$ rpki-client -vvf repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.mft File: 2CCC85BF6CCD365701EFA75EE416D234F861385B.mft (raw, json) Hash identifier: Q7lxAYHQQrbrAdi8/9P0VxkLcLzTeKmF/AA+b0eRyZI= Subject key identifier: 6A:6F:0C:23:BA:2E:FD:D4:FA:82:12:0A:16:6B:C8:7C:01:68:9D:B8 Authority key identifier: 2C:CC:85:BF:6C:CD:36:57:01:EF:A7:5E:E4:16:D2:34:F8:61:38:5B Certificate issuer: /CN=2CCC85BF6CCD365701EFA75EE416D234F861385B Certificate serial: 11A5DA916FAAB243737B61CEFF2846BD6D85C907 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2CCC85BF6CCD365701EFA75EE416D234F861385B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.mft Manifest number: 7B Signing time: Thu 24 Apr 2025 12:12:09 +0000 Manifest this update: Thu 24 Apr 2025 12:07:09 +0000 Manifest next update: Sun 27 Apr 2025 16:22:09 +0000 Files and hashes: 1: 3136302e32352e3231382e302f32342d3234203d3e20313533303836.roa (hash: Mr9+qsjEnJb2cnSB3AyArFy2+SWtmXNIU1+g9FxOCh0=) 2: 3136302e32352e3231392e302f32342d3234203d3e20313533303836.roa (hash: JTPBl2xXnGWTl8ZrptZDVbUzFDyRS3/D40BYMh+0i4U=) 3: 2CCC85BF6CCD365701EFA75EE416D234F861385B.crl (hash: A7A3bJ1wLaeIqyJcSvGtqGUpMDNdYZHGpVtcz2bmeUM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.crl rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2CCC85BF6CCD365701EFA75EE416D234F861385B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 10:32:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:a5:da:91:6f:aa:b2:43:73:7b:61:ce:ff:28:46:bd:6d:85:c9:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CCC85BF6CCD365701EFA75EE416D234F861385B Validity Not Before: Apr 24 12:07:09 2025 GMT Not After : Apr 27 16:22:09 2025 GMT Subject: CN=6A6F0C23BA2EFDD4FA82120A166BC87C01689DB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5c:08:88:f2:08:0c:19:6d:ef:00:d4:e5:6f: d9:d0:82:42:48:f5:9c:a6:86:c8:ed:cc:5e:8b:6e: 56:f2:0a:47:cc:69:23:a3:ef:61:41:f0:a6:0d:fa: 92:8c:50:77:a5:62:8b:89:2a:fe:89:49:fd:85:d5: a8:ee:ed:7f:92:83:24:e1:64:af:da:c4:a5:8f:3b: f3:ae:fc:71:64:b7:41:61:9c:08:4c:36:f2:73:5f: 3b:6b:86:12:f4:3c:24:2b:d2:6d:4a:a1:30:5e:b7: 0b:5f:da:cb:a6:74:17:88:27:8e:2e:2a:8e:fe:47: a6:c6:e8:b8:c4:29:8e:cc:aa:3a:62:34:f3:0b:bb: bd:41:73:a1:7d:75:0b:40:e5:ca:cb:90:9a:f9:b1: 14:dd:5f:3f:2d:a9:d6:90:c3:c6:1c:9c:34:16:bd: 23:93:ad:9c:e7:d4:23:d6:66:aa:da:e7:95:c2:57: 78:a2:9c:15:9a:76:19:f6:59:20:90:aa:38:2e:1a: 74:1c:4f:8e:08:7c:c2:53:1e:1c:a4:b8:88:0e:73: 8d:39:b4:38:9a:8c:23:e2:19:d6:03:9d:57:b2:da: 90:45:14:96:ae:0f:00:9b:be:af:cd:8a:f7:f4:4d: 1b:06:61:74:ea:73:b6:66:eb:6b:a5:6c:d4:1b:55: 0f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:6F:0C:23:BA:2E:FD:D4:FA:82:12:0A:16:6B:C8:7C:01:68:9D:B8 X509v3 Authority Key Identifier: keyid:2C:CC:85:BF:6C:CD:36:57:01:EF:A7:5E:E4:16:D2:34:F8:61:38:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2CCC85BF6CCD365701EFA75EE416D234F861385B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:d6:21:ff:5c:80:c1:ab:5d:15:7d:ca:b7:92:f1:8d:af:42: d7:c7:0f:70:45:14:af:28:02:49:55:73:39:cd:33:c7:6d:a8: f8:09:c7:87:28:4f:21:44:e2:44:85:10:56:cb:b4:78:4a:dc: 95:cc:90:4f:8c:00:4f:a9:d8:47:99:db:f7:9c:5c:65:cd:9e: 91:e5:ba:3b:0d:b8:f8:63:68:90:f4:fd:fc:da:d4:6e:26:86: c8:73:aa:ee:a4:c2:b4:d4:1e:98:2b:eb:b5:5f:1f:22:34:fb: 44:ed:3f:e9:e4:da:c6:bf:46:21:cb:56:a3:12:4e:1e:c7:c0: 5c:91:7e:2d:6a:63:b6:7c:ec:b2:d6:30:37:a4:c6:bf:2f:90: 8a:25:4c:1b:ba:43:fa:30:3c:8e:cc:07:87:aa:35:69:12:a9: 30:9a:9e:3f:fe:e7:d2:c3:ae:74:b7:b9:7c:f9:89:f6:94:cf: 26:fb:fc:20:b7:14:40:5f:75:90:e8:a5:47:97:e8:f5:c1:34: 9a:3d:e4:c5:4c:e0:27:d7:2c:c2:80:98:df:ce:91:2d:b0:e3: 6d:eb:44:46:23:e1:70:a7:5c:63:cc:d9:e3:4a:09:42:1b:bf: d6:ca:2e:d2:4e:83:e3:fa:fe:0e:7f:57:e9:f2:e8:5b:19:85: a1:b3:44:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEaXakW+qskNze2HO/yhGvW2FyQcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNDQzg1QkY2Q0NEMzY1NzAxRUZBNzVFRTQxNkQyMzRG ODYxMzg1QjAeFw0yNTA0MjQxMjA3MDlaFw0yNTA0MjcxNjIyMDlaMDMxMTAvBgNV BAMTKDZBNkYwQzIzQkEyRUZERDRGQTgyMTIwQTE2NkJDODdDMDE2ODlEQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6XAiI8ggMGW3vANTlb9nQgkJI 9ZymhsjtzF6LblbyCkfMaSOj72FB8KYN+pKMUHelYouJKv6JSf2F1aju7X+SgyTh ZK/axKWPO/Ou/HFkt0FhnAhMNvJzXztrhhL0PCQr0m1KoTBetwtf2sumdBeIJ44u Ko7+R6bG6LjEKY7MqjpiNPMLu71Bc6F9dQtA5crLkJr5sRTdXz8tqdaQw8YcnDQW vSOTrZzn1CPWZqra55XCV3iinBWadhn2WSCQqjguGnQcT44IfMJTHhykuIgOc405 tDiajCPiGdYDnVey2pBFFJauDwCbvq/Nivf0TRsGYXTqc7Zm62ulbNQbVQ+rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUam8MI7ou/dT6ghIKFmvIfAFonbgwHwYDVR0j BBgwFoAULMyFv2zNNlcB76de5BbSNPhhOFswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YWYwN2YxOC01YzQ5LTQxMjktYWE1My03MDg1Y2NkNTdiNjMvMC8yQ0NDODVCRjZD Q0QzNjU3MDFFRkE3NUVFNDE2RDIzNEY4NjEzODVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkNDQzg1QkY2Q0NEMzY1NzAxRUZBNzVFRTQxNkQyMzRGODYx Mzg1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2FmMDdmMTgtNWM0OS00MTI5LWFh NTMtNzA4NWNjZDU3YjYzLzAvMkNDQzg1QkY2Q0NEMzY1NzAxRUZBNzVFRTQxNkQy MzRGODYxMzg1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABfWIf9cgMGrXRV9yreS8Y2vQtfHD3BFFK8o AklVcznNM8dtqPgJx4coTyFE4kSFEFbLtHhK3JXMkE+MAE+p2EeZ2/ecXGXNnpHl ujsNuPhjaJD0/fza1G4mhshzqu6kwrTUHpgr67VfHyI0+0TtP+nk2sa/RiHLVqMS Th7HwFyRfi1qY7Z87LLWMDekxr8vkIolTBu6Q/owPI7MB4eqNWkSqTCanj/+59LD rnS3uXz5ifaUzyb7/CC3FEBfdZDopUeX6PXBNJo95MVM4CfXLMKAmN/OkS2w423r REYj4XCnXGPM2eNKCUIbv9bKLtJOg+P6/g5/V+ny6FsZhaGzRBs= -----END CERTIFICATE-----Generated at Thu Apr 24 15:50:03 2025 by rpki-client on console.sobornost.net