$ rpki-client -vvf repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft File: C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft (raw, json) Hash identifier: SAwXwtAvGsjSbkDICwa3jOEWN4CopuTsaSCYeUmQSfM= Subject key identifier: C0:6C:B9:43:42:62:51:88:54:DF:68:50:17:43:12:53:44:AA:21:12 Authority key identifier: C1:C0:23:3D:C0:73:02:E8:6D:11:4A:B7:72:AB:65:66:ED:7F:5F:BB Certificate issuer: /CN=C1C0233DC07302E86D114AB772AB6566ED7F5FBB Certificate serial: 4AD01591570E806C40D8B812C11E450D637C7B6C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft Manifest number: 01AF Signing time: Fri 25 Apr 2025 05:51:44 +0000 Manifest this update: Fri 25 Apr 2025 05:46:44 +0000 Manifest next update: Mon 28 Apr 2025 10:54:44 +0000 Files and hashes: 1: C1C0233DC07302E86D114AB772AB6566ED7F5FBB.crl (hash: 5xL1b/e45YX6nRn6IlaNKHdHtWhH1A8H2eriog+sYrY=) 2: 323430373a373263303a3a2f33322d3332203d3e203538383230.roa (hash: DEQ6i2fIqhrPJGH2IFEMi8YnzTrgKlP6WPrpjEcp18o=) 3: 323430373a373263303a3a2f33322d3438203d3e203538383230.roa (hash: t1SEps+PxNqj4zacSf/7DBl+MO9xjw/dSKyX8w5YIzQ=) 4: 3130332e3135322e39322e302f32332d3234203d3e20313338383630.roa (hash: ZIvgL7/TSUjSQgis1M5EWea31F4jkT0hl76IfkMAhxg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.crl rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:d0:15:91:57:0e:80:6c:40:d8:b8:12:c1:1e:45:0d:63:7c:7b:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1C0233DC07302E86D114AB772AB6566ED7F5FBB Validity Not Before: Apr 25 05:46:44 2025 GMT Not After : Apr 28 10:54:44 2025 GMT Subject: CN=C06CB9434262518854DF68501743125344AA2112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f9:30:bd:85:9e:5b:5e:0a:7b:f7:aa:eb:d3: 8e:f3:40:27:c9:1a:52:f5:67:d8:5f:64:31:65:e1: f3:7c:3a:05:c1:9e:8f:1f:c4:79:3a:9a:ca:8e:af: e0:0a:af:f1:a4:8b:49:4e:6f:49:99:9d:fb:5b:7e: ad:7a:6e:32:b5:ef:85:aa:8f:b7:f3:1a:40:f5:e6: b9:e7:22:16:56:91:1d:54:1e:be:3e:cd:1f:40:82: 8f:7b:d0:5e:14:18:18:bf:ec:8f:9f:49:6d:3a:a4: a8:9b:26:ac:fa:9a:3f:15:ec:8f:eb:2c:ee:d0:04: 1a:b3:c2:e8:93:1f:0d:54:bd:de:14:0c:c8:2a:08: 07:9c:ad:f8:b5:be:d0:03:3e:0e:cd:47:05:c1:f7: 60:f8:a1:00:4f:07:bf:29:bd:5e:79:e0:42:b9:9a: 77:b1:bc:24:fd:73:95:83:b5:18:63:2b:8a:b8:d4: c8:a1:ab:0f:8e:45:75:8d:11:68:3e:a6:b4:87:58: 7d:4f:e1:37:61:57:bc:8e:c4:f0:a3:3c:d7:fa:a5: 30:9c:7f:c3:2e:72:db:23:fe:94:b1:c6:5d:e9:a1: 3b:3f:9e:e6:f1:ad:cb:1a:83:c6:c3:de:b2:8f:36: 00:0d:90:ae:35:5a:1c:14:53:89:10:cd:9a:70:17: f7:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:6C:B9:43:42:62:51:88:54:DF:68:50:17:43:12:53:44:AA:21:12 X509v3 Authority Key Identifier: keyid:C1:C0:23:3D:C0:73:02:E8:6D:11:4A:B7:72:AB:65:66:ED:7F:5F:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:3f:8c:2d:64:a2:bc:b2:e4:e4:cd:28:a5:75:46:2f:28:ef: e7:f9:60:f5:6c:9b:ad:64:eb:9b:c9:39:8d:be:fa:8b:f1:df: f3:1c:03:51:f1:b7:14:a8:2b:87:67:58:c6:4b:a4:82:70:de: d4:44:df:06:4f:45:99:c1:87:d4:11:d5:31:4f:a1:c6:35:69: 9d:3d:5b:b4:3d:41:27:d3:52:b9:2c:9b:31:b8:dc:03:ce:bc: 3e:7e:4e:a6:80:f5:57:6d:97:9d:e5:df:13:7d:da:da:ff:67: 14:f1:24:a1:4d:33:c6:b4:f8:1f:da:40:5f:b6:a2:cb:bc:09: 3a:d3:05:59:74:75:7c:dd:1f:2e:db:b6:84:c7:e0:33:e9:6d: 35:c9:dd:f8:44:0b:bc:8e:14:41:1f:4a:56:6b:9b:20:d4:88: 1d:0c:81:b0:0a:d5:3c:53:e0:1e:bc:14:b7:ed:27:b6:d9:cf: 8b:42:2c:07:45:1e:7b:d6:99:9b:66:10:3b:0b:52:23:68:9b: 80:a5:d4:c6:6c:86:d3:57:58:fc:a4:99:b6:16:bb:c0:e6:f7: 49:92:6a:2a:84:00:8c:e0:ca:24:1d:51:0e:fa:72:bd:a8:aa: f5:14:d7:e7:e4:d8:00:3e:18:5a:2e:db:44:cd:4f:43:a7:70: 9a:80:3e:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUStAVkVcOgGxA2LgSwR5FDWN8e2wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzFDMDIzM0RDMDczMDJFODZEMTE0QUI3NzJBQjY1NjZF RDdGNUZCQjAeFw0yNTA0MjUwNTQ2NDRaFw0yNTA0MjgxMDU0NDRaMDMxMTAvBgNV BAMTKEMwNkNCOTQzNDI2MjUxODg1NERGNjg1MDE3NDMxMjUzNDRBQTIxMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU+TC9hZ5bXgp796rr047zQCfJ GlL1Z9hfZDFl4fN8OgXBno8fxHk6msqOr+AKr/Gki0lOb0mZnftbfq16bjK174Wq j7fzGkD15rnnIhZWkR1UHr4+zR9Ago970F4UGBi/7I+fSW06pKibJqz6mj8V7I/r LO7QBBqzwuiTHw1Uvd4UDMgqCAecrfi1vtADPg7NRwXB92D4oQBPB78pvV554EK5 mnexvCT9c5WDtRhjK4q41Mihqw+ORXWNEWg+prSHWH1P4TdhV7yOxPCjPNf6pTCc f8Muctsj/pSxxl3poTs/nubxrcsag8bD3rKPNgANkK41WhwUU4kQzZpwF/c7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwGy5Q0JiUYhU32hQF0MSU0SqIRIwHwYDVR0j BBgwFoAUwcAjPcBzAuhtEUq3cqtlZu1/X7swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OGM5YzI1Mi1mN2NhLTRkZDUtODhmNi0yMmFkZGM4OTM0YjMvMC9DMUMwMjMzREMw NzMwMkU4NkQxMTRBQjc3MkFCNjU2NkVEN0Y1RkJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzFDMDIzM0RDMDczMDJFODZEMTE0QUI3NzJBQjY1NjZFRDdG NUZCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzhjOWMyNTItZjdjYS00ZGQ1LTg4 ZjYtMjJhZGRjODkzNGIzLzAvQzFDMDIzM0RDMDczMDJFODZEMTE0QUI3NzJBQjY1 NjZFRDdGNUZCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACk/jC1koryy5OTNKKV1Ri8o7+f5YPVsm61k 65vJOY2++ovx3/McA1HxtxSoK4dnWMZLpIJw3tRE3wZPRZnBh9QR1TFPocY1aZ09 W7Q9QSfTUrksmzG43APOvD5+TqaA9Vdtl53l3xN92tr/ZxTxJKFNM8a0+B/aQF+2 osu8CTrTBVl0dXzdHy7btoTH4DPpbTXJ3fhEC7yOFEEfSlZrmyDUiB0MgbAK1TxT 4B68FLftJ7bZz4tCLAdFHnvWmZtmEDsLUiNom4Cl1MZshtNXWPykmbYWu8Dm90mS aiqEAIzgyiQdUQ76cr2oqvUU1+fk2AA+GFou20TNT0OncJqAPoI= -----END CERTIFICATE-----Generated at Fri Apr 25 08:21:08 2025 by rpki-client on console.sobornost.net