$ rpki-client -vvf repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.mft File: 2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.mft (raw, json) Hash identifier: oKMGNvaGEIl/WQD92XP8zrDg96qgp0QIEtzq6OHs5A8= Subject key identifier: F6:19:E5:1A:91:55:C4:BB:93:4B:7A:66:2F:9C:BC:87:EA:D3:14:CB Authority key identifier: 2C:9C:8D:6A:DB:43:A7:5F:1D:FA:48:05:3B:0E:13:BF:E4:BD:35:0A Certificate issuer: /CN=2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A Certificate serial: 0B3C07E2E10696AEA9906DC9D1B4814077D24BB4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.mft Manifest number: 40 Signing time: Fri 25 Apr 2025 17:51:53 +0000 Manifest this update: Fri 25 Apr 2025 17:46:53 +0000 Manifest next update: Mon 28 Apr 2025 23:47:53 +0000 Files and hashes: 1: 3136302e32322e39342e302f32332d3233203d3e20313533313130.roa (hash: NjyYz1ga8Qpztk8z2OnelqpIaeIr9KbAHbFDRDS0sFY=) 2: 3136302e32322e39352e302f32342d3234203d3e20313533313130.roa (hash: twzSlBh0NN1lf3cw6Hfv5Bifh4nztMxRMAZ/HjKNRio=) 3: 3136302e32322e39342e302f32342d3234203d3e20313533313130.roa (hash: ss2EJAnpKFiDc20LCUbPWRGzhNcuFuLtxPENwLK+/ro=) 4: 2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.crl (hash: eIcRwx1rvdRvH6nJjFhpCt1d2zKaqYQ3O1Jhzbk41Tc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.crl rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 19:57:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:3c:07:e2:e1:06:96:ae:a9:90:6d:c9:d1:b4:81:40:77:d2:4b:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A Validity Not Before: Apr 25 17:46:53 2025 GMT Not After : Apr 28 23:47:53 2025 GMT Subject: CN=F619E51A9155C4BB934B7A662F9CBC87EAD314CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0c:dd:4d:a2:e9:45:63:e0:8c:fe:7a:39:a3: 23:9e:75:d8:9c:90:0f:68:99:88:dc:be:99:f0:bd: d4:6c:fc:8f:a9:07:c3:b8:33:cb:f9:fc:fe:d9:49: 3b:ea:dd:ce:0d:d4:7d:d9:72:6f:53:78:5f:01:c5: 02:86:f9:d1:63:7c:d0:ed:58:b5:ff:25:32:54:62: fa:e3:98:1e:7f:c4:1a:92:d7:19:b4:bb:6d:16:56: db:8b:be:7a:85:dd:23:69:1b:88:23:7e:b5:10:7a: 15:fe:c3:d3:0a:71:b8:64:3f:80:6c:89:cf:b5:89: f6:c7:96:b3:92:c9:cf:18:0a:4d:95:b4:71:a7:be: 42:c4:40:4f:df:42:b9:37:4b:62:69:01:25:5d:5d: 73:10:90:57:23:ac:2d:58:a3:02:85:dd:6f:ff:41: f8:fd:1b:96:7d:6f:cc:91:ce:3a:b3:8d:26:b8:9e: a9:f1:f1:aa:3b:c7:0c:82:db:68:f9:51:d1:57:9c: 6d:29:99:c0:30:3d:c0:76:44:90:a3:aa:1a:53:cd: f7:9a:35:f4:62:93:8f:c9:d6:79:ba:5e:8e:7e:a5: 38:00:df:4a:66:04:15:83:ad:aa:ef:9e:9c:ab:ce: 27:0b:01:b6:20:8d:b0:09:fd:49:6c:b8:f0:6a:1e: 84:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:19:E5:1A:91:55:C4:BB:93:4B:7A:66:2F:9C:BC:87:EA:D3:14:CB X509v3 Authority Key Identifier: keyid:2C:9C:8D:6A:DB:43:A7:5F:1D:FA:48:05:3B:0E:13:BF:E4:BD:35:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:26:06:f8:a6:2f:f0:63:bf:49:71:4a:c3:34:77:89:eb:10: 15:0b:fc:51:9e:92:14:5d:02:4b:f7:a6:bb:4d:37:48:d7:60: 55:7d:78:fd:6a:8b:90:fd:ea:9b:3b:cf:26:df:9f:2b:64:a6: 0c:46:99:1b:f4:da:2b:79:91:a9:4b:af:62:1f:d8:40:fc:25: 5f:6e:d6:d1:30:b9:c7:4c:86:e2:c0:8f:be:83:3c:ec:24:5a: 13:f3:f5:5c:56:64:5b:3d:72:3b:e5:f9:3e:cf:ea:f6:84:80: e0:c7:d2:29:76:6b:39:45:1d:f4:bb:2b:33:4e:2e:5f:32:f0: 14:c4:6f:0a:c3:f2:db:38:a0:64:5c:64:0d:b3:57:76:98:ca: 58:61:f7:7f:f0:b0:43:b3:fa:cf:bd:42:42:a2:fe:17:84:2a: dd:15:07:60:32:ad:d4:b2:de:ff:1b:54:86:9d:19:d7:72:dc: e0:ba:67:4f:4e:6c:6e:19:bb:f0:41:90:b7:d8:db:b0:b1:fe: 1c:b0:f4:b0:4f:0f:2f:55:41:43:66:80:64:09:23:00:97:05: 93:94:b9:78:d3:0c:fc:ed:73:87:69:c8:01:33:82:10:9b:19: 7e:c4:c5:0a:5f:56:62:c7:ed:fe:76:c7:0f:9d:27:33:a2:d2: 08:3e:4e:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCzwH4uEGlq6pkG3J0bSBQHfSS7QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkM5QzhENkFEQjQzQTc1RjFERkE0ODA1M0IwRTEzQkZF NEJEMzUwQTAeFw0yNTA0MjUxNzQ2NTNaFw0yNTA0MjgyMzQ3NTNaMDMxMTAvBgNV BAMTKEY2MTlFNTFBOTE1NUM0QkI5MzRCN0E2NjJGOUNCQzg3RUFEMzE0Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8DN1NoulFY+CM/no5oyOeddic kA9omYjcvpnwvdRs/I+pB8O4M8v5/P7ZSTvq3c4N1H3Zcm9TeF8BxQKG+dFjfNDt WLX/JTJUYvrjmB5/xBqS1xm0u20WVtuLvnqF3SNpG4gjfrUQehX+w9MKcbhkP4Bs ic+1ifbHlrOSyc8YCk2VtHGnvkLEQE/fQrk3S2JpASVdXXMQkFcjrC1YowKF3W// Qfj9G5Z9b8yRzjqzjSa4nqnx8ao7xwyC22j5UdFXnG0pmcAwPcB2RJCjqhpTzfea NfRik4/J1nm6Xo5+pTgA30pmBBWDrarvnpyrzicLAbYgjbAJ/UlsuPBqHoSbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9hnlGpFVxLuTS3pmL5y8h+rTFMswHwYDVR0j BBgwFoAULJyNattDp18d+kgFOw4Tv+S9NQowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTA3NzM4Ni0zMDFiLTRmZjEtODcxYi02MjMyYjVmM2JlMDkvMC8yQzlDOEQ2QURC NDNBNzVGMURGQTQ4MDUzQjBFMTNCRkU0QkQzNTBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkM5QzhENkFEQjQzQTc1RjFERkE0ODA1M0IwRTEzQkZFNEJE MzUwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWEwNzczODYtMzAxYi00ZmYxLTg3 MWItNjIzMmI1ZjNiZTA5LzAvMkM5QzhENkFEQjQzQTc1RjFERkE0ODA1M0IwRTEz QkZFNEJEMzUwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA0mBvimL/Bjv0lxSsM0d4nrEBUL/FGekhRd Akv3prtNN0jXYFV9eP1qi5D96ps7zybfnytkpgxGmRv02it5kalLr2If2ED8JV9u 1tEwucdMhuLAj76DPOwkWhPz9VxWZFs9cjvl+T7P6vaEgODH0il2azlFHfS7KzNO Ll8y8BTEbwrD8ts4oGRcZA2zV3aYylhh93/wsEOz+s+9QkKi/heEKt0VB2AyrdSy 3v8bVIadGddy3OC6Z09ObG4Zu/BBkLfY27Cx/hyw9LBPDy9VQUNmgGQJIwCXBZOU uXjTDPztc4dpyAEzghCbGX7ExQpfVmLH7f52xw+dJzOi0gg+Ti0= -----END CERTIFICATE-----Generated at Fri Apr 25 19:23:51 2025 by rpki-client on console.sobornost.net