s/RxP6w=) 8: 3130332e3132372e3134352e302f32342d3234203d3e203633383732.roa (hash: Yby+RTbIG2/aiUB/1BTtxcxrbo0IJSyyRYPrIqcjGAI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.crl rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 08:02:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:19:94:50:fb:fd:3a:01:0c:e4:5b:35:94:68:f6:a0:42:7e:39:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19 Validity Not Before: Apr 23 02:35:36 2025 GMT Not After : Apr 26 08:02:36 2025 GMT Subject: CN=F21FDF90E94E9B6328A4CFD0C103D27E822F5006 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:78:b3:4f:a3:42:d3:5a:10:c7:6c:1f:e7:69: eb:3b:95:a8:72:7d:5c:39:6f:28:67:6e:80:39:e1: 5d:e2:a8:4a:ab:f4:85:ef:1c:4c:bb:ea:99:de:44: bf:0b:b0:04:ca:c9:2d:c4:f2:94:a2:71:03:30:c0: 93:ab:50:5b:8e:11:36:13:dc:28:51:ab:92:de:be: cb:8b:5b:25:7c:19:f9:ee:04:ec:f3:e7:5e:55:4a: fa:03:78:c2:54:26:35:7f:47:ed:c1:e2:1e:d5:26: bc:ab:21:63:dc:40:a3:25:eb:2f:ad:5e:71:43:5c: f1:54:41:05:58:79:d9:aa:bc:6d:53:10:55:49:2b: b9:83:e3:66:95:03:87:55:d1:cd:e3:e2:2c:28:ff: 83:2d:d5:d4:ed:22:41:a7:b6:8c:d4:81:a5:40:59: f9:cc:e2:f1:5c:33:d8:01:eb:4a:2f:e5:be:6c:be: d5:8b:e9:51:82:4d:78:0b:c6:6a:09:6e:f1:a3:5e: c9:27:02:1c:d8:e3:87:3b:96:f3:3f:c7:93:16:f7: c8:4c:87:89:00:77:e2:e7:5f:15:de:c3:5b:48:09: 70:e6:b8:fc:cb:45:87:5e:33:a0:bb:80:64:e7:1c: 96:12:3c:cf:14:55:59:27:f3:0c:a2:aa:aa:0e:52: bb:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:1F:DF:90:E9:4E:9B:63:28:A4:CF:D0:C1:03:D2:7E:82:2F:50:06 X509v3 Authority Key Identifier: keyid:6D:6B:AE:DB:FD:BB:AA:46:BF:3D:A2:18:55:70:77:16:27:BE:7B:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:88:39:cd:ba:bc:db:71:2d:e5:76:62:e3:c3:59:dd:0c:c2: 1f:0e:a2:1c:ba:d8:b3:75:70:a5:e5:21:1e:12:40:08:61:79: f4:e7:b8:58:db:e8:25:95:4c:69:5c:c3:d7:25:c8:33:62:48: 90:79:8f:05:e9:7a:a7:6a:3f:d4:b8:09:dc:67:8a:e1:ed:e8: 65:89:69:4f:02:19:4f:29:69:22:5f:47:91:83:1f:68:2e:39: ed:d0:b1:25:2c:d8:93:6d:ab:67:ce:bf:76:4d:94:a8:a2:00: 1e:25:3f:fc:2e:73:08:7a:d7:58:e5:c5:59:64:b7:cb:bf:3f: 1e:ad:72:5a:0b:65:0b:85:15:fb:83:8a:ea:48:07:39:f8:1c: 45:0b:7b:cb:49:f8:b3:af:37:d7:39:22:91:b4:f2:52:89:e9: dc:c3:e7:71:2f:cc:88:1e:2d:10:14:ab:1f:c0:bd:b9:d2:69: 4f:5e:b5:d7:e0:53:73:ce:39:d5:ed:59:4e:02:da:be:ed:5b: 39:ee:c1:e9:40:ff:6f:cf:8d:42:09:71:52:d5:df:f0:74:3d: b8:d3:58:14:5d:c5:5b:cd:7b:83:cc:e0:64:8f:06:e0:a9:22: 6d:ed:ef:0a:70:e8:95:9a:fc:dd:c3:f1:4b:05:48:8f:69:6b: ed:20:18:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJBmUUPv9OgEM5Fs1lGj2oEJ+OaUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQ2QkFFREJGREJCQUE0NkJGM0RBMjE4NTU3MDc3MTYy N0JFN0IxOTAeFw0yNTA0MjMwMjM1MzZaFw0yNTA0MjYwODAyMzZaMDMxMTAvBgNV BAMTKEYyMUZERjkwRTk0RTlCNjMyOEE0Q0ZEMEMxMDNEMjdFODIyRjUwMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUeLNPo0LTWhDHbB/naes7lahy fVw5byhnboA54V3iqEqr9IXvHEy76pneRL8LsATKyS3E8pSicQMwwJOrUFuOETYT 3ChRq5LevsuLWyV8GfnuBOzz515VSvoDeMJUJjV/R+3B4h7VJryrIWPcQKMl6y+t XnFDXPFUQQVYedmqvG1TEFVJK7mD42aVA4dV0c3j4iwo/4Mt1dTtIkGntozUgaVA WfnM4vFcM9gB60ov5b5svtWL6VGCTXgLxmoJbvGjXsknAhzY44c7lvM/x5MW98hM h4kAd+LnXxXew1tICXDmuPzLRYdeM6C7gGTnHJYSPM8UVVkn8wyiqqoOUrv/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8h/fkOlOm2MopM/QwQPSfoIvUAYwHwYDVR0j BBgwFoAUbWuu2/27qka/PaIYVXB3Fie+exkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NmJiMzMzYy05ODJiLTRmY2UtYWM4MS1iYzA2OTIyOWUyNDMvMC82RDZCQUVEQkZE QkJBQTQ2QkYzREEyMTg1NTcwNzcxNjI3QkU3QjE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkQ2QkFFREJGREJCQUE0NkJGM0RBMjE4NTU3MDc3MTYyN0JF N0IxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTZiYjMzM2MtOTgyYi00ZmNlLWFj ODEtYmMwNjkyMjllMjQzLzAvNkQ2QkFFREJGREJCQUE0NkJGM0RBMjE4NTU3MDc3 MTYyN0JFN0IxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADeIOc26vNtxLeV2YuPDWd0Mwh8Oohy62LN1 cKXlIR4SQAhhefTnuFjb6CWVTGlcw9clyDNiSJB5jwXpeqdqP9S4CdxniuHt6GWJ aU8CGU8paSJfR5GDH2guOe3QsSUs2JNtq2fOv3ZNlKiiAB4lP/wucwh611jlxVlk t8u/Px6tcloLZQuFFfuDiupIBzn4HEULe8tJ+LOvN9c5IpG08lKJ6dzD53EvzIge LRAUqx/AvbnSaU9etdfgU3POOdXtWU4C2r7tWznuwelA/2/PjUIJcVLV3/B0PbjT WBRdxVvNe4PM4GSPBuCpIm3t7wpw6JWa/N3D8UsFSI9pa+0gGCI= -----END CERTIFICATE-----Generated at Wed Apr 23 06:31:51 2025 by rpki-client on console.sobornost.net