$ rpki-client -vvf repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.mft File: CB8106D827747D008C9DE9181B4EC6739C8EE800.mft (raw, json) Hash identifier: IjRm1PRuAbq+/pjp3aWlq8Ib+v4yVQ+/s9TwuP5nexg= Subject key identifier: DC:CB:77:B6:9D:B9:7B:68:81:C7:D5:B6:AA:95:EA:92:98:BC:6F:AF Authority key identifier: CB:81:06:D8:27:74:7D:00:8C:9D:E9:18:1B:4E:C6:73:9C:8E:E8:00 Certificate issuer: /CN=CB8106D827747D008C9DE9181B4EC6739C8EE800 Certificate serial: 6DC75AA38B9063F4E6F9A73F739ACD3EF8D6C13F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CB8106D827747D008C9DE9181B4EC6739C8EE800.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.mft Manifest number: 04C5 Signing time: Wed 23 Apr 2025 12:40:51 +0000 Manifest this update: Wed 23 Apr 2025 12:35:51 +0000 Manifest next update: Sat 26 Apr 2025 18:48:51 +0000 Files and hashes: 1: 3130332e3234382e3139362e302f32322d3234203d3e20313331373436.roa (hash: nxYOm0XXR50V6GnhRaIQYUBF2UG5sIA0HyaLTjhPLDc=) 2: 323430303a663334303a3a2f33322d3438203d3e20313331373436.roa (hash: 6yavDvIc4pSEZOii3wG3tpQ49E/AOM1JrdsShPejo+c=) 3: 3130332e32312e3230342e302f32322d3234203d3e20313331373436.roa (hash: Pzwwc/DaRh7douIe0O7l7uQ+2W5v06vmWKYPm+xMR5Y=) 4: CB8106D827747D008C9DE9181B4EC6739C8EE800.crl (hash: JQBV5Yzs4wM+7WrjcOmt8QIKvGp1rWZBIsEr1lgLV8Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.crl rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CB8106D827747D008C9DE9181B4EC6739C8EE800.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 12:29:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:c7:5a:a3:8b:90:63:f4:e6:f9:a7:3f:73:9a:cd:3e:f8:d6:c1:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB8106D827747D008C9DE9181B4EC6739C8EE800 Validity Not Before: Apr 23 12:35:51 2025 GMT Not After : Apr 26 18:48:51 2025 GMT Subject: CN=DCCB77B69DB97B6881C7D5B6AA95EA9298BC6FAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a0:63:14:87:7d:50:05:71:c1:8d:f0:fe:c4: c9:ca:f4:0e:82:33:d0:f7:5d:a5:16:70:c5:79:51: 25:e5:d1:e1:e0:da:13:ad:b7:d8:31:3d:42:bb:3e: 44:f9:2a:fe:af:3e:b5:2f:52:04:fe:2c:66:17:65: c4:70:d7:a5:c8:d9:2e:8c:d1:84:29:95:30:14:08: 33:c8:50:2a:dd:e6:85:2f:08:35:a2:0b:2d:18:0c: d5:be:f8:97:f8:8f:c1:a1:7f:74:60:b1:bb:e9:b7: b2:d5:ea:58:43:5a:f3:a9:80:37:03:22:9a:97:a2: c3:ea:cc:42:b1:fe:b6:9a:75:87:00:ca:94:c6:d3: 38:5b:a7:55:36:53:ca:79:68:a9:99:36:e3:bc:ae: c7:10:95:fd:56:df:8b:44:71:20:c0:e4:a0:75:b3: c9:59:39:61:86:cb:9f:38:72:9b:96:65:9e:db:5f: 31:69:ce:94:77:f7:22:04:1e:80:ce:ff:5f:80:39: a1:30:18:d1:d9:25:cd:11:c9:4b:18:3f:19:27:8d: 96:6a:15:62:34:a5:3c:a2:26:68:3a:b0:46:e8:c8: 74:d6:9a:2e:4f:d5:f7:a1:d4:13:86:6a:54:36:70: 80:a6:7d:ef:c4:6f:54:fc:a8:b5:7f:ad:9c:37:02: 93:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:CB:77:B6:9D:B9:7B:68:81:C7:D5:B6:AA:95:EA:92:98:BC:6F:AF X509v3 Authority Key Identifier: keyid:CB:81:06:D8:27:74:7D:00:8C:9D:E9:18:1B:4E:C6:73:9C:8E:E8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CB8106D827747D008C9DE9181B4EC6739C8EE800.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:81:10:a5:75:33:b0:3c:be:3e:76:f9:2b:a9:70:58:53:a7: 84:91:e4:fb:9f:ea:b7:4c:03:c7:84:3a:18:48:c3:d8:ee:22: ce:97:fd:f0:19:7e:54:b2:27:c5:1d:15:f5:46:61:74:b6:74: cb:ba:61:d3:f6:c5:fa:d5:d3:61:de:4c:b8:7c:86:a3:f5:f0: d2:ce:a2:b7:0a:70:d9:06:0e:d4:4b:ec:56:e3:30:d6:8e:e2: 1e:05:f5:08:6d:cf:64:56:f9:0d:5b:ce:41:b5:3b:60:52:bb: b7:5e:eb:ec:a5:df:74:49:04:bd:97:1e:84:fa:a3:19:77:b2: bc:38:01:41:a3:ca:78:d6:67:ab:a9:df:18:4d:ce:1b:82:2c: c3:19:71:21:9c:32:4d:2e:61:dd:1a:8f:b2:ed:13:0f:7a:66: e9:93:01:a0:83:0b:d6:75:dc:7a:a9:05:96:b8:ad:a8:1c:c2: c5:31:fe:2f:6a:f5:51:4e:7f:b6:8e:53:21:cb:4e:cc:33:d1: 95:4e:d6:7b:f6:ba:ff:49:ce:38:0b:5b:a6:c1:ba:88:d3:67: 7a:bc:01:9e:ac:ac:c5:c8:32:a7:8a:c1:e6:3a:ca:34:a4:b0: 3e:11:36:d1:eb:25:62:db:cf:54:de:a4:20:29:82:b5:a6:40: ce:72:aa:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbcdao4uQY/Tm+ac/c5rNPvjWwT8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I4MTA2RDgyNzc0N0QwMDhDOURFOTE4MUI0RUM2NzM5 QzhFRTgwMDAeFw0yNTA0MjMxMjM1NTFaFw0yNTA0MjYxODQ4NTFaMDMxMTAvBgNV BAMTKERDQ0I3N0I2OURCOTdCNjg4MUM3RDVCNkFBOTVFQTkyOThCQzZGQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUoGMUh31QBXHBjfD+xMnK9A6C M9D3XaUWcMV5USXl0eHg2hOtt9gxPUK7PkT5Kv6vPrUvUgT+LGYXZcRw16XI2S6M 0YQplTAUCDPIUCrd5oUvCDWiCy0YDNW++Jf4j8Ghf3Rgsbvpt7LV6lhDWvOpgDcD IpqXosPqzEKx/raadYcAypTG0zhbp1U2U8p5aKmZNuO8rscQlf1W34tEcSDA5KB1 s8lZOWGGy584cpuWZZ7bXzFpzpR39yIEHoDO/1+AOaEwGNHZJc0RyUsYPxknjZZq FWI0pTyiJmg6sEboyHTWmi5P1feh1BOGalQ2cICmfe/Eb1T8qLV/rZw3ApPtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3Mt3tp25e2iBx9W2qpXqkpi8b68wHwYDVR0j BBgwFoAUy4EG2Cd0fQCMnekYG07Gc5yO6AAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YmU1NzhkMC1kM2FhLTRmMGYtYmI5ZC1mNzRiNDljNmE2NTUvMC9DQjgxMDZEODI3 NzQ3RDAwOEM5REU5MTgxQjRFQzY3MzlDOEVFODAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0I4MTA2RDgyNzc0N0QwMDhDOURFOTE4MUI0RUM2NzM5QzhF RTgwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmJlNTc4ZDAtZDNhYS00ZjBmLWJi OWQtZjc0YjQ5YzZhNjU1LzAvQ0I4MTA2RDgyNzc0N0QwMDhDOURFOTE4MUI0RUM2 NzM5QzhFRTgwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ2BEKV1M7A8vj52+SupcFhTp4SR5Puf6rdM A8eEOhhIw9juIs6X/fAZflSyJ8UdFfVGYXS2dMu6YdP2xfrV02HeTLh8hqP18NLO orcKcNkGDtRL7FbjMNaO4h4F9Qhtz2RW+Q1bzkG1O2BSu7de6+yl33RJBL2XHoT6 oxl3srw4AUGjynjWZ6up3xhNzhuCLMMZcSGcMk0uYd0aj7LtEw96ZumTAaCDC9Z1 3HqpBZa4ragcwsUx/i9q9VFOf7aOUyHLTswz0ZVO1nv2uv9JzjgLW6bBuojTZ3q8 AZ6srMXIMqeKweY6yjSksD4RNtHrJWLbz1TepCApgrWmQM5yqgw= -----END CERTIFICATE-----Generated at Wed Apr 23 15:33:57 2025 by rpki-client on console.sobornost.net