$ rpki-client -vvf repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.mft File: CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.mft (raw, json) Hash identifier: FXWDELMAsLlFxEZLsgcicDug6icn5ZS3NgPgIyNCIdg= Subject key identifier: 8D:50:59:9B:2C:0D:5D:82:03:5D:57:68:7B:DA:E8:1C:D5:B4:6C:33 Authority key identifier: CD:C0:85:E3:D4:D7:54:39:AE:1B:B6:CB:68:F1:80:E8:1A:AD:24:50 Certificate issuer: /CN=CDC085E3D4D75439AE1BB6CB68F180E81AAD2450 Certificate serial: 79BB666AAB97536C7EF229A77CEDB51718B55C46 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.mft Manifest number: 0350 Signing time: Wed 23 Apr 2025 12:32:12 +0000 Manifest this update: Wed 23 Apr 2025 12:27:12 +0000 Manifest next update: Sat 26 Apr 2025 19:00:12 +0000 Files and hashes: 1: 3130332e382e37382e302f32332d3234203d3e203538353531.roa (hash: 3rFUXtbuW4eWsGnAQRXWPa2T5G8tLKctM7LWy4Bhpvk=) 2: 3130332e32302e3136362e302f32332d3234203d3e203538353531.roa (hash: CKy2gQtIBacjD8C67dYMJdlND8CS/j+yiiHq3SKDq4Q=) 3: CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.crl (hash: yQ4fII66GUdONRRanFSfYOAvLj6Zxu+v/w5f3MAjxe0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.crl rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 12:29:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:bb:66:6a:ab:97:53:6c:7e:f2:29:a7:7c:ed:b5:17:18:b5:5c:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDC085E3D4D75439AE1BB6CB68F180E81AAD2450 Validity Not Before: Apr 23 12:27:12 2025 GMT Not After : Apr 26 19:00:12 2025 GMT Subject: CN=8D50599B2C0D5D82035D57687BDAE81CD5B46C33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2b:1b:3b:d4:02:14:37:f4:47:f8:df:aa:02: 5a:e7:c9:80:a9:69:f5:70:81:dd:db:19:6a:8c:44: ee:7f:9c:b8:85:d7:05:43:54:f7:09:d0:87:e2:85: 2a:d4:32:1f:76:4e:4b:48:ac:08:1f:98:9b:b3:9d: 1e:b7:99:65:c3:0f:69:e5:54:3f:e4:5f:39:a8:f0: d7:8d:df:c0:9e:98:69:53:e6:37:fa:20:c8:e1:f9: 9d:b7:7d:9f:43:4f:1c:de:c7:c5:f0:48:b7:38:c3: 44:82:f6:e5:6a:2c:a5:38:83:99:a3:50:41:a9:27: dd:bc:9c:c9:98:14:06:14:b4:78:fe:cd:61:75:d8: 41:02:bf:75:b3:fd:e0:87:e6:3a:4d:6a:c2:29:52: fc:c4:09:7a:ba:58:6c:12:d8:cc:c7:61:4f:1d:f6: b0:8d:c7:d5:f5:73:c4:8f:d0:21:3a:34:68:89:99: cc:7f:33:3e:23:0f:56:17:5f:c4:64:4f:09:d3:17: 49:3b:76:1f:25:f8:a3:78:17:04:ef:13:f9:0c:51: 0c:f5:fa:2c:e8:b6:05:db:c7:61:fb:03:99:46:57: f6:76:40:eb:01:86:b1:9e:18:c8:52:ce:43:ab:19: b1:65:ef:ba:e5:c0:dd:1a:d4:6d:41:4b:40:36:3e: 13:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:50:59:9B:2C:0D:5D:82:03:5D:57:68:7B:DA:E8:1C:D5:B4:6C:33 X509v3 Authority Key Identifier: keyid:CD:C0:85:E3:D4:D7:54:39:AE:1B:B6:CB:68:F1:80:E8:1A:AD:24:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:31:32:a5:46:73:5e:71:d7:88:33:c2:87:8b:42:69:46:d6: 02:f3:54:c4:08:3a:c6:58:c7:d1:f5:8b:9e:c4:bd:a6:0c:37: ee:15:fe:a2:fd:ad:cc:5b:7e:be:96:8c:3f:10:7f:30:c4:8d: 84:fe:40:08:38:f6:a2:fc:0a:4b:c2:c0:65:b1:e7:f1:b7:98: 73:ac:92:5b:61:1a:95:40:40:0a:7d:96:d3:0d:bd:bd:75:9f: 23:c1:2c:c7:8e:c5:75:6b:e7:6a:a8:a9:a8:e5:4e:ad:e6:af: 2f:e2:67:3c:8c:00:a6:d8:b2:13:d1:c1:7e:ac:16:4d:1e:89: 7f:c7:d9:24:4e:4e:cb:e4:6a:38:fc:cb:99:65:5f:6f:07:c8: 28:2b:ed:d3:f3:e6:e9:30:5f:d9:df:7e:b5:65:51:bd:0c:03: 96:f3:fc:3a:3f:e3:34:9f:6b:d9:6d:9a:8d:82:45:24:b3:49: 20:ae:7f:4f:5e:eb:55:87:66:03:b1:e7:7c:6b:0b:4b:dd:04: ab:50:0f:a9:8b:07:6e:61:e4:29:20:38:05:4f:d6:00:30:ca: 2e:9a:02:3d:46:07:3e:e3:8d:36:43:d4:f8:1d:50:64:9e:36: fb:e0:28:b2:61:5c:af:65:bd:5b:33:02:09:9e:85:b1:59:c6: d1:9b:1e:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUebtmaquXU2x+8imnfO21Fxi1XEYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RDMDg1RTNENEQ3NTQzOUFFMUJCNkNCNjhGMTgwRTgx QUFEMjQ1MDAeFw0yNTA0MjMxMjI3MTJaFw0yNTA0MjYxOTAwMTJaMDMxMTAvBgNV BAMTKDhENTA1OTlCMkMwRDVEODIwMzVENTc2ODdCREFFODFDRDVCNDZDMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwKxs71AIUN/RH+N+qAlrnyYCp afVwgd3bGWqMRO5/nLiF1wVDVPcJ0IfihSrUMh92TktIrAgfmJuznR63mWXDD2nl VD/kXzmo8NeN38CemGlT5jf6IMjh+Z23fZ9DTxzex8XwSLc4w0SC9uVqLKU4g5mj UEGpJ928nMmYFAYUtHj+zWF12EECv3Wz/eCH5jpNasIpUvzECXq6WGwS2MzHYU8d 9rCNx9X1c8SP0CE6NGiJmcx/Mz4jD1YXX8RkTwnTF0k7dh8l+KN4FwTvE/kMUQz1 +izotgXbx2H7A5lGV/Z2QOsBhrGeGMhSzkOrGbFl77rlwN0a1G1BS0A2PhP7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjVBZmywNXYIDXVdoe9roHNW0bDMwHwYDVR0j BBgwFoAUzcCF49TXVDmuG7bLaPGA6BqtJFAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZDBlMGRlYS01ZjliLTQyNWMtODJjZS0zMGE4NjUwMDdjMzUvMC9DREMwODVFM0Q0 RDc1NDM5QUUxQkI2Q0I2OEYxODBFODFBQUQyNDUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0RDMDg1RTNENEQ3NTQzOUFFMUJCNkNCNjhGMTgwRTgxQUFE MjQ1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmQwZTBkZWEtNWY5Yi00MjVjLTgy Y2UtMzBhODY1MDA3YzM1LzAvQ0RDMDg1RTNENEQ3NTQzOUFFMUJCNkNCNjhGMTgw RTgxQUFEMjQ1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAsxMqVGc15x14gzwoeLQmlG1gLzVMQIOsZY x9H1i57EvaYMN+4V/qL9rcxbfr6WjD8QfzDEjYT+QAg49qL8CkvCwGWx5/G3mHOs klthGpVAQAp9ltMNvb11nyPBLMeOxXVr52qoqajlTq3mry/iZzyMAKbYshPRwX6s Fk0eiX/H2SROTsvkajj8y5llX28HyCgr7dPz5ukwX9nffrVlUb0MA5bz/Do/4zSf a9ltmo2CRSSzSSCuf09e61WHZgOx53xrC0vdBKtQD6mLB25h5CkgOAVP1gAwyi6a Aj1GBz7jjTZD1PgdUGSeNvvgKLJhXK9lvVszAgmehbFZxtGbHpw= -----END CERTIFICATE-----Generated at Wed Apr 23 15:33:58 2025 by rpki-client on console.sobornost.net