$ rpki-client -vvf repo-rpki.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.mft File: CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.mft (raw, json) Hash identifier: vN2KiIcJ3Lu6LVdjGS3tLhuVAi45DtjBSVMb9Hti2hs= Subject key identifier: 57:F7:E1:A0:D8:1C:8C:EB:5F:E7:B6:3F:A3:E1:CF:D7:59:50:62:34 Authority key identifier: CE:A0:3A:07:98:91:07:F5:47:A2:B2:AB:AA:6A:D4:E7:03:12:AD:5C Certificate issuer: /CN=CEA03A07989107F547A2B2ABAA6AD4E70312AD5C Certificate serial: 450BDB5A8680F99D8DF31095DD08C781E93DA344 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.mft Manifest number: 04C8 Signing time: Wed 23 Apr 2025 18:41:23 +0000 Manifest this update: Wed 23 Apr 2025 18:36:23 +0000 Manifest next update: Sat 26 Apr 2025 20:32:23 +0000 Files and hashes: 1: 323430333a353763303a3a2f33322d3438203d3e20313333383135.roa (hash: uwduCvzKqm6swEghv3Zot5Za1ysLZxOy6ByFYlQKNCs=) 2: 323430333a626163303a3a2f33322d3438203d3e20313333383135.roa (hash: 2l9WJirwQZDRv/TSoObPb5SI7hgV3kRaxDMplLJM4ms=) 3: CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.crl (hash: txWT5/VtWvNyW4IELZBIPefIr6DbSIianc8nHHMSslM=) 4: 3130332e35322e34342e302f32322d3234203d3e20313333383135.roa (hash: 2RQ2kX5zDajb4kTPcsNyRUqORecvlGLhw0ztmJt9qpY=) 5: 3130332e3133302e3133362e302f32322d3234203d3e20313333383135.roa (hash: K6IPwg5vPS17ImLidsJLbGqSOx5ucj2gTrepRe+aavU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.crl rsync://repo-rpki.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 20:32:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:0b:db:5a:86:80:f9:9d:8d:f3:10:95:dd:08:c7:81:e9:3d:a3:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEA03A07989107F547A2B2ABAA6AD4E70312AD5C Validity Not Before: Apr 23 18:36:23 2025 GMT Not After : Apr 26 20:32:23 2025 GMT Subject: CN=57F7E1A0D81C8CEB5FE7B63FA3E1CFD759506234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f1:7f:20:af:63:0d:70:0b:29:a2:69:54:3e: 1b:52:8b:83:4c:3f:8b:86:c8:77:12:b4:b2:6a:a2: e7:47:a2:cd:c7:69:12:76:cf:51:98:d6:bc:11:e1: aa:b2:f6:2a:f4:d7:76:03:df:8b:b2:12:9a:28:b3: ab:84:d0:4f:90:21:fc:18:64:7f:ea:3c:d2:84:f8: 16:55:10:1c:da:2a:70:3e:64:3e:b2:c8:bb:38:df: a3:dd:d0:c6:4c:73:f5:9d:e5:d5:c6:36:63:f3:9c: 41:b1:b0:eb:91:52:8d:de:7c:0d:f8:ab:93:5c:c9: c6:01:63:54:d5:45:07:19:4d:43:c9:9c:73:78:ab: 7d:57:12:45:62:2b:10:56:03:83:89:6f:65:a2:bd: c1:3b:67:91:a7:a5:c5:bd:5b:3c:eb:a2:59:a3:af: 30:3c:bd:37:23:7b:5d:99:c9:c9:c5:12:f5:39:3d: b7:6e:25:01:0f:91:7d:05:19:7e:73:bb:1e:5e:2c: ee:b7:7f:25:a7:34:d3:9d:c3:a1:c5:40:ad:bf:b8: 6a:f5:20:31:b4:3f:f0:33:11:da:73:9f:e6:d4:ae: e3:c5:5c:23:a1:07:a3:e1:34:57:e8:98:21:cd:ee: b3:9b:63:da:e6:4b:b3:64:2b:f6:2d:a4:e6:4a:c6: 70:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:F7:E1:A0:D8:1C:8C:EB:5F:E7:B6:3F:A3:E1:CF:D7:59:50:62:34 X509v3 Authority Key Identifier: keyid:CE:A0:3A:07:98:91:07:F5:47:A2:B2:AB:AA:6A:D4:E7:03:12:AD:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:76:94:6c:f6:3b:8f:38:9d:28:19:d5:e4:32:1b:f8:32:d1: 8c:d1:95:83:4a:37:6a:fb:ab:d3:ca:73:d9:92:ea:04:a9:5c: 73:32:0e:4b:03:0e:95:6d:9b:f1:7a:0c:8a:d5:63:d3:9d:90: 59:33:7f:67:06:0d:43:be:1f:41:d9:f8:a2:4e:d8:ba:80:f5: da:f0:6e:14:db:99:7b:0f:91:8d:92:46:e9:c5:4d:1d:d8:6c: 98:1c:78:dc:a3:6f:8f:ef:9c:d7:5d:45:a4:04:70:70:76:a9: 2a:56:da:57:6e:27:5d:06:77:aa:5e:f2:5f:59:67:49:6a:86: 65:71:cd:89:38:e9:fb:1b:a4:dd:61:1e:c0:a0:91:5c:a5:be: a5:bb:6e:58:f8:a5:a6:75:24:26:32:de:a1:f0:a8:36:e5:e4: 8f:58:38:fe:4b:55:a9:2a:ca:cc:47:50:74:ea:b5:52:75:bf: 0d:68:ec:2b:b1:46:20:d6:5c:51:5a:8d:ac:72:fd:8c:24:e3: e1:2e:d4:b5:ba:60:ff:fd:2f:c6:ce:96:0d:93:3a:b3:f5:c7: b3:12:3a:8e:95:65:69:99:15:fc:e4:cb:61:0d:a6:4b:d0:25: e4:0d:69:53:56:bf:6e:8e:c3:f9:7a:1d:58:87:28:12:3f:98: 62:78:9c:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURQvbWoaA+Z2N8xCV3QjHgek9o0QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VBMDNBMDc5ODkxMDdGNTQ3QTJCMkFCQUE2QUQ0RTcw MzEyQUQ1QzAeFw0yNTA0MjMxODM2MjNaFw0yNTA0MjYyMDMyMjNaMDMxMTAvBgNV BAMTKDU3RjdFMUEwRDgxQzhDRUI1RkU3QjYzRkEzRTFDRkQ3NTk1MDYyMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL8X8gr2MNcAspomlUPhtSi4NM P4uGyHcStLJqoudHos3HaRJ2z1GY1rwR4aqy9ir013YD34uyEpoos6uE0E+QIfwY ZH/qPNKE+BZVEBzaKnA+ZD6yyLs436Pd0MZMc/Wd5dXGNmPznEGxsOuRUo3efA34 q5NcycYBY1TVRQcZTUPJnHN4q31XEkViKxBWA4OJb2WivcE7Z5GnpcW9Wzzrolmj rzA8vTcje12ZycnFEvU5PbduJQEPkX0FGX5zux5eLO63fyWnNNOdw6HFQK2/uGr1 IDG0P/AzEdpzn+bUruPFXCOhB6PhNFfomCHN7rObY9rmS7NkK/YtpOZKxnA5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV/fhoNgcjOtf57Y/o+HP11lQYjQwHwYDVR0j BBgwFoAUzqA6B5iRB/VHorKrqmrU5wMSrVwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTNhZTQ4NS1hNjU4LTRjNWMtYWJlMi0xZTdmZDhiMDM4YTAvMC9DRUEwM0EwNzk4 OTEwN0Y1NDdBMkIyQUJBQTZBRDRFNzAzMTJBRDVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VBMDNBMDc5ODkxMDdGNTQ3QTJCMkFCQUE2QUQ0RTcwMzEy QUQ1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmEzYWU0ODUtYTY1OC00YzVjLWFi ZTItMWU3ZmQ4YjAzOGEwLzAvQ0VBMDNBMDc5ODkxMDdGNTQ3QTJCMkFCQUE2QUQ0 RTcwMzEyQUQ1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMB2lGz2O484nSgZ1eQyG/gy0YzRlYNKN2r7 q9PKc9mS6gSpXHMyDksDDpVtm/F6DIrVY9OdkFkzf2cGDUO+H0HZ+KJO2LqA9drw bhTbmXsPkY2SRunFTR3YbJgceNyjb4/vnNddRaQEcHB2qSpW2lduJ10Gd6pe8l9Z Z0lqhmVxzYk46fsbpN1hHsCgkVylvqW7blj4paZ1JCYy3qHwqDbl5I9YOP5LVakq ysxHUHTqtVJ1vw1o7CuxRiDWXFFajaxy/Ywk4+Eu1LW6YP/9L8bOlg2TOrP1x7MS Oo6VZWmZFfzky2ENpkvQJeQNaVNWv26Ow/l6HViHKBI/mGJ4nOY= -----END CERTIFICATE-----Generated at Wed Apr 23 22:12:04 2025 by rpki-client on console.sobornost.net