$ rpki-client -vvf repo-rpki.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.mft File: 1CC4D0E2E2BC8B0060718A857657AA82D20E5974.mft (raw, json) Hash identifier: 6SS5qxVny4JYv0AxfDMxpwFMnTF4nTA6tLJXIzwSj+A= Subject key identifier: 3A:C0:D2:CA:80:7E:63:D5:8F:B6:1F:54:95:2C:17:47:E6:55:45:22 Authority key identifier: 1C:C4:D0:E2:E2:BC:8B:00:60:71:8A:85:76:57:AA:82:D2:0E:59:74 Certificate issuer: /CN=1CC4D0E2E2BC8B0060718A857657AA82D20E5974 Certificate serial: 062BF495D40BF82395443841C6CC04BC976ED19C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.cer Subject info access: rsync://repo-rpki.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.mft Manifest number: EC Signing time: Wed 23 Apr 2025 18:30:04 +0000 Manifest this update: Wed 23 Apr 2025 18:25:04 +0000 Manifest next update: Sat 26 Apr 2025 21:13:04 +0000 Files and hashes: 1: 1CC4D0E2E2BC8B0060718A857657AA82D20E5974.crl (hash: cf9JKFuObukBy39o67Nv+ja6vErG5Xx6oi/6M6muGa8=) 2: 3130332e3136332e31332e302f32342d3234203d3e20313431383839.roa (hash: ZcuLefK+yAknTSgNc0AblKwaXXvM+7Ik+wo2Htxgbns=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.crl rsync://repo-rpki.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 21:13:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:2b:f4:95:d4:0b:f8:23:95:44:38:41:c6:cc:04:bc:97:6e:d1:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CC4D0E2E2BC8B0060718A857657AA82D20E5974 Validity Not Before: Apr 23 18:25:04 2025 GMT Not After : Apr 26 21:13:04 2025 GMT Subject: CN=3AC0D2CA807E63D58FB61F54952C1747E6554522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b5:1d:b1:06:89:83:c3:41:bc:f1:fe:2c:b5: 61:d6:5c:b7:f8:e7:b9:a5:ac:83:7a:36:6a:f3:d4: bc:79:24:e7:fe:26:25:92:d0:65:ef:99:c3:82:51: f7:5d:bf:e7:3c:14:e1:e9:79:cc:df:6b:ed:cd:90: fa:f7:95:bd:df:1b:4e:3f:45:fc:b8:29:78:5e:9c: 58:85:06:5f:5b:0c:34:91:66:d3:92:52:54:d4:cb: bb:09:14:aa:8d:bf:c2:04:05:9e:89:54:24:fe:ed: 2e:4c:7b:4b:78:aa:3f:e7:2b:6b:da:0e:d7:fe:50: ae:0d:fa:5a:e1:20:6d:0d:0c:50:71:d1:40:26:17: 96:f4:5b:fb:f7:e5:bd:ed:df:3b:e0:8e:5c:19:d2: ec:c3:1f:6d:50:a6:08:6a:b7:42:3e:9e:78:47:9a: c2:f3:02:9f:d0:4b:3a:0a:94:ab:b2:6f:2c:64:64: aa:9a:c8:2f:43:04:2e:34:27:19:8c:bf:09:80:46: 9d:28:e2:03:42:4e:09:f1:97:1c:37:96:8b:1f:77: f2:d0:81:06:0c:21:0d:11:83:62:fe:41:56:fb:57: 47:65:de:56:27:ff:aa:ec:b1:d1:b7:48:58:d4:42: c5:e0:4f:0d:8d:37:81:91:14:1e:6e:af:fb:88:b3: a1:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:C0:D2:CA:80:7E:63:D5:8F:B6:1F:54:95:2C:17:47:E6:55:45:22 X509v3 Authority Key Identifier: keyid:1C:C4:D0:E2:E2:BC:8B:00:60:71:8A:85:76:57:AA:82:D2:0E:59:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:1e:a7:90:63:36:76:e4:84:19:e3:e5:92:48:87:d0:87:75: ec:ac:be:d3:96:7c:3c:85:c0:9a:75:fd:66:3b:b0:7b:6d:1c: f9:ff:31:1f:d5:2a:34:2f:97:56:a5:e9:bb:3c:a4:0b:a3:de: 0d:b9:dc:7e:24:97:7b:89:0a:72:0c:27:85:47:5b:cb:a3:43: 64:6d:8f:ae:6b:81:f8:58:ea:a3:2b:d7:7a:6f:24:aa:ee:93: 3b:1b:48:de:03:d6:c9:cf:c8:07:ce:89:40:e1:df:90:6e:09: ac:ab:1e:a2:64:29:93:97:1f:67:18:31:d8:44:cb:c4:85:4e: 21:67:0b:d1:5e:27:d6:08:9e:88:e8:2d:a1:f4:20:78:74:86: b9:e5:d8:2c:d2:a1:b0:82:d4:ec:62:33:17:3c:a7:a7:69:ba: 0a:b8:c2:3b:dd:ea:5a:fa:43:51:5c:e8:24:46:ea:fe:5a:2e: a0:c3:b7:18:4e:fd:a1:4f:ff:65:81:c8:24:c8:5e:6e:5c:fc: 30:ab:d7:f0:5b:2f:85:cc:42:ea:5d:52:40:31:e9:65:20:f6: ef:8d:0e:81:d2:94:7f:a2:17:4b:58:34:8a:c8:82:77:b4:56: 61:22:3f:27:5e:81:6a:08:ab:eb:51:3d:c2:34:53:9b:f1:77: 6f:11:02:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBiv0ldQL+COVRDhBxswEvJdu0ZwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNDNEQwRTJFMkJDOEIwMDYwNzE4QTg1NzY1N0FBODJE MjBFNTk3NDAeFw0yNTA0MjMxODI1MDRaFw0yNTA0MjYyMTEzMDRaMDMxMTAvBgNV BAMTKDNBQzBEMkNBODA3RTYzRDU4RkI2MUY1NDk1MkMxNzQ3RTY1NTQ1MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0tR2xBomDw0G88f4stWHWXLf4 57mlrIN6Nmrz1Lx5JOf+JiWS0GXvmcOCUfddv+c8FOHpeczfa+3NkPr3lb3fG04/ Rfy4KXhenFiFBl9bDDSRZtOSUlTUy7sJFKqNv8IEBZ6JVCT+7S5Me0t4qj/nK2va Dtf+UK4N+lrhIG0NDFBx0UAmF5b0W/v35b3t3zvgjlwZ0uzDH21Qpghqt0I+nnhH msLzAp/QSzoKlKuybyxkZKqayC9DBC40JxmMvwmARp0o4gNCTgnxlxw3losfd/LQ gQYMIQ0Rg2L+QVb7V0dl3lYn/6rssdG3SFjUQsXgTw2NN4GRFB5ur/uIs6FvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOsDSyoB+Y9WPth9UlSwXR+ZVRSIwHwYDVR0j BBgwFoAUHMTQ4uK8iwBgcYqFdleqgtIOWXQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NWRmNTEyZi0wZDFhLTRiMDktYjlhNC1hOWM1MjVlYzI4MTcvMC8xQ0M0RDBFMkUy QkM4QjAwNjA3MThBODU3NjU3QUE4MkQyMEU1OTc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUNDNEQwRTJFMkJDOEIwMDYwNzE4QTg1NzY1N0FBODJEMjBF NTk3NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTVkZjUxMmYtMGQxYS00YjA5LWI5 YTQtYTljNTI1ZWMyODE3LzAvMUNDNEQwRTJFMkJDOEIwMDYwNzE4QTg1NzY1N0FB ODJEMjBFNTk3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIAep5BjNnbkhBnj5ZJIh9CHdeysvtOWfDyF wJp1/WY7sHttHPn/MR/VKjQvl1al6bs8pAuj3g253H4kl3uJCnIMJ4VHW8ujQ2Rt j65rgfhY6qMr13pvJKrukzsbSN4D1snPyAfOiUDh35BuCayrHqJkKZOXH2cYMdhE y8SFTiFnC9FeJ9YInojoLaH0IHh0hrnl2CzSobCC1OxiMxc8p6dpugq4wjvd6lr6 Q1Fc6CRG6v5aLqDDtxhO/aFP/2WByCTIXm5c/DCr1/BbL4XMQupdUkAx6WUg9u+N DoHSlH+iF0tYNIrIgne0VmEiPydegWoIq+tRPcI0U5vxd28RAv0= -----END CERTIFICATE-----Generated at Wed Apr 23 22:12:04 2025 by rpki-client on console.sobornost.net