$ rpki-client -vvf repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.mft File: C19344D0F4EF3CADE2A7711481E3D1452C621D62.mft (raw, json) Hash identifier: TIZyWAlEVaFqyUTBRrWsmqdekWsskW44X5QZ263iJpM= Subject key identifier: 5D:CE:B5:30:AB:EF:1D:ED:FC:2C:7E:F6:DC:F2:D1:78:8C:73:C9:B1 Authority key identifier: C1:93:44:D0:F4:EF:3C:AD:E2:A7:71:14:81:E3:D1:45:2C:62:1D:62 Certificate issuer: /CN=C19344D0F4EF3CADE2A7711481E3D1452C621D62 Certificate serial: 5318DB84DE9292C141BC0DBACF9F52964A4EF243 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C19344D0F4EF3CADE2A7711481E3D1452C621D62.cer Subject info access: rsync://repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.mft Manifest number: 01B5 Signing time: Thu 24 Apr 2025 09:01:53 +0000 Manifest this update: Thu 24 Apr 2025 08:56:53 +0000 Manifest next update: Sun 27 Apr 2025 15:34:53 +0000 Files and hashes: 1: C19344D0F4EF3CADE2A7711481E3D1452C621D62.crl (hash: SzLHfpFXVH9dagQFVGBVBAP9Uy/o6sNObzehYYSl4qw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.crl rsync://repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C19344D0F4EF3CADE2A7711481E3D1452C621D62.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 10:42:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:18:db:84:de:92:92:c1:41:bc:0d:ba:cf:9f:52:96:4a:4e:f2:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C19344D0F4EF3CADE2A7711481E3D1452C621D62 Validity Not Before: Apr 24 08:56:53 2025 GMT Not After : Apr 27 15:34:53 2025 GMT Subject: CN=5DCEB530ABEF1DEDFC2C7EF6DCF2D1788C73C9B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:57:9e:84:29:ac:f1:bb:fb:4a:a8:d4:8e:66: b1:06:41:e6:29:e5:95:44:52:b5:35:b4:dc:1d:f0: 28:79:ca:1b:d9:c8:0c:49:5b:65:a8:27:27:2a:57: 86:7a:1a:28:f5:7b:f4:55:9d:f3:62:d6:18:1c:d2: fa:00:70:fc:ba:9f:fc:71:90:70:bc:02:9a:2d:a6: e3:04:f2:b9:13:ed:d8:2a:9d:72:7f:49:d1:74:61: 43:79:bd:27:18:d6:c6:b1:0a:95:e6:9e:11:e8:81: e1:08:85:99:6f:50:ce:35:22:19:ed:0a:f3:9b:7f: 62:0a:0f:87:73:ad:fe:de:99:39:fc:3a:42:4f:d9: c7:aa:52:11:6e:09:44:9a:c1:40:34:2c:fd:e9:31: 78:19:09:74:55:3c:12:3b:31:54:19:47:5a:09:09: b3:3d:be:57:90:1b:f3:7a:71:05:88:ca:47:62:4a: 03:60:9a:b7:1b:3e:03:53:4b:99:3e:d1:f0:ef:46: 03:bc:38:90:17:19:78:74:d7:5c:79:16:4f:b1:8f: 23:25:5c:18:59:28:6b:3d:86:0e:32:dd:fb:e5:c3: 64:2d:cc:90:95:1c:78:0d:7d:e9:7c:23:fc:7b:44: 1d:d4:d2:af:af:04:66:e8:22:4b:41:f3:d1:32:34: e5:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:CE:B5:30:AB:EF:1D:ED:FC:2C:7E:F6:DC:F2:D1:78:8C:73:C9:B1 X509v3 Authority Key Identifier: keyid:C1:93:44:D0:F4:EF:3C:AD:E2:A7:71:14:81:E3:D1:45:2C:62:1D:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C19344D0F4EF3CADE2A7711481E3D1452C621D62.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:d7:19:f8:ec:2d:97:31:24:4f:52:ca:61:0e:8d:aa:9c:a5: d9:b4:1e:cd:0c:e9:f9:07:85:11:c3:2a:55:10:1f:4a:62:f7: 5e:93:96:f7:5d:c4:49:87:0e:ea:16:b6:13:ca:95:89:1c:6a: 28:55:d5:6d:94:16:5a:66:9b:18:0c:29:d2:be:20:6d:81:72: d2:43:fd:1b:fc:0c:e6:0c:15:38:8d:42:c6:f8:ea:84:76:84: 9a:f9:b7:6b:50:5f:e8:7f:95:c6:1a:a2:e6:20:31:b8:1f:9d: 3a:27:49:d7:16:6d:4b:f2:bf:2f:4e:16:f6:22:f2:33:82:33: 9c:22:7d:78:c7:02:eb:b1:10:5d:e6:c9:95:47:96:77:81:6c: 19:a5:70:84:a0:dd:4d:8d:bb:3a:6a:38:47:6a:b4:8f:2b:c9: e7:7f:f3:bf:fa:c0:e6:4d:d4:cb:37:9a:6b:dc:4e:52:0a:e7: e8:0c:10:49:3e:15:31:cd:ea:a4:66:1f:55:a8:6f:9b:ba:69: ca:1c:7c:98:c9:f2:dd:22:e4:50:e1:c5:41:33:64:c7:ee:99: fa:fb:b0:f2:4f:c1:bb:bd:b9:5d:43:95:20:ef:40:b9:31:4d: 32:00:46:00:80:b2:f7:9c:22:ad:97:40:a6:64:90:3a:72:a0: 24:c9:88:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUxjbhN6SksFBvA26z59SlkpO8kMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE5MzQ0RDBGNEVGM0NBREUyQTc3MTE0ODFFM0QxNDUy QzYyMUQ2MjAeFw0yNTA0MjQwODU2NTNaFw0yNTA0MjcxNTM0NTNaMDMxMTAvBgNV BAMTKDVEQ0VCNTMwQUJFRjFERURGQzJDN0VGNkRDRjJEMTc4OEM3M0M5QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClV56EKazxu/tKqNSOZrEGQeYp 5ZVEUrU1tNwd8Ch5yhvZyAxJW2WoJycqV4Z6Gij1e/RVnfNi1hgc0voAcPy6n/xx kHC8ApotpuME8rkT7dgqnXJ/SdF0YUN5vScY1saxCpXmnhHogeEIhZlvUM41Ihnt CvObf2IKD4dzrf7emTn8OkJP2ceqUhFuCUSawUA0LP3pMXgZCXRVPBI7MVQZR1oJ CbM9vleQG/N6cQWIykdiSgNgmrcbPgNTS5k+0fDvRgO8OJAXGXh011x5Fk+xjyMl XBhZKGs9hg4y3fvlw2QtzJCVHHgNfel8I/x7RB3U0q+vBGboIktB89EyNOWjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXc61MKvvHe38LH723PLReIxzybEwHwYDVR0j BBgwFoAUwZNE0PTvPK3ip3EUgePRRSxiHWIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MWI2ZGQ5Yi1kMTUyLTRjOGYtODdiNy02MjllYjgwOGY5MTEvMC9DMTkzNDREMEY0 RUYzQ0FERTJBNzcxMTQ4MUUzRDE0NTJDNjIxRDYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzE5MzQ0RDBGNEVGM0NBREUyQTc3MTE0ODFFM0QxNDUyQzYy MUQ2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDFiNmRkOWItZDE1Mi00YzhmLTg3 YjctNjI5ZWI4MDhmOTExLzAvQzE5MzQ0RDBGNEVGM0NBREUyQTc3MTE0ODFFM0Qx NDUyQzYyMUQ2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH3XGfjsLZcxJE9SymEOjaqcpdm0Hs0M6fkH hRHDKlUQH0pi916TlvddxEmHDuoWthPKlYkcaihV1W2UFlpmmxgMKdK+IG2BctJD /Rv8DOYMFTiNQsb46oR2hJr5t2tQX+h/lcYaouYgMbgfnTonSdcWbUvyvy9OFvYi 8jOCM5wifXjHAuuxEF3myZVHlneBbBmlcISg3U2NuzpqOEdqtI8ryed/87/6wOZN 1Ms3mmvcTlIK5+gMEEk+FTHN6qRmH1Wob5u6acocfJjJ8t0i5FDhxUEzZMfumfr7 sPJPwbu9uV1DlSDvQLkxTTIARgCAsvecIq2XQKZkkDpyoCTJiCg= -----END CERTIFICATE-----Generated at Thu Apr 24 11:25:12 2025 by rpki-client on console.sobornost.net