$ rpki-client -vvf repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.mft File: 1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.mft (raw, json) Hash identifier: vxyX6vYiEF8hURFnXSPYYynRXq8dUwgnUG0DZHCXyNA= Subject key identifier: F4:1C:21:BB:1C:81:7C:06:86:70:DE:DD:C0:4E:F9:DC:DC:BC:9E:B8 Authority key identifier: 1F:D5:7D:4C:42:26:96:0C:E0:2B:7A:6E:42:D8:82:FC:B7:E4:60:EE Certificate issuer: /CN=1FD57D4C4226960CE02B7A6E42D882FCB7E460EE Certificate serial: 0728612DA33BAA4867005B99788F6D91470C20D3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.mft Manifest number: 01EC Signing time: Wed 23 Apr 2025 18:01:24 +0000 Manifest this update: Wed 23 Apr 2025 17:56:24 +0000 Manifest next update: Sat 26 Apr 2025 19:55:24 +0000 Files and hashes: 1: 1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.crl (hash: 86RJEh/7xS3HHTSiUMq6n+f1KmctHSFB84Ymom+KKEA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.crl rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 19:55:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:28:61:2d:a3:3b:aa:48:67:00:5b:99:78:8f:6d:91:47:0c:20:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FD57D4C4226960CE02B7A6E42D882FCB7E460EE Validity Not Before: Apr 23 17:56:24 2025 GMT Not After : Apr 26 19:55:24 2025 GMT Subject: CN=F41C21BB1C817C068670DEDDC04EF9DCDCBC9EB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:15:cf:e5:b1:95:fb:52:8a:ed:be:7e:83:fe: 86:1d:4f:9b:78:d9:f3:f2:8c:38:cc:4a:21:61:b3: 81:e3:a3:dc:4e:21:24:94:81:c7:d5:2c:87:01:92: fd:88:1d:c8:a1:31:ae:e5:75:ef:5d:8d:c3:1a:c4: 7f:3f:48:32:f6:e0:4a:1b:5f:63:5d:0b:ee:ae:0c: 56:e0:15:74:76:f9:2d:e2:2c:62:2e:c9:77:3c:28: d4:9e:a2:44:3f:54:cc:c1:99:b6:f0:fa:db:00:eb: 8e:bc:cd:1f:bb:b1:71:b8:ee:a7:4c:46:01:70:eb: a1:0d:50:73:da:13:63:09:34:27:37:b9:66:4f:37: 72:5e:d7:76:d5:4b:c9:e2:bd:7a:82:68:81:29:5e: c8:8e:05:ec:47:93:49:18:9a:84:cc:e1:82:0c:8a: dd:2b:85:07:f1:6e:f4:d5:ab:12:a7:c2:ce:3f:47: 88:a2:2a:8e:df:54:a0:be:71:c4:13:a0:ae:9c:01: 30:e2:01:ed:bb:80:0d:44:48:4a:a8:6b:02:b6:96: dd:2f:00:43:46:f1:99:2d:50:2c:bc:81:45:1f:1a: 97:6b:40:bb:15:83:0f:f6:fa:ca:77:ab:5d:63:48: ed:52:ad:52:cf:5a:38:bb:07:da:e0:d0:56:55:bb: de:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:1C:21:BB:1C:81:7C:06:86:70:DE:DD:C0:4E:F9:DC:DC:BC:9E:B8 X509v3 Authority Key Identifier: keyid:1F:D5:7D:4C:42:26:96:0C:E0:2B:7A:6E:42:D8:82:FC:B7:E4:60:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:24:ed:46:d8:71:22:db:51:78:a6:36:ae:c1:4b:d7:d4:44: 22:f1:17:f6:63:d7:1d:29:30:ba:68:b7:07:c3:9b:6f:42:79: c1:00:d9:80:e5:03:eb:ec:7d:bf:b4:f5:e2:5e:39:c8:a3:d4: e2:a4:fc:e7:07:1d:5e:29:08:e3:30:11:23:ab:85:5c:c4:bb: 5e:26:da:8e:9b:d7:68:24:7d:b3:d3:62:63:b2:26:bb:e8:2d: e9:2c:24:29:90:c5:4e:8d:06:76:9c:44:ee:c9:8b:05:92:5a: 69:15:73:ee:ec:97:da:e8:57:2d:ee:af:62:2a:77:a0:93:82: 6f:8b:3d:55:35:e3:fb:04:a9:7e:2e:88:24:80:47:b6:c8:4e: 86:a9:ed:a7:99:ae:6d:ec:a5:18:b8:e1:9b:44:6f:36:e3:40: 06:90:bc:d4:79:32:f0:a8:09:3b:1b:50:7a:64:f5:bb:67:09: b1:c1:5b:f8:ca:f1:d5:52:81:ca:91:9a:59:60:73:75:6e:de: 99:27:d6:90:2b:eb:a6:0a:b6:5f:d8:4e:83:d9:52:d4:21:d4: e8:07:2a:47:a7:24:ef:7e:88:51:27:f1:3c:ae:8e:f6:73:bb: f1:df:71:19:61:b5:e0:15:ba:c7:38:f0:a8:4c:e1:2b:80:2a: 46:7e:ea:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUByhhLaM7qkhnAFuZeI9tkUcMINMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZENTdENEM0MjI2OTYwQ0UwMkI3QTZFNDJEODgyRkNC N0U0NjBFRTAeFw0yNTA0MjMxNzU2MjRaFw0yNTA0MjYxOTU1MjRaMDMxMTAvBgNV BAMTKEY0MUMyMUJCMUM4MTdDMDY4NjcwREVEREMwNEVGOURDRENCQzlFQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Fc/lsZX7Uortvn6D/oYdT5t4 2fPyjDjMSiFhs4Hjo9xOISSUgcfVLIcBkv2IHcihMa7lde9djcMaxH8/SDL24Eob X2NdC+6uDFbgFXR2+S3iLGIuyXc8KNSeokQ/VMzBmbbw+tsA6468zR+7sXG47qdM RgFw66ENUHPaE2MJNCc3uWZPN3Je13bVS8nivXqCaIEpXsiOBexHk0kYmoTM4YIM it0rhQfxbvTVqxKnws4/R4iiKo7fVKC+ccQToK6cATDiAe27gA1ESEqoawK2lt0v AENG8ZktUCy8gUUfGpdrQLsVgw/2+sp3q11jSO1SrVLPWji7B9rg0FZVu959AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9BwhuxyBfAaGcN7dwE753Ny8nrgwHwYDVR0j BBgwFoAUH9V9TEImlgzgK3puQtiC/LfkYO4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTM0YmI0OC04YTY1LTQyOGItOTRmMS05OTVhZWQ3MmVjYjUvMC8xRkQ1N0Q0QzQy MjY5NjBDRTAyQjdBNkU0MkQ4ODJGQ0I3RTQ2MEVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZENTdENEM0MjI2OTYwQ0UwMkI3QTZFNDJEODgyRkNCN0U0 NjBFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTEzNGJiNDgtOGE2NS00MjhiLTk0 ZjEtOTk1YWVkNzJlY2I1LzAvMUZENTdENEM0MjI2OTYwQ0UwMkI3QTZFNDJEODgy RkNCN0U0NjBFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAgk7UbYcSLbUXimNq7BS9fURCLxF/Zj1x0p MLpotwfDm29CecEA2YDlA+vsfb+09eJeOcij1OKk/OcHHV4pCOMwESOrhVzEu14m 2o6b12gkfbPTYmOyJrvoLeksJCmQxU6NBnacRO7JiwWSWmkVc+7sl9roVy3ur2Iq d6CTgm+LPVU14/sEqX4uiCSAR7bIToap7aeZrm3spRi44ZtEbzbjQAaQvNR5MvCo CTsbUHpk9btnCbHBW/jK8dVSgcqRmllgc3Vu3pkn1pAr66YKtl/YToPZUtQh1OgH KkenJO9+iFEn8TyujvZzu/HfcRlhteAVusc48KhM4SuAKkZ+6oE= -----END CERTIFICATE-----Generated at Wed Apr 23 19:50:40 2025 by rpki-client on console.sobornost.net