$ rpki-client -vvf repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.mft File: 62DD415142DDD76FB165A3918E09BA5891D6ADD0.mft (raw, json) Hash identifier: 69t+HhGyuQu6fNTq6DuVY9z2+Yr3Mzy26RKjAhI+Hak= Subject key identifier: C2:E5:5A:61:3F:3C:D3:9E:C8:DA:34:40:6C:B5:A4:43:04:AB:F0:12 Authority key identifier: 62:DD:41:51:42:DD:D7:6F:B1:65:A3:91:8E:09:BA:58:91:D6:AD:D0 Certificate issuer: /CN=62DD415142DDD76FB165A3918E09BA5891D6ADD0 Certificate serial: 4B98E9ABBDED051431BA9729B593A870872A117D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62DD415142DDD76FB165A3918E09BA5891D6ADD0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.mft Manifest number: 04D3 Signing time: Fri 25 Apr 2025 15:20:42 +0000 Manifest this update: Fri 25 Apr 2025 15:15:42 +0000 Manifest next update: Mon 28 Apr 2025 19:15:42 +0000 Files and hashes: 1: 3130332e3133312e31362e302f32342d3234203d3e20313338303830.roa (hash: jnfNcnB+y2Q/Js+Xk6qsTAImY9znB3rTNWg1cK+QNKk=) 2: 3130332e3133312e31372e302f32342d3234203d3e20313338303830.roa (hash: gST3oJJQIMQodIEyLV9d6jAYU0c7SyO/wJauBDxKPzQ=) 3: 3130332e3133312e31382e302f32342d3234203d3e20313338303839.roa (hash: Xf34jGkxVo3XvTaFp3TimXxxSY4P5vn0e8EVY+2zxgw=) 4: 3130332e3133312e31362e302f32332d3234203d3e20313338303830.roa (hash: S6THoBxmFhipoPEMVp8kOy2PvxdrcZ+iF+GpkKl4MNY=) 5: 62DD415142DDD76FB165A3918E09BA5891D6ADD0.crl (hash: 8+3MVWlW+/rYdxt7pa9tjCOj6bE22RVAXRB6blNv+PU=) 6: 3130332e3133312e31392e302f32342d3234203d3e20313338303839.roa (hash: 0n3I1/VBzu98cTdVFt1qC7Pkofr2BvlEzdvsLd58Im8=) 7: 3130332e3133312e31382e302f32332d3234203d3e20313338303839.roa (hash: ecSFw4eGhH45tedADsmhYmJHiN5p7gZb74pbkXcUVgc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.crl rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62DD415142DDD76FB165A3918E09BA5891D6ADD0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 19:15:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:98:e9:ab:bd:ed:05:14:31:ba:97:29:b5:93:a8:70:87:2a:11:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62DD415142DDD76FB165A3918E09BA5891D6ADD0 Validity Not Before: Apr 25 15:15:42 2025 GMT Not After : Apr 28 19:15:42 2025 GMT Subject: CN=C2E55A613F3CD39EC8DA34406CB5A44304ABF012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:32:1d:65:24:f0:07:25:a7:5f:42:de:8a:6b: f9:0a:d9:e5:22:f1:a1:ed:95:81:50:9e:cc:b9:eb: ba:04:93:93:3b:be:6f:df:dc:ff:57:ce:5c:f9:27: 13:e4:53:bd:50:95:db:23:a2:45:eb:3b:8b:9b:3b: e8:75:e0:70:59:05:c8:fb:9d:00:50:aa:f4:2c:f2: 95:77:d2:25:dc:2e:13:d5:c5:19:c8:01:5f:f2:3c: f1:aa:8f:70:80:75:17:6b:e9:36:1a:f7:24:30:90: 35:2c:13:de:f7:f7:45:0f:11:ba:e3:aa:f1:3c:77: d6:69:50:5a:4f:75:8c:3b:a9:ce:5a:a7:23:01:e1: 28:54:b0:f6:8d:56:48:7a:8e:6d:8c:46:67:49:3a: 41:57:17:0b:80:9b:ef:d5:c6:97:72:d7:b0:6b:25: e5:56:89:40:e8:fc:b7:03:ee:d2:1f:71:3f:56:d8: 1f:4f:01:71:aa:d7:7f:1f:20:27:19:47:7e:a5:a0: ce:3d:88:b0:b9:b8:20:d4:d0:74:8d:9a:2f:d7:89: 2a:43:d3:0b:79:5d:41:40:9d:02:55:1e:fd:22:dd: 41:b0:ed:a0:53:e6:86:02:c2:b2:51:98:bb:7c:83: 90:05:48:26:bd:d2:84:0b:f0:74:43:30:b3:c2:1d: d9:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:E5:5A:61:3F:3C:D3:9E:C8:DA:34:40:6C:B5:A4:43:04:AB:F0:12 X509v3 Authority Key Identifier: keyid:62:DD:41:51:42:DD:D7:6F:B1:65:A3:91:8E:09:BA:58:91:D6:AD:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62DD415142DDD76FB165A3918E09BA5891D6ADD0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:24:9d:57:3e:64:74:a2:ef:6f:53:2b:d3:bd:10:de:67:8a: 45:8e:ae:33:1e:d4:89:14:ed:c0:40:cc:fb:56:0a:62:e6:a1: 0e:15:da:0e:69:c3:5c:8d:c0:7c:37:cd:cf:d3:99:31:97:98: 80:e3:f8:93:72:16:1a:88:5f:a0:86:a6:51:b5:82:50:26:76: 9d:aa:5d:87:bb:dd:18:5b:be:e6:13:9b:e9:7e:79:3a:a2:a1: 81:95:ba:5d:57:c6:e3:26:06:fc:76:aa:fe:a8:e5:bf:08:7d: b9:48:7f:a8:9a:12:58:4d:e2:c6:45:c6:ef:96:6a:04:91:38: a2:86:92:c9:a5:f9:2a:bd:ea:7f:75:a4:09:70:8e:c3:6e:c0: 85:e7:f1:ec:43:9a:7c:85:6f:ee:f1:a3:f3:8a:ff:15:a4:ac: 43:42:58:f3:e5:52:a6:20:bd:ca:e4:6d:f5:41:e3:18:bd:23: 76:ab:b1:f6:0d:44:e7:30:ac:c7:9e:7c:40:b2:d5:13:06:fb: a5:4c:61:10:fb:b4:ed:83:53:8a:62:1a:25:3b:47:06:c5:31: 4d:32:f1:8d:f0:bf:fd:c9:ff:46:3b:63:64:a8:48:e1:8a:e7: c8:fb:50:b1:96:b3:ea:8c:e7:e6:52:fe:52:52:8d:d5:08:e5: d8:b2:6f:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS5jpq73tBRQxupcptZOocIcqEX0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjJERDQxNTE0MkRERDc2RkIxNjVBMzkxOEUwOUJBNTg5 MUQ2QUREMDAeFw0yNTA0MjUxNTE1NDJaFw0yNTA0MjgxOTE1NDJaMDMxMTAvBgNV BAMTKEMyRTU1QTYxM0YzQ0QzOUVDOERBMzQ0MDZDQjVBNDQzMDRBQkYwMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3Mh1lJPAHJadfQt6Ka/kK2eUi 8aHtlYFQnsy567oEk5M7vm/f3P9Xzlz5JxPkU71QldsjokXrO4ubO+h14HBZBcj7 nQBQqvQs8pV30iXcLhPVxRnIAV/yPPGqj3CAdRdr6TYa9yQwkDUsE97390UPEbrj qvE8d9ZpUFpPdYw7qc5apyMB4ShUsPaNVkh6jm2MRmdJOkFXFwuAm+/Vxpdy17Br JeVWiUDo/LcD7tIfcT9W2B9PAXGq138fICcZR36loM49iLC5uCDU0HSNmi/XiSpD 0wt5XUFAnQJVHv0i3UGw7aBT5oYCwrJRmLt8g5AFSCa90oQL8HRDMLPCHdnbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwuVaYT88057I2jRAbLWkQwSr8BIwHwYDVR0j BBgwFoAUYt1BUULd12+xZaORjgm6WJHWrdAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTA0ZjY3MC03ZGFjLTRjZjQtOTkxZC01MDUzOWUzZDNmNWUvMC82MkRENDE1MTQy RERENzZGQjE2NUEzOTE4RTA5QkE1ODkxRDZBREQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjJERDQxNTE0MkRERDc2RkIxNjVBMzkxOEUwOUJBNTg5MUQ2 QUREMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTkwNGY2NzAtN2RhYy00Y2Y0LTk5 MWQtNTA1MzllM2QzZjVlLzAvNjJERDQxNTE0MkRERDc2RkIxNjVBMzkxOEUwOUJB NTg5MUQ2QUREMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA4knVc+ZHSi729TK9O9EN5nikWOrjMe1IkU 7cBAzPtWCmLmoQ4V2g5pw1yNwHw3zc/TmTGXmIDj+JNyFhqIX6CGplG1glAmdp2q XYe73RhbvuYTm+l+eTqioYGVul1XxuMmBvx2qv6o5b8IfblIf6iaElhN4sZFxu+W agSROKKGksml+Sq96n91pAlwjsNuwIXn8exDmnyFb+7xo/OK/xWkrENCWPPlUqYg vcrkbfVB4xi9I3arsfYNROcwrMeefECy1RMG+6VMYRD7tO2DU4piGiU7RwbFMU0y 8Y3wv/3J/0Y7Y2SoSOGK58j7ULGWs+qM5+ZS/lJSjdUI5diyb20= -----END CERTIFICATE-----Generated at Fri Apr 25 17:11:51 2025 by rpki-client on console.sobornost.net