$ rpki-client -vvf repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.mft File: CA14F96C33329D8CA42315C2B500AB2D57B1E35B.mft (raw, json) Hash identifier: pcoyGWpKdLoF4dAdSZ+sc1kWY6tHXqjgJtZIq5YsFh0= Subject key identifier: CA:79:60:C6:E7:D3:E3:96:37:C1:35:1E:71:63:F3:A9:BF:29:9A:7A Authority key identifier: CA:14:F9:6C:33:32:9D:8C:A4:23:15:C2:B5:00:AB:2D:57:B1:E3:5B Certificate issuer: /CN=CA14F96C33329D8CA42315C2B500AB2D57B1E35B Certificate serial: 3D4771580F11C58B074E84604010DE21EAD44F1B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.mft Manifest number: 01C5 Signing time: Wed 23 Apr 2025 14:21:18 +0000 Manifest this update: Wed 23 Apr 2025 14:16:18 +0000 Manifest next update: Sat 26 Apr 2025 18:18:18 +0000 Files and hashes: 1: 3130332e3131312e3131392e302f32342d3234203d3e20313439393531.roa (hash: mSliD1vp9W3HskEo7RkLZAe+zzV/2ow/Kxu30d1qJXM=) 2: 323030313a6466313a316563303a3a2f34382d3438203d3e20313439393531.roa (hash: h7S6wYW5PbjWPPZImqnHAQEExu6SHfaYmZDzvVKKqG0=) 3: CA14F96C33329D8CA42315C2B500AB2D57B1E35B.crl (hash: iHD9YbUKJbQy2YG1m4u7qpRiaIf5x8vU9U/bNiOgNIk=) 4: 3130332e3131312e3131382e302f32342d3234203d3e20313439393531.roa (hash: inrFUM/5CwXojBI2sTkJRY2EzoHBVXYYugcwwrqYnSY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.crl rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 12:29:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:47:71:58:0f:11:c5:8b:07:4e:84:60:40:10:de:21:ea:d4:4f:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA14F96C33329D8CA42315C2B500AB2D57B1E35B Validity Not Before: Apr 23 14:16:18 2025 GMT Not After : Apr 26 18:18:18 2025 GMT Subject: CN=CA7960C6E7D3E39637C1351E7163F3A9BF299A7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e7:d6:b0:16:42:b7:00:06:39:46:97:0a:ce: 85:93:ab:b7:97:e8:cd:23:29:10:e4:d0:94:2d:94: 3b:01:b6:34:67:17:c3:af:d3:fd:53:a1:63:d5:d0: 61:b5:05:2e:8e:1b:8e:82:0e:88:df:bb:28:d2:ce: bb:b8:69:2a:21:87:5e:6f:93:e7:fe:bb:d8:d2:73: 37:e8:6b:a8:da:77:b9:ca:53:b6:75:12:40:25:21: 7a:98:26:05:30:46:57:45:e4:2c:3f:63:b4:08:77: 2b:68:5b:38:e2:c4:d3:bb:be:04:c1:75:3d:64:da: f0:80:0b:73:b4:ff:f1:fe:18:a2:8b:43:17:93:f1: 5f:55:cd:33:60:a0:c4:15:de:b3:d0:3f:8e:80:14: 18:5a:6b:5f:3a:20:e4:60:af:11:6c:12:77:14:af: 1f:55:8c:c1:3b:3e:bd:04:6a:30:fb:db:e5:0f:ce: ed:01:17:91:7b:c9:ba:aa:97:5e:f4:0f:81:c7:33: e7:b8:a5:be:5f:93:bf:6c:14:b4:7c:85:7a:48:fe: fb:8f:0f:ae:bc:fa:a6:92:44:0e:ae:84:b5:fb:20: 93:df:68:d2:54:13:4a:55:bf:8c:06:3a:b4:fa:9c: 38:66:7f:08:15:33:28:2a:f3:cf:56:57:d7:e1:42: 1e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:79:60:C6:E7:D3:E3:96:37:C1:35:1E:71:63:F3:A9:BF:29:9A:7A X509v3 Authority Key Identifier: keyid:CA:14:F9:6C:33:32:9D:8C:A4:23:15:C2:B5:00:AB:2D:57:B1:E3:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:b0:91:da:93:ad:d4:7b:d7:3c:00:99:3c:6c:21:57:a6:9f: ab:82:67:ff:0e:07:ce:2b:42:1a:2c:a0:7f:0b:dc:6f:31:3c: 52:ae:21:01:7d:e3:6d:53:65:4c:13:f0:ae:59:55:6e:dc:2d: 3b:8b:4e:fe:9f:07:8c:b9:aa:5f:a3:8e:15:cb:cf:fb:3e:16: 4f:74:ba:85:75:c7:fd:ca:59:46:b8:a5:39:87:a1:d5:2d:f8: b1:09:8b:44:29:7a:34:7d:4b:8c:bc:9d:58:48:87:af:23:24: 3b:c3:89:37:2f:e8:ed:2f:a4:62:f4:31:c1:b8:35:29:b4:56: 2d:1f:c1:ec:c7:4a:39:45:53:fb:a7:71:20:e2:26:14:8f:0c: 3e:b0:d4:24:3f:38:44:67:9b:6f:8f:ab:57:47:82:68:d2:a7: c1:9a:fd:a0:97:68:a8:ef:c0:ea:62:cd:35:3d:b8:4d:90:ee: df:64:9d:f0:b7:00:06:62:34:20:46:47:ed:88:e7:32:17:36: a7:16:3d:40:b8:a4:29:53:50:51:0c:3c:8a:bf:70:6a:71:e4: 58:0e:94:5c:df:8c:a2:e0:4b:53:b0:77:ec:f4:a9:c9:b2:3a: 99:db:95:6e:66:eb:a7:da:51:a9:63:88:15:f4:4c:35:b4:4e: 94:9e:e2:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPUdxWA8RxYsHToRgQBDeIerUTxswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ExNEY5NkMzMzMyOUQ4Q0E0MjMxNUMyQjUwMEFCMkQ1 N0IxRTM1QjAeFw0yNTA0MjMxNDE2MThaFw0yNTA0MjYxODE4MThaMDMxMTAvBgNV BAMTKENBNzk2MEM2RTdEM0UzOTYzN0MxMzUxRTcxNjNGM0E5QkYyOTlBN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy59awFkK3AAY5RpcKzoWTq7eX 6M0jKRDk0JQtlDsBtjRnF8Ov0/1ToWPV0GG1BS6OG46CDojfuyjSzru4aSohh15v k+f+u9jSczfoa6jad7nKU7Z1EkAlIXqYJgUwRldF5Cw/Y7QIdytoWzjixNO7vgTB dT1k2vCAC3O0//H+GKKLQxeT8V9VzTNgoMQV3rPQP46AFBhaa186IORgrxFsEncU rx9VjME7Pr0EajD72+UPzu0BF5F7ybqql170D4HHM+e4pb5fk79sFLR8hXpI/vuP D668+qaSRA6uhLX7IJPfaNJUE0pVv4wGOrT6nDhmfwgVMygq889WV9fhQh7bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUynlgxufT45Y3wTUecWPzqb8pmnowHwYDVR0j BBgwFoAUyhT5bDMynYykIxXCtQCrLVex41swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MWYxNmM0NS05NmZiLTRjOTItODA0ZS02NGIwYmYyODAzMDIvMC9DQTE0Rjk2QzMz MzI5RDhDQTQyMzE1QzJCNTAwQUIyRDU3QjFFMzVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0ExNEY5NkMzMzMyOUQ4Q0E0MjMxNUMyQjUwMEFCMkQ1N0Ix RTM1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTFmMTZjNDUtOTZmYi00YzkyLTgw NGUtNjRiMGJmMjgwMzAyLzAvQ0ExNEY5NkMzMzMyOUQ4Q0E0MjMxNUMyQjUwMEFC MkQ1N0IxRTM1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHSwkdqTrdR71zwAmTxsIVemn6uCZ/8OB84r QhosoH8L3G8xPFKuIQF9421TZUwT8K5ZVW7cLTuLTv6fB4y5ql+jjhXLz/s+Fk90 uoV1x/3KWUa4pTmHodUt+LEJi0QpejR9S4y8nVhIh68jJDvDiTcv6O0vpGL0McG4 NSm0Vi0fwezHSjlFU/uncSDiJhSPDD6w1CQ/OERnm2+Pq1dHgmjSp8Ga/aCXaKjv wOpizTU9uE2Q7t9knfC3AAZiNCBGR+2I5zIXNqcWPUC4pClTUFEMPIq/cGpx5FgO lFzfjKLgS1Owd+z0qcmyOpnblW5m66faUaljiBX0TDW0TpSe4lc= -----END CERTIFICATE-----Generated at Wed Apr 23 17:38:30 2025 by rpki-client on console.sobornost.net