$ rpki-client -vvf repo-rpki.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.mft File: C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.mft (raw, json) Hash identifier: vG2hB05xihNyJSldzlNMm+YmHO/1AzOOeWbQBHpGV6k= Subject key identifier: 6E:FA:C8:CA:61:8A:FA:9E:86:A8:95:F2:E1:A8:4F:E0:E9:11:C7:51 Authority key identifier: C5:F2:AF:A0:AB:7A:B2:DD:BD:8F:87:5B:21:B8:EC:0C:3F:F8:31:F6 Certificate issuer: /CN=C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6 Certificate serial: 7D7DC1A6BE2A6FDABBA06283C4A6DA5A1E35A3B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.mft Manifest number: 040B Signing time: Fri 25 Apr 2025 10:01:16 +0000 Manifest this update: Fri 25 Apr 2025 09:56:16 +0000 Manifest next update: Mon 28 Apr 2025 21:03:16 +0000 Files and hashes: 1: C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.crl (hash: yf97VAIPHgkBTe3Uf8nt/FUTu1vbBDLppf5GF81lJ84=) 2: 3130332e3234362e3138342e302f32342d3234203d3e203538333833.roa (hash: oUvHJzeVfm7zuZGvqOXSprt6gWL11zoVCa7SzfOTCA0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.crl rsync://repo-rpki.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 14:02:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:7d:c1:a6:be:2a:6f:da:bb:a0:62:83:c4:a6:da:5a:1e:35:a3:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6 Validity Not Before: Apr 25 09:56:16 2025 GMT Not After : Apr 28 21:03:16 2025 GMT Subject: CN=6EFAC8CA618AFA9E86A895F2E1A84FE0E911C751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8c:7b:be:5b:9f:88:cb:fa:3f:1f:8c:06:a7: 94:06:51:22:10:e1:85:c0:a3:f5:8c:80:51:19:53: bb:48:6a:d8:13:f0:b8:be:9b:fe:f7:74:cc:db:8e: a0:dc:2f:94:6f:ed:75:0c:9d:8a:88:94:80:5f:d5: 0a:29:a9:ae:3b:6d:91:17:73:03:f5:90:6d:fd:1c: ff:b3:14:60:b1:d5:bf:dc:97:74:eb:59:80:b5:32: 92:c7:7f:94:82:ea:1a:19:e4:23:c7:4e:1b:c9:00: 99:e5:ec:d9:68:5b:9a:39:b7:25:c9:3c:93:b0:33: af:f1:1f:34:94:bc:a5:1e:12:0c:ff:58:f2:c3:27: ae:14:c8:dd:2c:6d:f9:1d:44:f6:5f:f3:ab:f7:a2: 8c:00:36:a4:85:c0:96:fa:c0:f0:dc:fa:79:69:37: 3c:30:9c:7c:40:99:16:f8:e9:b3:00:14:5e:6d:84: 5a:70:75:32:1e:7d:da:38:28:c9:15:5d:ed:6c:47: 44:ec:14:39:fc:e6:91:ed:34:dc:3a:65:53:b7:ec: 17:ba:68:47:7c:a3:16:cc:36:06:b7:b5:97:02:20: 7b:35:35:c9:bf:42:e1:79:dd:bf:84:35:f4:48:ee: 28:67:94:d5:e0:63:17:06:64:e8:fa:19:1e:10:69: 88:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:FA:C8:CA:61:8A:FA:9E:86:A8:95:F2:E1:A8:4F:E0:E9:11:C7:51 X509v3 Authority Key Identifier: keyid:C5:F2:AF:A0:AB:7A:B2:DD:BD:8F:87:5B:21:B8:EC:0C:3F:F8:31:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:80:2b:e5:61:0e:88:47:68:65:6d:7e:c3:1e:30:df:43:8d: b0:a4:54:4d:a2:71:f4:0b:78:66:e4:34:ca:d4:1c:45:bd:3e: 64:6e:38:bc:ad:56:e6:50:de:9c:b3:21:19:4a:6f:59:ca:7d: 60:06:f1:de:f6:c9:b5:d7:d5:0b:59:b4:52:a7:a4:ec:7f:14: 8b:f5:e4:f7:b7:53:f2:0e:7c:55:5b:71:be:7c:be:46:0c:44: d0:24:42:d5:f5:5b:42:64:7e:a4:87:18:66:bf:ee:cd:a6:1e: b9:5e:05:e0:99:c0:4e:6f:26:cf:fd:6b:70:b1:ae:a2:f7:40: b3:ca:89:f5:9c:1e:f5:21:7a:c4:21:a2:1d:2c:33:43:b4:82: 53:b3:91:81:b2:52:1e:2f:7c:f0:15:a2:c6:51:13:64:5c:34: ae:df:d5:72:cc:03:f4:49:79:3a:a9:ef:c1:73:41:6d:db:ef: 5f:b0:50:92:d3:b1:4d:6b:5c:5a:aa:41:39:81:a9:47:0b:75: 99:e3:aa:f8:cd:c2:69:e8:a5:8a:7e:7d:88:01:fc:ad:fb:97: 2c:a4:a8:cc:34:aa:6b:6e:d0:c3:68:cf:b2:51:d2:f8:25:63: a9:01:56:81:30:e1:ac:5e:84:bf:46:0d:ad:58:c0:14:c4:86: 60:2f:84:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfX3Bpr4qb9q7oGKDxKbaWh41o7kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzVGMkFGQTBBQjdBQjJEREJEOEY4NzVCMjFCOEVDMEMz RkY4MzFGNjAeFw0yNTA0MjUwOTU2MTZaFw0yNTA0MjgyMTAzMTZaMDMxMTAvBgNV BAMTKDZFRkFDOENBNjE4QUZBOUU4NkE4OTVGMkUxQTg0RkUwRTkxMUM3NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNjHu+W5+Iy/o/H4wGp5QGUSIQ 4YXAo/WMgFEZU7tIatgT8Li+m/73dMzbjqDcL5Rv7XUMnYqIlIBf1Qopqa47bZEX cwP1kG39HP+zFGCx1b/cl3TrWYC1MpLHf5SC6hoZ5CPHThvJAJnl7NloW5o5tyXJ PJOwM6/xHzSUvKUeEgz/WPLDJ64UyN0sbfkdRPZf86v3oowANqSFwJb6wPDc+nlp NzwwnHxAmRb46bMAFF5thFpwdTIefdo4KMkVXe1sR0TsFDn85pHtNNw6ZVO37Be6 aEd8oxbMNga3tZcCIHs1Ncm/QuF53b+ENfRI7ihnlNXgYxcGZOj6GR4QaYghAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbvrIymGK+p6GqJXy4ahP4OkRx1EwHwYDVR0j BBgwFoAUxfKvoKt6st29j4dbIbjsDD/4MfYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NmE1YWI1NC03ODQ0LTQ2MDItOGFlYS0zYzJlNjQxZjZhM2MvMC9DNUYyQUZBMEFC N0FCMkREQkQ4Rjg3NUIyMUI4RUMwQzNGRjgzMUY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzVGMkFGQTBBQjdBQjJEREJEOEY4NzVCMjFCOEVDMEMzRkY4 MzFGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzZhNWFiNTQtNzg0NC00NjAyLThh ZWEtM2MyZTY0MWY2YTNjLzAvQzVGMkFGQTBBQjdBQjJEREJEOEY4NzVCMjFCOEVD MEMzRkY4MzFGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHGAK+VhDohHaGVtfsMeMN9DjbCkVE2icfQL eGbkNMrUHEW9PmRuOLytVuZQ3pyzIRlKb1nKfWAG8d72ybXX1QtZtFKnpOx/FIv1 5Pe3U/IOfFVbcb58vkYMRNAkQtX1W0JkfqSHGGa/7s2mHrleBeCZwE5vJs/9a3Cx rqL3QLPKifWcHvUhesQhoh0sM0O0glOzkYGyUh4vfPAVosZRE2RcNK7f1XLMA/RJ eTqp78FzQW3b71+wUJLTsU1rXFqqQTmBqUcLdZnjqvjNwmnopYp+fYgB/K37lyyk qMw0qmtu0MNoz7JR0vglY6kBVoEw4axehL9GDa1YwBTEhmAvhNo= -----END CERTIFICATE-----Generated at Fri Apr 25 12:54:06 2025 by rpki-client on console.sobornost.net