$ rpki-client -vvf repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft File: 1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft (raw, json) Hash identifier: zm/KcAddEEdZQjxUxMUIalGultby7dtJ7r2mfTYeEQw= Subject key identifier: C9:1B:3F:97:5B:48:E8:1E:0B:62:1C:CC:64:2C:45:E0:AF:6C:50:2F Authority key identifier: 1F:D7:CE:EC:69:DE:A7:83:83:83:31:7F:FB:0D:4A:10:7A:F4:57:2A Certificate issuer: /CN=1FD7CEEC69DEA7838383317FFB0D4A107AF4572A Certificate serial: 07EA9DFE43B032A1437E60C9922D3ED0301AA35C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft Manifest number: 0439 Signing time: Wed 23 Apr 2025 23:02:13 +0000 Manifest this update: Wed 23 Apr 2025 22:57:13 +0000 Manifest next update: Sun 27 Apr 2025 04:25:13 +0000 Files and hashes: 1: 3130332e3232352e3137302e302f32342d3234203d3e203436303437.roa (hash: JJTSpueK+8xOey5mADXWIZ6VRAaWkGW2eN97ELtB3co=) 2: 323430353a316463303a3a2f33322d3438203d3e203436303437.roa (hash: R6jlOMebhI7dihMnvovn6K1+eHFopc71JfRc6zYxAOY=) 3: 3130332e3139352e3136382e302f32332d3234203d3e203436303437.roa (hash: bdO5l0ETxRn71OqLu5LsjllBOmAvc3iPhYJQJ+bSXoE=) 4: 1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.crl (hash: Qa8A8jIqBwniY6p7xGN4LE3TJvD3q/hujLRe79smGlo=) 5: 3230322e392e36392e302f32342d3234203d3e203436303437.roa (hash: IGi6DrH51U07XomDWdoiKr2G5BS4MVMB5tHm0OIctaE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.crl rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 02:40:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:ea:9d:fe:43:b0:32:a1:43:7e:60:c9:92:2d:3e:d0:30:1a:a3:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FD7CEEC69DEA7838383317FFB0D4A107AF4572A Validity Not Before: Apr 23 22:57:13 2025 GMT Not After : Apr 27 04:25:13 2025 GMT Subject: CN=C91B3F975B48E81E0B621CCC642C45E0AF6C502F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e4:e9:f1:75:40:f9:b5:fa:51:af:4f:9a:30: f2:76:0a:ff:39:54:72:dc:5c:d2:4e:e3:b6:c7:36: 8c:dc:92:aa:6b:6e:0d:fa:b5:9f:fc:92:08:9b:32: b0:94:44:de:ae:4e:b7:2c:5f:31:ed:39:b8:62:6e: 43:71:77:e2:8c:b4:82:5b:46:1b:ff:42:46:6c:6f: b3:e0:ec:60:e4:09:05:5f:a6:32:35:e2:5b:3c:ef: 06:cc:dc:9f:28:38:0a:5b:03:c5:da:48:e7:7c:1d: 64:89:83:48:91:9a:11:3d:5d:b0:04:3f:37:7c:bd: 57:cc:fb:af:38:84:01:c1:6a:26:bd:99:d9:55:a7: 76:90:f6:72:aa:97:60:f2:a9:70:8d:44:b9:95:10: dc:9a:09:11:62:49:c8:29:5c:c2:9b:75:65:ad:44: 98:12:18:4b:af:e7:79:fd:30:03:b3:30:dd:12:0d: 25:06:ba:1a:72:ad:ef:bb:20:fb:05:cb:b5:5c:88: 21:41:b8:8a:f5:3d:9e:2b:cb:88:ef:97:ca:ac:fc: bb:c9:6f:47:a3:17:01:92:73:82:1a:92:18:fa:2c: 54:d2:42:ab:d8:41:d8:99:70:66:ec:5e:62:f4:18: 86:ce:ae:22:43:9d:9d:64:ba:bb:7f:65:6a:6b:3a: 91:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:1B:3F:97:5B:48:E8:1E:0B:62:1C:CC:64:2C:45:E0:AF:6C:50:2F X509v3 Authority Key Identifier: keyid:1F:D7:CE:EC:69:DE:A7:83:83:83:31:7F:FB:0D:4A:10:7A:F4:57:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:75:4a:c6:e4:27:30:51:12:d6:86:d8:e1:37:13:86:77:0a: d0:6b:f4:91:af:d1:93:ba:ff:23:6b:55:2e:dd:bd:63:a7:92: 0b:f6:29:0f:01:78:1b:9c:8b:33:d8:da:05:14:19:a3:6c:c0: cc:a3:d4:77:96:a6:77:ec:40:5c:86:77:3a:b4:97:50:bb:c8: d2:b4:f7:16:e6:f0:e8:ce:af:7b:18:74:48:7f:c6:b8:4a:ae: 6e:93:6e:3f:e4:59:b9:6b:de:e0:82:f3:0b:92:7d:6c:f1:06: b3:71:88:86:2b:0e:ef:3f:8c:48:f2:58:b4:24:e9:ee:7e:95: 6b:5a:b4:f0:8f:09:05:2d:44:c9:58:68:cb:ed:51:2c:96:6c: 73:2b:4d:3f:cc:72:bd:27:89:f6:25:72:7c:b9:f8:5e:53:17: 75:d5:52:b3:ae:ba:12:1e:ac:56:18:45:17:77:cc:ea:a0:1a: 01:53:96:69:6b:5b:51:ce:a8:98:38:63:2d:a4:e7:db:10:b5: e0:61:45:58:4e:e0:97:b3:13:bc:77:d8:e1:dc:72:c4:54:3d: 01:b4:35:26:a3:d4:4d:5c:e8:81:13:55:4f:33:9a:16:c8:d4: bb:08:97:71:40:f6:9e:5b:64:94:23:b2:e7:6a:fb:32:b9:35: d5:c7:9d:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB+qd/kOwMqFDfmDJki0+0DAao1wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZEN0NFRUM2OURFQTc4MzgzODMzMTdGRkIwRDRBMTA3 QUY0NTcyQTAeFw0yNTA0MjMyMjU3MTNaFw0yNTA0MjcwNDI1MTNaMDMxMTAvBgNV BAMTKEM5MUIzRjk3NUI0OEU4MUUwQjYyMUNDQzY0MkM0NUUwQUY2QzUwMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc5OnxdUD5tfpRr0+aMPJ2Cv85 VHLcXNJO47bHNozckqprbg36tZ/8kgibMrCURN6uTrcsXzHtObhibkNxd+KMtIJb Rhv/QkZsb7Pg7GDkCQVfpjI14ls87wbM3J8oOApbA8XaSOd8HWSJg0iRmhE9XbAE Pzd8vVfM+684hAHBaia9mdlVp3aQ9nKql2DyqXCNRLmVENyaCRFiScgpXMKbdWWt RJgSGEuv53n9MAOzMN0SDSUGuhpyre+7IPsFy7VciCFBuIr1PZ4ry4jvl8qs/LvJ b0ejFwGSc4Iakhj6LFTSQqvYQdiZcGbsXmL0GIbOriJDnZ1kurt/ZWprOpG9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyRs/l1tI6B4LYhzMZCxF4K9sUC8wHwYDVR0j BBgwFoAUH9fO7Gnep4ODgzF/+w1KEHr0VyowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZTEyOWM5NC1jNWE2LTRkZDQtYjM0YS03ZTM1M2RlNmNlODEvMC8xRkQ3Q0VFQzY5 REVBNzgzODM4MzMxN0ZGQjBENEExMDdBRjQ1NzJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZEN0NFRUM2OURFQTc4MzgzODMzMTdGRkIwRDRBMTA3QUY0 NTcyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWUxMjljOTQtYzVhNi00ZGQ0LWIz NGEtN2UzNTNkZTZjZTgxLzAvMUZEN0NFRUM2OURFQTc4MzgzODMzMTdGRkIwRDRB MTA3QUY0NTcyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA51SsbkJzBREtaG2OE3E4Z3CtBr9JGv0ZO6 /yNrVS7dvWOnkgv2KQ8BeBucizPY2gUUGaNswMyj1HeWpnfsQFyGdzq0l1C7yNK0 9xbm8OjOr3sYdEh/xrhKrm6Tbj/kWblr3uCC8wuSfWzxBrNxiIYrDu8/jEjyWLQk 6e5+lWtatPCPCQUtRMlYaMvtUSyWbHMrTT/Mcr0nifYlcny5+F5TF3XVUrOuuhIe rFYYRRd3zOqgGgFTlmlrW1HOqJg4Yy2k59sQteBhRVhO4JezE7x32OHccsRUPQG0 NSaj1E1c6IETVU8zmhbI1LsIl3FA9p5bZJQjsudq+zK5NdXHnQc= -----END CERTIFICATE-----Generated at Thu Apr 24 01:45:17 2025 by rpki-client on console.sobornost.net