$ rpki-client -vvf repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft File: CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft (raw, json) Hash identifier: DUE6oh08/LdgXAKNfSWfiFFR63K7/cQAAUHE4Lq5+70= Subject key identifier: 39:0E:B5:24:26:B5:64:70:25:40:4F:8F:F8:30:40:DD:D3:9F:E0:35 Authority key identifier: CD:68:1E:40:6D:2E:CD:8A:CA:28:E4:F0:7B:9A:FA:9D:F6:48:C4:E9 Certificate issuer: /CN=CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9 Certificate serial: 4C71D233E9213B206DAB665DF7A6E13D37D7C123 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft Manifest number: 04C5 Signing time: Wed 23 Apr 2025 01:01:14 +0000 Manifest this update: Wed 23 Apr 2025 00:56:14 +0000 Manifest next update: Sat 26 Apr 2025 11:35:14 +0000 Files and hashes: 1: 3230322e3134392e3132382e302f31392d3234203d3e2034383333.roa (hash: 3FQO/GU4KoR2pdteiQTTb2NEDc217LMm+LVE0TfeQnM=) 2: CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.crl (hash: Dxns1HVOKN8Feq8DyfQ4aMAz3yaLGBc7iWyRY3+DOzc=) 3: 323430343a3630303a3a2f33322d3438203d3e2034383333.roa (hash: XRUL5OC/FVMM95Sr+TgKKKXzxAgbs6oPZwx6ooD6oPE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.crl rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Apr 2025 23:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:71:d2:33:e9:21:3b:20:6d:ab:66:5d:f7:a6:e1:3d:37:d7:c1:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9 Validity Not Before: Apr 23 00:56:14 2025 GMT Not After : Apr 26 11:35:14 2025 GMT Subject: CN=390EB52426B5647025404F8FF83040DDD39FE035 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0c:4f:d9:c1:43:08:ea:60:6e:c7:f3:11:2e: 79:98:40:be:c6:bd:fd:04:ed:f6:ae:61:df:2d:9b: 05:c8:31:dd:fe:8d:28:08:fb:eb:db:60:fa:a1:ea: aa:0c:f8:6c:b9:a1:71:ce:fd:d5:32:31:b2:91:86: 25:72:e3:25:d2:0e:dc:dc:2d:54:67:5d:a0:fb:61: ef:4d:eb:df:2a:0c:ba:aa:a8:08:7f:eb:e0:e6:fa: 7a:5c:57:2c:3c:52:d4:49:6b:79:e7:4f:e2:37:1e: e3:61:a7:36:93:64:4e:f7:c8:f0:cd:aa:c2:14:7e: 00:76:ee:fe:0a:7a:a6:b1:b3:71:cc:25:1d:09:cc: 49:fa:fd:18:40:f1:55:01:8b:1e:10:35:4e:1a:aa: d2:02:20:2f:70:b3:5a:c9:b7:85:c8:de:ce:4f:a2: 9f:9b:b0:f3:92:05:d5:b7:69:1d:08:68:d8:99:65: 5f:76:00:bc:32:3a:57:33:07:d6:df:27:ac:c5:a0: da:81:1d:a5:46:0b:42:9b:bd:e9:6f:43:a7:73:f8: 1b:4d:40:6b:3a:9a:f1:4c:1b:dc:64:65:16:77:65: b0:78:7a:a4:86:8d:69:cf:aa:f8:31:1f:d2:cc:65: ec:61:a5:b6:1b:50:7a:0a:ca:53:7b:1b:f7:ea:81: 25:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:0E:B5:24:26:B5:64:70:25:40:4F:8F:F8:30:40:DD:D3:9F:E0:35 X509v3 Authority Key Identifier: keyid:CD:68:1E:40:6D:2E:CD:8A:CA:28:E4:F0:7B:9A:FA:9D:F6:48:C4:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:91:92:52:aa:d8:71:ec:2e:10:b6:79:5c:fe:75:7f:b5:91: 07:4c:2a:f6:64:9d:e4:74:7d:83:61:c9:55:93:aa:0b:75:a6: 06:56:9b:88:c5:ea:da:85:9e:f1:e0:25:c8:ba:09:1d:d4:41: a2:51:de:0a:18:72:07:ad:92:c8:76:cb:b2:ff:34:dd:6a:4f: 4e:b4:c1:70:fc:b5:75:6f:ce:fa:c0:68:e4:2b:16:d8:89:84: b1:75:1f:3b:b4:f8:ff:45:e5:bd:5b:9a:e6:86:b7:66:c6:77: 2e:f2:25:2e:7b:21:d4:ae:17:b7:6b:2f:bf:a8:71:31:fa:14: d6:41:c8:bf:87:a8:92:f4:fd:f7:b5:9b:2b:fb:7a:cd:4d:34: a2:94:b4:0a:6d:95:80:f6:ed:d8:56:5a:7d:33:a1:3f:7e:af: 3e:79:a7:3b:8a:24:6c:e7:7b:36:a2:97:8f:4f:97:de:20:47: bd:c8:03:05:69:db:7b:77:a3:59:b4:93:a0:8b:d1:92:f5:c8: e1:44:4f:14:a3:59:91:4b:67:b1:c0:29:68:99:d7:07:6c:15: c1:55:41:a8:c3:3d:23:10:14:c6:5d:06:3d:09:69:f7:a9:5d: ab:af:a8:16:85:74:35:35:90:97:a8:80:a0:43:78:2c:79:d0: d4:28:e8:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTHHSM+khOyBtq2Zd96bhPTfXwSMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q2ODFFNDA2RDJFQ0Q4QUNBMjhFNEYwN0I5QUZBOURG NjQ4QzRFOTAeFw0yNTA0MjMwMDU2MTRaFw0yNTA0MjYxMTM1MTRaMDMxMTAvBgNV BAMTKDM5MEVCNTI0MjZCNTY0NzAyNTQwNEY4RkY4MzA0MERERDM5RkUwMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1DE/ZwUMI6mBux/MRLnmYQL7G vf0E7fauYd8tmwXIMd3+jSgI++vbYPqh6qoM+Gy5oXHO/dUyMbKRhiVy4yXSDtzc LVRnXaD7Ye9N698qDLqqqAh/6+Dm+npcVyw8UtRJa3nnT+I3HuNhpzaTZE73yPDN qsIUfgB27v4Keqaxs3HMJR0JzEn6/RhA8VUBix4QNU4aqtICIC9ws1rJt4XI3s5P op+bsPOSBdW3aR0IaNiZZV92ALwyOlczB9bfJ6zFoNqBHaVGC0KbvelvQ6dz+BtN QGs6mvFMG9xkZRZ3ZbB4eqSGjWnPqvgxH9LMZexhpbYbUHoKylN7G/fqgSVrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOQ61JCa1ZHAlQE+P+DBA3dOf4DUwHwYDVR0j BBgwFoAUzWgeQG0uzYrKKOTwe5r6nfZIxOkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NmMxZjUxYS04NjQ1LTRlYjEtYTJmZi1lMjdjMjRjOGUwYzgvMC9DRDY4MUU0MDZE MkVDRDhBQ0EyOEU0RjA3QjlBRkE5REY2NDhDNEU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0Q2ODFFNDA2RDJFQ0Q4QUNBMjhFNEYwN0I5QUZBOURGNjQ4 QzRFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjZjMWY1MWEtODY0NS00ZWIxLWEy ZmYtZTI3YzI0YzhlMGM4LzAvQ0Q2ODFFNDA2RDJFQ0Q4QUNBMjhFNEYwN0I5QUZB OURGNjQ4QzRFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEqRklKq2HHsLhC2eVz+dX+1kQdMKvZkneR0 fYNhyVWTqgt1pgZWm4jF6tqFnvHgJci6CR3UQaJR3goYcgetksh2y7L/NN1qT060 wXD8tXVvzvrAaOQrFtiJhLF1Hzu0+P9F5b1bmuaGt2bGdy7yJS57IdSuF7drL7+o cTH6FNZByL+HqJL0/fe1myv7es1NNKKUtAptlYD27dhWWn0zoT9+rz55pzuKJGzn ezail49Pl94gR73IAwVp23t3o1m0k6CL0ZL1yOFETxSjWZFLZ7HAKWiZ1wdsFcFV QajDPSMQFMZdBj0JafepXauvqBaFdDU1kJeogKBDeCx50NQo6KY= -----END CERTIFICATE-----Generated at Wed Apr 23 04:06:28 2025 by rpki-client on console.sobornost.net