$ rpki-client -vvf repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft File: 4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft (raw, json) Hash identifier: BG7cSjz4/i8PznOljlubk4Z8oi2NxqZU24XHBLws9Og= Subject key identifier: E8:39:10:7D:7E:8F:37:72:FB:9F:FE:36:03:CF:0C:B2:67:FE:83:9F Authority key identifier: 4C:34:08:B6:E0:82:54:22:DC:2D:07:1E:49:0B:D7:CB:1F:BD:2A:3F Certificate issuer: /CN=4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F Certificate serial: 0898D4221CAD1CA1F7BED943C4E28A2C14646FA3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft Manifest number: 0444 Signing time: Sat 26 Apr 2025 04:52:16 +0000 Manifest this update: Sat 26 Apr 2025 04:47:15 +0000 Manifest next update: Tue 29 Apr 2025 10:13:15 +0000 Files and hashes: 1: 4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.crl (hash: 7TpKv8UJ+pIxn61jaS/bZNHanO8eB62I3A1KsdGIxFc=) 2: 3130332e37312e34342e302f32332d3233203d3e203436303232.roa (hash: OTd8RtkXs2m+VF5BpzyjcTZytiPZTBuAWTpwxqI9xFY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.crl rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 09:52:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:98:d4:22:1c:ad:1c:a1:f7:be:d9:43:c4:e2:8a:2c:14:64:6f:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F Validity Not Before: Apr 26 04:47:15 2025 GMT Not After : Apr 29 10:13:15 2025 GMT Subject: CN=E839107D7E8F3772FB9FFE3603CF0CB267FE839F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:29:59:aa:8b:72:9a:cf:a0:ec:cf:07:e3:26: 0f:fd:a8:da:30:c3:d9:36:70:d9:33:3c:eb:f8:0f: 03:4c:6f:80:87:62:9c:7a:9f:52:dd:c1:2e:60:49: 9a:7a:db:87:4f:22:b4:ad:12:ba:3d:12:f0:92:cb: 5a:1e:d2:2b:e5:f5:67:8d:dd:77:ef:93:d0:4d:6c: 15:b6:d3:f4:d3:09:c0:c0:54:c4:ab:1a:88:b7:85: 98:f9:8d:bc:dd:75:94:e3:de:64:b6:5e:97:bf:35: 58:e6:40:50:74:ab:83:81:73:2a:b1:7f:22:d6:1c: cc:88:3d:45:ab:be:35:c2:7c:b4:ad:ef:83:7c:4f: a6:f2:0b:c6:80:49:ab:b9:3d:bd:38:50:35:dc:b9: 3b:20:dc:a3:fc:95:61:d3:1b:8d:e8:b3:18:06:07: d6:c9:a9:28:d0:b7:81:3f:e1:7e:a7:02:b5:b5:20: 38:c3:ca:dd:27:9c:7f:49:dc:2c:84:dc:ba:18:86: 76:88:89:9e:8c:71:64:c5:5f:dd:bd:22:cf:79:a2: 20:38:71:e5:4f:a8:b5:dd:a4:93:04:7c:79:2c:d0: b7:1e:e8:be:d4:cd:e7:6d:1b:3f:bc:71:72:a4:fb: c9:be:9c:d4:3f:be:46:19:dd:a4:d7:03:5d:41:1e: b1:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:39:10:7D:7E:8F:37:72:FB:9F:FE:36:03:CF:0C:B2:67:FE:83:9F X509v3 Authority Key Identifier: keyid:4C:34:08:B6:E0:82:54:22:DC:2D:07:1E:49:0B:D7:CB:1F:BD:2A:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:5e:76:4d:f9:7b:84:5d:a1:12:c6:8e:7c:c8:3d:5f:23:c4: 97:4d:cb:09:5d:d2:48:e3:95:a4:59:a2:c2:79:26:d0:c1:dd: 70:7c:10:4c:6b:03:dc:ce:d4:c6:d1:5b:a4:df:59:d9:bd:5c: 75:b7:e8:dd:07:6e:2e:23:7f:3b:00:c1:d9:ea:2a:13:17:6d: 67:1e:14:a7:39:4f:dc:eb:67:52:7f:a2:dc:a6:88:af:2a:ec: 04:0d:49:d7:d4:90:d1:d7:41:e7:fa:8a:be:94:be:d1:47:f5: a9:a3:7f:24:16:ca:6b:47:1e:b0:8d:0b:39:12:a1:a4:16:a3: 90:c3:64:b7:60:c3:fd:e7:c8:71:f9:64:1b:ef:f5:1c:67:b1: 1e:e0:8f:7e:d9:bc:5f:12:48:ad:c9:e2:16:2e:55:1c:dc:b4: 85:84:63:42:81:ae:6a:d2:36:6b:49:de:ac:e3:3a:71:09:ae: 3e:51:86:51:6a:ee:e6:c1:4d:4a:96:ae:1f:db:f8:ec:ab:c8: 39:e1:d5:df:c5:55:fb:40:42:84:e1:a4:49:06:aa:7e:0e:e9: 96:e5:90:d1:62:af:e1:8b:68:e6:1c:b2:38:75:cd:69:98:2d: 89:a2:ac:55:a8:7a:f9:c5:3e:b3:bb:0b:1d:a7:65:57:53:8f: 51:2d:72:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCJjUIhytHKH3vtlDxOKKLBRkb6MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEMzNDA4QjZFMDgyNTQyMkRDMkQwNzFFNDkwQkQ3Q0Ix RkJEMkEzRjAeFw0yNTA0MjYwNDQ3MTVaFw0yNTA0MjkxMDEzMTVaMDMxMTAvBgNV BAMTKEU4MzkxMDdEN0U4RjM3NzJGQjlGRkUzNjAzQ0YwQ0IyNjdGRTgzOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAKVmqi3Kaz6DszwfjJg/9qNow w9k2cNkzPOv4DwNMb4CHYpx6n1LdwS5gSZp624dPIrStEro9EvCSy1oe0ivl9WeN 3Xfvk9BNbBW20/TTCcDAVMSrGoi3hZj5jbzddZTj3mS2Xpe/NVjmQFB0q4OBcyqx fyLWHMyIPUWrvjXCfLSt74N8T6byC8aASau5Pb04UDXcuTsg3KP8lWHTG43osxgG B9bJqSjQt4E/4X6nArW1IDjDyt0nnH9J3CyE3LoYhnaIiZ6McWTFX929Is95oiA4 ceVPqLXdpJMEfHks0Lce6L7UzedtGz+8cXKk+8m+nNQ/vkYZ3aTXA11BHrHLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6DkQfX6PN3L7n/42A88Msmf+g58wHwYDVR0j BBgwFoAUTDQItuCCVCLcLQceSQvXyx+9Kj8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MWM5Y2U1YS02NjkwLTQ5MDEtOWUwYS1jMjdiMzE5MzE2YmUvMC80QzM0MDhCNkUw ODI1NDIyREMyRDA3MUU0OTBCRDdDQjFGQkQyQTNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEMzNDA4QjZFMDgyNTQyMkRDMkQwNzFFNDkwQkQ3Q0IxRkJE MkEzRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODFjOWNlNWEtNjY5MC00OTAxLTll MGEtYzI3YjMxOTMxNmJlLzAvNEMzNDA4QjZFMDgyNTQyMkRDMkQwNzFFNDkwQkQ3 Q0IxRkJEMkEzRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGhedk35e4RdoRLGjnzIPV8jxJdNywld0kjj laRZosJ5JtDB3XB8EExrA9zO1MbRW6TfWdm9XHW36N0Hbi4jfzsAwdnqKhMXbWce FKc5T9zrZ1J/otymiK8q7AQNSdfUkNHXQef6ir6UvtFH9amjfyQWymtHHrCNCzkS oaQWo5DDZLdgw/3nyHH5ZBvv9RxnsR7gj37ZvF8SSK3J4hYuVRzctIWEY0KBrmrS NmtJ3qzjOnEJrj5RhlFq7ubBTUqWrh/b+OyryDnh1d/FVftAQoThpEkGqn4O6Zbl kNFir+GLaOYcsjh1zWmYLYmirFWoevnFPrO7Cx2nZVdTj1EtcmI= -----END CERTIFICATE-----Generated at Sat Apr 26 08:46:12 2025 by rpki-client on console.sobornost.net