$ rpki-client -vvf repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.mft File: CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.mft (raw, json) Hash identifier: jjrWKv1qsJKME9H0r6Dr3RgZIb9uFVWVSTLBwP2Q+1g= Subject key identifier: A6:E1:1E:12:AA:AF:40:89:50:E5:E8:EB:05:ED:1E:C0:8B:46:81:6F Authority key identifier: CF:0C:F4:3F:29:4A:5C:84:16:E3:F7:A6:FD:BF:07:7B:23:4C:A4:46 Certificate issuer: /CN=CF0CF43F294A5C8416E3F7A6FDBF077B234CA446 Certificate serial: 30E73C4AA9B649FEE52EE391DF16A004D8E335E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.cer Subject info access: rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.mft Manifest number: 027F Signing time: Thu 24 Apr 2025 18:50:55 +0000 Manifest this update: Thu 24 Apr 2025 18:45:55 +0000 Manifest next update: Mon 28 Apr 2025 02:18:55 +0000 Files and hashes: 1: 3130332e362e3230352e302f32342d3234203d3e203538353033.roa (hash: ptSpa0yORFDFTGktJ23ziYaQuqfcwcD6+X4WfU20Bt4=) 2: 3130332e362e3230372e302f32342d3234203d3e203538353033.roa (hash: NhbEnUbS1RFVhQFgb/k13Oo2qyTOB30jh0qFTUkaAik=) 3: 3130332e362e3230342e302f32332d3233203d3e203538353033.roa (hash: yBaA0+xOkr+iculo5l4/62QXBhceh7/LNqxDxugk/Cg=) 4: 3130332e362e3230342e302f32322d3232203d3e203538353033.roa (hash: 4hTYB6oeBmhzrslyPSwrX3Ek6Lkwqv8RzR59ex14KTA=) 5: 3130332e362e3230342e302f32342d3234203d3e203538353033.roa (hash: vJN17h6zHlw8lhqv4ICIcSweY39vapLLmQqw71/RhS0=) 6: CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.crl (hash: KZNYIGv9S8g3QuVQy4kRFSc0gGE4tNHh9HJrwxIA/eM=) 7: 3130332e362e3230362e302f32332d3233203d3e203538353033.roa (hash: 7LF1a7D5EDLG17ihfLxfwJXRWol/1ek+UfoMR7jTEuA=) 8: 3130332e362e3230362e302f32342d3234203d3e203538353033.roa (hash: Cu2RdLHzB+A2EJBsuRCMa0mxP5/Kmd4TOJ7qAO2a+Js=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.crl rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:e7:3c:4a:a9:b6:49:fe:e5:2e:e3:91:df:16:a0:04:d8:e3:35:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF0CF43F294A5C8416E3F7A6FDBF077B234CA446 Validity Not Before: Apr 24 18:45:55 2025 GMT Not After : Apr 28 02:18:55 2025 GMT Subject: CN=A6E11E12AAAF408950E5E8EB05ED1EC08B46816F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:28:9a:12:f2:96:3a:b2:74:91:af:d1:ee:a5: 88:9d:cf:4e:72:ba:32:f2:6a:0a:0c:fe:f3:db:c9: 48:ce:3f:87:13:11:f9:58:d3:06:f8:d8:81:b9:2c: ac:9c:f1:d3:53:d6:23:02:9e:0a:6b:93:0d:8e:8e: b8:a7:26:83:8c:eb:2c:48:47:27:81:9d:06:86:f7: 70:2f:90:57:bd:12:54:61:4e:95:af:7a:36:9f:f0: ee:f6:dc:b5:02:c8:0c:2e:1b:19:8e:4b:79:1e:1c: 2c:67:8e:5d:6b:f2:04:43:40:21:cc:95:24:cb:f6: 8f:ee:3a:49:fd:b9:c0:9a:d1:25:fe:35:63:0d:7c: ba:17:d6:a5:63:37:2b:de:1c:e3:55:a0:eb:9d:71: b1:38:02:d1:c7:14:26:6f:01:ce:6f:19:b1:0e:c5: 71:a0:3f:ea:3a:95:6b:b1:31:6c:6b:eb:46:54:e6: 11:c1:43:7c:13:b7:cb:55:62:e6:63:fb:a2:c9:aa: 84:f8:72:f5:9c:c9:ff:af:65:2f:b3:84:f0:60:5c: 98:86:d8:91:0f:e4:b5:d2:34:66:8f:4c:00:8e:31: ff:eb:ab:2c:7e:99:2a:51:6c:c7:0c:e5:53:4b:a4: 2d:20:17:44:27:46:e6:e0:cc:f0:57:7a:2b:a0:78: 74:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:E1:1E:12:AA:AF:40:89:50:E5:E8:EB:05:ED:1E:C0:8B:46:81:6F X509v3 Authority Key Identifier: keyid:CF:0C:F4:3F:29:4A:5C:84:16:E3:F7:A6:FD:BF:07:7B:23:4C:A4:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:42:d1:bf:11:83:a9:5d:be:e6:3f:81:18:94:f0:af:ed:4e: 22:5e:af:1b:be:2b:9a:04:e2:29:59:fe:af:86:13:43:87:27: 42:42:cf:96:9d:ba:83:04:dc:2d:c2:f7:68:c8:7a:e9:dc:a6: 7a:40:38:54:f4:96:8c:28:a7:e4:e2:df:66:8b:85:de:cb:fb: 10:03:6a:98:60:7b:a9:0c:52:ab:b7:dd:e3:81:b0:35:9a:ee: 86:f2:f8:c3:2d:cf:17:90:a3:c9:85:58:78:57:98:ea:0d:40: 13:f3:95:b1:46:dc:f5:55:94:2d:61:d0:18:cf:ba:49:34:f1: ed:92:81:12:ea:df:05:ce:01:ff:8e:f0:0c:d1:0c:c9:bf:ec: bc:9e:4f:04:90:53:a4:d3:97:3b:71:18:35:84:d0:75:22:61: 4e:94:79:05:ef:8d:89:8d:20:97:cd:9b:9d:03:4b:4e:00:68: 54:d9:67:6b:17:75:ae:e3:86:6f:d3:42:db:bb:22:f4:d7:02: 5e:ea:47:b2:6c:8d:f4:9a:04:6e:02:ba:b2:bc:7d:1f:c9:13: 31:da:46:f8:a1:ea:ee:d8:1e:34:c2:49:9a:29:8e:fa:04:a8: b9:83:70:2e:0a:3f:aa:c0:06:70:6d:bc:69:58:13:0d:f8:c5: 83:ce:4f:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMOc8Sqm2Sf7lLuOR3xagBNjjNeEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YwQ0Y0M0YyOTRBNUM4NDE2RTNGN0E2RkRCRjA3N0Iy MzRDQTQ0NjAeFw0yNTA0MjQxODQ1NTVaFw0yNTA0MjgwMjE4NTVaMDMxMTAvBgNV BAMTKEE2RTExRTEyQUFBRjQwODk1MEU1RThFQjA1RUQxRUMwOEI0NjgxNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOKJoS8pY6snSRr9HupYidz05y ujLyagoM/vPbyUjOP4cTEflY0wb42IG5LKyc8dNT1iMCngprkw2OjrinJoOM6yxI RyeBnQaG93AvkFe9ElRhTpWvejaf8O723LUCyAwuGxmOS3keHCxnjl1r8gRDQCHM lSTL9o/uOkn9ucCa0SX+NWMNfLoX1qVjNyveHONVoOudcbE4AtHHFCZvAc5vGbEO xXGgP+o6lWuxMWxr60ZU5hHBQ3wTt8tVYuZj+6LJqoT4cvWcyf+vZS+zhPBgXJiG 2JEP5LXSNGaPTACOMf/rqyx+mSpRbMcM5VNLpC0gF0QnRubgzPBXeiugeHTVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpuEeEqqvQIlQ5ejrBe0ewItGgW8wHwYDVR0j BBgwFoAUzwz0PylKXIQW4/em/b8HeyNMpEYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ODJmMmIzOC1hZGRmLTRiZDMtOTI0OS1lNWJhNTZjZDA1MmUvMC9DRjBDRjQzRjI5 NEE1Qzg0MTZFM0Y3QTZGREJGMDc3QjIzNENBNDQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0YwQ0Y0M0YyOTRBNUM4NDE2RTNGN0E2RkRCRjA3N0IyMzRD QTQ0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTgyZjJiMzgtYWRkZi00YmQzLTky NDktZTViYTU2Y2QwNTJlLzAvQ0YwQ0Y0M0YyOTRBNUM4NDE2RTNGN0E2RkRCRjA3 N0IyMzRDQTQ0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK1C0b8Rg6ldvuY/gRiU8K/tTiJerxu+K5oE 4ilZ/q+GE0OHJ0JCz5aduoME3C3C92jIeuncpnpAOFT0lowop+Ti32aLhd7L+xAD aphge6kMUqu33eOBsDWa7oby+MMtzxeQo8mFWHhXmOoNQBPzlbFG3PVVlC1h0BjP ukk08e2SgRLq3wXOAf+O8AzRDMm/7LyeTwSQU6TTlztxGDWE0HUiYU6UeQXvjYmN IJfNm50DS04AaFTZZ2sXda7jhm/TQtu7IvTXAl7qR7JsjfSaBG4CurK8fR/JEzHa Rvih6u7YHjTCSZopjvoEqLmDcC4KP6rABnBtvGlYEw34xYPOTzk= -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:11 2025 by rpki-client on console.sobornost.net