$ rpki-client -vvf repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft File: 357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft (raw, json) Hash identifier: hqqeCLJsMGmIgnigSzV3AXAKsJIohl+OISyaOfhfUrA= Subject key identifier: 48:EF:7D:6A:3F:EF:AE:71:5F:FE:56:98:7C:D4:30:67:6C:D6:86:8B Authority key identifier: 35:7B:7A:D7:5E:6E:33:8A:26:C2:FC:9C:E4:B3:A7:A2:74:FB:76:05 Certificate issuer: /CN=357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605 Certificate serial: 23A7063654BBAE1CE85A4356B22DE9F41BB25B75 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft Manifest number: 0481 Signing time: Wed 23 Apr 2025 18:31:06 +0000 Manifest this update: Wed 23 Apr 2025 18:26:06 +0000 Manifest next update: Sat 26 Apr 2025 21:07:06 +0000 Files and hashes: 1: 357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.crl (hash: eiIaxLz5r49FCqrTUApJOUhlEPMhMes7t3LNVJPhKBk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.crl rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 21:07:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:a7:06:36:54:bb:ae:1c:e8:5a:43:56:b2:2d:e9:f4:1b:b2:5b:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605 Validity Not Before: Apr 23 18:26:06 2025 GMT Not After : Apr 26 21:07:06 2025 GMT Subject: CN=48EF7D6A3FEFAE715FFE56987CD430676CD6868B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:58:18:4e:74:39:11:28:5a:a7:ef:9c:4c:54: 38:e2:05:b8:9f:7f:1a:f2:81:87:ce:be:b0:ee:e7: 66:f0:56:94:25:96:78:fe:bb:82:34:2b:a6:19:b4: 5c:cb:38:54:ac:22:4e:73:db:83:9d:2b:90:fd:0c: 56:f4:0d:3a:14:39:ef:7e:81:8d:2b:db:d6:80:20: 7c:92:b1:37:e5:74:a5:f6:5f:51:20:b3:41:2f:8e: 60:92:42:27:77:bb:ed:15:01:02:11:41:60:ce:72: db:d2:09:63:dc:76:c2:04:b0:25:b7:c5:1f:cd:3c: 5e:e4:8f:9f:73:c0:29:44:c6:66:48:92:12:9d:dc: 29:71:d4:0c:9c:95:01:89:e0:72:8a:3a:b2:91:de: 04:97:b1:20:a5:97:82:66:9a:c9:63:04:ad:af:3e: ec:52:79:40:79:15:71:f6:67:ab:a1:a5:49:64:19: dc:57:f6:b0:3f:cf:87:f0:ab:02:ad:02:a1:d0:5b: d5:d8:44:9a:66:dc:e2:1d:de:ee:66:29:1d:09:be: 11:bc:19:60:18:19:1d:27:cf:a9:a9:04:95:64:29: 6e:1e:23:3b:5d:93:2a:57:31:69:54:72:c4:da:e0: bf:6a:8c:4a:9c:3f:36:86:8b:8e:49:31:97:c1:f5: 1b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:EF:7D:6A:3F:EF:AE:71:5F:FE:56:98:7C:D4:30:67:6C:D6:86:8B X509v3 Authority Key Identifier: keyid:35:7B:7A:D7:5E:6E:33:8A:26:C2:FC:9C:E4:B3:A7:A2:74:FB:76:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:00:41:53:72:73:f7:7d:ef:9d:4a:22:04:b1:46:14:96:50: bd:d9:f7:34:c8:72:f7:73:88:f3:d8:c9:d1:5d:2e:7b:a8:d9: 05:bf:6d:d7:1a:bd:08:31:83:6e:09:14:8a:ad:dd:ac:94:1d: e8:96:a1:13:f3:0d:e6:09:21:7b:a0:6d:9a:a2:ef:b9:09:93: a9:5c:fe:fc:1c:37:a3:4e:5c:1b:ee:36:80:6c:df:e3:a5:0d: cd:5e:3a:f8:dc:1d:e8:6f:63:e0:6d:62:2d:9c:47:1c:0f:bb: 1c:07:b6:3a:bf:94:15:3a:00:af:86:7b:00:bf:87:83:b3:99: f1:da:5c:0b:06:c1:6a:df:eb:4a:a1:bf:49:f9:d0:a0:90:09: 2d:4a:fe:85:cb:a2:0e:9b:0f:9c:03:15:f0:b3:99:52:6b:77: c1:cb:e4:4b:12:ed:bb:bd:97:2b:2f:a8:06:15:45:71:ed:7b: 58:a9:a3:f5:2a:3d:be:1c:58:bd:3f:70:62:df:91:37:16:2c: fc:3b:09:fc:57:27:42:45:48:77:3f:6e:9e:34:10:00:5e:fe: a8:e3:b5:79:bb:a5:33:2b:fc:8b:c9:40:cd:5d:a5:16:8b:9a: 67:e6:b0:a6:68:67:5b:7a:8f:8f:67:48:d2:1a:ff:0b:fb:52: a3:11:ae:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI6cGNlS7rhzoWkNWsi3p9BuyW3UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU3QjdBRDc1RTZFMzM4QTI2QzJGQzlDRTRCM0E3QTI3 NEZCNzYwNTAeFw0yNTA0MjMxODI2MDZaFw0yNTA0MjYyMTA3MDZaMDMxMTAvBgNV BAMTKDQ4RUY3RDZBM0ZFRkFFNzE1RkZFNTY5ODdDRDQzMDY3NkNENjg2OEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCWBhOdDkRKFqn75xMVDjiBbif fxrygYfOvrDu52bwVpQllnj+u4I0K6YZtFzLOFSsIk5z24OdK5D9DFb0DToUOe9+ gY0r29aAIHySsTfldKX2X1Egs0EvjmCSQid3u+0VAQIRQWDOctvSCWPcdsIEsCW3 xR/NPF7kj59zwClExmZIkhKd3Clx1AyclQGJ4HKKOrKR3gSXsSCll4JmmsljBK2v PuxSeUB5FXH2Z6uhpUlkGdxX9rA/z4fwqwKtAqHQW9XYRJpm3OId3u5mKR0JvhG8 GWAYGR0nz6mpBJVkKW4eIztdkypXMWlUcsTa4L9qjEqcPzaGi45JMZfB9Rv/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSO99aj/vrnFf/laYfNQwZ2zWhoswHwYDVR0j BBgwFoAUNXt6115uM4omwvyc5LOnonT7dgUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OTU1ZjVhNi1mMzc4LTQyNTItODA0Yi1iMGI5Mzg2NTRmYmYvMC8zNTdCN0FENzVF NkUzMzhBMjZDMkZDOUNFNEIzQTdBMjc0RkI3NjA1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU3QjdBRDc1RTZFMzM4QTI2QzJGQzlDRTRCM0E3QTI3NEZC NzYwNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjk1NWY1YTYtZjM3OC00MjUyLTgw NGItYjBiOTM4NjU0ZmJmLzAvMzU3QjdBRDc1RTZFMzM4QTI2QzJGQzlDRTRCM0E3 QTI3NEZCNzYwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJAAQVNyc/d9751KIgSxRhSWUL3Z9zTIcvdz iPPYydFdLnuo2QW/bdcavQgxg24JFIqt3ayUHeiWoRPzDeYJIXugbZqi77kJk6lc /vwcN6NOXBvuNoBs3+OlDc1eOvjcHehvY+BtYi2cRxwPuxwHtjq/lBU6AK+GewC/ h4OzmfHaXAsGwWrf60qhv0n50KCQCS1K/oXLog6bD5wDFfCzmVJrd8HL5EsS7bu9 lysvqAYVRXHte1ipo/UqPb4cWL0/cGLfkTcWLPw7CfxXJ0JFSHc/bp40EABe/qjj tXm7pTMr/IvJQM1dpRaLmmfmsKZoZ1t6j49nSNIa/wv7UqMRrgs= -----END CERTIFICATE-----Generated at Wed Apr 23 22:12:04 2025 by rpki-client on console.sobornost.net