$ rpki-client -vvf repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.mft File: D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.mft (raw, json) Hash identifier: 7lttNOhTg2FhwM0dQnkWSE0KzBCYh3bGCTuihhC6fP8= Subject key identifier: C4:05:A9:63:0B:AF:23:E2:31:60:54:5D:65:52:95:11:E0:3B:2E:29 Authority key identifier: D7:6C:F6:4B:32:F2:3D:8C:4E:BF:A0:28:11:D0:B0:8A:78:C6:12:D0 Certificate issuer: /CN=D76CF64B32F23D8C4EBFA02811D0B08A78C612D0 Certificate serial: 1061DE617B604DFBB958F60BF751BFE54DE7EBEF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.mft Manifest number: 01A7 Signing time: Wed 23 Apr 2025 06:01:43 +0000 Manifest this update: Wed 23 Apr 2025 05:56:43 +0000 Manifest next update: Sat 26 Apr 2025 11:03:43 +0000 Files and hashes: 1: 3130332e3136392e362e302f32332d3234203d3e20313431313037.roa (hash: LxMwNxJqtsDAew6t2HZWJN3elxDUrVZNuiLgSdrPlIM=) 2: D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.crl (hash: KgULJGUZLmany0cSFg0B/RD1bZSLV2Kg4LWg74u/AxY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.crl rsync://repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 11:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:61:de:61:7b:60:4d:fb:b9:58:f6:0b:f7:51:bf:e5:4d:e7:eb:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D76CF64B32F23D8C4EBFA02811D0B08A78C612D0 Validity Not Before: Apr 23 05:56:43 2025 GMT Not After : Apr 26 11:03:43 2025 GMT Subject: CN=C405A9630BAF23E23160545D65529511E03B2E29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:20:fa:12:ae:12:c3:3f:66:91:dc:a6:a8:6c: ff:3b:88:13:74:78:9d:51:e2:0c:cc:98:1c:36:eb: 32:90:15:b3:63:6e:f6:74:b3:39:af:4d:c2:d7:12: b4:1b:f1:3f:1f:b6:5b:40:ac:e6:ed:25:7f:d3:ff: 94:d5:12:d8:15:4a:78:37:dd:6a:ab:b9:c0:56:44: 2b:4c:3c:e0:4c:06:d3:19:63:2c:39:9d:0f:d5:16: 3a:f6:74:28:49:16:64:ec:de:e3:13:05:7d:d0:72: 07:8e:2f:62:66:35:39:b9:e6:db:c1:71:db:18:7d: b6:ee:e8:32:6a:ec:30:f0:04:1f:be:2c:46:08:4a: 2b:36:64:7c:a1:2f:7e:d4:28:60:fd:24:c4:67:4e: 2b:53:34:ca:90:6f:65:e2:36:cf:06:e4:28:2f:4a: 3c:96:6b:5e:af:dd:64:15:ef:17:97:58:3f:c9:9d: 06:1c:8a:78:df:96:df:4e:75:8c:a3:6b:f6:de:ec: 68:9a:d7:5d:f3:13:9e:fa:c8:a4:4b:f8:dc:77:d0: 81:e1:13:16:20:3e:53:17:9b:8c:be:f2:bd:c2:32: 4c:34:bf:cf:f6:20:f0:8a:be:96:c8:09:8f:99:38: e0:d4:88:99:c5:b3:5d:f7:55:3d:f3:a7:85:4e:64: 1f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:05:A9:63:0B:AF:23:E2:31:60:54:5D:65:52:95:11:E0:3B:2E:29 X509v3 Authority Key Identifier: keyid:D7:6C:F6:4B:32:F2:3D:8C:4E:BF:A0:28:11:D0:B0:8A:78:C6:12:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:96:c1:ec:b5:fb:1a:94:78:12:56:25:af:ad:7b:91:c1:4a: 46:d4:23:5b:3c:1f:4e:2b:96:5d:d2:d3:93:02:55:c4:54:9f: d0:5f:17:b7:d5:ed:96:84:2d:36:9b:8c:cf:9c:45:a0:98:24: 1d:68:bd:bd:0d:b3:74:c5:18:09:dc:ad:c7:fe:cc:99:ee:33: a8:c4:02:c7:d9:79:26:63:55:e8:cf:51:97:5a:32:6a:fc:2e: 00:f5:e8:a6:f5:4a:02:d2:fb:f7:be:04:7c:b0:ba:fc:0e:d2: cd:51:ff:5c:68:23:46:39:5f:71:79:90:96:57:51:c3:fc:02: b7:96:72:9c:05:8b:56:83:e4:a3:34:b5:69:9d:04:a3:2e:be: cd:4a:45:70:cd:d4:c6:8f:e2:28:d3:43:7a:72:5b:9e:23:06: a6:23:6b:71:7d:9f:50:ea:d8:60:06:db:ae:f2:6b:b3:ac:d0: 14:53:3e:68:43:9a:8b:e2:7f:d1:12:05:d9:b6:a0:18:4b:94: fc:fc:2b:ae:76:d2:89:9c:26:1b:4a:e8:0e:d6:a8:15:bf:00: 0d:97:9b:0b:b8:2e:08:b0:ae:64:4e:f3:84:a3:5f:7e:53:f9: d2:ae:5c:f3:02:a5:d2:85:f2:7d:c7:5f:60:16:69:e7:2a:64: 50:47:31:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEGHeYXtgTfu5WPYL91G/5U3n6+8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc2Q0Y2NEIzMkYyM0Q4QzRFQkZBMDI4MTFEMEIwOEE3 OEM2MTJEMDAeFw0yNTA0MjMwNTU2NDNaFw0yNTA0MjYxMTAzNDNaMDMxMTAvBgNV BAMTKEM0MDVBOTYzMEJBRjIzRTIzMTYwNTQ1RDY1NTI5NTExRTAzQjJFMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqIPoSrhLDP2aR3KaobP87iBN0 eJ1R4gzMmBw26zKQFbNjbvZ0szmvTcLXErQb8T8ftltArObtJX/T/5TVEtgVSng3 3WqrucBWRCtMPOBMBtMZYyw5nQ/VFjr2dChJFmTs3uMTBX3QcgeOL2JmNTm55tvB cdsYfbbu6DJq7DDwBB++LEYISis2ZHyhL37UKGD9JMRnTitTNMqQb2XiNs8G5Cgv SjyWa16v3WQV7xeXWD/JnQYcinjflt9OdYyja/be7Gia113zE576yKRL+Nx30IHh ExYgPlMXm4y+8r3CMkw0v8/2IPCKvpbICY+ZOODUiJnFs133VT3zp4VOZB+7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxAWpYwuvI+IxYFRdZVKVEeA7LikwHwYDVR0j BBgwFoAU12z2SzLyPYxOv6AoEdCwinjGEtAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTNlNGFmNS1hYWY1LTQ2Y2UtYjExOS1kN2U3NmRhZTIwYjgvMC9ENzZDRjY0QjMy RjIzRDhDNEVCRkEwMjgxMUQwQjA4QTc4QzYxMkQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDc2Q0Y2NEIzMkYyM0Q4QzRFQkZBMDI4MTFEMEIwOEE3OEM2 MTJEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDUzZTRhZjUtYWFmNS00NmNlLWIx MTktZDdlNzZkYWUyMGI4LzAvRDc2Q0Y2NEIzMkYyM0Q4QzRFQkZBMDI4MTFEMEIw OEE3OEM2MTJEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADeWwey1+xqUeBJWJa+te5HBSkbUI1s8H04r ll3S05MCVcRUn9BfF7fV7ZaELTabjM+cRaCYJB1ovb0Ns3TFGAncrcf+zJnuM6jE AsfZeSZjVejPUZdaMmr8LgD16Kb1SgLS+/e+BHywuvwO0s1R/1xoI0Y5X3F5kJZX UcP8AreWcpwFi1aD5KM0tWmdBKMuvs1KRXDN1MaP4ijTQ3pyW54jBqYja3F9n1Dq 2GAG267ya7Os0BRTPmhDmovif9ESBdm2oBhLlPz8K6520omcJhtK6A7WqBW/AA2X mwu4LgiwrmRO84SjX35T+dKuXPMCpdKF8n3HX2AWaecqZFBHMSU= -----END CERTIFICATE-----Generated at Wed Apr 23 08:55:52 2025 by rpki-client on console.sobornost.net