$ rpki-client -vvf repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.mft File: C2CA98CA4DD88D73DB67A24173E29FFA5D116402.mft (raw, json) Hash identifier: fj1c/eMx9w6c/UIRl31T1op8vprNSj/VCdjoih5VFJM= Subject key identifier: BD:D0:F6:3C:9C:03:C5:E2:A2:AC:B1:A9:4E:CB:B9:53:DD:4A:F2:C1 Authority key identifier: C2:CA:98:CA:4D:D8:8D:73:DB:67:A2:41:73:E2:9F:FA:5D:11:64:02 Certificate issuer: /CN=C2CA98CA4DD88D73DB67A24173E29FFA5D116402 Certificate serial: 5428ECABA938E2E9F9F24DE3EE99B2B9017346A4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.cer Subject info access: rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.mft Manifest number: 01ED Signing time: Thu 24 Apr 2025 01:41:05 +0000 Manifest this update: Thu 24 Apr 2025 01:36:05 +0000 Manifest next update: Sun 27 Apr 2025 02:10:05 +0000 Files and hashes: 1: 3130332e38312e36302e302f32322d3234203d3e20313336303630.roa (hash: fSyZW5UURSSq8c97wxQl2sx5mMYsc0LA9hnaSF/iy/A=) 2: C2CA98CA4DD88D73DB67A24173E29FFA5D116402.crl (hash: PwLDUMcYjFz7crWLPDNpBd39Fjd9gqmq67/Omscf4Vk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.crl rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 02:10:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:28:ec:ab:a9:38:e2:e9:f9:f2:4d:e3:ee:99:b2:b9:01:73:46:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2CA98CA4DD88D73DB67A24173E29FFA5D116402 Validity Not Before: Apr 24 01:36:05 2025 GMT Not After : Apr 27 02:10:05 2025 GMT Subject: CN=BDD0F63C9C03C5E2A2ACB1A94ECBB953DD4AF2C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:06:35:82:e8:b7:5d:dd:d0:d2:26:18:b1:c1: 01:f7:22:f8:1a:93:76:7b:c8:f7:b2:df:42:62:1f: bb:a8:e2:9a:4a:55:e7:c7:74:ad:6d:97:5b:35:a2: 1f:57:5b:29:49:37:77:49:10:c4:b4:5e:59:d6:22: 4e:66:c3:ce:93:d2:45:23:44:8c:dc:d5:7c:df:c4: 10:54:1d:7c:da:53:80:71:ee:d7:c0:ad:de:1e:23: 7f:25:9b:98:a4:82:a1:61:f6:29:f5:e0:e4:eb:85: 17:84:3f:e0:f6:cc:29:4e:96:0a:80:0f:0b:a0:ee: 59:d0:66:f1:4f:d6:a3:e7:a6:0b:d2:82:24:a7:c1: c8:00:ed:8f:9a:43:16:0a:76:2b:31:9e:5d:8b:e6: 9b:89:f7:27:eb:35:3d:29:81:cd:31:93:35:6d:a8: 5b:14:0b:e5:42:16:c6:21:22:38:83:22:29:0c:be: d3:3f:50:33:24:39:d3:fb:a1:58:c4:33:64:d9:a4: 94:6d:ac:ac:fe:ba:b7:8a:a5:8a:93:31:ac:20:c9: 26:67:6a:6d:08:1c:c6:bb:d4:f9:9c:ec:b3:6b:d1: 9c:1f:c3:b0:ef:33:d3:a5:63:51:1d:1a:5b:e6:47: 70:67:9d:b7:de:c7:ed:c5:37:cf:88:b1:84:6a:3a: 0f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:D0:F6:3C:9C:03:C5:E2:A2:AC:B1:A9:4E:CB:B9:53:DD:4A:F2:C1 X509v3 Authority Key Identifier: keyid:C2:CA:98:CA:4D:D8:8D:73:DB:67:A2:41:73:E2:9F:FA:5D:11:64:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:92:0a:b0:5b:50:2d:65:61:a2:2d:f3:46:29:b6:f1:c5:55: 87:66:47:87:d9:b5:5a:c1:9d:e6:44:8c:86:ab:9b:1b:12:09: 7f:d0:36:a3:5a:c2:95:b5:4f:b4:7b:82:26:bf:99:46:0d:09: c6:b4:f6:c0:6d:1e:47:ab:a6:97:d6:8f:a3:60:54:0a:20:87: 3c:a3:90:3e:eb:15:fa:a4:01:a8:f0:f2:9c:80:a4:36:70:09: 07:36:03:53:b6:f6:3e:f6:0e:e7:34:5e:07:86:a0:05:fb:eb: 2f:b1:ea:48:57:c6:de:9a:db:64:15:c3:32:7c:98:39:5c:c1: 44:c7:b4:fc:55:cb:8b:8e:76:2f:ba:4b:e3:40:18:67:7c:1a: c8:2c:21:8f:24:46:91:80:85:ed:73:f5:4e:c1:e3:dd:88:16: 4f:af:fc:3a:51:8e:8a:6e:69:8c:ab:39:26:29:19:95:6f:60: 4a:f4:08:20:34:31:20:50:dd:e3:92:1b:d8:19:1e:b9:b3:5c: aa:c9:62:44:54:c9:8e:ea:3a:d0:aa:10:76:b4:a8:17:8a:06: 5a:94:f7:77:37:15:33:f4:dd:dd:85:60:ba:21:ea:4b:31:ba: e3:fa:e0:e3:ff:3d:a0:bb:79:cc:3e:13:4f:fc:c5:67:a3:4c: 43:f0:26:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVCjsq6k44un58k3j7pmyuQFzRqQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJDQTk4Q0E0REQ4OEQ3M0RCNjdBMjQxNzNFMjlGRkE1 RDExNjQwMjAeFw0yNTA0MjQwMTM2MDVaFw0yNTA0MjcwMjEwMDVaMDMxMTAvBgNV BAMTKEJERDBGNjNDOUMwM0M1RTJBMkFDQjFBOTRFQ0JCOTUzREQ0QUYyQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClBjWC6Ldd3dDSJhixwQH3Ivga k3Z7yPey30JiH7uo4ppKVefHdK1tl1s1oh9XWylJN3dJEMS0XlnWIk5mw86T0kUj RIzc1XzfxBBUHXzaU4Bx7tfArd4eI38lm5ikgqFh9in14OTrhReEP+D2zClOlgqA Dwug7lnQZvFP1qPnpgvSgiSnwcgA7Y+aQxYKdisxnl2L5puJ9yfrNT0pgc0xkzVt qFsUC+VCFsYhIjiDIikMvtM/UDMkOdP7oVjEM2TZpJRtrKz+ureKpYqTMawgySZn am0IHMa71Pmc7LNr0Zwfw7DvM9OlY1EdGlvmR3Bnnbfex+3FN8+IsYRqOg/HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvdD2PJwDxeKirLGpTsu5U91K8sEwHwYDVR0j BBgwFoAUwsqYyk3YjXPbZ6JBc+Kf+l0RZAIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MTU3NmQ0Yy0xNzQ1LTRhMTYtOGVlZi1jZWMwODFjODIwNDMvMC9DMkNBOThDQTRE RDg4RDczREI2N0EyNDE3M0UyOUZGQTVEMTE2NDAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzJDQTk4Q0E0REQ4OEQ3M0RCNjdBMjQxNzNFMjlGRkE1RDEx NjQwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE1NzZkNGMtMTc0NS00YTE2LThl ZWYtY2VjMDgxYzgyMDQzLzAvQzJDQTk4Q0E0REQ4OEQ3M0RCNjdBMjQxNzNFMjlG RkE1RDExNjQwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAImSCrBbUC1lYaIt80YptvHFVYdmR4fZtVrB neZEjIarmxsSCX/QNqNawpW1T7R7gia/mUYNCca09sBtHkerppfWj6NgVAoghzyj kD7rFfqkAajw8pyApDZwCQc2A1O29j72Duc0XgeGoAX76y+x6khXxt6a22QVwzJ8 mDlcwUTHtPxVy4uOdi+6S+NAGGd8GsgsIY8kRpGAhe1z9U7B492IFk+v/DpRjopu aYyrOSYpGZVvYEr0CCA0MSBQ3eOSG9gZHrmzXKrJYkRUyY7qOtCqEHa0qBeKBlqU 93c3FTP03d2FYLoh6ksxuuP64OP/PaC7ecw+E0/8xWejTEPwJhQ= -----END CERTIFICATE-----Generated at Thu Apr 24 04:31:37 2025 by rpki-client on console.sobornost.net