$ rpki-client -vvf repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.mft File: 5561020450CCF35D395065D493AABB1C3F275482.mft (raw, json) Hash identifier: XC2yR/bQSM9K+DHk4NA1fUnQL/6YtlQ1aMZOHLj5l7Q= Subject key identifier: F6:39:6F:95:73:BC:E0:64:80:68:CB:BF:F6:60:57:1B:15:C1:B2:5C Authority key identifier: 55:61:02:04:50:CC:F3:5D:39:50:65:D4:93:AA:BB:1C:3F:27:54:82 Certificate issuer: /CN=5561020450CCF35D395065D493AABB1C3F275482 Certificate serial: 73DCDA186CB1201769CD6456E7FBA73A82D665CC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5561020450CCF35D395065D493AABB1C3F275482.cer Subject info access: rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.mft Manifest number: 01DA Signing time: Fri 25 Apr 2025 15:42:21 +0000 Manifest this update: Fri 25 Apr 2025 15:37:21 +0000 Manifest next update: Mon 28 Apr 2025 18:04:21 +0000 Files and hashes: 1: 5561020450CCF35D395065D493AABB1C3F275482.crl (hash: WrcX+45NnTX5L/0hr7xdKwYbLsQLqRJdyK3qADV42eU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.crl rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5561020450CCF35D395065D493AABB1C3F275482.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 18:04:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:dc:da:18:6c:b1:20:17:69:cd:64:56:e7:fb:a7:3a:82:d6:65:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5561020450CCF35D395065D493AABB1C3F275482 Validity Not Before: Apr 25 15:37:21 2025 GMT Not After : Apr 28 18:04:21 2025 GMT Subject: CN=F6396F9573BCE0648068CBBFF660571B15C1B25C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:24:07:7f:8a:5a:72:78:00:6d:13:4b:28:97: c2:68:53:3e:d9:f4:f9:8e:ae:9e:a7:c2:be:ff:43: 4c:71:df:4d:40:c8:57:8f:b4:5a:07:6b:ce:27:9b: b3:b1:20:52:b8:a5:a2:65:3d:09:8e:14:9f:46:db: 8c:05:0c:4f:59:be:91:c1:84:ec:45:4e:57:10:58: 46:e2:7c:0a:eb:b8:e6:7d:99:15:eb:2c:1e:10:cd: 14:c7:6e:f1:00:db:93:a4:db:68:be:ed:6c:90:25: 17:c0:61:88:6e:86:62:99:82:c9:0a:61:ef:a2:4e: c8:75:65:77:5a:8e:63:56:11:63:ea:a0:d6:d1:13: 4a:cc:de:10:0f:db:b7:6f:3b:fe:62:7f:57:42:cc: 4b:79:62:42:13:6e:b5:d5:10:81:7d:44:55:0e:33: d7:cc:19:da:92:3c:0c:70:a3:24:77:01:86:3f:be: e6:2d:2a:40:6e:fd:09:b8:a8:d0:1c:5b:61:f5:c4: db:0f:39:e4:fc:81:2f:b3:fa:1c:df:8c:61:fa:aa: aa:88:ff:c0:57:6b:a0:29:78:02:55:fe:a1:e6:9b: 0b:dc:4f:8f:c5:5a:83:d4:e2:e5:86:70:d1:19:29: 27:3a:0a:f1:4b:e9:8d:31:5c:3a:7f:0a:ce:47:86: b5:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:39:6F:95:73:BC:E0:64:80:68:CB:BF:F6:60:57:1B:15:C1:B2:5C X509v3 Authority Key Identifier: keyid:55:61:02:04:50:CC:F3:5D:39:50:65:D4:93:AA:BB:1C:3F:27:54:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5561020450CCF35D395065D493AABB1C3F275482.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:f5:19:9c:d5:62:91:3b:5f:9e:ad:80:b3:d4:a0:80:ea:f5: 7c:c5:97:e2:9e:dc:56:69:4d:e2:e0:2e:52:41:8b:ae:c8:45: 47:b0:c4:72:87:33:eb:4b:34:38:04:85:64:3a:55:c1:fd:e4: ab:c5:94:7b:6a:a9:de:0d:99:a2:f1:a1:54:56:03:9c:48:6e: fd:b2:41:c3:62:24:f3:cc:85:cc:b1:5f:53:3c:38:20:82:8a: 9f:b3:f6:e9:8d:fc:db:bb:c0:b5:cb:35:b0:ab:5f:a9:bd:f7: ac:20:54:0b:2b:a7:26:bc:21:6d:a3:92:9f:8c:7e:75:af:ae: 6a:3c:54:22:63:31:fa:d7:4a:57:12:52:02:6f:fa:bf:11:3e: 59:b1:9f:ef:b9:80:f6:8b:1c:62:f0:70:c8:c4:1a:af:5f:6b: 06:ad:ad:ed:ea:bc:c9:f7:74:48:76:8c:38:02:a7:c1:5e:a1: 13:f1:0c:b7:d7:ee:6b:97:e5:bf:51:99:72:d3:cf:fd:d7:78: ea:82:13:cf:97:cd:65:6c:a6:04:a6:32:99:9d:10:2f:76:da: 6c:2f:6c:29:11:4c:35:23:e1:c5:d8:f0:c3:f1:3e:55:25:e2: 8f:21:31:72:33:d1:85:2c:1e:5a:6f:68:da:4d:d0:80:3c:bb: 1d:6c:ad:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc9zaGGyxIBdpzWRW5/unOoLWZcwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTU2MTAyMDQ1MENDRjM1RDM5NTA2NUQ0OTNBQUJCMUMz RjI3NTQ4MjAeFw0yNTA0MjUxNTM3MjFaFw0yNTA0MjgxODA0MjFaMDMxMTAvBgNV BAMTKEY2Mzk2Rjk1NzNCQ0UwNjQ4MDY4Q0JCRkY2NjA1NzFCMTVDMUIyNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9JAd/ilpyeABtE0sol8JoUz7Z 9PmOrp6nwr7/Q0xx301AyFePtFoHa84nm7OxIFK4paJlPQmOFJ9G24wFDE9ZvpHB hOxFTlcQWEbifArruOZ9mRXrLB4QzRTHbvEA25Ok22i+7WyQJRfAYYhuhmKZgskK Ye+iTsh1ZXdajmNWEWPqoNbRE0rM3hAP27dvO/5if1dCzEt5YkITbrXVEIF9RFUO M9fMGdqSPAxwoyR3AYY/vuYtKkBu/Qm4qNAcW2H1xNsPOeT8gS+z+hzfjGH6qqqI /8BXa6ApeAJV/qHmmwvcT4/FWoPU4uWGcNEZKSc6CvFL6Y0xXDp/Cs5HhrXRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9jlvlXO84GSAaMu/9mBXGxXBslwwHwYDVR0j BBgwFoAUVWECBFDM8105UGXUk6q7HD8nVIIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MDdkNWJiNi05ZGEwLTRjM2MtOTM5NS0wNjQ1OTZhNGY3ODkvMC81NTYxMDIwNDUw Q0NGMzVEMzk1MDY1RDQ5M0FBQkIxQzNGMjc1NDgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTU2MTAyMDQ1MENDRjM1RDM5NTA2NUQ0OTNBQUJCMUMzRjI3 NTQ4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDA3ZDViYjYtOWRhMC00YzNjLTkz OTUtMDY0NTk2YTRmNzg5LzAvNTU2MTAyMDQ1MENDRjM1RDM5NTA2NUQ0OTNBQUJC MUMzRjI3NTQ4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHX1GZzVYpE7X56tgLPUoIDq9XzFl+Ke3FZp TeLgLlJBi67IRUewxHKHM+tLNDgEhWQ6VcH95KvFlHtqqd4NmaLxoVRWA5xIbv2y QcNiJPPMhcyxX1M8OCCCip+z9umN/Nu7wLXLNbCrX6m996wgVAsrpya8IW2jkp+M fnWvrmo8VCJjMfrXSlcSUgJv+r8RPlmxn++5gPaLHGLwcMjEGq9fawatre3qvMn3 dEh2jDgCp8FeoRPxDLfX7muX5b9RmXLTz/3XeOqCE8+XzWVspgSmMpmdEC922mwv bCkRTDUj4cXY8MPxPlUl4o8hMXIz0YUsHlpvaNpN0IA8ux1srf0= -----END CERTIFICATE-----Generated at Fri Apr 25 19:23:49 2025 by rpki-client on console.sobornost.net