$ rpki-client -vvf repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft File: CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft (raw, json) Hash identifier: QzxrlO0uo6dGSe63SIyV0Neqre5wdS6mJRBGnhF9TQ0= Subject key identifier: 17:98:1C:AA:B7:3D:AB:67:E6:94:D4:60:EC:B9:A6:67:D6:22:00:F9 Authority key identifier: CD:7C:26:7C:58:AE:2F:51:81:7F:AA:52:02:B0:BF:91:C8:4E:CE:D4 Certificate issuer: /CN=CD7C267C58AE2F51817FAA5202B0BF91C84ECED4 Certificate serial: 54C53FC8577970EBECDEA272E1C6B7C741D51CBF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft Manifest number: 0336 Signing time: Thu 24 Apr 2025 08:41:26 +0000 Manifest this update: Thu 24 Apr 2025 08:36:26 +0000 Manifest next update: Sun 27 Apr 2025 14:57:26 +0000 Files and hashes: 1: 3130332e3137302e3233342e302f32332d3234203d3e20313338383535.roa (hash: Zud2nnElfbx5UA3aYazzfNWJKcwUrbzENyQybZ8isd0=) 2: CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.crl (hash: an4bGMT3TOVDOWmHW+7k5Cg5N1O+mffQtTR2/wKqH5g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.crl rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 10:42:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:c5:3f:c8:57:79:70:eb:ec:de:a2:72:e1:c6:b7:c7:41:d5:1c:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD7C267C58AE2F51817FAA5202B0BF91C84ECED4 Validity Not Before: Apr 24 08:36:26 2025 GMT Not After : Apr 27 14:57:26 2025 GMT Subject: CN=17981CAAB73DAB67E694D460ECB9A667D62200F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7f:5a:34:ed:ac:e8:73:a1:ee:70:bc:5e:42: 7b:fb:62:38:a0:9c:cd:28:79:3f:24:e1:0f:09:39: 3a:a3:bb:79:13:e0:4c:42:c7:d8:f8:00:7e:02:a0: 56:63:b0:c9:2e:d5:21:77:a4:ee:05:c5:08:d4:38: 7a:de:70:a4:de:56:2a:46:8c:b7:5d:42:d4:ea:46: 6e:97:65:f3:a8:53:0e:ed:04:a1:41:a8:cd:6f:60: 48:98:76:d6:33:58:75:3f:45:4b:fb:dc:bf:5a:f9: d1:72:00:59:14:27:c2:12:e5:4b:9f:84:13:70:4d: 43:20:ed:1b:72:ff:0b:f2:aa:90:36:3a:84:f1:93: 97:cc:be:03:16:53:c8:37:99:0d:cc:32:39:3c:3f: a3:4c:88:75:e2:8a:d5:8c:1d:03:d0:a3:d0:3f:17: ff:f6:3b:fe:aa:38:26:38:10:cb:cd:df:a2:b0:58: 2f:8a:6c:8e:d4:27:e3:71:3f:48:83:1f:4d:e5:32: 00:ae:84:4d:ad:a2:4d:a3:cb:94:6d:c7:ff:42:07: 3d:c1:2f:15:5d:2a:c5:98:2c:58:89:c2:6f:5c:9b: 01:e7:f9:ff:8f:76:1a:26:2d:b2:23:52:25:52:48: 65:74:b6:0e:24:cc:ef:c6:80:40:16:60:f6:e9:cc: f1:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:98:1C:AA:B7:3D:AB:67:E6:94:D4:60:EC:B9:A6:67:D6:22:00:F9 X509v3 Authority Key Identifier: keyid:CD:7C:26:7C:58:AE:2F:51:81:7F:AA:52:02:B0:BF:91:C8:4E:CE:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:23:37:a3:f1:11:df:c7:4f:98:25:6e:69:dc:97:d2:86:89: a8:8f:33:6e:73:84:1a:1a:a6:22:82:9e:aa:79:5b:02:ca:ed: 38:c8:1a:d7:77:f2:1e:af:c3:b1:07:80:f5:12:94:78:6e:79: 01:5d:00:df:ba:4c:55:00:3e:39:c4:f8:c8:9f:70:cf:6f:aa: 0f:7d:51:14:d6:21:fd:e7:e7:5b:71:a7:79:42:bd:4f:5d:84: cb:fb:fa:5a:a4:c2:70:e3:3a:e6:aa:f1:e2:57:7b:1d:3e:3c: 6d:b7:56:95:e7:c5:e6:6a:21:32:0e:40:3b:91:de:37:82:9f: 6d:dc:63:55:b4:f2:fe:3c:2c:56:bc:3a:3e:3a:59:4c:87:28: 50:15:46:22:aa:2d:90:b6:fc:87:14:e1:f9:68:d7:80:d7:be: ef:55:1b:06:a2:d1:c2:ab:ac:cd:9e:7f:84:63:3c:ea:a3:eb: 7a:94:cc:ca:d3:8d:de:4f:8f:06:72:23:d8:ba:7a:85:e7:04: 49:25:8b:55:12:6f:42:d0:a2:4c:93:83:3d:9a:94:7a:d6:f1: b9:72:45:74:38:68:c0:12:19:9e:3d:a1:47:18:01:a9:46:8b: 08:64:88:3a:e3:81:bc:5f:db:9b:7f:3e:22:49:57:4d:88:a4: 0b:40:a8:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVMU/yFd5cOvs3qJy4ca3x0HVHL8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q3QzI2N0M1OEFFMkY1MTgxN0ZBQTUyMDJCMEJGOTFD ODRFQ0VENDAeFw0yNTA0MjQwODM2MjZaFw0yNTA0MjcxNDU3MjZaMDMxMTAvBgNV BAMTKDE3OTgxQ0FBQjczREFCNjdFNjk0RDQ2MEVDQjlBNjY3RDYyMjAwRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAf1o07azoc6HucLxeQnv7Yjig nM0oeT8k4Q8JOTqju3kT4ExCx9j4AH4CoFZjsMku1SF3pO4FxQjUOHrecKTeVipG jLddQtTqRm6XZfOoUw7tBKFBqM1vYEiYdtYzWHU/RUv73L9a+dFyAFkUJ8IS5Uuf hBNwTUMg7Rty/wvyqpA2OoTxk5fMvgMWU8g3mQ3MMjk8P6NMiHXiitWMHQPQo9A/ F//2O/6qOCY4EMvN36KwWC+KbI7UJ+NxP0iDH03lMgCuhE2tok2jy5Rtx/9CBz3B LxVdKsWYLFiJwm9cmwHn+f+PdhomLbIjUiVSSGV0tg4kzO/GgEAWYPbpzPHRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF5gcqrc9q2fmlNRg7LmmZ9YiAPkwHwYDVR0j BBgwFoAUzXwmfFiuL1GBf6pSArC/kchOztQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MTQ0ZDU3Ni0zODE4LTQ5ZDYtODY2Mi1mOGRmODlhYjI4NjMvMC9DRDdDMjY3QzU4 QUUyRjUxODE3RkFBNTIwMkIwQkY5MUM4NEVDRUQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0Q3QzI2N0M1OEFFMkY1MTgxN0ZBQTUyMDJCMEJGOTFDODRF Q0VENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODE0NGQ1NzYtMzgxOC00OWQ2LTg2 NjItZjhkZjg5YWIyODYzLzAvQ0Q3QzI2N0M1OEFFMkY1MTgxN0ZBQTUyMDJCMEJG OTFDODRFQ0VENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFkjN6PxEd/HT5glbmncl9KGiaiPM25zhBoa piKCnqp5WwLK7TjIGtd38h6vw7EHgPUSlHhueQFdAN+6TFUAPjnE+MifcM9vqg99 URTWIf3n51txp3lCvU9dhMv7+lqkwnDjOuaq8eJXex0+PG23VpXnxeZqITIOQDuR 3jeCn23cY1W08v48LFa8Oj46WUyHKFAVRiKqLZC2/IcU4flo14DXvu9VGwai0cKr rM2ef4RjPOqj63qUzMrTjd5PjwZyI9i6eoXnBEkli1USb0LQokyTgz2alHrW8bly RXQ4aMASGZ49oUcYAalGiwhkiDrjgbxf25t/PiJJV02IpAtAqG8= -----END CERTIFICATE-----Generated at Thu Apr 24 11:25:12 2025 by rpki-client on console.sobornost.net