$ rpki-client -vvf repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.mft File: 0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.mft (raw, json) Hash identifier: pRL/Mwu7VqKcPSk0zYKoMdLExQmNr3lpvMY+O+ZXygE= Subject key identifier: 9B:8C:58:01:2C:8D:CA:0C:B3:5B:BE:01:87:58:0F:D4:CD:2D:8C:71 Authority key identifier: 0C:E1:E1:11:46:E2:51:D0:CD:52:BD:83:7A:1A:0A:CD:B7:E0:BA:0C Certificate issuer: /CN=0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C Certificate serial: 1884AAEBE4636C62EB8F73FD62F56586C385390D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.mft Manifest number: FA Signing time: Wed 23 Apr 2025 12:41:45 +0000 Manifest this update: Wed 23 Apr 2025 12:36:45 +0000 Manifest next update: Sat 26 Apr 2025 23:06:45 +0000 Files and hashes: 1: 0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.crl (hash: h989XXnWfNY3/Bbvc4amtMG3Oz1eBfJH3fw+msaOLGw=) 2: 323030313a6466303a663963303a3a2f34382d3438203d3e20313439393037.roa (hash: /A4c0t6Y98cg2lIq++5SQTiV0ECjCxcXz8yePuUy48U=) 3: 3130332e3139302e3131332e302f32342d3234203d3e20313439393037.roa (hash: 6BP6Wg9K2CydFqVw55iYNyq05rAdRjLr1zk9t4b5GKw=) 4: 3130332e3139302e3131322e302f32342d3234203d3e20313439393037.roa (hash: zSZcK2ezC0OwcIoirCwbw8lg34i7IQmCM/PoAclIbTc=) 5: 3130332e3139302e3131322e302f32332d3234203d3e20313439393037.roa (hash: /ZMRp/k5nyna7+OV16C6wftA6bpNJZQ65/zvr/LPUR4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.crl rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 12:29:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:84:aa:eb:e4:63:6c:62:eb:8f:73:fd:62:f5:65:86:c3:85:39:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C Validity Not Before: Apr 23 12:36:45 2025 GMT Not After : Apr 26 23:06:45 2025 GMT Subject: CN=9B8C58012C8DCA0CB35BBE0187580FD4CD2D8C71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e0:62:2f:f8:d6:c9:9b:e6:2b:31:74:f8:62: 7e:d3:05:44:48:71:03:c3:82:aa:eb:3c:90:8f:d5: 7f:b4:bf:34:23:70:c4:14:9b:83:81:11:b7:bb:fb: e3:07:3f:a0:f4:95:8a:71:89:01:fd:02:2b:0f:26: c8:d8:a2:d6:fd:fa:f5:51:38:75:40:c6:e8:ce:3c: 90:01:0d:b8:ee:d9:51:84:5f:4c:c4:a5:9e:18:c7: 88:42:aa:45:0d:2b:6a:ba:2c:da:2a:fb:36:ae:68: fb:17:d7:bb:36:5b:bc:25:b6:75:98:22:45:bd:f4: b7:24:9e:f9:2c:63:ff:3b:6f:ab:72:48:04:fb:9f: 37:ce:3c:09:8e:1f:3f:a4:37:e9:50:6d:27:7b:f7: 87:4b:af:14:55:43:52:68:85:e1:b1:5d:c2:9b:65: 6c:47:3c:3c:2e:64:7e:ef:61:2c:9c:58:ae:71:e6: ec:2c:ef:4f:f3:8b:d9:32:39:be:70:57:3a:91:09: 2f:ee:23:50:47:7d:70:c3:3a:6d:2d:ae:ad:76:3b: 4e:03:6a:b5:39:3e:32:38:27:41:61:d8:84:4f:24: c9:c3:1b:9a:fd:c2:5c:19:88:43:18:49:e8:e6:dc: 89:30:ad:c6:05:8e:13:e1:48:bf:85:7c:31:58:86: 9b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:8C:58:01:2C:8D:CA:0C:B3:5B:BE:01:87:58:0F:D4:CD:2D:8C:71 X509v3 Authority Key Identifier: keyid:0C:E1:E1:11:46:E2:51:D0:CD:52:BD:83:7A:1A:0A:CD:B7:E0:BA:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:0f:f3:b6:d8:29:8c:86:84:74:39:0c:20:30:e4:34:6f:96: 3a:be:88:d1:36:01:dc:d0:23:da:39:86:f9:2a:f7:4f:83:bb: 44:42:75:66:48:a8:13:e2:06:62:b3:1b:84:55:1b:da:86:f4: 7e:72:6e:c9:3f:51:c9:68:c4:8a:38:02:c5:33:f5:6c:d4:8b: 15:1f:c1:28:c7:bd:fb:8e:e6:53:b2:34:e8:dc:5e:c3:7c:73: 49:20:2d:73:4a:c3:f6:58:5f:9b:8a:35:a9:3e:bf:2b:3f:43: 8d:22:35:de:81:fb:35:4c:0e:ae:72:c5:c4:9f:15:23:87:d4: 99:d8:8e:f6:5e:f3:bc:4a:56:99:15:95:d0:6d:fb:7a:85:e3: 7c:7c:5f:7e:a7:b6:b1:12:9e:0e:65:a3:1f:18:ba:9b:40:e1: 4a:a0:14:95:18:13:e7:d2:2e:99:05:70:55:2d:ec:67:0e:c0: ae:0e:74:92:6f:08:51:db:d7:26:9f:77:71:95:6f:22:5d:98: 36:6a:e8:fe:ba:48:0e:d5:70:a1:59:56:58:0f:ca:f1:91:18: 1a:2a:f8:8d:b6:0a:8f:62:46:0f:8b:85:bf:30:c1:04:e9:d5: dd:ec:09:f8:b7:54:24:1d:d1:2e:5f:ed:8c:17:2b:f1:98:c3: ee:d4:95:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGISq6+RjbGLrj3P9YvVlhsOFOQ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENFMUUxMTE0NkUyNTFEMENENTJCRDgzN0ExQTBBQ0RC N0UwQkEwQzAeFw0yNTA0MjMxMjM2NDVaFw0yNTA0MjYyMzA2NDVaMDMxMTAvBgNV BAMTKDlCOEM1ODAxMkM4RENBMENCMzVCQkUwMTg3NTgwRkQ0Q0QyRDhDNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE4GIv+NbJm+YrMXT4Yn7TBURI cQPDgqrrPJCP1X+0vzQjcMQUm4OBEbe7++MHP6D0lYpxiQH9AisPJsjYotb9+vVR OHVAxujOPJABDbju2VGEX0zEpZ4Yx4hCqkUNK2q6LNoq+zauaPsX17s2W7wltnWY IkW99LcknvksY/87b6tySAT7nzfOPAmOHz+kN+lQbSd794dLrxRVQ1JoheGxXcKb ZWxHPDwuZH7vYSycWK5x5uws70/zi9kyOb5wVzqRCS/uI1BHfXDDOm0trq12O04D arU5PjI4J0Fh2IRPJMnDG5r9wlwZiEMYSejm3IkwrcYFjhPhSL+FfDFYhpvNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm4xYASyNygyzW74Bh1gP1M0tjHEwHwYDVR0j BBgwFoAUDOHhEUbiUdDNUr2DehoKzbfgugwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MDUxNmE3YS00MTk1LTQ0YjMtYTI0ZS1jZjhlZDU3OGQ3OTEvMC8wQ0UxRTExMTQ2 RTI1MUQwQ0Q1MkJEODM3QTFBMEFDREI3RTBCQTBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMENFMUUxMTE0NkUyNTFEMENENTJCRDgzN0ExQTBBQ0RCN0Uw QkEwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjA1MTZhN2EtNDE5NS00NGIzLWEy NGUtY2Y4ZWQ1NzhkNzkxLzAvMENFMUUxMTE0NkUyNTFEMENENTJCRDgzN0ExQTBB Q0RCN0UwQkEwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABcP87bYKYyGhHQ5DCAw5DRvljq+iNE2AdzQ I9o5hvkq90+Du0RCdWZIqBPiBmKzG4RVG9qG9H5ybsk/UcloxIo4AsUz9WzUixUf wSjHvfuO5lOyNOjcXsN8c0kgLXNKw/ZYX5uKNak+vys/Q40iNd6B+zVMDq5yxcSf FSOH1JnYjvZe87xKVpkVldBt+3qF43x8X36ntrESng5lox8YuptA4UqgFJUYE+fS LpkFcFUt7GcOwK4OdJJvCFHb1yafd3GVbyJdmDZq6P66SA7VcKFZVlgPyvGRGBoq +I22Co9iRg+Lhb8wwQTp1d3sCfi3VCQd0S5f7YwXK/GYw+7UldI= -----END CERTIFICATE-----Generated at Wed Apr 23 15:33:58 2025 by rpki-client on console.sobornost.net