$ rpki-client -vvf repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.mft File: 9F64F124BCCF26E226CCEACE011CCFBBF24A8687.mft (raw, json) Hash identifier: OFAya7dftomr7m33ZzY6QaePyoIBiIjmFtSfEC5YxLM= Subject key identifier: 80:5F:22:A6:A2:83:BE:DD:0E:E7:EB:8A:6D:C0:32:9C:38:BF:AA:9F Authority key identifier: 9F:64:F1:24:BC:CF:26:E2:26:CC:EA:CE:01:1C:CF:BB:F2:4A:86:87 Certificate issuer: /CN=9F64F124BCCF26E226CCEACE011CCFBBF24A8687 Certificate serial: 4074E734614272167C3C218B1D6206C27DD24B40 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.mft Manifest number: EA Signing time: Fri 25 Apr 2025 07:03:06 +0000 Manifest this update: Fri 25 Apr 2025 06:58:06 +0000 Manifest next update: Mon 28 Apr 2025 07:37:06 +0000 Files and hashes: 1: 9F64F124BCCF26E226CCEACE011CCFBBF24A8687.crl (hash: vbhhGLkdEUJwvuwE6ngV41XX3sCB2JTOj0//Y3JAkjo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.crl rsync://repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 07:37:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:74:e7:34:61:42:72:16:7c:3c:21:8b:1d:62:06:c2:7d:d2:4b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F64F124BCCF26E226CCEACE011CCFBBF24A8687 Validity Not Before: Apr 25 06:58:06 2025 GMT Not After : Apr 28 07:37:06 2025 GMT Subject: CN=805F22A6A283BEDD0EE7EB8A6DC0329C38BFAA9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c5:58:4b:91:99:62:97:b9:61:6e:1a:4c:1c: d6:32:db:1c:04:ef:07:c5:2d:44:ef:52:e0:40:ba: 0f:6a:5f:f7:ad:a0:f1:19:b6:f3:10:a5:17:99:c4: be:4c:4e:cd:82:93:a1:82:4c:e3:6b:f7:b9:61:e9: a8:f5:36:af:d1:76:d0:70:fc:33:4a:0d:8d:aa:0d: ad:ec:e8:26:9c:27:e2:5a:e1:98:7d:eb:00:fe:0c: 24:4d:6c:d6:c6:37:18:77:7a:73:4d:2a:74:55:f7: 5a:37:07:92:f5:96:c6:7c:2b:ef:22:66:9a:7c:67: cd:32:5a:b2:df:a9:d4:c7:8c:93:0b:3a:ec:f4:97: c6:10:e9:de:86:fc:97:d8:e4:78:5c:6d:d7:bf:8d: 98:4d:7c:d3:8d:6c:a3:ec:86:33:8d:d9:b2:cb:92: f0:96:af:2b:e5:a7:25:73:bd:24:e4:48:f7:97:a0: a3:33:1a:65:c5:0b:de:9a:e3:3d:4d:4d:76:41:98: cc:f3:0d:e9:22:d8:4c:f1:fa:37:b2:68:32:a9:eb: 10:30:42:5a:fa:be:41:c3:6b:dd:d5:a2:e3:ae:46: 64:ab:39:ed:61:51:cc:ea:12:c9:9c:56:9d:fd:cf: 53:05:07:35:ac:49:a8:47:b8:aa:eb:42:16:55:05: 7e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:5F:22:A6:A2:83:BE:DD:0E:E7:EB:8A:6D:C0:32:9C:38:BF:AA:9F X509v3 Authority Key Identifier: keyid:9F:64:F1:24:BC:CF:26:E2:26:CC:EA:CE:01:1C:CF:BB:F2:4A:86:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:ed:b3:97:27:e2:13:bf:8a:9a:36:9e:78:69:cb:bb:2a:c5: b5:c6:57:3b:c9:ed:01:68:49:8e:6d:36:bd:41:8f:eb:95:ae: d1:95:58:f3:1f:8d:53:6b:a1:64:5f:d4:07:6b:a2:7c:2f:24: 25:06:b6:c2:e8:59:68:76:38:13:2f:e5:c3:a1:6c:86:5b:24: a3:a3:fd:1f:22:60:df:14:64:3d:6f:20:cb:a0:75:6e:18:fd: a7:5b:e2:c0:a7:2a:f1:23:c3:0f:f6:82:0f:aa:2e:37:f6:1f: 6b:c4:75:0d:9d:39:4c:08:8c:2d:26:5b:a7:98:7c:44:09:97: d3:d7:df:52:c6:d1:9c:e2:dc:bd:aa:b7:76:cf:cd:1c:77:2f: d3:dd:7e:62:7d:9a:5b:78:e7:f4:eb:d4:f7:bd:f1:99:10:90: b0:b5:9f:c7:0b:74:ab:c5:0f:47:82:a2:91:6c:a2:f1:c2:47: ed:9f:a9:35:a9:9b:c2:cc:40:76:60:f8:ed:d3:16:0c:e9:b6: 5b:65:81:72:78:dc:28:ec:53:a1:5b:ad:08:59:21:08:e6:6e: 33:e2:ad:d3:2a:8c:af:5c:c3:18:93:42:57:a4:5f:99:83:78: 32:ab:bb:0c:80:b8:a5:6e:fe:94:ea:5f:17:10:3b:84:67:f2: 37:3e:1c:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQHTnNGFCchZ8PCGLHWIGwn3SS0AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY2NEYxMjRCQ0NGMjZFMjI2Q0NFQUNFMDExQ0NGQkJG MjRBODY4NzAeFw0yNTA0MjUwNjU4MDZaFw0yNTA0MjgwNzM3MDZaMDMxMTAvBgNV BAMTKDgwNUYyMkE2QTI4M0JFREQwRUU3RUI4QTZEQzAzMjlDMzhCRkFBOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxxVhLkZlil7lhbhpMHNYy2xwE 7wfFLUTvUuBAug9qX/etoPEZtvMQpReZxL5MTs2Ck6GCTONr97lh6aj1Nq/RdtBw /DNKDY2qDa3s6CacJ+Ja4Zh96wD+DCRNbNbGNxh3enNNKnRV91o3B5L1lsZ8K+8i Zpp8Z80yWrLfqdTHjJMLOuz0l8YQ6d6G/JfY5Hhcbde/jZhNfNONbKPshjON2bLL kvCWryvlpyVzvSTkSPeXoKMzGmXFC96a4z1NTXZBmMzzDeki2Ezx+jeyaDKp6xAw Qlr6vkHDa93VouOuRmSrOe1hUczqEsmcVp39z1MFBzWsSahHuKrrQhZVBX7jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgF8ipqKDvt0O5+uKbcAynDi/qp8wHwYDVR0j BBgwFoAUn2TxJLzPJuImzOrOARzPu/JKhocwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZjI4NmYwYy0wZmNkLTQzOWMtOGRmZS04MDY1YzkxNzg5MDEvMC85RjY0RjEyNEJD Q0YyNkUyMjZDQ0VBQ0UwMTFDQ0ZCQkYyNEE4Njg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY2NEYxMjRCQ0NGMjZFMjI2Q0NFQUNFMDExQ0NGQkJGMjRB ODY4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWYyODZmMGMtMGZjZC00MzljLThk ZmUtODA2NWM5MTc4OTAxLzAvOUY2NEYxMjRCQ0NGMjZFMjI2Q0NFQUNFMDExQ0NG QkJGMjRBODY4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEvts5cn4hO/ipo2nnhpy7sqxbXGVzvJ7QFo SY5tNr1Bj+uVrtGVWPMfjVNroWRf1AdronwvJCUGtsLoWWh2OBMv5cOhbIZbJKOj /R8iYN8UZD1vIMugdW4Y/adb4sCnKvEjww/2gg+qLjf2H2vEdQ2dOUwIjC0mW6eY fEQJl9PX31LG0Zzi3L2qt3bPzRx3L9PdfmJ9mlt45/Tr1Pe98ZkQkLC1n8cLdKvF D0eCopFsovHCR+2fqTWpm8LMQHZg+O3TFgzptltlgXJ43CjsU6FbrQhZIQjmbjPi rdMqjK9cwxiTQlekX5mDeDKruwyAuKVu/pTqXxcQO4Rn8jc+HBk= -----END CERTIFICATE-----Generated at Fri Apr 25 10:36:40 2025 by rpki-client on console.sobornost.net