$ rpki-client -vvf repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.mft File: CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.mft (raw, json) Hash identifier: sUnMSXKl1dRigQcrngXrOzsOeBLBCzLa5i5I/WeZgA0= Subject key identifier: 3C:50:D4:D8:B8:1B:49:08:0E:FB:AB:9E:14:CE:EB:A3:B6:26:40:C3 Authority key identifier: CA:FC:88:25:F9:80:02:AF:2A:3C:B5:4E:F2:79:D5:9C:D2:E5:04:3C Certificate issuer: /CN=CAFC8825F98002AF2A3CB54EF279D59CD2E5043C Certificate serial: 5CC97232378048AEF4EF54D34DD2A48917BDBF26 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.mft Manifest number: 5F Signing time: Wed 23 Apr 2025 21:12:17 +0000 Manifest this update: Wed 23 Apr 2025 21:07:17 +0000 Manifest next update: Sun 27 Apr 2025 02:11:17 +0000 Files and hashes: 1: 3136302e3138372e3135302e302f32332d3234203d3e20313533313237.roa (hash: LDJv6wYx3HsP5pbUhXvKMJKGJv2fMd2X2nhqPoeeYwE=) 2: CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.crl (hash: Dzj8OQqvTRNy9ab6E8eYTc1jOWluyvITRHiONl3kxpM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.crl rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 18:38:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:c9:72:32:37:80:48:ae:f4:ef:54:d3:4d:d2:a4:89:17:bd:bf:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAFC8825F98002AF2A3CB54EF279D59CD2E5043C Validity Not Before: Apr 23 21:07:17 2025 GMT Not After : Apr 27 02:11:17 2025 GMT Subject: CN=3C50D4D8B81B49080EFBAB9E14CEEBA3B62640C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:fa:9a:36:6b:17:eb:2f:53:b8:20:9b:0d:96: da:ef:9d:57:cf:b8:e9:68:5d:75:f1:d7:57:be:73: ee:40:65:51:56:53:b9:db:5e:3d:61:d8:04:f1:97: 77:e3:d8:ce:bb:f5:12:8c:6e:9d:a9:a9:44:61:49: 8b:dd:c2:8c:1d:82:2c:82:d8:db:9b:06:5f:f2:d5: ce:62:4f:9c:ba:10:7f:8a:69:fe:50:b9:66:5c:c7: 90:fa:4d:40:6e:7a:b7:b7:0b:be:58:36:00:af:0b: 53:59:54:38:93:d7:90:a1:f9:cd:1c:a6:d1:ee:60: 0c:28:bf:8c:0c:70:61:16:d9:1e:d8:9c:d1:59:a6: 2a:9e:7f:88:bb:d0:03:81:17:76:be:45:b6:da:45: 63:54:a5:97:82:c9:f2:72:6a:42:83:08:9e:ed:0d: 22:d9:22:de:47:ce:7b:fc:7f:a6:60:fe:3b:99:d3: 9d:da:c2:f3:5d:c2:a2:5e:76:b0:8b:1f:2b:c3:ec: f2:8c:c3:8e:41:32:39:0a:39:44:94:49:77:d9:03: 3c:fa:e8:22:76:c2:66:46:06:64:97:87:e9:67:74: 08:64:3f:a7:22:73:b3:a9:1b:20:f3:de:61:bf:dd: 71:e2:3d:1b:37:63:9f:57:2f:63:4a:a8:ae:9b:a0: 46:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:50:D4:D8:B8:1B:49:08:0E:FB:AB:9E:14:CE:EB:A3:B6:26:40:C3 X509v3 Authority Key Identifier: keyid:CA:FC:88:25:F9:80:02:AF:2A:3C:B5:4E:F2:79:D5:9C:D2:E5:04:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:9f:4e:53:84:43:83:2b:81:14:d3:77:07:0a:5a:76:c4:74: 17:9a:7c:5e:1e:cb:6c:90:54:85:f3:8e:c3:08:40:d2:20:1b: e6:42:c0:89:35:96:f5:d2:14:2d:f6:9b:4d:b7:c8:3b:86:9e: c7:fc:2d:43:70:06:59:16:d5:0f:8a:7e:c3:4a:0c:87:14:19: f6:a7:6d:27:66:f3:cd:12:87:f8:93:97:d4:63:b1:64:44:84: 65:ab:7a:f2:93:7c:94:92:c5:33:cc:d5:05:8b:de:18:9d:79: ba:83:04:6c:b8:ea:12:52:cc:79:86:3a:37:18:8a:10:60:d9: c0:73:60:7e:94:30:fd:ab:f3:a4:48:79:c4:73:05:25:67:17: 5a:e5:ba:83:16:df:9c:b6:02:fb:d7:56:09:c6:88:b2:b3:8d: 63:48:27:8d:32:b8:54:33:15:9a:68:7e:c3:8e:59:07:8c:dd: 0b:05:bb:fe:0d:a6:2a:cc:5d:74:19:2f:b6:63:ca:a4:ad:6d: 59:4f:84:bf:24:ad:16:2d:a5:cf:98:15:ef:d9:7e:cc:2f:31: 3d:12:89:b7:0c:e5:37:0d:e5:99:3e:21:d6:ab:82:6f:3f:24: c5:00:34:2f:2e:f7:ad:66:c7:12:05:78:fc:bf:f1:50:51:e2: 1f:67:20:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXMlyMjeASK7071TTTdKkiRe9vyYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FGQzg4MjVGOTgwMDJBRjJBM0NCNTRFRjI3OUQ1OUNE MkU1MDQzQzAeFw0yNTA0MjMyMTA3MTdaFw0yNTA0MjcwMjExMTdaMDMxMTAvBgNV BAMTKDNDNTBENEQ4QjgxQjQ5MDgwRUZCQUI5RTE0Q0VFQkEzQjYyNjQwQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc+po2axfrL1O4IJsNltrvnVfP uOloXXXx11e+c+5AZVFWU7nbXj1h2ATxl3fj2M679RKMbp2pqURhSYvdwowdgiyC 2NubBl/y1c5iT5y6EH+Kaf5QuWZcx5D6TUBuere3C75YNgCvC1NZVDiT15Ch+c0c ptHuYAwov4wMcGEW2R7YnNFZpiqef4i70AOBF3a+RbbaRWNUpZeCyfJyakKDCJ7t DSLZIt5Hznv8f6Zg/juZ053awvNdwqJedrCLHyvD7PKMw45BMjkKOUSUSXfZAzz6 6CJ2wmZGBmSXh+lndAhkP6cic7OpGyDz3mG/3XHiPRs3Y59XL2NKqK6boEbVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPFDU2LgbSQgO+6ueFM7ro7YmQMMwHwYDVR0j BBgwFoAUyvyIJfmAAq8qPLVO8nnVnNLlBDwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MWQ5N2I0MC1jMDMxLTRlNWItOWI0Mi1kMmFlMWM5Y2Y5ODcvMC9DQUZDODgyNUY5 ODAwMkFGMkEzQ0I1NEVGMjc5RDU5Q0QyRTUwNDNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQ0FGQzg4MjVGOTgwMDJBRjJBM0NCNTRFRjI3OUQ1OUNEMkU1 MDQzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjFkOTdiNDAtYzAzMS00ZTViLTli NDItZDJhZTFjOWNmOTg3LzAvQ0FGQzg4MjVGOTgwMDJBRjJBM0NCNTRFRjI3OUQ1 OUNEMkU1MDQzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGGfTlOEQ4MrgRTTdwcKWnbEdBeafF4ey2yQ VIXzjsMIQNIgG+ZCwIk1lvXSFC32m023yDuGnsf8LUNwBlkW1Q+KfsNKDIcUGfan bSdm880Sh/iTl9RjsWREhGWrevKTfJSSxTPM1QWL3hidebqDBGy46hJSzHmGOjcY ihBg2cBzYH6UMP2r86RIecRzBSVnF1rluoMW35y2AvvXVgnGiLKzjWNIJ40yuFQz FZpofsOOWQeM3QsFu/4NpirMXXQZL7ZjyqStbVlPhL8krRYtpc+YFe/ZfswvMT0S ibcM5TcN5Zk+Idargm8/JMUANC8u961mxxIFePy/8VBR4h9nIAM= -----END CERTIFICATE-----Generated at Thu Apr 24 01:45:05 2025 by rpki-client on console.sobornost.net