$ rpki-client -vvf repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.mft File: C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.mft (raw, json) Hash identifier: 0ppx9QiIW1usGi6lqnXoGoqksPfEWa2wyzaaiCTgmM4= Subject key identifier: 47:E3:F8:31:46:1E:D2:F5:E8:6E:45:F6:E9:7F:2A:42:52:68:92:D3 Authority key identifier: C2:3F:83:2F:27:DB:88:B8:BC:58:76:69:32:FD:A1:9B:3E:3A:4C:BF Certificate issuer: /CN=C23F832F27DB88B8BC58766932FDA19B3E3A4CBF Certificate serial: 02D74D202BF75195857350DF8FA401DA1E75A8A9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.mft Manifest number: 76 Signing time: Thu 24 Apr 2025 16:31:07 +0000 Manifest this update: Thu 24 Apr 2025 16:26:07 +0000 Manifest next update: Mon 28 Apr 2025 01:50:07 +0000 Files and hashes: 1: C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.crl (hash: sJo+Jd1HXecxNrJO4QYug/BGN1owTNfQSbD4zDYpVNA=) 2: 3136302e32352e3234382e302f32342d3234203d3e20313533303931.roa (hash: eyFleiV8rp1+1bq0+hrbGjYjkkXec6CZy2qIm0a3nAk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.crl rsync://repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 19:57:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:d7:4d:20:2b:f7:51:95:85:73:50:df:8f:a4:01:da:1e:75:a8:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C23F832F27DB88B8BC58766932FDA19B3E3A4CBF Validity Not Before: Apr 24 16:26:07 2025 GMT Not After : Apr 28 01:50:07 2025 GMT Subject: CN=47E3F831461ED2F5E86E45F6E97F2A42526892D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:74:31:4c:fd:55:35:bc:3b:30:dd:22:d9:79: 93:be:a8:31:10:c8:a3:92:3c:ff:f1:73:32:01:15: b7:ab:64:6b:2e:4f:67:53:7c:38:00:ca:4c:71:d1: 4c:2d:05:cb:b1:32:99:3e:a9:1e:fb:fd:d7:3e:6c: b0:d4:e4:0b:eb:50:e0:96:15:8c:77:7b:31:51:bb: ad:59:0a:52:42:78:51:66:5c:3b:69:45:f3:7e:8f: c3:ec:6c:be:eb:d5:c8:16:54:c2:dc:2f:c5:90:ad: ae:65:e0:ff:83:19:b6:7d:11:81:f0:43:21:2d:7f: 3a:2f:c2:f4:ae:a0:54:16:ab:91:7a:4d:8c:17:85: c4:b3:f3:f4:0f:85:07:d3:7a:9f:24:27:63:7b:18: e5:c4:fe:74:ab:78:51:55:bf:9b:f8:38:87:eb:13: 83:96:96:28:1e:0a:79:c6:9a:83:d6:bd:72:e7:e5: dd:64:39:81:d4:f9:f4:e9:b7:dd:11:0b:8a:d1:9c: 89:3b:2f:2c:22:18:68:22:f0:46:5d:c8:bb:1d:19: c7:ad:e4:ac:34:df:a4:dd:46:53:78:7d:a6:58:59: 2d:a9:e6:91:e3:13:77:c0:d1:a6:ef:49:c7:d3:00: f6:46:36:c0:6e:73:22:be:39:fd:4a:db:76:fa:05: f1:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:E3:F8:31:46:1E:D2:F5:E8:6E:45:F6:E9:7F:2A:42:52:68:92:D3 X509v3 Authority Key Identifier: keyid:C2:3F:83:2F:27:DB:88:B8:BC:58:76:69:32:FD:A1:9B:3E:3A:4C:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0279ee9c-ad2b-4bed-8641-23bf2d3b16db/0/C23F832F27DB88B8BC58766932FDA19B3E3A4CBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:f7:85:17:3d:36:38:d4:39:18:c3:3e:1a:8a:7f:3f:a3:13: 62:be:04:4a:62:59:58:ab:a8:72:08:d6:65:6c:c2:ba:d1:8c: 4a:7a:52:78:9d:3b:d1:73:08:fb:ca:50:61:53:f0:b5:7a:24: 62:d8:bf:c1:38:0b:42:d2:7a:a6:2a:38:28:c4:2f:07:dd:56: bf:28:00:25:c1:0a:a6:c4:c7:34:1d:db:09:98:fb:0a:0a:6a: 7b:91:80:c1:3b:76:a0:33:fe:9a:72:d0:c5:49:ba:a8:cf:15: 54:b2:f3:98:4c:65:ef:ed:b8:de:67:d2:50:f3:6f:57:75:0d: 01:82:bd:f8:6b:86:63:4e:44:75:e1:07:1d:b3:67:e4:41:2f: 51:d9:66:2b:61:66:ba:25:7a:a9:30:4f:6a:d9:10:8a:7e:29: f4:d5:18:5b:aa:7f:ef:29:9e:8b:23:8e:2c:32:bf:53:65:b6: e9:8e:4c:a0:65:86:32:78:d2:7b:4d:a8:ea:a9:72:64:29:48: f2:94:5d:47:87:85:f8:4c:8f:43:15:23:36:de:ae:5a:d7:10: d2:b2:4b:9e:64:84:3b:2a:ee:da:48:e9:5d:1d:f6:8b:ea:ff: 10:23:d6:d1:17:3b:af:95:f7:66:b7:e2:df:3d:98:fb:7b:62: 4a:8e:3f:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAtdNICv3UZWFc1Dfj6QB2h51qKkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzIzRjgzMkYyN0RCODhCOEJDNTg3NjY5MzJGREExOUIz RTNBNENCRjAeFw0yNTA0MjQxNjI2MDdaFw0yNTA0MjgwMTUwMDdaMDMxMTAvBgNV BAMTKDQ3RTNGODMxNDYxRUQyRjVFODZFNDVGNkU5N0YyQTQyNTI2ODkyRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBdDFM/VU1vDsw3SLZeZO+qDEQ yKOSPP/xczIBFberZGsuT2dTfDgAykxx0UwtBcuxMpk+qR77/dc+bLDU5AvrUOCW FYx3ezFRu61ZClJCeFFmXDtpRfN+j8PsbL7r1cgWVMLcL8WQra5l4P+DGbZ9EYHw QyEtfzovwvSuoFQWq5F6TYwXhcSz8/QPhQfTep8kJ2N7GOXE/nSreFFVv5v4OIfr E4OWligeCnnGmoPWvXLn5d1kOYHU+fTpt90RC4rRnIk7LywiGGgi8EZdyLsdGcet 5Kw036TdRlN4faZYWS2p5pHjE3fA0abvScfTAPZGNsBucyK+Of1K23b6BfEfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR+P4MUYe0vXobkX26X8qQlJoktMwHwYDVR0j BBgwFoAUwj+DLyfbiLi8WHZpMv2hmz46TL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w Mjc5ZWU5Yy1hZDJiLTRiZWQtODY0MS0yM2JmMmQzYjE2ZGIvMC9DMjNGODMyRjI3 REI4OEI4QkM1ODc2NjkzMkZEQTE5QjNFM0E0Q0JGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzIzRjgzMkYyN0RCODhCOEJDNTg3NjY5MzJGREExOUIzRTNB NENCRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDI3OWVlOWMtYWQyYi00YmVkLTg2 NDEtMjNiZjJkM2IxNmRiLzAvQzIzRjgzMkYyN0RCODhCOEJDNTg3NjY5MzJGREEx OUIzRTNBNENCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIH3hRc9NjjUORjDPhqKfz+jE2K+BEpiWVir qHII1mVswrrRjEp6UnidO9FzCPvKUGFT8LV6JGLYv8E4C0LSeqYqOCjELwfdVr8o ACXBCqbExzQd2wmY+woKanuRgME7dqAz/ppy0MVJuqjPFVSy85hMZe/tuN5n0lDz b1d1DQGCvfhrhmNORHXhBx2zZ+RBL1HZZithZroleqkwT2rZEIp+KfTVGFuqf+8p nosjjiwyv1NltumOTKBlhjJ40ntNqOqpcmQpSPKUXUeHhfhMj0MVIzberlrXENKy S55khDsq7tpI6V0d9ovq/xAj1tEXO6+V92a34t89mPt7YkqOPzU= -----END CERTIFICATE-----Generated at Thu Apr 24 18:01:26 2025 by rpki-client on console.sobornost.net