$ rpki-client -vvf repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft File: D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft (raw, json) Hash identifier: PZbb5ZnKtIceMTWsD0kb1e0hpUJj7UcaMRAHOVju2Ak= Subject key identifier: 2E:EA:B2:69:29:89:DD:D5:8D:AA:CB:1B:DA:65:3F:70:15:B2:1C:A0 Authority key identifier: D7:C7:61:22:42:64:91:B8:1F:84:E5:A8:24:E4:AB:EB:85:82:BA:C4 Certificate issuer: /CN=D7C76122426491B81F84E5A824E4ABEB8582BAC4 Certificate serial: 583DE186F75C27BBB35F8156A6EBF57F33E634D8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C76122426491B81F84E5A824E4ABEB8582BAC4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft Manifest number: 01D9 Signing time: Thu 24 Apr 2025 20:20:42 +0000 Manifest this update: Thu 24 Apr 2025 20:15:42 +0000 Manifest next update: Mon 28 Apr 2025 02:57:42 +0000 Files and hashes: 1: D7C76122426491B81F84E5A824E4ABEB8582BAC4.crl (hash: C6epneeYIe48Sq5vpj31X3A6XXoEOn8ijF+32ZzKLn8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.crl rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C76122426491B81F84E5A824E4ABEB8582BAC4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:3d:e1:86:f7:5c:27:bb:b3:5f:81:56:a6:eb:f5:7f:33:e6:34:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7C76122426491B81F84E5A824E4ABEB8582BAC4 Validity Not Before: Apr 24 20:15:42 2025 GMT Not After : Apr 28 02:57:42 2025 GMT Subject: CN=2EEAB2692989DDD58DAACB1BDA653F7015B21CA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a3:b9:cd:b1:1c:71:a2:7d:ae:62:07:28:1b: 3e:0f:8a:04:b9:34:05:6d:d7:87:c1:11:64:ef:51: f6:5c:49:ee:b8:0f:ae:98:32:51:41:bc:1a:16:e9: cf:43:9e:aa:7c:48:42:14:e0:80:d7:ae:cb:a1:3f: cc:1b:95:d3:7b:9b:66:09:f9:a1:fa:56:e3:44:e8: e1:c7:8d:86:c3:18:4a:b2:5f:2e:85:4a:08:94:c4: 42:e3:a0:08:a0:c8:aa:e9:20:bc:40:25:05:c8:5d: bd:49:e7:20:b2:bb:ac:d8:c8:99:85:4a:c8:c5:7a: 5b:d6:67:79:ee:fd:06:72:41:71:0d:d5:ee:35:5d: b5:cc:47:8e:e3:56:a7:98:ac:5d:ce:cc:35:b0:56: c1:78:45:6a:34:82:9a:f3:e7:66:03:54:25:30:ba: d3:c9:29:6d:27:a7:97:21:4f:9d:3f:b9:61:56:8e: fe:55:51:75:f4:ce:aa:5e:31:0a:ee:c5:66:58:10: b4:1c:fd:98:70:e0:f8:cc:b7:b0:d7:c7:19:75:99: da:c6:23:d2:62:52:2b:50:8e:79:65:16:05:d1:ca: 29:ee:fc:b1:c1:28:5e:63:e2:42:dc:c5:4e:8d:a9: 7c:26:a8:58:9d:81:60:e3:f3:90:92:cf:a4:ff:44: 1a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:EA:B2:69:29:89:DD:D5:8D:AA:CB:1B:DA:65:3F:70:15:B2:1C:A0 X509v3 Authority Key Identifier: keyid:D7:C7:61:22:42:64:91:B8:1F:84:E5:A8:24:E4:AB:EB:85:82:BA:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C76122426491B81F84E5A824E4ABEB8582BAC4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:98:df:ac:92:43:91:e1:ec:c0:92:33:cf:b1:64:19:05:29: 7c:09:3f:45:93:c9:37:7d:8c:9f:6b:ff:a6:f2:c2:25:9a:0e: 59:bb:b3:15:f3:0b:90:b3:94:28:7f:60:bf:99:81:47:97:08: ef:2f:6b:e2:1a:1a:d9:12:68:d5:93:6c:5a:bf:06:7d:fd:dc: 49:b2:a1:59:f8:3f:fd:c5:8a:e0:00:39:d4:24:de:45:4d:af: 35:eb:17:c6:a1:57:34:a5:33:11:30:a7:b2:45:d3:bd:f2:d0: 75:af:80:47:79:25:5a:29:fc:22:c7:3f:e3:03:9e:33:d1:30: 84:e6:20:2e:f5:6c:ed:77:86:46:f9:23:ae:14:7e:d9:8f:12: 30:b6:d7:bb:f4:e5:85:08:74:77:0d:89:2f:d3:01:21:8c:b8: 3d:9a:2a:c9:34:ee:50:47:43:4e:3b:0d:d8:4f:08:db:5f:04: aa:7f:a6:1d:2e:5b:cf:0f:56:6f:fc:9f:ab:6c:6e:8c:08:60: 0e:9d:d7:f3:7f:1e:67:10:d5:61:70:c9:f8:7d:60:52:48:c7: bf:00:ee:bf:d4:8c:a3:d9:a2:f4:6d:53:73:32:c2:9b:0a:cf: 99:50:38:8a:fe:fc:d4:a6:e2:84:eb:c9:74:41:13:c2:51:5d: 38:11:b4:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWD3hhvdcJ7uzX4FWpuv1fzPmNNgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdDNzYxMjI0MjY0OTFCODFGODRFNUE4MjRFNEFCRUI4 NTgyQkFDNDAeFw0yNTA0MjQyMDE1NDJaFw0yNTA0MjgwMjU3NDJaMDMxMTAvBgNV BAMTKDJFRUFCMjY5Mjk4OURERDU4REFBQ0IxQkRBNjUzRjcwMTVCMjFDQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbo7nNsRxxon2uYgcoGz4PigS5 NAVt14fBEWTvUfZcSe64D66YMlFBvBoW6c9Dnqp8SEIU4IDXrsuhP8wbldN7m2YJ +aH6VuNE6OHHjYbDGEqyXy6FSgiUxELjoAigyKrpILxAJQXIXb1J5yCyu6zYyJmF SsjFelvWZ3nu/QZyQXEN1e41XbXMR47jVqeYrF3OzDWwVsF4RWo0gprz52YDVCUw utPJKW0np5chT50/uWFWjv5VUXX0zqpeMQruxWZYELQc/Zhw4PjMt7DXxxl1mdrG I9JiUitQjnllFgXRyinu/LHBKF5j4kLcxU6NqXwmqFidgWDj85CSz6T/RBqhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULuqyaSmJ3dWNqssb2mU/cBWyHKAwHwYDVR0j BBgwFoAU18dhIkJkkbgfhOWoJOSr64WCusQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDUwZGNjMy04NGRkLTQ1OTUtYmEyYy1iYzY5OTg5NjkyZjEvMC9EN0M3NjEyMjQy NjQ5MUI4MUY4NEU1QTgyNEU0QUJFQjg1ODJCQUM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDdDNzYxMjI0MjY0OTFCODFGODRFNUE4MjRFNEFCRUI4NTgy QkFDNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjA1MGRjYzMtODRkZC00NTk1LWJh MmMtYmM2OTk4OTY5MmYxLzAvRDdDNzYxMjI0MjY0OTFCODFGODRFNUE4MjRFNEFC RUI4NTgyQkFDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIyY36ySQ5Hh7MCSM8+xZBkFKXwJP0WTyTd9 jJ9r/6bywiWaDlm7sxXzC5CzlCh/YL+ZgUeXCO8va+IaGtkSaNWTbFq/Bn393Emy oVn4P/3FiuAAOdQk3kVNrzXrF8ahVzSlMxEwp7JF073y0HWvgEd5JVop/CLHP+MD njPRMITmIC71bO13hkb5I64UftmPEjC217v05YUIdHcNiS/TASGMuD2aKsk07lBH Q047DdhPCNtfBKp/ph0uW88PVm/8n6tsbowIYA6d1/N/HmcQ1WFwyfh9YFJIx78A 7r/UjKPZovRtU3MywpsKz5lQOIr+/NSm4oTryXRBE8JRXTgRtLo= -----END CERTIFICATE-----Generated at Fri Apr 25 00:06:28 2025 by rpki-client on console.sobornost.net