$ rpki-client -vvf repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.mft File: CD93E5B741D83CA78E83C5AD92156B086BC05233.mft (raw, json) Hash identifier: naBS2jSw/kd4SxrspO+YtGs+dL8g0Y09fDQQXugWALQ= Subject key identifier: 6B:BC:C9:7C:49:51:3A:2F:9E:61:F4:0A:64:4C:26:19:F8:25:2C:A0 Authority key identifier: CD:93:E5:B7:41:D8:3C:A7:8E:83:C5:AD:92:15:6B:08:6B:C0:52:33 Certificate issuer: /CN=CD93E5B741D83CA78E83C5AD92156B086BC05233 Certificate serial: 2BABB63A223FBFA235468883E4C96CFAD21E90FA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD93E5B741D83CA78E83C5AD92156B086BC05233.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.mft Manifest number: 0263 Signing time: Wed 23 Apr 2025 07:42:11 +0000 Manifest this update: Wed 23 Apr 2025 07:37:11 +0000 Manifest next update: Sat 26 Apr 2025 18:13:11 +0000 Files and hashes: 1: CD93E5B741D83CA78E83C5AD92156B086BC05233.crl (hash: ltcw9WE3InqDNMOORf/fGB9dOyv2RlKgVINGVYd4+1s=) 2: 3130332e3135382e3139362e302f32342d3234203d3e20313431313333.roa (hash: iJSB4Tl2dCbFuiTRh7IWs9g86a1v/pjGccwQNvmJqM4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.crl rsync://repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD93E5B741D83CA78E83C5AD92156B086BC05233.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 09:26:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:ab:b6:3a:22:3f:bf:a2:35:46:88:83:e4:c9:6c:fa:d2:1e:90:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD93E5B741D83CA78E83C5AD92156B086BC05233 Validity Not Before: Apr 23 07:37:11 2025 GMT Not After : Apr 26 18:13:11 2025 GMT Subject: CN=6BBCC97C49513A2F9E61F40A644C2619F8252CA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:68:1d:89:82:da:01:48:52:ed:37:df:50:2a: 90:01:f2:d8:8f:16:b9:b2:9e:e6:b2:e3:8b:b9:ba: 73:f8:91:70:ba:e8:cd:49:13:6a:c5:a9:3f:4d:3b: 1f:e1:f6:21:06:4a:bb:07:04:fa:e2:97:da:93:35: d1:04:eb:6f:f3:77:bd:8a:69:1d:84:f4:ad:3b:f5: f4:48:bf:53:b8:9f:e2:6e:6a:7a:cb:32:48:d0:3c: 64:12:1a:55:69:f7:0f:d7:e3:3f:a2:03:0a:16:97: fd:a0:f9:09:84:42:a8:94:95:4a:10:e5:e7:34:ba: 86:37:84:58:45:79:c2:ac:67:22:84:be:05:8f:5c: ce:aa:b6:a2:48:fa:e9:37:f1:06:23:d4:82:8d:fb: 1f:29:d2:ba:69:d8:ef:c2:a1:c1:ed:8a:2b:e9:07: d6:3f:87:63:d1:6d:ad:e2:58:54:7f:4e:5f:c4:c1: 0e:56:d1:0d:4f:17:9b:61:d3:02:e7:d3:56:eb:04: 4b:74:47:78:b7:1e:a2:43:ab:85:c2:b0:c4:c0:e4: 29:b9:aa:9d:73:7f:40:6e:fe:09:86:87:10:65:b7: e7:97:d5:e5:33:3b:cc:0a:39:d6:f0:ca:a2:7f:05: 4b:17:e4:a7:e9:77:77:fb:24:f7:67:bc:4d:76:9c: 1a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:BC:C9:7C:49:51:3A:2F:9E:61:F4:0A:64:4C:26:19:F8:25:2C:A0 X509v3 Authority Key Identifier: keyid:CD:93:E5:B7:41:D8:3C:A7:8E:83:C5:AD:92:15:6B:08:6B:C0:52:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD93E5B741D83CA78E83C5AD92156B086BC05233.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:aa:0a:3e:04:27:d2:cd:46:6d:c7:67:4f:1b:04:11:f5:11: b5:fe:92:e1:c8:8e:d3:f2:9a:8e:4a:0b:8c:01:7b:08:5a:c7: d4:30:ea:12:2c:6d:14:27:48:71:33:0a:a5:91:93:f5:a9:4d: e2:0f:e9:20:44:ca:31:6b:bc:03:b9:e4:31:db:35:b3:f5:01: 25:00:0e:3e:54:22:1e:50:d5:17:ad:3e:e5:d7:70:59:2a:68: dd:76:79:e4:b7:23:0e:67:85:b2:48:50:9c:d9:b3:1f:de:ae: 9b:6e:87:19:25:f9:8e:1f:58:e3:74:58:88:5d:7f:4f:c0:31: dc:1d:09:50:aa:5c:03:ac:78:10:a2:c7:10:54:97:86:2e:03: 9e:74:da:da:05:94:b2:49:64:ff:93:2f:f4:05:cb:71:65:2c: 48:90:8c:ca:21:37:17:67:09:ba:8a:56:53:69:21:eb:20:00: a1:08:c8:f5:d6:82:bd:ea:3e:80:b3:e8:e5:f6:6b:41:c2:3d: 7d:20:ea:40:d3:e9:68:67:71:28:e4:a7:29:04:84:02:88:94: 84:f4:10:d2:8c:09:c7:e3:54:89:2b:18:ec:3c:44:0e:11:c6: 52:0f:8b:ea:8d:e2:41:54:77:95:40:40:27:ce:9f:31:3c:34: 85:98:2b:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK6u2OiI/v6I1RoiD5Mls+tIekPowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q5M0U1Qjc0MUQ4M0NBNzhFODNDNUFEOTIxNTZCMDg2 QkMwNTIzMzAeFw0yNTA0MjMwNzM3MTFaFw0yNTA0MjYxODEzMTFaMDMxMTAvBgNV BAMTKDZCQkNDOTdDNDk1MTNBMkY5RTYxRjQwQTY0NEMyNjE5RjgyNTJDQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/aB2JgtoBSFLtN99QKpAB8tiP Frmynuay44u5unP4kXC66M1JE2rFqT9NOx/h9iEGSrsHBPril9qTNdEE62/zd72K aR2E9K079fRIv1O4n+JuanrLMkjQPGQSGlVp9w/X4z+iAwoWl/2g+QmEQqiUlUoQ 5ec0uoY3hFhFecKsZyKEvgWPXM6qtqJI+uk38QYj1IKN+x8p0rpp2O/CocHtiivp B9Y/h2PRba3iWFR/Tl/EwQ5W0Q1PF5th0wLn01brBEt0R3i3HqJDq4XCsMTA5Cm5 qp1zf0Bu/gmGhxBlt+eX1eUzO8wKOdbwyqJ/BUsX5Kfpd3f7JPdnvE12nBqdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUa7zJfElROi+eYfQKZEwmGfglLKAwHwYDVR0j BBgwFoAUzZPlt0HYPKeOg8WtkhVrCGvAUjMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmRkY2I0Yi02ZDhlLTQ1OWItOGFhMi05OWE2MDg4NjI1NmEvMC9DRDkzRTVCNzQx RDgzQ0E3OEU4M0M1QUQ5MjE1NkIwODZCQzA1MjMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0Q5M0U1Qjc0MUQ4M0NBNzhFODNDNUFEOTIxNTZCMDg2QkMw NTIzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZkZGNiNGItNmQ4ZS00NTliLThh YTItOTlhNjA4ODYyNTZhLzAvQ0Q5M0U1Qjc0MUQ4M0NBNzhFODNDNUFEOTIxNTZC MDg2QkMwNTIzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJiqCj4EJ9LNRm3HZ08bBBH1EbX+kuHIjtPy mo5KC4wBewhax9Qw6hIsbRQnSHEzCqWRk/WpTeIP6SBEyjFrvAO55DHbNbP1ASUA Dj5UIh5Q1RetPuXXcFkqaN12eeS3Iw5nhbJIUJzZsx/erptuhxkl+Y4fWON0WIhd f0/AMdwdCVCqXAOseBCixxBUl4YuA5502toFlLJJZP+TL/QFy3FlLEiQjMohNxdn CbqKVlNpIesgAKEIyPXWgr3qPoCz6OX2a0HCPX0g6kDT6WhncSjkpykEhAKIlIT0 ENKMCcfjVIkrGOw8RA4RxlIPi+qN4kFUd5VAQCfOnzE8NIWYK6I= -----END CERTIFICATE-----Generated at Wed Apr 23 11:12:24 2025 by rpki-client on console.sobornost.net