$ rpki-client -vvf repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft File: CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft (raw, json) Hash identifier: YGxzITIeM0YjS7jBRX9fFpNc+a4ABbJhZX2hmmkHU/o= Subject key identifier: 79:AB:FE:DC:8A:E6:51:76:34:2B:D3:A8:5F:EC:76:5A:41:19:48:6E Authority key identifier: CC:0E:0C:41:CC:A9:56:68:94:D1:D3:5F:DE:2D:64:25:84:95:03:B5 Certificate issuer: /CN=CC0E0C41CCA9566894D1D35FDE2D6425849503B5 Certificate serial: 01213D9896E8DCA2592F15298252E3A8D1412F5A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft Manifest number: 01BA Signing time: Thu 24 Apr 2025 14:20:01 +0000 Manifest this update: Thu 24 Apr 2025 14:15:01 +0000 Manifest next update: Sun 27 Apr 2025 23:43:01 +0000 Files and hashes: 1: CC0E0C41CCA9566894D1D35FDE2D6425849503B5.crl (hash: k1RVTHJKxhdZ+ixG1oq35LBbr6c1dZCE3TvBgS0smFs=) 2: 3130332e342e3137342e302f32342d3234203d3e203536323531.roa (hash: JUH9MRKyIXx13Qw/Z4UVrMoxqh45FAGMglaus+yHwQ4=) 3: 3130332e32332e3233342e302f32342d3234203d3e203536323531.roa (hash: 2T0SqX+s7+c6M/8xQC6zq9AtjHjTpT+WBPP4R1GUC0k=) 4: 3130332e342e3137352e302f32342d3234203d3e203536323531.roa (hash: 1nQxCfyQcjWyDv9m96kG3DaeechgAQtr12vQv8C6QHM=) 5: 3130332e32332e3233352e302f32342d3234203d3e203536323531.roa (hash: WRW7aqL/oRtWQLJOAPjrIedaeTCb5kYhsipj40FqYcI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.crl rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 17:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:21:3d:98:96:e8:dc:a2:59:2f:15:29:82:52:e3:a8:d1:41:2f:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC0E0C41CCA9566894D1D35FDE2D6425849503B5 Validity Not Before: Apr 24 14:15:01 2025 GMT Not After : Apr 27 23:43:01 2025 GMT Subject: CN=79ABFEDC8AE65176342BD3A85FEC765A4119486E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c1:84:6e:85:16:18:27:4e:f3:25:34:83:54: d0:3b:75:ad:4d:53:7f:4f:55:d2:ed:a9:b5:d5:4e: c8:38:5b:e2:f4:b8:ae:3f:9f:b3:21:0c:fc:8a:f0: e3:ff:c7:37:da:a6:4f:7e:b9:27:9e:76:40:7c:5d: 5b:fe:6f:02:61:33:88:8a:84:34:2a:c5:be:cc:df: 09:4c:9a:03:c1:ab:dc:01:9f:9b:31:eb:22:66:eb: b0:0c:ab:51:92:fb:68:95:95:39:32:1c:94:a1:54: 36:af:56:06:82:84:80:0c:a6:0c:38:dd:18:f9:5b: f9:77:ee:45:86:92:80:8a:f8:db:64:bc:d4:ca:ae: 6f:de:5d:19:d1:fa:58:7e:a9:75:cd:12:b0:94:66: 8a:cf:73:85:08:d3:a8:4d:8c:e0:96:1b:16:32:62: 2b:03:c8:12:76:5b:b2:d3:e7:73:a6:67:b5:90:d5: d4:5a:75:fd:1d:b3:5d:b9:8b:01:e3:15:b7:71:47: 63:e7:f3:4e:32:1e:17:5b:1c:97:39:8a:fc:74:ab: 30:cc:a2:db:0b:b2:88:ca:32:44:67:1c:6b:b6:c9: 37:a0:4e:ad:40:66:f3:59:bf:e8:0d:f7:5a:d2:0a: 00:74:3e:62:66:64:0d:12:26:51:50:28:a2:00:46: 0d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:AB:FE:DC:8A:E6:51:76:34:2B:D3:A8:5F:EC:76:5A:41:19:48:6E X509v3 Authority Key Identifier: keyid:CC:0E:0C:41:CC:A9:56:68:94:D1:D3:5F:DE:2D:64:25:84:95:03:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:bc:03:a6:ba:56:99:e8:7d:1f:16:e7:36:49:b9:59:94:0e: 10:70:35:a5:fd:85:dc:7c:cc:cb:ee:29:5e:e0:71:76:c4:de: 1b:1b:99:1a:d7:91:67:ca:e0:ae:7b:a1:1e:04:69:11:5f:13: 67:8d:a3:26:a6:8a:67:fd:ce:2b:67:bd:9e:a4:83:aa:d5:3c: d1:97:07:ba:d9:c6:32:3a:0c:5c:11:ed:f3:1c:86:21:f7:75: 3b:d2:ff:65:02:3f:12:a4:04:ef:d1:43:45:dd:19:5c:3c:d3: e1:27:aa:be:24:a2:1b:c7:7e:5f:20:a9:7f:9c:25:74:ab:9b: 2e:21:1a:60:44:65:0b:60:65:be:7f:e8:74:44:f2:07:3f:b9: 3c:73:c0:44:65:c2:40:ab:13:d5:c6:5a:cb:1d:2d:d3:d6:01: d9:b4:f5:7d:93:8a:f2:04:31:42:ba:2e:f1:03:64:e4:2f:2d: e1:2c:87:18:19:d8:85:e0:ff:3f:40:bc:05:f6:81:a0:e1:fe: 16:02:2e:18:57:35:31:82:20:9b:2b:64:48:c1:64:04:20:a1: da:16:55:f1:36:cd:2e:31:0a:25:62:e2:1e:41:8a:a6:9f:3c: 91:25:69:48:d3:58:d7:df:bb:fc:34:bc:97:e4:20:10:da:13: 0a:16:33:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUASE9mJbo3KJZLxUpglLjqNFBL1owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MwRTBDNDFDQ0E5NTY2ODk0RDFEMzVGREUyRDY0MjU4 NDk1MDNCNTAeFw0yNTA0MjQxNDE1MDFaFw0yNTA0MjcyMzQzMDFaMDMxMTAvBgNV BAMTKDc5QUJGRURDOEFFNjUxNzYzNDJCRDNBODVGRUM3NjVBNDExOTQ4NkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwwYRuhRYYJ07zJTSDVNA7da1N U39PVdLtqbXVTsg4W+L0uK4/n7MhDPyK8OP/xzfapk9+uSeedkB8XVv+bwJhM4iK hDQqxb7M3wlMmgPBq9wBn5sx6yJm67AMq1GS+2iVlTkyHJShVDavVgaChIAMpgw4 3Rj5W/l37kWGkoCK+NtkvNTKrm/eXRnR+lh+qXXNErCUZorPc4UI06hNjOCWGxYy YisDyBJ2W7LT53OmZ7WQ1dRadf0ds125iwHjFbdxR2Pn804yHhdbHJc5ivx0qzDM otsLsojKMkRnHGu2yTegTq1AZvNZv+gN91rSCgB0PmJmZA0SJlFQKKIARg2rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeav+3IrmUXY0K9OoX+x2WkEZSG4wHwYDVR0j BBgwFoAUzA4MQcypVmiU0dNf3i1kJYSVA7UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MDVmNzY4Yi00MjE4LTRjNWQtODkzYS0wZmY2OTY1MjY2MzkvMC9DQzBFMEM0MUND QTk1NjY4OTREMUQzNUZERTJENjQyNTg0OTUwM0I1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0MwRTBDNDFDQ0E5NTY2ODk0RDFEMzVGREUyRDY0MjU4NDk1 MDNCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTA1Zjc2OGItNDIxOC00YzVkLTg5 M2EtMGZmNjk2NTI2NjM5LzAvQ0MwRTBDNDFDQ0E5NTY2ODk0RDFEMzVGREUyRDY0 MjU4NDk1MDNCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGK8A6a6VpnofR8W5zZJuVmUDhBwNaX9hdx8 zMvuKV7gcXbE3hsbmRrXkWfK4K57oR4EaRFfE2eNoyamimf9zitnvZ6kg6rVPNGX B7rZxjI6DFwR7fMchiH3dTvS/2UCPxKkBO/RQ0XdGVw80+Enqr4kohvHfl8gqX+c JXSrmy4hGmBEZQtgZb5/6HRE8gc/uTxzwERlwkCrE9XGWssdLdPWAdm09X2TivIE MUK6LvEDZOQvLeEshxgZ2IXg/z9AvAX2gaDh/hYCLhhXNTGCIJsrZEjBZAQgodoW VfE2zS4xCiVi4h5BiqafPJElaUjTWNffu/w0vJfkIBDaEwoWM0E= -----END CERTIFICATE-----Generated at Thu Apr 24 15:50:15 2025 by rpki-client on console.sobornost.net