$ rpki-client -vvf repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.mft File: C5CA2999FE7612F56CCCB7441743B05181458ED0.mft (raw, json) Hash identifier: 30olDG7fBFclX+X+Y1q0iJje98eD4m1bTk7w18Dv8xo= Subject key identifier: 6D:8C:07:0F:9B:95:2F:F6:7F:CB:AD:14:DD:89:E2:E1:42:17:CF:AC Authority key identifier: C5:CA:29:99:FE:76:12:F5:6C:CC:B7:44:17:43:B0:51:81:45:8E:D0 Certificate issuer: /CN=C5CA2999FE7612F56CCCB7441743B05181458ED0 Certificate serial: 4B8613189A6F839958C6E9C8C3A2C9F614F58843 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5CA2999FE7612F56CCCB7441743B05181458ED0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.mft Manifest number: 04C7 Signing time: Thu 24 Apr 2025 12:00:38 +0000 Manifest this update: Thu 24 Apr 2025 11:55:38 +0000 Manifest next update: Sun 27 Apr 2025 14:49:38 +0000 Files and hashes: 1: 323030313a6466313a353638303a3a2f34382d3438203d3e20313339333738.roa (hash: 1z9zQXbiXOJ+gRqWINPLLxlihaf6MQrGXd1QApL6EDo=) 2: 3130332e3134322e3230322e302f32332d3233203d3e20313339333738.roa (hash: hUFUn0VmhI4/WVyhCk/ed0i6oyJ6uRhfZe4Gt9CX7Ms=) 3: 3130332e3134322e3230322e302f32342d3234203d3e20313339333738.roa (hash: Ai7D3RvDxYX2FQX7n3jl8PVIm916gH4mXne2eUMtLic=) 4: C5CA2999FE7612F56CCCB7441743B05181458ED0.crl (hash: VBP71HaktvYUNgHrYIc41OV+iCSpSF2IE77KRvIgt20=) 5: 3130332e3134322e3230332e302f32342d3234203d3e20313339333738.roa (hash: xLmMTjSOjSqS6LykBY4skbTjNzEVrHStJ+4rPzwZUSY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.crl rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5CA2999FE7612F56CCCB7441743B05181458ED0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 14:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:86:13:18:9a:6f:83:99:58:c6:e9:c8:c3:a2:c9:f6:14:f5:88:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5CA2999FE7612F56CCCB7441743B05181458ED0 Validity Not Before: Apr 24 11:55:38 2025 GMT Not After : Apr 27 14:49:38 2025 GMT Subject: CN=6D8C070F9B952FF67FCBAD14DD89E2E14217CFAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e0:e7:52:28:e3:3f:58:10:c1:d5:4e:e8:45: db:e8:23:5d:b7:a7:ba:0b:a9:9a:33:37:8e:8a:54: 96:fa:5a:4e:93:6a:44:45:11:1a:79:3e:99:77:5c: 8e:95:54:bc:ba:b4:9b:6f:e7:0a:4e:9f:41:d4:31: 9a:16:bf:11:15:33:1f:cc:e8:1c:31:36:99:af:28: f7:e8:b4:80:50:04:32:c4:19:f4:7b:7f:73:ac:fd: 4d:15:21:e1:cd:4a:cd:6f:bd:8f:e0:a4:eb:b2:a2: fe:2e:9a:d0:aa:54:c3:a8:89:dc:0c:8c:97:4f:9f: 1c:9a:59:c9:70:78:0c:e4:dd:65:54:9f:60:0c:c1: b1:1a:2d:7d:45:a9:b8:9d:dc:06:20:c3:cf:b9:70: a2:7a:6b:fc:7d:86:20:eb:a8:c8:ee:d7:73:24:fc: 60:b8:e9:ab:3d:fa:46:1d:eb:47:c9:78:c7:ed:64: af:08:70:42:d1:a6:28:20:dd:da:d1:57:01:ad:9a: ff:23:17:19:88:6a:73:51:10:0b:51:a4:7c:3f:8b: 7e:65:ab:6f:f2:15:80:22:ad:86:b1:49:1a:e2:75: b6:e9:99:70:5f:ec:ae:cf:a2:78:3b:82:8b:8d:a9: 0d:58:d7:ca:3d:e1:92:2c:63:1d:42:4c:69:29:a0: 12:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:8C:07:0F:9B:95:2F:F6:7F:CB:AD:14:DD:89:E2:E1:42:17:CF:AC X509v3 Authority Key Identifier: keyid:C5:CA:29:99:FE:76:12:F5:6C:CC:B7:44:17:43:B0:51:81:45:8E:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5CA2999FE7612F56CCCB7441743B05181458ED0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:ee:d0:97:77:a2:36:a7:66:4a:09:35:31:94:fb:e9:48:f1: a6:88:a3:4d:c6:e8:20:00:ba:f5:b6:06:70:a0:30:1f:5a:84: 33:52:5d:71:96:5e:90:46:bf:3c:b1:ba:8a:fd:a2:9c:8a:6a: a6:7d:27:ab:80:a8:0e:02:62:07:79:52:29:fc:d2:69:07:f9: 89:f0:ec:96:11:16:8d:a8:7a:82:73:e0:64:c4:3d:88:4d:c0: 7d:cc:b9:9a:46:64:76:57:60:13:fe:d8:92:8e:96:94:d9:fe: a5:ab:3b:2f:e9:6f:a8:b1:6f:c2:ae:d6:44:c2:44:22:fb:54: 9e:0b:eb:fc:af:10:53:fa:61:c1:d3:23:a8:99:bb:35:04:fe: ea:ab:ef:65:8d:cc:79:08:1a:43:a2:87:1c:01:5e:be:fd:13: 5b:94:3d:65:47:4a:5f:92:2f:f6:a3:be:c5:29:ee:75:26:3c: eb:4e:56:a8:c0:3c:a3:0c:45:b0:ba:e5:6a:43:8a:7f:93:d1: 93:44:52:8a:ee:f3:5c:13:a2:b2:67:b3:97:a9:ef:6c:66:c2: 68:21:09:d8:96:08:35:39:78:2b:09:50:89:81:4a:a3:f6:38: d4:01:11:1c:95:57:51:02:c6:d4:d0:4b:5b:29:29:43:71:2c: 19:79:f6:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS4YTGJpvg5lYxunIw6LJ9hT1iEMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzVDQTI5OTlGRTc2MTJGNTZDQ0NCNzQ0MTc0M0IwNTE4 MTQ1OEVEMDAeFw0yNTA0MjQxMTU1MzhaFw0yNTA0MjcxNDQ5MzhaMDMxMTAvBgNV BAMTKDZEOEMwNzBGOUI5NTJGRjY3RkNCQUQxNEREODlFMkUxNDIxN0NGQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy4OdSKOM/WBDB1U7oRdvoI123 p7oLqZozN46KVJb6Wk6TakRFERp5Ppl3XI6VVLy6tJtv5wpOn0HUMZoWvxEVMx/M 6BwxNpmvKPfotIBQBDLEGfR7f3Os/U0VIeHNSs1vvY/gpOuyov4umtCqVMOoidwM jJdPnxyaWclweAzk3WVUn2AMwbEaLX1Fqbid3AYgw8+5cKJ6a/x9hiDrqMju13Mk /GC46as9+kYd60fJeMftZK8IcELRpigg3drRVwGtmv8jFxmIanNREAtRpHw/i35l q2/yFYAirYaxSRridbbpmXBf7K7Pong7gouNqQ1Y18o94ZIsYx1CTGkpoBKDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbYwHD5uVL/Z/y60U3Yni4UIXz6wwHwYDVR0j BBgwFoAUxcopmf52EvVszLdEF0OwUYFFjtAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NjdmYjgzNy0xYjJmLTRjNGUtYjk5OS02ZTk5MGRkYzE0OTkvMC9DNUNBMjk5OUZF NzYxMkY1NkNDQ0I3NDQxNzQzQjA1MTgxNDU4RUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzVDQTI5OTlGRTc2MTJGNTZDQ0NCNzQ0MTc0M0IwNTE4MTQ1 OEVEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDY3ZmI4MzctMWIyZi00YzRlLWI5 OTktNmU5OTBkZGMxNDk5LzAvQzVDQTI5OTlGRTc2MTJGNTZDQ0NCNzQ0MTc0M0Iw NTE4MTQ1OEVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACfu0Jd3ojanZkoJNTGU++lI8aaIo03G6CAA uvW2BnCgMB9ahDNSXXGWXpBGvzyxuor9opyKaqZ9J6uAqA4CYgd5Uin80mkH+Ynw 7JYRFo2oeoJz4GTEPYhNwH3MuZpGZHZXYBP+2JKOlpTZ/qWrOy/pb6ixb8Ku1kTC RCL7VJ4L6/yvEFP6YcHTI6iZuzUE/uqr72WNzHkIGkOihxwBXr79E1uUPWVHSl+S L/ajvsUp7nUmPOtOVqjAPKMMRbC65WpDin+T0ZNEUoru81wTorJns5ep72xmwmgh CdiWCDU5eCsJUImBSqP2ONQBERyVV1ECxtTQS1spKUNxLBl59j4= -----END CERTIFICATE-----Generated at Thu Apr 24 13:39:00 2025 by rpki-client on console.sobornost.net