$ rpki-client -vvf repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft File: 233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft (raw, json) Hash identifier: jlzVIzXOcInCaYv5umsAdXM02j+nAzApV8O7a/V54do= Subject key identifier: 99:69:33:9F:8F:30:46:17:ED:8C:55:77:58:2B:46:DF:EF:EF:5B:66 Authority key identifier: 23:3A:F2:6D:7D:AE:6C:35:9E:B0:3A:D5:C6:FB:4B:4E:05:DD:F2:3D Certificate issuer: /CN=233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D Certificate serial: 60ABA569401E2AD6E673F7C8E888B0B4B20F4031 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft Manifest number: 04CB Signing time: Wed 23 Apr 2025 07:41:47 +0000 Manifest this update: Wed 23 Apr 2025 07:36:47 +0000 Manifest next update: Sat 26 Apr 2025 17:54:47 +0000 Files and hashes: 1: 233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.crl (hash: /mFK4o8+CfpNLxAgSYI5r+2WaOtNfJnK1vLBSm8M+YI=) 2: 3230322e3136352e33322e302f32302d3234203d3e203137353338.roa (hash: Xq/nk1aLkZ/Nl9N21WbLvcg8yh69WLzrt1dFMWGoW1k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.crl rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 09:26:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:ab:a5:69:40:1e:2a:d6:e6:73:f7:c8:e8:88:b0:b4:b2:0f:40:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D Validity Not Before: Apr 23 07:36:47 2025 GMT Not After : Apr 26 17:54:47 2025 GMT Subject: CN=9969339F8F304617ED8C5577582B46DFEFEF5B66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:91:46:3a:92:2c:39:7e:4c:99:2e:47:f7:4b: 7c:46:7c:f2:65:52:6b:66:6d:b6:1e:de:c5:a8:ae: 59:2f:bf:42:6a:69:1e:e0:1e:1f:36:62:17:43:ad: ec:d9:99:99:3f:84:54:16:c7:19:22:45:fe:21:34: ff:77:59:2d:ee:4f:3f:d0:2f:5c:53:48:5f:3e:8b: ae:9f:0a:e6:89:ac:7a:eb:c3:64:f4:d9:64:a9:8f: 57:2f:5d:26:7e:cb:de:de:39:dc:5d:22:09:f9:a9: d1:89:cd:22:0d:7f:a7:be:67:a5:e3:4c:a2:91:34: 2f:f2:7b:10:ae:a7:21:a4:bb:79:84:61:02:e0:76: 66:f4:4e:4f:63:9f:27:8c:d8:6b:0e:57:dc:22:d8: 85:78:2c:0a:57:35:80:ea:9c:2e:be:22:56:12:f6: 04:21:fe:b1:b9:d3:91:17:0e:d3:ac:41:8a:1e:d9: ae:1d:29:5f:36:88:cf:39:fd:6b:3d:da:5f:a3:8a: 79:25:9e:26:e7:b3:b3:f6:f5:79:73:e6:d1:c4:33: 2e:ae:17:8b:6a:b0:ae:5c:aa:eb:fa:6c:7f:66:aa: 0e:9e:7a:32:08:13:c7:d7:6e:ec:52:36:25:05:34: 8a:4c:a6:51:79:69:fa:5f:81:81:43:6d:f0:78:b8: c7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:69:33:9F:8F:30:46:17:ED:8C:55:77:58:2B:46:DF:EF:EF:5B:66 X509v3 Authority Key Identifier: keyid:23:3A:F2:6D:7D:AE:6C:35:9E:B0:3A:D5:C6:FB:4B:4E:05:DD:F2:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:59:a7:ad:6c:71:b1:e0:fa:5a:49:2a:b3:41:bd:19:41:bf: 86:a1:70:b5:00:b2:2b:c2:a3:b3:c2:7a:b6:e8:30:4f:a4:69: 48:26:ab:98:a6:e7:4c:f3:23:02:05:ee:c0:9d:a5:19:45:e6: bb:08:68:96:20:cf:35:c5:e1:18:83:b9:08:a5:7e:f7:1f:70: 28:ee:5d:b1:19:4d:17:7b:1d:24:e7:4e:4e:f2:04:b8:77:0e: 33:4b:ba:f0:ba:7c:95:00:13:0d:62:34:ec:85:55:98:ac:dd: 2f:8b:7e:69:ea:64:10:8c:25:23:d7:7b:74:14:96:04:5c:d0: 86:dd:71:54:92:dc:57:c7:7f:57:e8:af:48:a3:b6:81:64:3a: ac:75:c2:25:a5:02:56:23:bb:2d:f9:46:f3:f5:12:fd:a3:b5: bd:10:4b:0d:34:00:c5:ed:fc:91:14:2b:de:ea:81:3d:4c:70: 8e:81:fa:30:7b:8c:26:e4:3f:73:f9:e9:04:f3:71:84:fa:88: e0:f4:c8:38:88:79:dc:fb:3a:88:6e:e0:de:57:b8:b5:1b:a9: 35:25:3c:3e:c8:71:c8:af:97:0a:29:f8:3c:d4:29:84:77:03: 7f:90:08:d7:3a:b0:8c:4f:5d:8a:e4:1a:8d:46:12:62:6c:af: f8:9c:ff:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYKulaUAeKtbmc/fI6IiwtLIPQDEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMzQUYyNkQ3REFFNkMzNTlFQjAzQUQ1QzZGQjRCNEUw NURERjIzRDAeFw0yNTA0MjMwNzM2NDdaFw0yNTA0MjYxNzU0NDdaMDMxMTAvBgNV BAMTKDk5NjkzMzlGOEYzMDQ2MTdFRDhDNTU3NzU4MkI0NkRGRUZFRjVCNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNkUY6kiw5fkyZLkf3S3xGfPJl UmtmbbYe3sWorlkvv0JqaR7gHh82YhdDrezZmZk/hFQWxxkiRf4hNP93WS3uTz/Q L1xTSF8+i66fCuaJrHrrw2T02WSpj1cvXSZ+y97eOdxdIgn5qdGJzSINf6e+Z6Xj TKKRNC/yexCupyGku3mEYQLgdmb0Tk9jnyeM2GsOV9wi2IV4LApXNYDqnC6+IlYS 9gQh/rG505EXDtOsQYoe2a4dKV82iM85/Ws92l+jinklnibns7P29Xlz5tHEMy6u F4tqsK5cquv6bH9mqg6eejIIE8fXbuxSNiUFNIpMplF5afpfgYFDbfB4uMfBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmWkzn48wRhftjFV3WCtG3+/vW2YwHwYDVR0j BBgwFoAUIzrybX2ubDWesDrVxvtLTgXd8j0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NTVlYWM5Ny0zMWI1LTRmMzMtODJmNC01MjQxNDcwY2JiYmUvMC8yMzNBRjI2RDdE QUU2QzM1OUVCMDNBRDVDNkZCNEI0RTA1RERGMjNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjMzQUYyNkQ3REFFNkMzNTlFQjAzQUQ1QzZGQjRCNEUwNURE RjIzRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzU1ZWFjOTctMzFiNS00ZjMzLTgy ZjQtNTI0MTQ3MGNiYmJlLzAvMjMzQUYyNkQ3REFFNkMzNTlFQjAzQUQ1QzZGQjRC NEUwNURERjIzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMNZp61scbHg+lpJKrNBvRlBv4ahcLUAsivC o7PCerboME+kaUgmq5im50zzIwIF7sCdpRlF5rsIaJYgzzXF4RiDuQilfvcfcCju XbEZTRd7HSTnTk7yBLh3DjNLuvC6fJUAEw1iNOyFVZis3S+LfmnqZBCMJSPXe3QU lgRc0IbdcVSS3FfHf1for0ijtoFkOqx1wiWlAlYjuy35RvP1Ev2jtb0QSw00AMXt /JEUK97qgT1McI6B+jB7jCbkP3P56QTzcYT6iOD0yDiIedz7Oohu4N5XuLUbqTUl PD7Iccivlwop+DzUKYR3A3+QCNc6sIxPXYrkGo1GEmJsr/ic/9A= -----END CERTIFICATE-----Generated at Wed Apr 23 11:12:23 2025 by rpki-client on console.sobornost.net