$ rpki-client -vvf repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.mft File: C00606846C7D0E540F5703EC90A0C331460D7ECA.mft (raw, json) Hash identifier: AwRgseHxmHnu6C+aULY8Bewuv0cbBBDdiAfSRW+PVy0= Subject key identifier: 25:8D:6A:F1:2A:42:3E:06:1D:E7:A5:89:7C:AF:14:54:3E:F0:F2:A9 Authority key identifier: C0:06:06:84:6C:7D:0E:54:0F:57:03:EC:90:A0:C3:31:46:0D:7E:CA Certificate issuer: /CN=C00606846C7D0E540F5703EC90A0C331460D7ECA Certificate serial: 3C48BABE0EB3700CD4DB329895B92EC923DB6E06 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00606846C7D0E540F5703EC90A0C331460D7ECA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.mft Manifest number: 83 Signing time: Thu 24 Apr 2025 00:03:09 +0000 Manifest this update: Wed 23 Apr 2025 23:58:09 +0000 Manifest next update: Sun 27 Apr 2025 03:16:09 +0000 Files and hashes: 1: C00606846C7D0E540F5703EC90A0C331460D7ECA.crl (hash: zJOREk3SsfwQesaL2aa8HrThSkGJF6pbSC2iKHdHWtU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.crl rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00606846C7D0E540F5703EC90A0C331460D7ECA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 03:16:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:48:ba:be:0e:b3:70:0c:d4:db:32:98:95:b9:2e:c9:23:db:6e:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C00606846C7D0E540F5703EC90A0C331460D7ECA Validity Not Before: Apr 23 23:58:09 2025 GMT Not After : Apr 27 03:16:09 2025 GMT Subject: CN=258D6AF12A423E061DE7A5897CAF14543EF0F2A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8b:1c:3f:ea:bc:77:58:ab:7b:3a:95:1d:a6: f3:80:28:61:b3:88:0a:a7:82:81:3f:ef:09:75:95: 13:7e:6d:ba:9d:99:2c:5f:7d:91:8c:60:64:ff:b8: ca:bf:b0:2b:b6:5c:bb:b1:b1:6a:30:7d:65:23:de: 9b:b3:68:f1:f1:8c:d7:9f:ea:8a:00:1f:a6:5b:21: 8d:c9:09:51:46:de:9b:4b:06:9e:e1:3d:a3:ad:8d: 20:35:04:27:11:27:d6:09:ec:4d:ab:f7:7d:95:7f: 98:3c:61:3f:20:8f:fa:08:f4:20:c1:56:c5:a3:41: 19:c0:f8:52:af:4d:fa:5d:8c:65:7c:4f:2d:27:68: 7f:f3:f7:bf:43:4e:34:b3:76:06:e4:84:ec:97:02: 2a:6d:84:89:8c:9d:6a:4a:8d:24:67:a6:97:65:f0: 7e:b6:36:84:78:bc:a7:07:ff:eb:a7:cc:05:86:28: d3:17:17:bc:3c:07:49:97:0d:0c:d2:53:b9:9f:d4: 40:1a:77:d6:63:a9:4c:04:bf:57:8d:dc:4a:e0:d2: d5:d5:60:be:94:e6:84:87:cc:6a:7c:0b:22:77:8a: c2:35:fa:1f:7e:fb:5a:16:60:47:66:b4:cb:ce:e0: 27:72:b9:7c:6a:2d:b3:94:50:30:a8:8b:06:43:bb: a4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:8D:6A:F1:2A:42:3E:06:1D:E7:A5:89:7C:AF:14:54:3E:F0:F2:A9 X509v3 Authority Key Identifier: keyid:C0:06:06:84:6C:7D:0E:54:0F:57:03:EC:90:A0:C3:31:46:0D:7E:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00606846C7D0E540F5703EC90A0C331460D7ECA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:8e:0b:f1:00:24:c1:46:28:63:84:46:6e:4b:c1:a1:4d:8b: f9:84:43:fa:43:37:9c:50:50:ad:ec:a7:a3:0a:37:13:1c:84: f3:0b:92:c5:6b:27:23:f7:fe:e2:41:98:ec:1c:12:05:ed:cc: 06:6d:cf:3f:f5:05:3d:59:38:44:ba:f2:f5:65:82:83:21:96: 82:d8:1a:a9:55:e4:52:12:8f:0c:23:0d:fc:49:26:11:ac:6a: 67:21:72:e2:72:74:15:84:67:09:55:02:f2:44:57:f6:24:b5: 71:ca:07:c8:02:04:2d:9c:b4:22:a5:64:68:2d:17:cb:f1:df: 63:75:d4:b0:74:b0:30:80:70:95:ea:71:64:a9:f1:f3:dc:66: 07:71:08:8a:2e:e6:91:2c:c7:07:9f:e0:a2:92:15:22:2c:a1: 77:fb:d6:10:80:36:5e:9e:e0:83:39:3b:0b:e3:72:6d:59:6a: cb:58:32:af:f4:ff:ea:1d:bd:42:f5:83:26:17:f0:a2:45:84: 64:95:f0:d0:cd:29:6a:f4:2d:b4:01:fa:12:c7:fa:87:2f:cc: 29:15:41:82:7c:52:37:e0:86:bd:01:dd:ce:92:cf:40:67:e3: 5f:b6:b6:7a:06:32:da:6c:a5:35:b8:07:b4:3f:ed:d3:51:74: 56:eb:14:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPEi6vg6zcAzU2zKYlbkuySPbbgYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzAwNjA2ODQ2QzdEMEU1NDBGNTcwM0VDOTBBMEMzMzE0 NjBEN0VDQTAeFw0yNTA0MjMyMzU4MDlaFw0yNTA0MjcwMzE2MDlaMDMxMTAvBgNV BAMTKDI1OEQ2QUYxMkE0MjNFMDYxREU3QTU4OTdDQUYxNDU0M0VGMEYyQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPixw/6rx3WKt7OpUdpvOAKGGz iAqngoE/7wl1lRN+bbqdmSxffZGMYGT/uMq/sCu2XLuxsWowfWUj3puzaPHxjNef 6ooAH6ZbIY3JCVFG3ptLBp7hPaOtjSA1BCcRJ9YJ7E2r932Vf5g8YT8gj/oI9CDB VsWjQRnA+FKvTfpdjGV8Ty0naH/z979DTjSzdgbkhOyXAipthImMnWpKjSRnppdl 8H62NoR4vKcH/+unzAWGKNMXF7w8B0mXDQzSU7mf1EAad9ZjqUwEv1eN3Erg0tXV YL6U5oSHzGp8CyJ3isI1+h9++1oWYEdmtMvO4CdyuXxqLbOUUDCoiwZDu6R3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJY1q8SpCPgYd56WJfK8UVD7w8qkwHwYDVR0j BBgwFoAUwAYGhGx9DlQPVwPskKDDMUYNfsowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MTMzNGQwMy1lYWU0LTRkMjAtYmE1NC1iMTg4OWQ5MjQ3YWMvMC9DMDA2MDY4NDZD N0QwRTU0MEY1NzAzRUM5MEEwQzMzMTQ2MEQ3RUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzAwNjA2ODQ2QzdEMEU1NDBGNTcwM0VDOTBBMEMzMzE0NjBE N0VDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjEzMzRkMDMtZWFlNC00ZDIwLWJh NTQtYjE4ODlkOTI0N2FjLzAvQzAwNjA2ODQ2QzdEMEU1NDBGNTcwM0VDOTBBMEMz MzE0NjBEN0VDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE+OC/EAJMFGKGOERm5LwaFNi/mEQ/pDN5xQ UK3sp6MKNxMchPMLksVrJyP3/uJBmOwcEgXtzAZtzz/1BT1ZOES68vVlgoMhloLY GqlV5FISjwwjDfxJJhGsamchcuJydBWEZwlVAvJEV/YktXHKB8gCBC2ctCKlZGgt F8vx32N11LB0sDCAcJXqcWSp8fPcZgdxCIou5pEsxwef4KKSFSIsoXf71hCANl6e 4IM5Owvjcm1ZastYMq/0/+odvUL1gyYX8KJFhGSV8NDNKWr0LbQB+hLH+ocvzCkV QYJ8Ujfghr0B3c6Sz0Bn41+2tnoGMtpspTW4B7Q/7dNRdFbrFOI= -----END CERTIFICATE-----Generated at Thu Apr 24 04:31:37 2025 by rpki-client on console.sobornost.net