$ rpki-client -vvf repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.mft File: 23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.mft (raw, json) Hash identifier: z3NwZlF/VxGEMKWYEdAc0GTwqvLvOwPoBzvToAfpEKY= Subject key identifier: 39:AD:0D:38:2B:5D:A9:6B:F6:73:64:00:87:93:AF:E4:CB:24:A1:01 Authority key identifier: 23:C6:22:F8:76:18:AB:8B:04:22:E7:A6:A4:6D:2E:91:BF:CC:7E:36 Certificate issuer: /CN=23C622F87618AB8B0422E7A6A46D2E91BFCC7E36 Certificate serial: 30CF6B18BE39C30912B2BD66E9A1C345E159EAB3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.mft Manifest number: 8E Signing time: Fri 25 Apr 2025 17:00:51 +0000 Manifest this update: Fri 25 Apr 2025 16:55:51 +0000 Manifest next update: Mon 28 Apr 2025 22:05:51 +0000 Files and hashes: 1: 23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.crl (hash: GCh7IFVS/V4PGZZ/OvPJdtirUNh3kzjAOn0TQ6iwlJo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.crl rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:05:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:cf:6b:18:be:39:c3:09:12:b2:bd:66:e9:a1:c3:45:e1:59:ea:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23C622F87618AB8B0422E7A6A46D2E91BFCC7E36 Validity Not Before: Apr 25 16:55:51 2025 GMT Not After : Apr 28 22:05:51 2025 GMT Subject: CN=39AD0D382B5DA96BF67364008793AFE4CB24A101 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:14:dc:06:41:3d:8b:be:1e:8a:d2:b0:04:c8: 29:23:1a:ef:26:8d:55:4f:7c:7b:a5:ef:16:5c:42: a8:bb:29:43:19:15:e7:d3:69:3f:4d:30:59:6a:67: 4f:94:2e:95:fb:f3:fd:30:63:5e:f2:09:ac:36:c4: dd:f3:40:a6:6d:70:6e:d2:59:aa:30:10:8b:66:35: e7:74:25:31:18:b1:4e:52:71:26:df:8f:21:eb:69: 8c:0f:e3:aa:4d:32:07:5b:96:6b:f0:3e:6c:37:6c: 0f:73:85:04:01:48:f9:0b:53:e8:d2:46:d3:9a:55: 03:e6:e7:ff:87:4b:17:84:7b:81:61:13:1c:5c:0e: af:b8:fc:09:56:7f:f8:d7:57:a3:ef:68:c4:b0:57: 68:ca:fb:b2:48:ba:1f:16:d8:41:c7:4a:8d:b9:13: d4:20:01:90:c5:fb:7a:09:20:74:83:9a:fc:eb:58: 34:39:77:37:00:39:b1:87:c2:2e:67:71:89:67:29: 5f:32:b4:a8:51:8a:81:ed:e6:a0:00:d9:dc:b3:e6: e3:b9:1d:aa:40:03:04:01:10:7d:04:ca:26:3e:3f: be:5e:7d:8b:c1:e5:6c:64:0a:91:25:5c:2f:08:2b: 2c:a8:8c:84:a9:ba:a0:90:89:8a:c6:54:b6:e6:e1: 54:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:AD:0D:38:2B:5D:A9:6B:F6:73:64:00:87:93:AF:E4:CB:24:A1:01 X509v3 Authority Key Identifier: keyid:23:C6:22:F8:76:18:AB:8B:04:22:E7:A6:A4:6D:2E:91:BF:CC:7E:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:57:33:8e:11:61:c7:e9:b5:98:48:26:32:25:64:d2:80:5c: 20:4e:2e:de:c7:4b:b6:8e:39:68:5c:69:3b:3f:7c:e6:67:b9: c5:8c:41:35:1b:5d:00:37:b0:57:7a:88:8c:31:85:1f:1b:13: 50:c8:71:df:0f:4c:c5:21:08:4c:b3:26:98:f0:e8:c8:00:d9: 30:16:a6:be:c9:72:6d:61:cc:91:2f:5c:43:3e:07:47:8c:b4: ca:52:52:42:1f:0b:40:1e:b5:8c:46:17:c8:f0:c8:85:52:9a: 12:7f:7d:67:eb:6a:c6:93:60:56:d6:da:39:2b:9c:70:0e:53: 10:24:07:39:95:6d:6b:41:1f:cb:fa:cc:17:a0:77:3b:53:60: 06:01:8e:f5:87:3a:f6:23:1c:db:9d:5b:57:ef:bc:6d:6f:09: 21:25:60:53:e2:36:f7:71:28:da:93:25:39:a5:67:98:c1:cd: 52:aa:a4:98:9f:06:10:9e:6e:d1:6b:b2:b0:78:9c:fa:28:75: 83:4b:f8:49:07:cb:8a:14:c3:97:ca:67:02:f6:5f:5d:3b:b5: d4:62:0c:42:14:79:27:c0:b3:a0:f8:87:70:a7:a4:20:8b:29: 37:01:5c:91:98:8e:57:32:f3:8d:9b:0f:74:9c:6e:92:bb:c5: 6b:7b:a0:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMM9rGL45wwkSsr1m6aHDReFZ6rMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNDNjIyRjg3NjE4QUI4QjA0MjJFN0E2QTQ2RDJFOTFC RkNDN0UzNjAeFw0yNTA0MjUxNjU1NTFaFw0yNTA0MjgyMjA1NTFaMDMxMTAvBgNV BAMTKDM5QUQwRDM4MkI1REE5NkJGNjczNjQwMDg3OTNBRkU0Q0IyNEExMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaFNwGQT2Lvh6K0rAEyCkjGu8m jVVPfHul7xZcQqi7KUMZFefTaT9NMFlqZ0+ULpX78/0wY17yCaw2xN3zQKZtcG7S WaowEItmNed0JTEYsU5ScSbfjyHraYwP46pNMgdblmvwPmw3bA9zhQQBSPkLU+jS RtOaVQPm5/+HSxeEe4FhExxcDq+4/AlWf/jXV6PvaMSwV2jK+7JIuh8W2EHHSo25 E9QgAZDF+3oJIHSDmvzrWDQ5dzcAObGHwi5ncYlnKV8ytKhRioHt5qAA2dyz5uO5 HapAAwQBEH0EyiY+P75efYvB5WxkCpElXC8IKyyojISpuqCQiYrGVLbm4VRLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOa0NOCtdqWv2c2QAh5Ov5MskoQEwHwYDVR0j BBgwFoAUI8Yi+HYYq4sEIuempG0ukb/MfjYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjdkMjg5NC1jMDc3LTQyMWMtYmMxZC0zN2Q2ZjlkOTg5N2QvMS8yM0M2MjJGODc2 MThBQjhCMDQyMkU3QTZBNDZEMkU5MUJGQ0M3RTM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjNDNjIyRjg3NjE4QUI4QjA0MjJFN0E2QTQ2RDJFOTFCRkND N0UzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGY3ZDI4OTQtYzA3Ny00MjFjLWJj MWQtMzdkNmY5ZDk4OTdkLzEvMjNDNjIyRjg3NjE4QUI4QjA0MjJFN0E2QTQ2RDJF OTFCRkNDN0UzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAINXM44RYcfptZhIJjIlZNKAXCBOLt7HS7aO OWhcaTs/fOZnucWMQTUbXQA3sFd6iIwxhR8bE1DIcd8PTMUhCEyzJpjw6MgA2TAW pr7Jcm1hzJEvXEM+B0eMtMpSUkIfC0AetYxGF8jwyIVSmhJ/fWfrasaTYFbW2jkr nHAOUxAkBzmVbWtBH8v6zBegdztTYAYBjvWHOvYjHNudW1fvvG1vCSElYFPiNvdx KNqTJTmlZ5jBzVKqpJifBhCebtFrsrB4nPoodYNL+EkHy4oUw5fKZwL2X107tdRi DEIUeSfAs6D4h3CnpCCLKTcBXJGYjlcy842bD3ScbpK7xWt7oFg= -----END CERTIFICATE-----Generated at Fri Apr 25 19:23:49 2025 by rpki-client on console.sobornost.net