$ rpki-client -vvf repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.mft File: CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.mft (raw, json) Hash identifier: LheNg3NcF1UPTQwXDkqA3FGac4pu65JJdJNhcg2KQV0= Subject key identifier: E1:D1:E0:39:2B:75:A6:84:B9:F0:20:54:A7:20:DE:41:0C:48:AF:1E Authority key identifier: CF:0F:FF:D4:7B:D1:49:C7:07:0F:D3:FF:BB:1B:08:AE:FC:18:87:5A Certificate issuer: /CN=CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A Certificate serial: 7972081531A39B8C6511CBE8CCE0D297D7AF60F1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.mft Manifest number: 78 Signing time: Thu 24 Apr 2025 05:31:44 +0000 Manifest this update: Thu 24 Apr 2025 05:26:44 +0000 Manifest next update: Sun 27 Apr 2025 16:32:44 +0000 Files and hashes: 1: CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.crl (hash: Ik+PTQeMVNhR1OMBl7xeqBafp+WsSFupdoSOdullkzI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.crl rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 08:44:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:72:08:15:31:a3:9b:8c:65:11:cb:e8:cc:e0:d2:97:d7:af:60:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A Validity Not Before: Apr 24 05:26:44 2025 GMT Not After : Apr 27 16:32:44 2025 GMT Subject: CN=E1D1E0392B75A684B9F02054A720DE410C48AF1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:10:59:1f:73:f5:a3:fc:74:c3:c4:4c:52:97: 86:da:b7:50:fa:16:77:b6:c9:48:e9:a0:bf:7c:a6: 90:6e:db:e9:14:9e:cd:01:b2:cd:93:16:ad:a7:a7: c3:66:33:0c:15:94:5d:89:0a:c1:0c:20:63:56:24: 4d:11:1f:0b:66:35:c3:c0:28:6e:19:a9:f4:40:7e: e5:ec:05:b9:d0:dc:45:6c:35:c5:cc:72:2d:7d:e1: f0:07:f2:12:bb:1d:9e:36:8b:f3:4b:95:a3:b1:4d: 8c:5c:00:c4:72:27:d3:3c:6d:78:18:fb:dd:56:14: b4:05:49:2b:f6:66:b4:ae:ca:bd:2d:6a:1a:5e:6d: d3:60:a7:e5:f3:48:71:99:2a:6c:7e:a1:ec:cf:a3: 25:34:6e:a6:69:e5:eb:45:09:fc:a0:e6:6b:71:74: 6a:13:9d:1c:71:b6:de:08:06:7c:b8:f9:5f:b2:22: 01:5f:60:e5:7e:f5:d8:9b:0e:63:9b:44:e5:20:d6: ba:c5:ff:26:6d:e3:8c:2e:38:6a:14:24:f4:af:bf: d8:a3:77:09:23:0e:2f:0b:e7:a6:1a:4e:d3:e2:f9: dc:44:45:c1:c7:83:6d:40:4e:1c:bb:08:0a:a9:6f: 56:e1:10:e1:52:39:02:60:27:5d:70:b1:c5:13:db: 64:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:D1:E0:39:2B:75:A6:84:B9:F0:20:54:A7:20:DE:41:0C:48:AF:1E X509v3 Authority Key Identifier: keyid:CF:0F:FF:D4:7B:D1:49:C7:07:0F:D3:FF:BB:1B:08:AE:FC:18:87:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:04:f7:02:38:e3:cf:1f:a5:7a:ff:65:3c:f0:9e:82:6f:21: 0d:d9:74:c2:66:ed:40:32:0a:6a:d6:2b:81:8c:19:ba:85:ff: 38:52:11:ec:e8:de:76:71:76:47:4d:31:15:b6:b5:a0:26:54: 2e:4a:7e:79:88:4e:10:e8:05:d3:90:da:25:f2:eb:1a:0d:a3: a1:c2:62:e3:8a:9d:85:28:4e:12:02:5f:3b:fb:48:cc:fd:eb: b8:5e:b7:9f:14:f2:db:1a:fa:82:4c:c2:f0:95:2e:d6:24:96: 5e:63:5a:2c:81:74:d2:5d:32:5e:fb:ee:23:fb:ea:dd:06:86: 24:01:9d:00:39:db:37:43:fd:6e:5e:5d:e2:23:db:5f:f0:11: 97:aa:e6:5e:93:72:e4:0f:e9:e3:ce:96:81:ab:f9:62:4f:cd: 1b:ec:18:c3:07:1d:26:d7:c0:0c:73:23:85:13:aa:a8:af:9d: 17:02:2c:2c:a2:47:fb:58:64:25:3e:1b:e3:76:40:f1:48:27: 0b:62:0f:7a:7d:b9:17:e4:26:66:f5:1a:81:b8:c2:a2:6e:c3: c5:5d:df:3b:c1:4e:19:c2:e5:ac:ab:4a:48:1c:b2:a4:ae:64: fb:64:52:be:21:e6:f1:1f:7e:75:0d:45:93:eb:5e:1b:32:29: 9a:00:86:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeXIIFTGjm4xlEcvozODSl9evYPEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YwRkZGRDQ3QkQxNDlDNzA3MEZEM0ZGQkIxQjA4QUVG QzE4ODc1QTAeFw0yNTA0MjQwNTI2NDRaFw0yNTA0MjcxNjMyNDRaMDMxMTAvBgNV BAMTKEUxRDFFMDM5MkI3NUE2ODRCOUYwMjA1NEE3MjBERTQxMEM0OEFGMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaEFkfc/Wj/HTDxExSl4bat1D6 Fne2yUjpoL98ppBu2+kUns0Bss2TFq2np8NmMwwVlF2JCsEMIGNWJE0RHwtmNcPA KG4ZqfRAfuXsBbnQ3EVsNcXMci194fAH8hK7HZ42i/NLlaOxTYxcAMRyJ9M8bXgY +91WFLQFSSv2ZrSuyr0tahpebdNgp+XzSHGZKmx+oezPoyU0bqZp5etFCfyg5mtx dGoTnRxxtt4IBny4+V+yIgFfYOV+9dibDmObROUg1rrF/yZt44wuOGoUJPSvv9ij dwkjDi8L56YaTtPi+dxERcHHg21AThy7CAqpb1bhEOFSOQJgJ11wscUT22RPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4dHgOSt1poS58CBUpyDeQQxIrx4wHwYDVR0j BBgwFoAUzw//1HvRSccHD9P/uxsIrvwYh1owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MTk5ZTU0MS0xODYxLTRkNmEtOGUyOC1iMDI4NDU4NjE0OTYvMS9DRjBGRkZENDdC RDE0OUM3MDcwRkQzRkZCQjFCMDhBRUZDMTg4NzVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0YwRkZGRDQ3QkQxNDlDNzA3MEZEM0ZGQkIxQjA4QUVGQzE4 ODc1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE5OWU1NDEtMTg2MS00ZDZhLThl MjgtYjAyODQ1ODYxNDk2LzEvQ0YwRkZGRDQ3QkQxNDlDNzA3MEZEM0ZGQkIxQjA4 QUVGQzE4ODc1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEwE9wI4488fpXr/ZTzwnoJvIQ3ZdMJm7UAy CmrWK4GMGbqF/zhSEezo3nZxdkdNMRW2taAmVC5KfnmIThDoBdOQ2iXy6xoNo6HC YuOKnYUoThICXzv7SMz967het58U8tsa+oJMwvCVLtYkll5jWiyBdNJdMl777iP7 6t0GhiQBnQA52zdD/W5eXeIj21/wEZeq5l6TcuQP6ePOloGr+WJPzRvsGMMHHSbX wAxzI4UTqqivnRcCLCyiR/tYZCU+G+N2QPFIJwtiD3p9uRfkJmb1GoG4wqJuw8Vd 3zvBThnC5ayrSkgcsqSuZPtkUr4h5vEffnUNRZPrXhsyKZoAhg8= -----END CERTIFICATE-----Generated at Thu Apr 24 09:03:02 2025 by rpki-client on console.sobornost.net