$ rpki-client -vvf repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft File: 0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft (raw, json) Hash identifier: WxjE44hGalk7miOyIo31hA9QxOahLgQaJKUCZkmugbM= Subject key identifier: 9F:FA:0F:DC:4B:4F:CC:EF:36:E4:DC:26:00:AF:06:DA:A6:35:47:96 Authority key identifier: 0C:E1:FC:47:3D:0C:13:A0:32:D3:9E:E0:43:3A:7A:59:35:A7:BE:00 Certificate issuer: /CN=0CE1FC473D0C13A032D39EE0433A7A5935A7BE00 Certificate serial: 778B2B0976AFCE52013248758BD076BC0E702524 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.cer Subject info access: rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft Manifest number: 44 Signing time: Fri 25 Apr 2025 05:02:21 +0000 Manifest this update: Fri 25 Apr 2025 04:57:21 +0000 Manifest next update: Mon 28 Apr 2025 12:44:21 +0000 Files and hashes: 1: 0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.crl (hash: pcuKmahilMCNAaFu8kcD7dLjqkIYoP5E75Id4NuufzU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.crl rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:8b:2b:09:76:af:ce:52:01:32:48:75:8b:d0:76:bc:0e:70:25:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CE1FC473D0C13A032D39EE0433A7A5935A7BE00 Validity Not Before: Apr 25 04:57:21 2025 GMT Not After : Apr 28 12:44:21 2025 GMT Subject: CN=9FFA0FDC4B4FCCEF36E4DC2600AF06DAA6354796 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:61:88:d6:72:5b:cf:39:d7:b8:47:fe:af:65: d7:f0:91:65:e3:ec:cc:59:19:b2:e6:1e:4d:5a:7d: ba:07:75:f1:12:4f:54:e4:a3:dd:e5:25:04:81:5b: 2a:9a:d3:c6:6c:bd:fa:15:f9:db:43:d3:7c:91:dc: 64:ed:0e:3b:cc:e3:97:af:68:1f:6a:fe:fb:49:c1: 0e:07:b8:f8:ae:00:ab:b0:fb:1a:81:9c:52:b6:47: a2:17:5b:12:2e:e3:3f:83:e9:46:f6:1d:b9:cd:75: be:af:0c:9c:09:b7:ea:ae:65:da:81:89:e8:17:70: 42:08:af:bf:18:0e:42:bd:18:1f:8e:2d:6f:e9:b3: 86:f0:0e:a9:8e:8a:bd:88:7a:92:4f:7d:27:d5:9e: 3a:a6:b0:10:0a:a5:a2:48:a6:68:e3:c5:32:26:34: ba:e1:f9:2b:48:62:d0:57:1f:9e:dc:c3:e8:bb:a8: 83:65:ee:f0:b0:52:7b:be:23:0b:1c:5f:88:67:e2: a9:02:ed:ac:71:7f:42:1c:f6:8f:c4:c7:c2:72:14: 26:47:3f:dd:47:5e:36:b0:68:b1:c3:2d:02:70:dc: 8d:c4:53:f6:ea:fa:2f:ca:12:d7:f6:e8:6d:13:5d: 06:cf:09:29:c3:ba:11:be:86:54:3c:f0:5e:78:2a: 0b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:FA:0F:DC:4B:4F:CC:EF:36:E4:DC:26:00:AF:06:DA:A6:35:47:96 X509v3 Authority Key Identifier: keyid:0C:E1:FC:47:3D:0C:13:A0:32:D3:9E:E0:43:3A:7A:59:35:A7:BE:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:8f:5b:d0:d9:0d:2c:d9:e6:c7:17:b2:73:9f:62:0b:c5:26: 0f:e7:d8:6c:45:81:12:6e:0f:fd:92:e5:1a:84:2d:ea:35:5b: 7c:d8:1e:3d:e5:0a:48:10:2e:85:34:95:94:2a:12:f2:f0:71: 01:bf:71:aa:16:4b:15:47:8c:3c:2c:cb:e1:55:3c:2a:c7:09: 21:12:97:1d:d8:89:05:37:90:a1:0e:b3:75:91:17:58:73:ea: ff:7d:cb:5c:3c:b9:e4:7e:48:14:db:69:d1:80:3d:d6:01:51: 7e:4b:f6:30:51:b5:77:91:47:19:77:75:9d:5c:dd:a0:5b:cf: cb:63:0c:ac:81:e3:7d:03:ab:eb:d5:27:73:a0:9f:53:f7:87: f8:0e:34:ca:bc:b3:2f:f0:30:b8:db:0e:53:0d:9d:d1:0a:2a: d7:38:12:fb:a2:3f:87:e0:e4:bd:6c:f3:5d:a0:dd:57:b4:17: 88:a4:23:09:af:e9:66:bd:16:f5:11:97:60:28:ce:90:39:16: 73:6c:f9:29:3f:45:4f:49:13:ca:bf:f6:1e:6a:46:10:f0:7e: 98:16:8c:75:d7:83:63:70:cd:3d:5c:6c:0b:7f:b3:b3:a0:87: b4:4d:dc:ed:64:78:1e:05:88:13:46:43:54:da:f4:b0:b3:a2: 7f:56:51:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd4srCXavzlIBMkh1i9B2vA5wJSQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENFMUZDNDczRDBDMTNBMDMyRDM5RUUwNDMzQTdBNTkz NUE3QkUwMDAeFw0yNTA0MjUwNDU3MjFaFw0yNTA0MjgxMjQ0MjFaMDMxMTAvBgNV BAMTKDlGRkEwRkRDNEI0RkNDRUYzNkU0REMyNjAwQUYwNkRBQTYzNTQ3OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuYYjWclvPOde4R/6vZdfwkWXj 7MxZGbLmHk1afboHdfEST1Tko93lJQSBWyqa08ZsvfoV+dtD03yR3GTtDjvM45ev aB9q/vtJwQ4HuPiuAKuw+xqBnFK2R6IXWxIu4z+D6Ub2HbnNdb6vDJwJt+quZdqB iegXcEIIr78YDkK9GB+OLW/ps4bwDqmOir2IepJPfSfVnjqmsBAKpaJIpmjjxTIm NLrh+StIYtBXH57cw+i7qINl7vCwUnu+IwscX4hn4qkC7axxf0Ic9o/Ex8JyFCZH P91HXjawaLHDLQJw3I3EU/bq+i/KEtf26G0TXQbPCSnDuhG+hlQ88F54KgurAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn/oP3EtPzO825NwmAK8G2qY1R5YwHwYDVR0j BBgwFoAUDOH8Rz0ME6Ay057gQzp6WTWnvgAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MmY0Nzc2My1iMGUwLTRkMDEtYjZjOC02MGVhNGNhNTYwYjQvMC8wQ0UxRkM0NzNE MEMxM0EwMzJEMzlFRTA0MzNBN0E1OTM1QTdCRTAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMENFMUZDNDczRDBDMTNBMDMyRDM5RUUwNDMzQTdBNTkzNUE3 QkUwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzJmNDc3NjMtYjBlMC00ZDAxLWI2 YzgtNjBlYTRjYTU2MGI0LzAvMENFMUZDNDczRDBDMTNBMDMyRDM5RUUwNDMzQTdB NTkzNUE3QkUwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFaPW9DZDSzZ5scXsnOfYgvFJg/n2GxFgRJu D/2S5RqELeo1W3zYHj3lCkgQLoU0lZQqEvLwcQG/caoWSxVHjDwsy+FVPCrHCSES lx3YiQU3kKEOs3WRF1hz6v99y1w8ueR+SBTbadGAPdYBUX5L9jBRtXeRRxl3dZ1c 3aBbz8tjDKyB430Dq+vVJ3Ogn1P3h/gONMq8sy/wMLjbDlMNndEKKtc4EvuiP4fg 5L1s812g3Ve0F4ikIwmv6Wa9FvURl2AozpA5FnNs+Sk/RU9JE8q/9h5qRhDwfpgW jHXXg2NwzT1cbAt/s7Ogh7RN3O1keB4FiBNGQ1Ta9LCzon9WUWw= -----END CERTIFICATE-----Generated at Fri Apr 25 08:21:08 2025 by rpki-client on console.sobornost.net