$ rpki-client -vvf repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft File: CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft (raw, json) Hash identifier: E+IfK30S16HvDluv1JrnXxAsUqZMdaWoN2g8JW8e9Bc= Subject key identifier: 5F:CB:CE:09:D3:B3:A2:9B:5E:78:D1:E5:21:E5:0E:D7:F1:66:51:5F Authority key identifier: CE:0C:D1:35:3A:42:A0:A9:9E:E7:68:F3:FA:F2:35:E3:8F:6C:11:89 Certificate issuer: /CN=CE0CD1353A42A0A99EE768F3FAF235E38F6C1189 Certificate serial: EE7B9016452F3A20D005D36057321D05B4FA96 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft Manifest number: 04C7 Signing time: Sat 26 Apr 2025 15:31:05 +0000 Manifest this update: Sat 26 Apr 2025 15:26:05 +0000 Manifest next update: Tue 29 Apr 2025 16:12:05 +0000 Files and hashes: 1: 323030313a6466303a666230303a3a2f34382d3438203d3e20313336313035.roa (hash: +wADgBbGHlnAaJF9ne9rrntz6G0qBIbnlfj6NpTrwJg=) 2: 3130332e39312e34342e302f32322d3234203d3e20313336313035.roa (hash: czpyfmW5qXUOgmdTX+fLvnr7WIFjh3STKQ+hvn+zqQg=) 3: CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.crl (hash: H/a/y0Iw7PIsf3td5eYAkRnMqullZD8fPM0EMN0JZsM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.crl rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 16:12:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: ee:7b:90:16:45:2f:3a:20:d0:05:d3:60:57:32:1d:05:b4:fa:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE0CD1353A42A0A99EE768F3FAF235E38F6C1189 Validity Not Before: Apr 26 15:26:05 2025 GMT Not After : Apr 29 16:12:05 2025 GMT Subject: CN=5FCBCE09D3B3A29B5E78D1E521E50ED7F166515F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:80:e8:43:b6:bc:fb:bb:6c:d1:79:5d:de:72: 1c:d1:cc:74:da:af:43:e2:af:99:df:ea:8c:62:6f: 6c:00:87:5f:91:7a:f6:4c:d3:20:04:18:4c:78:e7: fd:73:34:b3:fc:60:ad:7e:c3:05:d7:53:75:66:31: d5:24:9f:49:0e:18:35:9f:68:02:d6:17:28:94:cc: 51:94:f9:98:21:3d:a0:78:80:b9:41:e4:40:97:8e: 93:fd:48:8e:45:42:40:66:1c:ee:ea:b1:34:d8:a7: b8:69:eb:de:45:b4:06:8c:f1:cd:c2:68:e8:90:8f: 14:6b:99:7a:74:73:d2:f0:3d:ca:ec:70:f6:8a:5d: bc:9d:46:a2:13:af:ac:37:de:02:9c:d3:93:11:51: 58:a2:8b:fa:48:30:33:50:e3:51:51:1f:ae:4b:c3: dc:de:0a:82:59:c7:78:f5:02:54:a7:49:c4:f9:4e: e1:1f:bc:e8:3f:07:b2:c0:f9:cd:c1:5f:9f:12:54: 34:f1:06:14:73:6e:78:c4:11:ea:3f:27:7c:e9:0f: f8:c1:51:e7:02:d6:0e:d9:0e:4a:22:2f:c8:8d:10: 97:73:11:48:51:24:95:b8:13:45:d6:66:1b:a9:d8: 48:d2:d0:63:88:f5:6a:80:45:23:62:fd:c2:d9:3d: ee:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:CB:CE:09:D3:B3:A2:9B:5E:78:D1:E5:21:E5:0E:D7:F1:66:51:5F X509v3 Authority Key Identifier: keyid:CE:0C:D1:35:3A:42:A0:A9:9E:E7:68:F3:FA:F2:35:E3:8F:6C:11:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:53:0d:ce:ca:2f:98:dc:32:3a:1b:9f:58:39:a7:82:fb:22: c5:66:e4:09:4d:09:c9:68:f2:50:0e:be:dd:85:bc:1f:64:90: 63:69:d3:5d:85:15:c1:18:6c:d7:40:bb:12:58:1e:ca:9b:f8: a4:81:22:3b:9d:cb:7c:a2:92:17:12:73:94:fa:8b:e7:17:d3: de:51:80:c5:91:bb:90:c3:ea:98:d5:cb:3f:3c:9f:e3:e7:78: 4e:8d:bd:96:60:a6:f4:d1:cf:37:42:2b:98:e7:91:34:0b:19: ab:a6:00:78:7a:26:9a:5b:a5:85:6b:3e:f8:07:27:f6:1d:73: 36:76:ab:13:ae:8d:f3:92:10:da:40:b3:f9:7f:74:b5:3a:7e: e0:83:cf:73:4c:37:4f:42:96:a8:3a:d1:57:5d:64:21:a6:f8: 7e:25:5c:ec:82:17:6f:4c:94:ee:16:2c:ae:11:64:5a:dd:36: 79:a7:30:51:73:71:45:16:7d:c2:18:da:3c:35:b1:e4:f2:a6: af:34:96:b6:e1:d5:8c:68:7a:e3:78:af:1f:1a:12:b3:c6:45: 47:ad:7d:0b:c2:88:56:46:30:bc:6b:27:ec:58:b9:3a:38:49: 99:c4:f3:ce:e7:5d:f4:61:6c:dc:f9:c6:eb:2c:1a:a9:1b:c1: 7d:59:f4:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAO57kBZFLzog0AXTYFcyHQW0+pYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0UwQ0QxMzUzQTQyQTBBOTlFRTc2OEYzRkFGMjM1RTM4 RjZDMTE4OTAeFw0yNTA0MjYxNTI2MDVaFw0yNTA0MjkxNjEyMDVaMDMxMTAvBgNV BAMTKDVGQ0JDRTA5RDNCM0EyOUI1RTc4RDFFNTIxRTUwRUQ3RjE2NjUxNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOgOhDtrz7u2zReV3echzRzHTa r0Pir5nf6oxib2wAh1+RevZM0yAEGEx45/1zNLP8YK1+wwXXU3VmMdUkn0kOGDWf aALWFyiUzFGU+ZghPaB4gLlB5ECXjpP9SI5FQkBmHO7qsTTYp7hp695FtAaM8c3C aOiQjxRrmXp0c9LwPcrscPaKXbydRqITr6w33gKc05MRUViii/pIMDNQ41FRH65L w9zeCoJZx3j1AlSnScT5TuEfvOg/B7LA+c3BX58SVDTxBhRzbnjEEeo/J3zpD/jB UecC1g7ZDkoiL8iNEJdzEUhRJJW4E0XWZhup2EjS0GOI9WqARSNi/cLZPe4jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX8vOCdOzopteeNHlIeUO1/FmUV8wHwYDVR0j BBgwFoAUzgzRNTpCoKme52jz+vI1449sEYkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MzczYmM2MS1jNWY5LTQxNTktOThiYy1hMDUzMGI0ZGQ4YjQvMC9DRTBDRDEzNTNB NDJBMEE5OUVFNzY4RjNGQUYyMzVFMzhGNkMxMTg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0UwQ0QxMzUzQTQyQTBBOTlFRTc2OEYzRkFGMjM1RTM4RjZD MTE4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjM3M2JjNjEtYzVmOS00MTU5LTk4 YmMtYTA1MzBiNGRkOGI0LzAvQ0UwQ0QxMzUzQTQyQTBBOTlFRTc2OEYzRkFGMjM1 RTM4RjZDMTE4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD5TDc7KL5jcMjobn1g5p4L7IsVm5AlNCclo 8lAOvt2FvB9kkGNp012FFcEYbNdAuxJYHsqb+KSBIjudy3yikhcSc5T6i+cX095R gMWRu5DD6pjVyz88n+PneE6NvZZgpvTRzzdCK5jnkTQLGaumAHh6JppbpYVrPvgH J/YdczZ2qxOujfOSENpAs/l/dLU6fuCDz3NMN09Clqg60VddZCGm+H4lXOyCF29M lO4WLK4RZFrdNnmnMFFzcUUWfcIY2jw1seTypq80lrbh1YxoeuN4rx8aErPGRUet fQvCiFZGMLxrJ+xYuTo4SZnE887nXfRhbNz5xussGqkbwX1Z9Iw= -----END CERTIFICATE-----Generated at Sat Apr 26 18:18:00 2025 by rpki-client on console.sobornost.net