$ rpki-client -vvf repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft File: CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft (raw, json) Hash identifier: cESz6ISOHPJBJXR3XPuf9VPTDGK7Fpq5i1ToqQAg3T8= Subject key identifier: 8F:A9:60:2B:6B:F2:64:6A:E5:EA:2E:51:F4:60:63:FA:1D:26:91:E2 Authority key identifier: CF:A4:9B:8E:5D:9A:08:B7:A0:17:E5:B0:F8:87:E8:8F:99:A6:30:6C Certificate issuer: /CN=CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C Certificate serial: 5D9C2F12E6B09DF9B3D362F00E39FE85FB7FA158 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft Manifest number: 65 Signing time: Thu 24 Apr 2025 13:50:46 +0000 Manifest this update: Thu 24 Apr 2025 13:45:46 +0000 Manifest next update: Sun 27 Apr 2025 23:02:46 +0000 Files and hashes: 1: CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.crl (hash: 5K9R3xSei+MMgURgHag3BOiOHKu9nmU7/nDm2LuY8aw=) 2: 323030313a6466343a336134303a3a2f34382d3438203d3e20313533313132.roa (hash: dDmCVVYb9HZ/Ddemxknj4E267gWucRzWDlYywaLyJ1w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.crl rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 17:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:9c:2f:12:e6:b0:9d:f9:b3:d3:62:f0:0e:39:fe:85:fb:7f:a1:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C Validity Not Before: Apr 24 13:45:46 2025 GMT Not After : Apr 27 23:02:46 2025 GMT Subject: CN=8FA9602B6BF2646AE5EA2E51F46063FA1D2691E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:1e:9d:aa:e7:b6:7a:d7:7b:ad:cd:f8:b4:61: c1:71:8e:29:cf:a9:25:f7:f7:14:49:5f:2c:66:96: 95:e1:37:4d:1c:14:92:4d:55:f3:66:e6:20:21:1a: 57:c6:88:6b:ab:da:86:31:61:21:ce:90:cb:93:7e: 25:e0:49:95:cd:27:8b:b1:0e:7d:6d:65:f8:cb:2c: 30:58:35:d8:1e:5d:0c:82:74:6a:72:ab:71:c8:c9: 6e:62:2b:ed:22:bd:02:e3:f3:43:fc:58:30:f3:09: f8:92:ed:f5:fa:d9:a8:ff:71:a6:35:11:74:a4:7d: 66:e9:a0:70:c4:f0:91:bf:1f:e0:19:af:14:4b:40: 8f:c1:2a:0d:99:dc:6a:dc:44:2d:de:83:49:05:cd: d6:4e:36:41:a4:fb:76:cb:eb:03:37:96:f3:3b:4a: 82:f4:51:ea:cc:95:7f:18:b2:6b:fe:68:9d:22:e2: 4f:4c:f9:18:c0:33:40:cd:a0:ba:61:e4:6a:9e:af: 9e:fa:3b:3c:d0:f0:25:9c:19:28:6c:e7:ab:52:0a: 2e:26:60:7c:d1:a3:87:25:11:2a:20:2c:a8:7f:ff: 65:40:e0:dc:ec:26:19:c8:17:46:76:b7:87:5a:1b: 3f:54:b2:86:f2:ff:47:ee:27:00:9a:e3:2d:ea:4b: 53:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:A9:60:2B:6B:F2:64:6A:E5:EA:2E:51:F4:60:63:FA:1D:26:91:E2 X509v3 Authority Key Identifier: keyid:CF:A4:9B:8E:5D:9A:08:B7:A0:17:E5:B0:F8:87:E8:8F:99:A6:30:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:d0:1c:b4:df:96:c3:9f:59:4f:f5:98:78:eb:04:e0:e5:89: df:64:41:62:49:b2:19:e3:bf:27:c3:a2:fc:65:42:76:bf:f8: 2d:7a:fa:0a:d8:fd:c0:41:69:3a:a7:41:e1:15:53:a1:52:d2: a9:4b:55:a1:3c:8f:1a:0f:31:cc:2c:47:a3:21:d9:36:2f:2a: f8:9a:e6:b2:67:b8:5b:b0:a1:f3:8d:19:5c:99:9a:eb:b2:5d: 31:45:25:8d:72:17:fc:ef:cb:95:38:b2:ea:38:77:33:d2:3a: 0b:24:ea:94:43:28:ea:7d:4e:2d:ff:96:3b:20:da:ed:05:56: fa:48:dc:a0:7e:88:dd:80:09:22:b1:c6:1d:67:a4:10:32:6b: 7e:15:2f:8b:60:04:83:93:42:b9:70:1f:95:59:03:e7:1c:63: 0b:cc:2e:59:f4:e9:3a:84:05:79:dc:5b:cd:8a:43:e6:08:db: ca:69:ce:59:8d:e9:d6:5f:31:aa:98:bb:94:d4:c1:f5:03:30: f1:90:4e:6a:d1:8e:68:89:3e:8f:06:be:54:ae:7d:ff:bb:e7: 80:f7:26:45:f9:ef:23:c2:d5:e6:56:76:5a:eb:e7:4f:8c:57: 5f:b8:9f:52:a2:f7:a6:76:57:94:71:99:6a:20:5d:88:ed:7d: da:33:77:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXZwvEuawnfmz02LwDjn+hft/oVgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZBNDlCOEU1RDlBMDhCN0EwMTdFNUIwRjg4N0U4OEY5 OUE2MzA2QzAeFw0yNTA0MjQxMzQ1NDZaFw0yNTA0MjcyMzAyNDZaMDMxMTAvBgNV BAMTKDhGQTk2MDJCNkJGMjY0NkFFNUVBMkU1MUY0NjA2M0ZBMUQyNjkxRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTHp2q57Z613utzfi0YcFxjinP qSX39xRJXyxmlpXhN00cFJJNVfNm5iAhGlfGiGur2oYxYSHOkMuTfiXgSZXNJ4ux Dn1tZfjLLDBYNdgeXQyCdGpyq3HIyW5iK+0ivQLj80P8WDDzCfiS7fX62aj/caY1 EXSkfWbpoHDE8JG/H+AZrxRLQI/BKg2Z3GrcRC3eg0kFzdZONkGk+3bL6wM3lvM7 SoL0UerMlX8Ysmv+aJ0i4k9M+RjAM0DNoLph5Gqer576OzzQ8CWcGShs56tSCi4m YHzRo4clESogLKh//2VA4NzsJhnIF0Z2t4daGz9Usoby/0fuJwCa4y3qS1NzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj6lgK2vyZGrl6i5R9GBj+h0mkeIwHwYDVR0j BBgwFoAUz6Sbjl2aCLegF+Ww+Ifoj5mmMGwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDU2NTE5ZS1hYjYxLTQ5NDMtYjNlOC0xMGJkZDYwODBmZGEvMS9DRkE0OUI4RTVE OUEwOEI3QTAxN0U1QjBGODg3RTg4Rjk5QTYzMDZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0ZBNDlCOEU1RDlBMDhCN0EwMTdFNUIwRjg4N0U4OEY5OUE2 MzA2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQ1NjUxOWUtYWI2MS00OTQzLWIz ZTgtMTBiZGQ2MDgwZmRhLzEvQ0ZBNDlCOEU1RDlBMDhCN0EwMTdFNUIwRjg4N0U4 OEY5OUE2MzA2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJfQHLTflsOfWU/1mHjrBODlid9kQWJJshnj vyfDovxlQna/+C16+grY/cBBaTqnQeEVU6FS0qlLVaE8jxoPMcwsR6Mh2TYvKvia 5rJnuFuwofONGVyZmuuyXTFFJY1yF/zvy5U4suo4dzPSOgsk6pRDKOp9Ti3/ljsg 2u0FVvpI3KB+iN2ACSKxxh1npBAya34VL4tgBIOTQrlwH5VZA+ccYwvMLln06TqE BXncW82KQ+YI28ppzlmN6dZfMaqYu5TUwfUDMPGQTmrRjmiJPo8GvlSuff+754D3 JkX57yPC1eZWdlrr50+MV1+4n1Ki96Z2V5RxmWogXYjtfdozd84= -----END CERTIFICATE-----Generated at Thu Apr 24 15:50:03 2025 by rpki-client on console.sobornost.net