$ rpki-client -vvf repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.mft File: 7DA308A66EF705BEE42CA04631A0E3901DAF88D8.mft (raw, json) Hash identifier: jBQP/5avcaZYBv1m14dZeBJ7Pa8TzqHolWoNvxOQai0= Subject key identifier: 5D:0A:63:C1:9D:99:7F:8B:DA:36:4C:B0:24:04:1F:58:A4:08:6E:B6 Authority key identifier: 7D:A3:08:A6:6E:F7:05:BE:E4:2C:A0:46:31:A0:E3:90:1D:AF:88:D8 Certificate issuer: /CN=7DA308A66EF705BEE42CA04631A0E3901DAF88D8 Certificate serial: 3CC11DCA7941BD4D60FDEA8F5AD0A6F727236A1C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.mft Manifest number: 0123 Signing time: Sat 26 Apr 2025 07:02:17 +0000 Manifest this update: Sat 26 Apr 2025 06:57:17 +0000 Manifest next update: Tue 29 Apr 2025 07:48:17 +0000 Files and hashes: 1: 7DA308A66EF705BEE42CA04631A0E3901DAF88D8.crl (hash: En87pTacFzEx7W5Dk/rKKeWbXIY4cMfipg2eT/qqDIM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.crl rsync://repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 07:48:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:c1:1d:ca:79:41:bd:4d:60:fd:ea:8f:5a:d0:a6:f7:27:23:6a:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7DA308A66EF705BEE42CA04631A0E3901DAF88D8 Validity Not Before: Apr 26 06:57:17 2025 GMT Not After : Apr 29 07:48:17 2025 GMT Subject: CN=5D0A63C19D997F8BDA364CB024041F58A4086EB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:95:c7:7a:99:08:53:b1:2d:3c:37:7e:c6:20: 2d:28:53:bc:48:1c:50:2e:ee:d6:32:42:fc:15:2e: eb:dc:43:f9:e2:17:25:66:15:88:68:dc:3b:4e:fb: e4:66:dc:08:40:70:08:72:9d:19:0a:38:f5:c1:8c: 63:87:66:5c:6e:97:27:e6:9f:78:6f:de:b0:13:8e: e6:94:9f:0e:dc:3c:1b:6c:76:e8:66:54:a2:d6:bc: 35:0c:0d:a3:0e:cd:6a:0c:e8:77:c5:78:d3:d5:5d: 23:02:72:15:0f:b0:d6:0a:f4:b0:59:b4:d8:2d:1a: 35:cd:ef:93:c8:17:45:69:74:c4:5d:c4:58:d5:3c: 27:70:66:53:f0:1f:1c:72:7e:f4:e7:a1:51:97:d0: f8:02:46:8f:22:40:3c:21:3f:79:07:d5:0a:ed:5e: c8:96:64:7d:2c:7d:a8:32:40:fa:fb:52:7a:b4:3f: 04:4c:34:83:2e:3f:52:49:a2:29:2a:f1:95:a2:0b: 96:64:73:03:25:d0:1a:9f:57:bc:6e:9b:26:81:b3: 3b:21:5c:d4:fd:ed:00:4d:fb:60:3d:31:5e:b4:6f: cd:22:20:22:fc:be:e0:6a:ab:00:d3:f5:e1:45:f5: 76:9c:f3:e4:03:ae:5d:5e:bd:53:07:65:a7:fd:c7: 9d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:0A:63:C1:9D:99:7F:8B:DA:36:4C:B0:24:04:1F:58:A4:08:6E:B6 X509v3 Authority Key Identifier: keyid:7D:A3:08:A6:6E:F7:05:BE:E4:2C:A0:46:31:A0:E3:90:1D:AF:88:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:4e:77:68:2a:50:28:26:e0:44:6c:2d:34:10:22:fd:37:74: 06:d2:10:56:2e:67:dd:b8:f1:ab:b5:09:22:46:ee:c3:b8:7d: 57:99:37:c9:68:6a:52:d1:6b:03:c9:2e:08:82:9c:07:18:51: d6:ec:5b:db:59:29:06:39:e8:1d:82:14:da:44:70:ec:48:f0: 4c:f5:cc:31:a2:fa:17:bb:14:54:a0:e8:94:88:0a:96:28:3e: 72:8e:17:8f:16:28:f5:71:ed:76:dc:61:1e:96:b6:3e:78:6b: fe:93:ee:cb:30:ee:e7:4e:62:75:d4:34:f1:6e:db:df:fc:b2: 34:1c:22:d9:e2:dc:d9:75:15:99:1a:12:ea:4c:2e:4f:50:98: a5:36:70:dd:4d:5f:d7:80:98:8c:a6:7c:43:d5:d0:84:ac:b8: 51:7b:ce:30:c1:91:cf:04:c6:55:80:ca:d2:e7:07:70:b3:60: a6:79:e2:df:32:47:ba:e1:ea:a1:a0:c8:94:ca:f1:6a:e8:f8: 53:86:1a:87:aa:70:b4:f9:ff:5c:44:d3:b3:bb:3c:ee:15:2a: 62:29:a9:c2:24:cf:89:17:0c:ea:e2:54:c7:13:9a:6b:11:60: b5:77:6e:9a:8b:0d:00:53:9b:d9:ac:82:61:ae:fa:6f:14:f3: a1:8d:a7:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPMEdynlBvU1g/eqPWtCm9ycjahwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0RBMzA4QTY2RUY3MDVCRUU0MkNBMDQ2MzFBMEUzOTAx REFGODhEODAeFw0yNTA0MjYwNjU3MTdaFw0yNTA0MjkwNzQ4MTdaMDMxMTAvBgNV BAMTKDVEMEE2M0MxOUQ5OTdGOEJEQTM2NENCMDI0MDQxRjU4QTQwODZFQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCulcd6mQhTsS08N37GIC0oU7xI HFAu7tYyQvwVLuvcQ/niFyVmFYho3DtO++Rm3AhAcAhynRkKOPXBjGOHZlxulyfm n3hv3rATjuaUnw7cPBtsduhmVKLWvDUMDaMOzWoM6HfFeNPVXSMCchUPsNYK9LBZ tNgtGjXN75PIF0VpdMRdxFjVPCdwZlPwHxxyfvTnoVGX0PgCRo8iQDwhP3kH1Qrt XsiWZH0sfagyQPr7Unq0PwRMNIMuP1JJoikq8ZWiC5ZkcwMl0BqfV7xumyaBszsh XNT97QBN+2A9MV60b80iICL8vuBqqwDT9eFF9Xac8+QDrl1evVMHZaf9x50hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXQpjwZ2Zf4vaNkywJAQfWKQIbrYwHwYDVR0j BBgwFoAUfaMIpm73Bb7kLKBGMaDjkB2viNgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZmI1ZmYzNy0zOTRhLTRlYmEtYTQ3MC0xMGFmMzdjZjc1ZGMvMC83REEzMDhBNjZF RjcwNUJFRTQyQ0EwNDYzMUEwRTM5MDFEQUY4OEQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0RBMzA4QTY2RUY3MDVCRUU0MkNBMDQ2MzFBMEUzOTAxREFG ODhEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGZiNWZmMzctMzk0YS00ZWJhLWE0 NzAtMTBhZjM3Y2Y3NWRjLzAvN0RBMzA4QTY2RUY3MDVCRUU0MkNBMDQ2MzFBMEUz OTAxREFGODhEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALFOd2gqUCgm4ERsLTQQIv03dAbSEFYuZ924 8au1CSJG7sO4fVeZN8loalLRawPJLgiCnAcYUdbsW9tZKQY56B2CFNpEcOxI8Ez1 zDGi+he7FFSg6JSICpYoPnKOF48WKPVx7XbcYR6Wtj54a/6T7ssw7udOYnXUNPFu 29/8sjQcItni3Nl1FZkaEupMLk9QmKU2cN1NX9eAmIymfEPV0ISsuFF7zjDBkc8E xlWAytLnB3CzYKZ54t8yR7rh6qGgyJTK8Wro+FOGGoeqcLT5/1xE07O7PO4VKmIp qcIkz4kXDOriVMcTmmsRYLV3bpqLDQBTm9msgmGu+m8U86GNpxg= -----END CERTIFICATE-----Generated at Sat Apr 26 08:46:11 2025 by rpki-client on console.sobornost.net