$ rpki-client -vvf repo-rpki.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/DD68C98D519CC8D624F664B026AEB9B289EE819C.mft File: DD68C98D519CC8D624F664B026AEB9B289EE819C.mft (raw, json) Hash identifier: pSN6zIVDzeRMARSmiclGotHgJf4jdo8FcKcWIJffpNs= Subject key identifier: 6B:D4:BE:B8:AD:79:D8:E3:60:D9:A9:C0:25:E8:C4:CC:10:48:06:0E Authority key identifier: DD:68:C9:8D:51:9C:C8:D6:24:F6:64:B0:26:AE:B9:B2:89:EE:81:9C Certificate issuer: /CN=DD68C98D519CC8D624F664B026AEB9B289EE819C Certificate serial: 09AC2D3AD1AB4537697FBF13AC036DCA82B892BC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD68C98D519CC8D624F664B026AEB9B289EE819C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/DD68C98D519CC8D624F664B026AEB9B289EE819C.mft Manifest number: 0192 Signing time: Thu 24 Apr 2025 22:41:46 +0000 Manifest this update: Thu 24 Apr 2025 22:36:46 +0000 Manifest next update: Mon 28 Apr 2025 06:17:46 +0000 Files and hashes: 1: DD68C98D519CC8D624F664B026AEB9B289EE819C.crl (hash: zOTvOdDgqwKQ96ZJpe39QWZl1fqgllFbZuF6Xyz7Y70=) 2: 3130332e33362e35322e302f32342d3234203d3e2039333431.roa (hash: nSaffT2loCbCY4DbpP8GpLCrFZYYKh3bE+jC1cyDP9Y=) 3: 3130332e33362e35332e302f32342d3234203d3e2039333431.roa (hash: n7fDyeuU1HQZdFIYr/m3ZztFKIf2iIRMeVjsry1/EpQ=) 4: 3130332e33362e35322e302f32332d3233203d3e2039333431.roa (hash: fGeQBiKX+xxqfH1XXT4otHk8nTCoBgbZ9CMCkIFVfP8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/DD68C98D519CC8D624F664B026AEB9B289EE819C.crl rsync://repo-rpki.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/DD68C98D519CC8D624F664B026AEB9B289EE819C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD68C98D519CC8D624F664B026AEB9B289EE819C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:ac:2d:3a:d1:ab:45:37:69:7f:bf:13:ac:03:6d:ca:82:b8:92:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD68C98D519CC8D624F664B026AEB9B289EE819C Validity Not Before: Apr 24 22:36:46 2025 GMT Not After : Apr 28 06:17:46 2025 GMT Subject: CN=6BD4BEB8AD79D8E360D9A9C025E8C4CC1048060E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:ee:18:9a:f6:78:6b:f0:86:b0:e0:1c:79:3b: d7:6e:c9:fa:34:65:08:26:17:b9:d1:bc:a5:27:35: 2c:64:6a:19:b9:af:dc:48:09:31:1f:85:a8:f1:31: 06:a4:8a:02:9e:59:9a:2f:70:b6:66:8b:4d:4b:85: 7e:87:7c:33:b0:32:0d:81:7f:4f:64:54:5e:43:0b: e4:24:24:7f:7f:00:d7:01:56:30:f6:6c:ad:f7:e9: f4:6a:91:b1:59:1f:ea:a4:bd:ea:73:fc:0e:b9:b7: a3:3c:2d:1a:3d:ec:6e:c0:22:56:a1:f8:e5:68:95: f6:c0:1f:c4:09:da:15:dc:e7:dc:73:38:77:21:02: 6b:11:ba:e8:fe:9e:0d:72:a9:92:4a:d4:34:ef:24: c0:54:df:95:6d:b8:af:e2:b9:e7:91:6e:68:5d:d6: d7:1d:d0:79:2e:c3:a4:1b:f3:10:cd:18:3e:79:07: 69:be:ca:de:76:c4:9a:67:c4:77:88:2f:7c:84:e0: 74:26:22:aa:0f:a4:a7:3e:66:5d:0c:8f:72:27:f6: 68:a1:88:8c:d3:75:b5:57:df:79:a7:52:5c:31:7a: 45:a9:a3:47:9d:50:74:2f:25:d6:ed:0a:37:04:d9: 73:bf:f6:0c:52:68:a6:e5:23:4e:f4:ce:22:53:a0: eb:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:D4:BE:B8:AD:79:D8:E3:60:D9:A9:C0:25:E8:C4:CC:10:48:06:0E X509v3 Authority Key Identifier: keyid:DD:68:C9:8D:51:9C:C8:D6:24:F6:64:B0:26:AE:B9:B2:89:EE:81:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/DD68C98D519CC8D624F664B026AEB9B289EE819C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD68C98D519CC8D624F664B026AEB9B289EE819C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/DD68C98D519CC8D624F664B026AEB9B289EE819C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:a1:2b:ae:ca:86:de:e2:61:13:51:4b:3f:8e:37:36:1b:b0: ed:2c:ac:84:f9:f4:dd:6a:47:ee:c7:6e:c1:d8:52:a4:02:4a: 1e:53:80:ef:16:57:ad:d6:c2:5c:9e:20:53:95:9f:76:a7:66: 7f:25:88:30:a0:54:e4:45:3f:c6:9b:d0:0f:02:ab:73:ee:ca: f4:57:d4:eb:f4:02:15:73:36:aa:54:43:e8:45:89:68:75:16: e1:a2:14:54:8d:68:07:4d:d3:d7:cf:c9:15:9f:72:74:60:68: 4e:60:a0:45:ad:14:68:2f:42:d7:b2:8b:17:12:78:1b:36:77: fd:a8:b8:24:1f:0b:3b:51:97:1e:24:d8:df:82:16:65:c0:1e: 10:15:ff:98:01:93:ae:bc:e5:ac:87:01:d5:ad:42:48:76:ba: 77:c1:ea:aa:63:12:7c:7e:a3:05:ae:19:89:4f:d5:25:f4:60: 6a:15:fa:af:69:5b:91:33:86:70:1e:b0:c6:d5:23:a4:97:ce: b9:cb:fa:4c:24:41:ce:b1:36:79:93:48:2a:b7:ae:47:d4:d0: 88:b3:99:f2:f6:ae:86:59:72:5c:59:ac:6a:59:e5:5b:49:b3: f1:c8:a7:53:5a:d5:7c:16:8d:88:2e:5b:e3:b9:cf:3a:ee:2a: b0:c0:fb:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCawtOtGrRTdpf78TrANtyoK4krwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ2OEM5OEQ1MTlDQzhENjI0RjY2NEIwMjZBRUI5QjI4 OUVFODE5QzAeFw0yNTA0MjQyMjM2NDZaFw0yNTA0MjgwNjE3NDZaMDMxMTAvBgNV BAMTKDZCRDRCRUI4QUQ3OUQ4RTM2MEQ5QTlDMDI1RThDNENDMTA0ODA2MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDr7hia9nhr8Iaw4Bx5O9duyfo0 ZQgmF7nRvKUnNSxkahm5r9xICTEfhajxMQakigKeWZovcLZmi01LhX6HfDOwMg2B f09kVF5DC+QkJH9/ANcBVjD2bK336fRqkbFZH+qkvepz/A65t6M8LRo97G7AIlah +OVolfbAH8QJ2hXc59xzOHchAmsRuuj+ng1yqZJK1DTvJMBU35VtuK/iueeRbmhd 1tcd0Hkuw6Qb8xDNGD55B2m+yt52xJpnxHeIL3yE4HQmIqoPpKc+Zl0Mj3In9mih iIzTdbVX33mnUlwxekWpo0edUHQvJdbtCjcE2XO/9gxSaKblI070ziJToOvnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUa9S+uK152ONg2anAJejEzBBIBg4wHwYDVR0j BBgwFoAU3WjJjVGcyNYk9mSwJq65sonugZwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDQzYTg4OS1jODYxLTRkMjktOWQ3Ny05MjNkOTI3ZTc2MzQvMC9ERDY4Qzk4RDUx OUNDOEQ2MjRGNjY0QjAyNkFFQjlCMjg5RUU4MTlDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQ2OEM5OEQ1MTlDQzhENjI0RjY2NEIwMjZBRUI5QjI4OUVF ODE5Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA0M2E4ODktYzg2MS00ZDI5LTlk NzctOTIzZDkyN2U3NjM0LzAvREQ2OEM5OEQ1MTlDQzhENjI0RjY2NEIwMjZBRUI5 QjI4OUVFODE5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEWhK67Kht7iYRNRSz+ONzYbsO0srIT59N1q R+7HbsHYUqQCSh5TgO8WV63WwlyeIFOVn3anZn8liDCgVORFP8ab0A8Cq3PuyvRX 1Ov0AhVzNqpUQ+hFiWh1FuGiFFSNaAdN09fPyRWfcnRgaE5goEWtFGgvQteyixcS eBs2d/2ouCQfCztRlx4k2N+CFmXAHhAV/5gBk6685ayHAdWtQkh2unfB6qpjEnx+ owWuGYlP1SX0YGoV+q9pW5EzhnAesMbVI6SXzrnL+kwkQc6xNnmTSCq3rkfU0Iiz mfL2roZZclxZrGpZ5VtJs/HIp1Na1XwWjYguW+O5zzruKrDA+0w= -----END CERTIFICATE-----Generated at Fri Apr 25 06:02:23 2025 by rpki-client on console.sobornost.net