$ rpki-client -vvf repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft File: CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft (raw, json) Hash identifier: h+WLutTAbo2swz0cSZH5BE++WP9WpfhFASQeZXMA2Bw= Subject key identifier: BB:C3:59:1A:2C:48:8D:6E:0E:A9:84:7F:31:01:90:93:1C:F6:02:A5 Authority key identifier: CF:FE:9C:8F:BE:15:24:63:00:A6:C1:B1:A8:B2:2E:CF:63:C6:23:FA Certificate issuer: /CN=CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA Certificate serial: 25C24C1470F63C21C60B842D07D90A6C0B982B24 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft Manifest number: D1 Signing time: Wed 23 Apr 2025 22:21:23 +0000 Manifest this update: Wed 23 Apr 2025 22:16:23 +0000 Manifest next update: Sun 27 Apr 2025 04:58:23 +0000 Files and hashes: 1: CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.crl (hash: jexee3EiyGjWg6nwl1+aWXXLBClkHDR5L0QXRBOaY5k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.crl rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 02:40:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:c2:4c:14:70:f6:3c:21:c6:0b:84:2d:07:d9:0a:6c:0b:98:2b:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA Validity Not Before: Apr 23 22:16:23 2025 GMT Not After : Apr 27 04:58:23 2025 GMT Subject: CN=BBC3591A2C488D6E0EA9847F310190931CF602A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ed:69:6f:ee:56:b8:35:5e:83:0f:02:35:0a: 22:9f:e6:68:52:15:d1:55:ed:e8:94:e1:98:56:bc: 62:03:ee:69:80:67:59:3a:95:8e:ee:1f:87:84:46: 73:44:44:01:62:eb:f0:58:90:73:f2:ba:56:ca:af: d5:89:e1:1c:27:1f:d4:28:26:dd:30:18:50:39:46: 33:31:c5:f5:39:8b:11:89:6e:81:10:0c:25:84:e9: fd:5f:86:07:71:c4:5a:ce:c6:13:4b:e9:ff:f0:d9: 4c:15:cb:75:9e:7e:dc:ce:77:96:44:b8:48:94:ce: af:c4:1f:21:a6:14:a2:ed:69:a0:b5:30:cf:19:dd: b4:18:bb:f6:4c:34:51:18:a9:35:a3:0c:e6:6d:75: 8c:68:91:df:6e:f4:22:6c:75:bd:5a:0f:b9:0b:67: a2:52:c2:24:45:a7:4c:f8:d5:b6:d1:da:cb:84:86: 0a:1c:41:52:4c:dd:ca:17:2e:d3:61:20:1a:3b:99: 24:e1:d2:0b:f1:be:45:0a:35:c7:82:62:8e:bc:be: 72:d5:46:5b:f7:8a:37:b1:c5:a3:6c:4a:0d:b8:9f: a6:ca:e8:8b:09:3e:48:bc:74:3f:19:51:54:bd:74: 44:07:a2:cf:12:af:2a:c8:c2:0e:ca:b7:f0:e0:d0: dc:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:C3:59:1A:2C:48:8D:6E:0E:A9:84:7F:31:01:90:93:1C:F6:02:A5 X509v3 Authority Key Identifier: keyid:CF:FE:9C:8F:BE:15:24:63:00:A6:C1:B1:A8:B2:2E:CF:63:C6:23:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:74:0e:be:c6:d9:30:fe:66:b7:a2:0c:17:33:6e:9e:82:9d: d4:07:ae:ef:54:14:51:22:48:0d:13:c9:9d:d6:ae:b8:92:14: 2b:fc:35:4f:82:aa:c0:ea:82:fc:e0:f5:6a:f8:72:ec:a2:6b: 2f:f9:94:6e:86:2b:17:30:e4:6f:bb:cc:98:9c:bf:f8:b8:ae: 2f:53:1e:6a:4f:1e:96:d4:e7:b8:a8:70:3e:d8:40:da:6f:3f: 42:61:2d:29:33:1f:b5:0f:e9:99:94:58:f5:4e:15:84:85:f5: 2d:b3:f8:7d:02:18:4e:67:fc:20:ca:12:90:6b:f4:20:71:a1: 5d:aa:2d:8a:1b:61:d4:35:77:37:3a:16:9e:8d:82:db:16:28: 3d:d6:a7:2b:a5:92:c1:3c:6b:49:73:76:ff:8d:02:a1:d8:cd: 89:cd:1c:d2:fd:f0:8c:9e:4b:8e:64:81:d0:a3:c2:3c:37:ed: dd:4e:a2:27:f8:8a:69:42:2a:1b:e9:98:f9:66:f2:c3:06:0b: c2:b8:4a:a6:15:7e:4e:64:31:3a:73:f1:ec:90:4d:20:5f:b7: 1d:36:2f:bd:f5:88:a4:35:6c:b1:3e:bd:5b:d1:2e:73:bf:09: 53:c3:4d:1e:0b:eb:7a:1e:96:55:a7:c9:3f:5f:19:e0:f4:31: 54:b5:bb:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJcJMFHD2PCHGC4QtB9kKbAuYKyQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZGRTlDOEZCRTE1MjQ2MzAwQTZDMUIxQThCMjJFQ0Y2 M0M2MjNGQTAeFw0yNTA0MjMyMjE2MjNaFw0yNTA0MjcwNDU4MjNaMDMxMTAvBgNV BAMTKEJCQzM1OTFBMkM0ODhENkUwRUE5ODQ3RjMxMDE5MDkzMUNGNjAyQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF7Wlv7la4NV6DDwI1CiKf5mhS FdFV7eiU4ZhWvGID7mmAZ1k6lY7uH4eERnNERAFi6/BYkHPyulbKr9WJ4RwnH9Qo Jt0wGFA5RjMxxfU5ixGJboEQDCWE6f1fhgdxxFrOxhNL6f/w2UwVy3WeftzOd5ZE uEiUzq/EHyGmFKLtaaC1MM8Z3bQYu/ZMNFEYqTWjDOZtdYxokd9u9CJsdb1aD7kL Z6JSwiRFp0z41bbR2suEhgocQVJM3coXLtNhIBo7mSTh0gvxvkUKNceCYo68vnLV Rlv3ijexxaNsSg24n6bK6IsJPki8dD8ZUVS9dEQHos8SryrIwg7Kt/Dg0NyhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu8NZGixIjW4OqYR/MQGQkxz2AqUwHwYDVR0j BBgwFoAUz/6cj74VJGMApsGxqLIuz2PGI/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MDgyMDIwYy0zYzQ2LTRiZmItOTRjMi0zMjkyZjU2YTY1MmEvMC9DRkZFOUM4RkJF MTUyNDYzMDBBNkMxQjFBOEIyMkVDRjYzQzYyM0ZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0ZGRTlDOEZCRTE1MjQ2MzAwQTZDMUIxQThCMjJFQ0Y2M0M2 MjNGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDA4MjAyMGMtM2M0Ni00YmZiLTk0 YzItMzI5MmY1NmE2NTJhLzAvQ0ZGRTlDOEZCRTE1MjQ2MzAwQTZDMUIxQThCMjJF Q0Y2M0M2MjNGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG90Dr7G2TD+ZreiDBczbp6CndQHru9UFFEi SA0TyZ3WrriSFCv8NU+CqsDqgvzg9Wr4cuyiay/5lG6GKxcw5G+7zJicv/i4ri9T HmpPHpbU57iocD7YQNpvP0JhLSkzH7UP6ZmUWPVOFYSF9S2z+H0CGE5n/CDKEpBr 9CBxoV2qLYobYdQ1dzc6Fp6NgtsWKD3WpyulksE8a0lzdv+NAqHYzYnNHNL98Iye S45kgdCjwjw37d1Ooif4imlCKhvpmPlm8sMGC8K4SqYVfk5kMTpz8eyQTSBftx02 L731iKQ1bLE+vVvRLnO/CVPDTR4L63oellWnyT9fGeD0MVS1u4g= -----END CERTIFICATE-----Generated at Thu Apr 24 01:45:02 2025 by rpki-client on console.sobornost.net