$ rpki-client -vvf repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft File: 1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft (raw, json) Hash identifier: +7k/vW9TDv6JvN7PpN0NC0qMZuiyLlABds8r1HMuoZk= Subject key identifier: 0C:0F:13:3F:A0:9C:D7:F6:98:C7:91:69:4C:1B:66:EC:69:04:34:40 Authority key identifier: 1C:F1:15:D0:21:8C:AB:4E:31:67:A7:D5:B0:D0:FA:C2:D5:CB:8A:17 Certificate issuer: /CN=1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17 Certificate serial: 1636EB27F42DAD604A9B68C3651D580594E89695 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft Manifest number: 017D Signing time: Fri 25 Apr 2025 07:51:37 +0000 Manifest this update: Fri 25 Apr 2025 07:46:37 +0000 Manifest next update: Mon 28 Apr 2025 08:40:37 +0000 Files and hashes: 1: 1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.crl (hash: rzZOoT0LRvMHTI4qj987fyQg6jkke5qI/QVjO2caubA=) 2: 3130332e38372e3230322e302f32342d3234203d3e20313530323539.roa (hash: JLFs+kH7v2ZY+xNtA/ogvHKkCAa1+FJVTt4bnTYMOus=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.crl rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 08:40:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:36:eb:27:f4:2d:ad:60:4a:9b:68:c3:65:1d:58:05:94:e8:96:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17 Validity Not Before: Apr 25 07:46:37 2025 GMT Not After : Apr 28 08:40:37 2025 GMT Subject: CN=0C0F133FA09CD7F698C791694C1B66EC69043440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:1d:3a:12:a4:c9:6f:e4:26:8e:52:22:cd:f7: 2d:ca:61:ca:99:c0:71:d7:40:38:69:46:d3:82:1e: f6:b7:0f:a9:89:37:78:0f:86:42:0b:29:f5:51:29: 9f:68:bd:c4:63:f1:cb:73:77:fe:c1:e6:57:88:9b: ce:8e:18:13:4b:37:ba:bf:47:fb:e4:57:13:26:2b: 74:f9:a7:0a:f1:45:af:42:81:7c:9f:61:99:cf:98: ed:33:82:de:5e:b2:5e:69:9f:1c:31:97:1b:b9:d7: 20:06:7a:c4:62:f0:f7:32:19:10:df:35:25:68:7d: f2:7f:cf:a7:0f:12:ef:71:b4:01:11:8f:6b:57:7b: 01:21:ab:be:d2:1e:6d:e6:42:c3:25:67:d2:03:cc: 55:f1:f3:82:1f:4f:18:5a:66:58:69:84:6f:1a:c0: 7f:94:52:1e:68:da:69:b3:32:3d:25:af:71:aa:cb: e3:3e:ae:74:25:c5:06:f0:d7:6b:97:77:d2:28:66: 3b:4e:ac:7d:87:90:47:24:24:3d:89:14:de:b0:fb: 3e:de:26:86:cc:55:f3:57:a0:98:f9:34:27:6e:5b: d4:2c:3b:40:7b:43:2e:f5:26:cd:cc:e4:bb:2e:90: b5:83:3c:f2:66:86:50:fb:f0:61:9d:b8:8f:cf:5c: b7:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:0F:13:3F:A0:9C:D7:F6:98:C7:91:69:4C:1B:66:EC:69:04:34:40 X509v3 Authority Key Identifier: keyid:1C:F1:15:D0:21:8C:AB:4E:31:67:A7:D5:B0:D0:FA:C2:D5:CB:8A:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:b6:91:e2:32:39:fb:4c:28:77:3b:f0:20:07:1b:75:91:1d: 57:34:5e:e0:48:a3:26:ce:1c:a2:5f:d2:37:4a:24:4e:59:24: 48:3d:df:3a:d8:85:58:7e:1f:48:a5:76:b7:36:e7:e3:47:9f: 1c:70:03:3a:61:4f:9f:48:18:b1:84:76:7c:26:c5:64:13:73: 3d:72:84:8c:ad:01:39:a6:05:56:98:ff:09:73:16:1f:1a:4b: a1:b2:10:b7:f5:e6:f6:b2:1d:c9:4c:ad:64:8e:1c:4e:3c:99: 63:4c:a3:d6:d8:98:7a:e1:b9:b3:35:93:3b:30:88:12:51:6b: 17:6b:eb:eb:b0:32:fa:a1:c2:ba:2e:f9:7a:45:2e:29:90:f7: 36:99:d9:62:b1:24:00:f1:4a:70:ca:d4:6f:1f:fe:4e:4c:80: 09:17:0f:2a:b6:ad:83:d5:cb:8e:3a:bb:bb:48:84:36:ce:ee: eb:31:de:df:e7:da:03:8a:9a:0b:78:07:a9:97:6b:9f:6d:f6: bc:7a:25:77:85:45:51:53:9d:09:25:42:6f:02:49:a8:bf:68: 35:8f:69:f9:84:8f:a7:d9:f6:38:cb:2e:99:ec:28:6a:bc:d6: 6e:b2:29:6e:c2:6c:bc:9c:0a:91:23:00:57:a1:70:a4:b7:a4: 04:69:23:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFjbrJ/QtrWBKm2jDZR1YBZTolpUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNGMTE1RDAyMThDQUI0RTMxNjdBN0Q1QjBEMEZBQzJE NUNCOEExNzAeFw0yNTA0MjUwNzQ2MzdaFw0yNTA0MjgwODQwMzdaMDMxMTAvBgNV BAMTKDBDMEYxMzNGQTA5Q0Q3RjY5OEM3OTE2OTRDMUI2NkVDNjkwNDM0NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtHToSpMlv5CaOUiLN9y3KYcqZ wHHXQDhpRtOCHva3D6mJN3gPhkILKfVRKZ9ovcRj8ctzd/7B5leIm86OGBNLN7q/ R/vkVxMmK3T5pwrxRa9CgXyfYZnPmO0zgt5esl5pnxwxlxu51yAGesRi8PcyGRDf NSVoffJ/z6cPEu9xtAERj2tXewEhq77SHm3mQsMlZ9IDzFXx84IfTxhaZlhphG8a wH+UUh5o2mmzMj0lr3Gqy+M+rnQlxQbw12uXd9IoZjtOrH2HkEckJD2JFN6w+z7e JobMVfNXoJj5NCduW9QsO0B7Qy71Js3M5LsukLWDPPJmhlD78GGduI/PXLfpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDA8TP6Cc1/aYx5FpTBtm7GkENEAwHwYDVR0j BBgwFoAUHPEV0CGMq04xZ6fVsND6wtXLihcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OGQ1OTQzMC1kZTc4LTQ1MzItOGUxYS0zNGI1M2I4ZjI2ZmEvMC8xQ0YxMTVEMDIx OENBQjRFMzE2N0E3RDVCMEQwRkFDMkQ1Q0I4QTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUNGMTE1RDAyMThDQUI0RTMxNjdBN0Q1QjBEMEZBQzJENUNC OEExNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzhkNTk0MzAtZGU3OC00NTMyLThl MWEtMzRiNTNiOGYyNmZhLzAvMUNGMTE1RDAyMThDQUI0RTMxNjdBN0Q1QjBEMEZB QzJENUNCOEExNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKu2keIyOftMKHc78CAHG3WRHVc0XuBIoybO HKJf0jdKJE5ZJEg93zrYhVh+H0ildrc25+NHnxxwAzphT59IGLGEdnwmxWQTcz1y hIytATmmBVaY/wlzFh8aS6GyELf15vayHclMrWSOHE48mWNMo9bYmHrhubM1kzsw iBJRaxdr6+uwMvqhwrou+XpFLimQ9zaZ2WKxJADxSnDK1G8f/k5MgAkXDyq2rYPV y446u7tIhDbO7usx3t/n2gOKmgt4B6mXa59t9rx6JXeFRVFTnQklQm8CSai/aDWP afmEj6fZ9jjLLpnsKGq81m6yKW7CbLycCpEjAFehcKS3pARpI8w= -----END CERTIFICATE-----Generated at Fri Apr 25 10:36:52 2025 by rpki-client on console.sobornost.net