$ rpki-client -vvf repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft File: CEE21891B6F5736FAA7D9BED383243F3DF381781.mft (raw, json) Hash identifier: oxyKL5if2BQZsab6e85DSMRcURzTOmXyS+C9nE/kHck= Subject key identifier: 43:14:F3:56:7C:09:F0:45:90:FF:07:A7:2F:54:9C:6D:B4:5A:64:41 Authority key identifier: CE:E2:18:91:B6:F5:73:6F:AA:7D:9B:ED:38:32:43:F3:DF:38:17:81 Certificate issuer: /CN=CEE21891B6F5736FAA7D9BED383243F3DF381781 Certificate serial: 574B7388EBF83E8B71F78A15CE040A0D2405C6D2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE21891B6F5736FAA7D9BED383243F3DF381781.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft Manifest number: 01C4 Signing time: Fri 25 Apr 2025 00:10:58 +0000 Manifest this update: Fri 25 Apr 2025 00:05:58 +0000 Manifest next update: Mon 28 Apr 2025 08:52:58 +0000 Files and hashes: 1: CEE21891B6F5736FAA7D9BED383243F3DF381781.crl (hash: 2IXwuwjVs7RNJcgAmmBUnDxDggc2v5MF5SKsidu9quU=) 2: 3130332e3136382e3138362e302f32332d3234203d3e20313432333232.roa (hash: 1fFCeWUuqh8Cb3Sv5grm5RDaXRUMiRw3OIxuWQiBMNw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.crl rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE21891B6F5736FAA7D9BED383243F3DF381781.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:4b:73:88:eb:f8:3e:8b:71:f7:8a:15:ce:04:0a:0d:24:05:c6:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEE21891B6F5736FAA7D9BED383243F3DF381781 Validity Not Before: Apr 25 00:05:58 2025 GMT Not After : Apr 28 08:52:58 2025 GMT Subject: CN=4314F3567C09F04590FF07A72F549C6DB45A6441 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:a0:1d:64:a1:28:c7:41:85:b5:b1:57:a4:b7: 22:9f:3c:df:78:f6:c7:b2:1c:45:db:1a:d9:98:65: e8:eb:bc:94:7f:a4:45:ab:44:c7:18:f8:16:aa:91: 73:7c:a9:cf:00:55:17:54:17:b8:d5:74:cd:29:ab: eb:c7:75:ac:d0:56:db:56:8c:1b:d5:4d:8c:9a:65: 40:9f:9a:d3:80:ce:08:ef:6b:ac:06:7b:5d:70:56: a0:80:6a:69:1d:86:17:29:6a:e7:7e:11:ac:29:4c: d7:a1:30:bd:6d:e2:26:3c:f4:7c:53:25:0c:5f:0f: f2:96:a0:48:34:d3:cc:fd:96:6e:bc:40:3a:98:af: 4c:05:fe:c5:7a:d6:18:f5:09:36:f2:1a:d6:11:71: 3a:9e:2d:76:e2:3c:73:8f:8e:e1:cd:a0:91:80:6c: 19:4f:73:34:22:e8:7b:59:fb:b6:c1:22:9f:ba:ad: 2d:7e:32:ab:62:ca:08:cb:dd:8c:70:bb:32:2d:e6: 4d:5f:a0:1b:ad:8e:55:cb:8a:00:95:ec:85:d5:44: 6d:65:77:68:68:e9:96:ed:5c:7c:01:dc:58:4d:f0: d9:ef:1b:a6:b3:b2:cc:c5:bf:8a:5a:c0:b8:0c:cf: 77:2a:74:70:6b:db:b0:f9:43:55:9d:62:04:3a:8a: db:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:14:F3:56:7C:09:F0:45:90:FF:07:A7:2F:54:9C:6D:B4:5A:64:41 X509v3 Authority Key Identifier: keyid:CE:E2:18:91:B6:F5:73:6F:AA:7D:9B:ED:38:32:43:F3:DF:38:17:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE21891B6F5736FAA7D9BED383243F3DF381781.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:71:13:63:e2:7f:89:1e:da:aa:1d:47:cb:5a:21:4d:e8:80: 7d:2a:94:e3:2f:87:cc:d8:73:a5:26:32:ff:4f:12:41:fe:12: 55:d2:2a:04:60:91:55:2d:c2:5e:51:0f:fe:80:7c:0a:21:9c: ad:95:4d:30:23:df:a6:21:3a:ba:71:25:e8:9a:83:5b:c8:94: 4d:6b:ae:b3:da:2e:af:29:96:4d:1b:3d:20:e7:8f:b3:0c:7f: d4:43:64:f8:1a:8e:ef:2e:0b:d5:af:03:15:09:21:87:c7:20: 0e:bf:4a:40:1f:05:cd:7d:c9:d6:4c:74:41:a9:69:8e:7c:36: 58:77:98:0f:53:81:93:13:44:6e:cb:04:e5:8f:85:74:68:cd: 74:c9:d1:74:93:94:a0:45:2f:80:42:99:c5:70:b5:04:13:fb: 57:b9:38:51:5f:c7:85:97:6f:55:bd:3a:a2:1e:3e:00:f8:17: 8a:d4:a8:6a:c9:2d:2f:61:e4:45:3d:be:fe:7f:5b:29:90:ee: 83:09:fd:13:4d:84:8c:41:46:68:b6:eb:f0:88:6f:7b:71:85: 18:5e:21:85:52:c1:21:10:7a:48:22:16:2c:a4:c1:e0:ae:23: 9a:06:b9:64:ef:97:d6:ef:3a:10:a6:4c:f8:6d:7a:e6:93:0d: f7:b0:7b:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV0tziOv4Potx94oVzgQKDSQFxtIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VFMjE4OTFCNkY1NzM2RkFBN0Q5QkVEMzgzMjQzRjNE RjM4MTc4MTAeFw0yNTA0MjUwMDA1NThaFw0yNTA0MjgwODUyNThaMDMxMTAvBgNV BAMTKDQzMTRGMzU2N0MwOUYwNDU5MEZGMDdBNzJGNTQ5QzZEQjQ1QTY0NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyoB1koSjHQYW1sVektyKfPN94 9seyHEXbGtmYZejrvJR/pEWrRMcY+BaqkXN8qc8AVRdUF7jVdM0pq+vHdazQVttW jBvVTYyaZUCfmtOAzgjva6wGe11wVqCAamkdhhcpaud+EawpTNehML1t4iY89HxT JQxfD/KWoEg008z9lm68QDqYr0wF/sV61hj1CTbyGtYRcTqeLXbiPHOPjuHNoJGA bBlPczQi6HtZ+7bBIp+6rS1+MqtiygjL3YxwuzIt5k1foButjlXLigCV7IXVRG1l d2ho6ZbtXHwB3FhN8NnvG6azsszFv4pawLgMz3cqdHBr27D5Q1WdYgQ6itvDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQxTzVnwJ8EWQ/wenL1ScbbRaZEEwHwYDVR0j BBgwFoAUzuIYkbb1c2+qfZvtODJD8984F4EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YWYwMDMxZS0yYTllLTQ3Y2EtOTI4My00MGU5MjdlMzU5OTMvMC9DRUUyMTg5MUI2 RjU3MzZGQUE3RDlCRUQzODMyNDNGM0RGMzgxNzgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VFMjE4OTFCNkY1NzM2RkFBN0Q5QkVEMzgzMjQzRjNERjM4 MTc4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGFmMDAzMWUtMmE5ZS00N2NhLTky ODMtNDBlOTI3ZTM1OTkzLzAvQ0VFMjE4OTFCNkY1NzM2RkFBN0Q5QkVEMzgzMjQz RjNERjM4MTc4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHFxE2Pif4ke2qodR8taIU3ogH0qlOMvh8zY c6UmMv9PEkH+ElXSKgRgkVUtwl5RD/6AfAohnK2VTTAj36YhOrpxJeiag1vIlE1r rrPaLq8plk0bPSDnj7MMf9RDZPgaju8uC9WvAxUJIYfHIA6/SkAfBc19ydZMdEGp aY58Nlh3mA9TgZMTRG7LBOWPhXRozXTJ0XSTlKBFL4BCmcVwtQQT+1e5OFFfx4WX b1W9OqIePgD4F4rUqGrJLS9h5EU9vv5/WymQ7oMJ/RNNhIxBRmi26/CIb3txhRhe IYVSwSEQekgiFiykweCuI5oGuWTvl9bvOhCmTPhteuaTDfewexk= -----END CERTIFICATE-----Generated at Fri Apr 25 03:46:17 2025 by rpki-client on console.sobornost.net