$ rpki-client -vvf repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.mft File: 1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.mft (raw, json) Hash identifier: ebDRY7kOBmVqWbFC3ouavlkPvhnJVCi67lrEdzadU7Q= Subject key identifier: 07:DE:4F:20:33:28:6F:28:34:DC:55:87:43:01:3B:AD:D4:33:9D:DC Authority key identifier: 1B:F9:9D:4D:CD:5B:F5:03:BE:97:23:AB:F5:51:DD:D7:0D:C1:46:4F Certificate issuer: /CN=1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F Certificate serial: 0A597191C17B303BFADC0F9E3825A597BC3B2258 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.mft Manifest number: 016F Signing time: Thu 24 Apr 2025 17:20:04 +0000 Manifest this update: Thu 24 Apr 2025 17:15:04 +0000 Manifest next update: Mon 28 Apr 2025 04:17:04 +0000 Files and hashes: 1: 3131342e3134312e39302e302f32342d3234203d3e203338373733.roa (hash: 9CQ6JFUhExdNBAYYYWcUpyzc1PDrxOfBKcNbdLlWf6U=) 2: 3131342e3134312e38392e302f32342d3234203d3e203338373733.roa (hash: 8i3x4gBaZ9q2FeKL77QwQugTPoFrVoqppzokcKf7V9U=) 3: 3131342e3134312e39352e302f32342d3234203d3e20313338383138.roa (hash: hHpqodeyU8amc0Yg+Vz1Yb1kEzG9g5qGdXKGONkFhDE=) 4: 1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.crl (hash: mQTT3C2RytPPB+iogZw461pjZD6FsrvdraRzX7tykcs=) 5: 3131342e3134312e39342e302f32342d3234203d3e20313338383138.roa (hash: CSQkGTmQt+s2JfwWnvim+F5o3slRbbgf9XyF9r9GepU=) 6: 3131342e3134312e39322e302f32342d3234203d3e20313338383138.roa (hash: K3N55cBe6+W2+UEDhGR/EreK/NsWeZinIyNl1uxEyoA=) 7: 3131342e3134312e39332e302f32342d3234203d3e20313338383138.roa (hash: FqS1mlGjIL0BP5gK9enlmVRuaz2y9/mIcmX+UTD+qKA=) 8: 3131342e3134312e39312e302f32342d3234203d3e20313338383138.roa (hash: IJ/QrpohwAAMEHf60VyOYZyE2rLKrvAARpcXl8wmM9I=) 9: 3131342e3134312e38382e302f32342d3234203d3e203338373733.roa (hash: uzdxCFJ60y1EqFPWBfLgLUEnJ7LWJrfPQeMyJb9m5FM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.crl rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:59:71:91:c1:7b:30:3b:fa:dc:0f:9e:38:25:a5:97:bc:3b:22:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F Validity Not Before: Apr 24 17:15:04 2025 GMT Not After : Apr 28 04:17:04 2025 GMT Subject: CN=07DE4F2033286F2834DC558743013BADD4339DDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:16:70:7b:66:6b:1b:24:e5:75:a0:b7:55:21: 36:fe:7a:14:c6:77:90:7c:4e:0c:97:bb:f8:ca:16: 0e:2f:f9:e3:fa:f7:71:c4:8c:6c:cf:ac:72:18:6b: b4:d9:39:e4:af:a3:b2:2e:f8:2d:4e:f5:23:49:35: f8:2f:99:39:8f:48:27:9a:2c:a7:c8:b3:c4:e8:10: 1e:ca:6d:32:22:c8:1a:0b:86:2e:64:05:5c:ad:7c: 8c:6c:eb:14:c4:e7:f0:c1:f2:b4:80:2d:46:e7:79: cc:b6:e6:6a:02:00:15:f5:77:13:03:dc:d2:09:b1: b6:c2:3b:34:9e:b8:6d:a0:81:65:95:a5:54:1e:1d: 6b:17:8c:09:f5:66:b8:5d:fd:fa:1b:7b:98:6f:a8: c2:22:ba:d1:8e:89:fe:d8:90:83:2e:e6:a8:35:85: 6a:10:c3:93:fb:2e:07:88:af:95:e5:8d:14:45:de: 17:a0:e2:15:41:ed:38:67:44:42:e3:76:32:15:bd: ea:2f:75:64:a1:07:0c:46:78:6c:ef:a0:9d:c5:18: c6:9c:9f:b9:02:3b:7d:6b:66:57:ac:fc:96:95:86: 02:f9:7e:db:40:64:3b:84:f6:c7:9a:d1:66:11:a4: 8a:60:27:c0:dc:a2:65:34:a2:4d:e5:ee:62:d1:e3: bf:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:DE:4F:20:33:28:6F:28:34:DC:55:87:43:01:3B:AD:D4:33:9D:DC X509v3 Authority Key Identifier: keyid:1B:F9:9D:4D:CD:5B:F5:03:BE:97:23:AB:F5:51:DD:D7:0D:C1:46:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:55:f0:81:ea:5a:cf:aa:0a:6d:b6:a1:70:eb:f3:ef:69:40: be:c8:ef:9d:80:85:96:8b:8d:3d:ca:d6:b2:f3:62:2f:f3:d4: aa:8a:dc:a1:18:6e:a0:af:f8:0b:e0:1c:6c:dd:17:6a:b1:35: 65:48:72:c7:de:37:67:a0:4c:b6:f2:86:7a:7d:e4:1d:91:f6: 36:69:f7:0c:82:11:d8:c0:2c:81:44:d2:69:c1:c2:9a:70:20: 00:77:31:ed:cc:64:62:05:8b:9d:36:a6:41:7c:fa:0c:c2:22: 56:fb:d4:17:bf:ae:2c:9c:6e:11:cb:b2:9e:38:c0:37:30:f9: 57:5f:65:5b:cd:ab:0a:04:7c:36:d4:ec:a6:8b:c3:0e:3e:cf: 45:7a:bf:93:ff:70:70:6a:38:29:81:70:28:25:85:54:b8:91: c5:48:b4:bc:f5:28:19:a7:29:e8:ba:43:03:b2:a1:0f:94:62: ec:a9:58:85:d5:7b:84:9a:ce:9a:ce:15:53:8c:f5:bb:3b:e4: 87:c7:0f:4b:f1:e5:f8:83:dd:f5:7a:13:86:e2:b0:56:28:33: c1:39:70:fd:bd:30:4f:c3:33:b2:42:50:68:ae:2f:87:95:02: 7a:e2:e9:69:00:b9:49:78:32:21:d2:aa:dc:73:7e:bb:f0:0f: 2e:09:61:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCllxkcF7MDv63A+eOCWll7w7IlgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJGOTlENERDRDVCRjUwM0JFOTcyM0FCRjU1MURERDcw REMxNDY0RjAeFw0yNTA0MjQxNzE1MDRaFw0yNTA0MjgwNDE3MDRaMDMxMTAvBgNV BAMTKDA3REU0RjIwMzMyODZGMjgzNERDNTU4NzQzMDEzQkFERDQzMzlEREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtFnB7ZmsbJOV1oLdVITb+ehTG d5B8TgyXu/jKFg4v+eP693HEjGzPrHIYa7TZOeSvo7Iu+C1O9SNJNfgvmTmPSCea LKfIs8ToEB7KbTIiyBoLhi5kBVytfIxs6xTE5/DB8rSALUbnecy25moCABX1dxMD 3NIJsbbCOzSeuG2ggWWVpVQeHWsXjAn1Zrhd/fobe5hvqMIiutGOif7YkIMu5qg1 hWoQw5P7LgeIr5XljRRF3heg4hVB7ThnRELjdjIVveovdWShBwxGeGzvoJ3FGMac n7kCO31rZles/JaVhgL5fttAZDuE9sea0WYRpIpgJ8DcomU0ok3l7mLR478tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB95PIDMobyg03FWHQwE7rdQzndwwHwYDVR0j BBgwFoAUG/mdTc1b9QO+lyOr9VHd1w3BRk8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j N2ZjNTRmYi03MjRlLTQzMTYtYjliYy0xYzRiMDZlYTU3YWUvMC8xQkY5OUQ0RENE NUJGNTAzQkU5NzIzQUJGNTUxRERENzBEQzE0NjRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUJGOTlENERDRDVCRjUwM0JFOTcyM0FCRjU1MURERDcwREMx NDY0Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzdmYzU0ZmItNzI0ZS00MzE2LWI5 YmMtMWM0YjA2ZWE1N2FlLzAvMUJGOTlENERDRDVCRjUwM0JFOTcyM0FCRjU1MURE RDcwREMxNDY0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJRV8IHqWs+qCm22oXDr8+9pQL7I752AhZaL jT3K1rLzYi/z1KqK3KEYbqCv+AvgHGzdF2qxNWVIcsfeN2egTLbyhnp95B2R9jZp 9wyCEdjALIFE0mnBwppwIAB3Me3MZGIFi502pkF8+gzCIlb71Be/riycbhHLsp44 wDcw+VdfZVvNqwoEfDbU7KaLww4+z0V6v5P/cHBqOCmBcCglhVS4kcVItLz1KBmn Kei6QwOyoQ+UYuypWIXVe4SazprOFVOM9bs75IfHD0vx5fiD3fV6E4bisFYoM8E5 cP29ME/DM7JCUGiuL4eVAnri6WkAuUl4MiHSqtxzfrvwDy4JYdo= -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:24 2025 by rpki-client on console.sobornost.net