$ rpki-client -vvf repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft File: 2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft (raw, json) Hash identifier: S8NMVaVkxp+viDOxw2Y0NGIgkyvkna8lXmMQiQBP1dY= Subject key identifier: 89:06:00:86:B2:31:0D:7E:0E:5D:EF:D7:D1:3B:AA:26:AA:05:E8:FA Authority key identifier: 2C:B2:1E:F3:36:B6:AB:46:40:E4:61:96:01:E0:F6:48:8C:B8:FD:52 Certificate issuer: /CN=2CB21EF336B6AB4640E4619601E0F6488CB8FD52 Certificate serial: 708028A6A1CF5C788B8EAD96826284E1394FF5D5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft Manifest number: 02F8 Signing time: Fri 25 Apr 2025 07:21:55 +0000 Manifest this update: Fri 25 Apr 2025 07:16:55 +0000 Manifest next update: Mon 28 Apr 2025 15:18:55 +0000 Files and hashes: 1: 2CB21EF336B6AB4640E4619601E0F6488CB8FD52.crl (hash: hz1/3QXrW+iYuWRSeoh6srCgfQ+wNQVp19qE14C1Hmo=) 2: 3130332e3136302e31322e302f32332d3234203d3e20313331313131.roa (hash: xmfvEBw1P8sSqglSjh5fK7KpklmguFj/KUnvIPf2TYo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.crl rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 14:02:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:80:28:a6:a1:cf:5c:78:8b:8e:ad:96:82:62:84:e1:39:4f:f5:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CB21EF336B6AB4640E4619601E0F6488CB8FD52 Validity Not Before: Apr 25 07:16:55 2025 GMT Not After : Apr 28 15:18:55 2025 GMT Subject: CN=89060086B2310D7E0E5DEFD7D13BAA26AA05E8FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:54:45:21:f7:84:7e:b6:76:8d:6e:fb:a7:c6: 7c:3b:be:0e:81:fe:4c:35:d1:11:cc:d1:df:15:97: 0c:8d:0a:27:19:1c:43:21:e2:5c:57:cd:6e:78:ad: 43:4c:58:01:ca:c9:5a:a9:55:2a:c1:16:e1:92:a5: 3f:97:80:fc:e2:f9:6e:3d:f2:11:60:f0:4e:6a:6f: 33:f0:ec:97:8a:cb:d6:62:70:3e:3b:3c:2f:0e:57: 17:39:cd:15:d4:37:c5:b7:ed:89:ef:e8:2f:21:e4: 58:81:57:fe:7f:4a:87:d0:77:2b:2d:0d:16:ac:18: 0f:ad:e8:e8:22:f1:4e:ff:38:56:74:b8:a6:6d:3f: 08:be:ab:01:2f:d8:36:6f:1d:e4:7a:20:05:c6:b7: 56:b2:22:d5:84:f9:ae:20:de:b1:4e:14:4c:0d:ec: 06:37:77:be:7f:55:8f:94:0f:17:4d:de:d7:ec:33: 0a:a3:5f:1c:36:a5:94:93:97:23:71:04:40:cb:03: f9:2a:45:c3:2e:e2:f9:48:0b:19:b8:c7:3f:67:cd: 8a:1a:e6:25:ff:3f:ab:e0:c9:db:72:06:61:a8:21: eb:54:10:40:a0:a0:5e:1d:24:24:87:06:0e:14:4b: 2a:2b:0d:cd:6e:98:3d:cf:3d:97:e0:29:02:c9:86: 23:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:06:00:86:B2:31:0D:7E:0E:5D:EF:D7:D1:3B:AA:26:AA:05:E8:FA X509v3 Authority Key Identifier: keyid:2C:B2:1E:F3:36:B6:AB:46:40:E4:61:96:01:E0:F6:48:8C:B8:FD:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:4d:27:60:24:66:a6:5c:60:61:11:16:dc:b5:0d:64:bb:9a: 4b:02:43:27:32:65:b0:a2:7f:39:99:a4:8c:14:ae:f0:60:0c: c1:5e:2b:4d:f9:aa:3e:cf:a8:29:23:40:70:f6:1c:59:f8:04: cf:f2:d0:2b:ba:ae:16:bc:d0:50:7a:cc:ad:50:dc:45:30:c7: 16:89:58:10:33:3b:4f:95:83:72:8b:17:47:fe:6b:33:01:58: 56:42:01:49:b4:60:5e:ff:58:a6:39:e2:c8:8f:95:d7:eb:e1: 7f:7d:47:55:8c:45:c3:bb:ee:3a:4c:c7:be:8f:a6:59:5d:6e: b2:84:da:3b:1a:f1:75:b2:07:d7:4f:55:f8:8d:5a:46:db:ee: 25:f0:ed:46:82:42:41:f0:ca:2e:57:79:3f:20:90:08:4f:27: df:ba:94:4c:be:2a:48:1b:9d:45:c1:96:d2:f7:7f:f8:b1:87: bd:df:1a:43:41:8c:35:82:57:0d:8b:18:4e:27:16:95:d4:7e: b7:62:45:93:5a:0c:c6:5e:a5:22:11:0d:78:da:44:10:bf:b8: 30:f8:d1:75:ab:f6:52:e0:30:e3:b0:c1:ab:bd:fa:9c:78:fc: 77:cc:99:ae:d0:38:45:c7:13:01:b9:83:f3:11:9c:76:4b:dc: 3a:4d:80:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcIAopqHPXHiLjq2WgmKE4TlP9dUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNCMjFFRjMzNkI2QUI0NjQwRTQ2MTk2MDFFMEY2NDg4 Q0I4RkQ1MjAeFw0yNTA0MjUwNzE2NTVaFw0yNTA0MjgxNTE4NTVaMDMxMTAvBgNV BAMTKDg5MDYwMDg2QjIzMTBEN0UwRTVERUZEN0QxM0JBQTI2QUEwNUU4RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOVEUh94R+tnaNbvunxnw7vg6B /kw10RHM0d8VlwyNCicZHEMh4lxXzW54rUNMWAHKyVqpVSrBFuGSpT+XgPzi+W49 8hFg8E5qbzPw7JeKy9ZicD47PC8OVxc5zRXUN8W37Ynv6C8h5FiBV/5/SofQdyst DRasGA+t6Ogi8U7/OFZ0uKZtPwi+qwEv2DZvHeR6IAXGt1ayItWE+a4g3rFOFEwN 7AY3d75/VY+UDxdN3tfsMwqjXxw2pZSTlyNxBEDLA/kqRcMu4vlICxm4xz9nzYoa 5iX/P6vgydtyBmGoIetUEECgoF4dJCSHBg4USyorDc1umD3PPZfgKQLJhiO5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiQYAhrIxDX4OXe/X0TuqJqoF6PowHwYDVR0j BBgwFoAULLIe8za2q0ZA5GGWAeD2SIy4/VIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NGM2Zjc3MC02ODZhLTQ1ZWYtOGRmYi0wYzNhODdkM2Q4ZGEvMC8yQ0IyMUVGMzM2 QjZBQjQ2NDBFNDYxOTYwMUUwRjY0ODhDQjhGRDUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkNCMjFFRjMzNkI2QUI0NjQwRTQ2MTk2MDFFMEY2NDg4Q0I4 RkQ1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjRjNmY3NzAtNjg2YS00NWVmLThk ZmItMGMzYTg3ZDNkOGRhLzAvMkNCMjFFRjMzNkI2QUI0NjQwRTQ2MTk2MDFFMEY2 NDg4Q0I4RkQ1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJpNJ2AkZqZcYGERFty1DWS7mksCQycyZbCi fzmZpIwUrvBgDMFeK035qj7PqCkjQHD2HFn4BM/y0Cu6rha80FB6zK1Q3EUwxxaJ WBAzO0+Vg3KLF0f+azMBWFZCAUm0YF7/WKY54siPldfr4X99R1WMRcO77jpMx76P plldbrKE2jsa8XWyB9dPVfiNWkbb7iXw7UaCQkHwyi5XeT8gkAhPJ9+6lEy+Kkgb nUXBltL3f/ixh73fGkNBjDWCVw2LGE4nFpXUfrdiRZNaDMZepSIRDXjaRBC/uDD4 0XWr9lLgMOOwwau9+px4/HfMma7QOEXHEwG5g/MRnHZL3DpNgCc= -----END CERTIFICATE-----Generated at Fri Apr 25 10:36:52 2025 by rpki-client on console.sobornost.net