$ rpki-client -vvf repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft File: CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft (raw, json) Hash identifier: LVo3KW5Ne8MtipA64r8FE6KAqMFFnBgPpBbOekC3o/w= Subject key identifier: 48:00:AB:B8:D6:75:38:72:9C:F8:B5:E8:A9:69:F0:03:EB:92:EB:E0 Authority key identifier: CE:82:6E:79:68:3E:D6:E5:CE:61:FE:A2:44:B6:B7:91:33:E9:8E:E3 Certificate issuer: /CN=CE826E79683ED6E5CE61FEA244B6B79133E98EE3 Certificate serial: 7C3FDBD048199BB08C23426401A3EF87F7A205D6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft Manifest number: 04C7 Signing time: Thu 24 Apr 2025 03:30:50 +0000 Manifest this update: Thu 24 Apr 2025 03:25:50 +0000 Manifest next update: Sun 27 Apr 2025 04:00:50 +0000 Files and hashes: 1: CE826E79683ED6E5CE61FEA244B6B79133E98EE3.crl (hash: TBx8WJPwz6GS/tbZ7Cik0FBxKj2/AomC8vZuYABTbU0=) 2: 3230332e372e3137312e302f32342d3234203d3e203535363931.roa (hash: 6/BGm352ofBFwmMWeXlwLiQDWFsCjJihfEUy/SjVwOI=) 3: 323030313a6466343a6630303a3a2f34382d3438203d3e203535363931.roa (hash: inTtE/2z3zxOo2M8puwuxje9wrX7I3TQwEI651FTI7w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.crl rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 04:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:3f:db:d0:48:19:9b:b0:8c:23:42:64:01:a3:ef:87:f7:a2:05:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE826E79683ED6E5CE61FEA244B6B79133E98EE3 Validity Not Before: Apr 24 03:25:50 2025 GMT Not After : Apr 27 04:00:50 2025 GMT Subject: CN=4800ABB8D67538729CF8B5E8A969F003EB92EBE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:5e:50:a6:ef:5c:6f:03:6e:cc:bc:ca:9b:1c: c9:6a:4f:59:fc:e0:e1:5a:ac:f1:6a:af:14:23:26: af:3b:27:a5:63:de:9e:71:61:f1:97:a5:8d:92:6d: f8:9b:76:56:78:2a:ca:5d:ff:b9:79:11:a7:bd:11: 7d:a6:f0:45:2e:70:51:fc:5e:05:b0:3b:ac:99:b9: 92:5f:be:81:eb:b3:39:3e:71:b8:d4:54:3f:ec:a9: 9d:4a:b9:87:63:52:45:a2:4c:0a:79:5a:77:cf:75: cb:80:74:16:f3:aa:95:75:29:d3:e1:50:15:18:08: 83:96:b9:08:e5:79:6f:db:0b:94:67:1a:2b:81:b5: 38:90:ff:e3:f6:0b:91:11:fe:a1:dc:f1:fc:16:2a: 0b:ed:c5:5e:96:e6:fe:42:f5:e3:e0:1e:73:27:55: a5:e3:1d:ae:0d:4d:99:9f:a7:cc:27:78:ce:e5:7d: bb:e5:82:07:9b:d3:5b:d5:15:93:23:cc:75:45:c8: b2:b7:e2:15:f2:89:3f:11:9b:a4:f3:80:03:fb:8f: f8:01:28:5f:b0:61:e4:b1:57:71:ed:17:cd:b8:26: 9a:2d:20:91:10:cc:ea:68:d3:71:b6:6f:be:1b:3e: c4:06:f1:17:5c:43:cd:58:1b:60:fa:c6:05:b2:99: 1b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:00:AB:B8:D6:75:38:72:9C:F8:B5:E8:A9:69:F0:03:EB:92:EB:E0 X509v3 Authority Key Identifier: keyid:CE:82:6E:79:68:3E:D6:E5:CE:61:FE:A2:44:B6:B7:91:33:E9:8E:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:8b:a3:ae:56:d7:66:27:e5:6a:c8:c7:6f:37:56:11:e7:0e: 13:fa:ec:d4:a8:e9:c6:e5:bf:ea:d4:41:77:85:fd:32:98:08: be:a8:ef:65:e3:fd:5f:c1:30:73:3d:68:fd:76:d2:b0:8c:30: c1:a7:c3:6b:89:b5:f7:49:ba:a3:09:69:b0:41:9f:d9:6d:cb: 27:98:93:31:3a:d8:e4:28:13:36:ef:36:99:89:70:cb:13:0d: 66:25:ef:e2:e0:3c:2c:83:26:29:ed:54:10:4f:ae:bd:de:94: 83:0b:c4:cb:f2:c3:e0:1c:a4:e6:38:2c:bb:91:43:63:e8:42: 3f:bc:22:fc:b1:9f:e0:2e:73:4e:f6:bf:d6:3d:ff:ff:da:61: 62:8c:77:63:8c:f3:ef:fc:c0:00:60:50:06:14:7a:0c:6c:74: e5:60:0a:4b:38:a3:1e:4c:bf:04:e1:6a:5d:cb:6b:f2:d7:57: 6d:9c:9c:c0:61:f5:11:da:f4:e8:18:1b:71:3f:ed:3c:2d:c4: 75:9c:1f:88:39:73:03:41:c3:60:67:5f:fd:00:9c:7e:22:19: d3:cd:67:94:f5:9d:4f:22:bd:92:57:1f:7b:dc:59:10:45:dc: ce:1e:45:2a:8e:89:98:67:35:a3:62:a9:e2:50:20:2e:53:c1: ff:3a:c7:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfD/b0EgZm7CMI0JkAaPvh/eiBdYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U4MjZFNzk2ODNFRDZFNUNFNjFGRUEyNDRCNkI3OTEz M0U5OEVFMzAeFw0yNTA0MjQwMzI1NTBaFw0yNTA0MjcwNDAwNTBaMDMxMTAvBgNV BAMTKDQ4MDBBQkI4RDY3NTM4NzI5Q0Y4QjVFOEE5NjlGMDAzRUI5MkVCRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRXlCm71xvA27MvMqbHMlqT1n8 4OFarPFqrxQjJq87J6Vj3p5xYfGXpY2SbfibdlZ4Kspd/7l5Eae9EX2m8EUucFH8 XgWwO6yZuZJfvoHrszk+cbjUVD/sqZ1KuYdjUkWiTAp5WnfPdcuAdBbzqpV1KdPh UBUYCIOWuQjleW/bC5RnGiuBtTiQ/+P2C5ER/qHc8fwWKgvtxV6W5v5C9ePgHnMn VaXjHa4NTZmfp8wneM7lfbvlggeb01vVFZMjzHVFyLK34hXyiT8Rm6TzgAP7j/gB KF+wYeSxV3HtF824JpotIJEQzOpo03G2b74bPsQG8RdcQ81YG2D6xgWymRsHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSACruNZ1OHKc+LXoqWnwA+uS6+AwHwYDVR0j BBgwFoAUzoJueWg+1uXOYf6iRLa3kTPpjuMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MDBhZTBmMS1iOGMwLTQ1MmYtOGU4OS0xZGZjM2Y1OTRkNGMvMC9DRTgyNkU3OTY4 M0VENkU1Q0U2MUZFQTI0NEI2Qjc5MTMzRTk4RUUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0U4MjZFNzk2ODNFRDZFNUNFNjFGRUEyNDRCNkI3OTEzM0U5 OEVFMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzAwYWUwZjEtYjhjMC00NTJmLThl ODktMWRmYzNmNTk0ZDRjLzAvQ0U4MjZFNzk2ODNFRDZFNUNFNjFGRUEyNDRCNkI3 OTEzM0U5OEVFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJKLo65W12Yn5WrIx283VhHnDhP67NSo6cbl v+rUQXeF/TKYCL6o72Xj/V/BMHM9aP120rCMMMGnw2uJtfdJuqMJabBBn9ltyyeY kzE62OQoEzbvNpmJcMsTDWYl7+LgPCyDJintVBBPrr3elIMLxMvyw+AcpOY4LLuR Q2PoQj+8Ivyxn+Auc072v9Y9///aYWKMd2OM8+/8wABgUAYUegxsdOVgCks4ox5M vwThal3La/LXV22cnMBh9RHa9OgYG3E/7TwtxHWcH4g5cwNBw2BnX/0AnH4iGdPN Z5T1nU8ivZJXH3vcWRBF3M4eRSqOiZhnNaNiqeJQIC5Twf86x1I= -----END CERTIFICATE-----Generated at Thu Apr 24 06:50:02 2025 by rpki-client on console.sobornost.net