$ rpki-client -vvf repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft File: DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft (raw, json) Hash identifier: JRt01EOGIjZKx0TBq9IQPO+bceKBbwVABmYETbA6FkA= Subject key identifier: 78:77:B7:DF:E4:F4:14:C4:FF:C4:D5:51:41:86:74:17:B6:79:29:23 Authority key identifier: DC:50:9E:82:57:EC:53:E1:69:5B:56:AB:C3:E4:69:E5:6E:0E:9D:19 Certificate issuer: /CN=DC509E8257EC53E1695B56ABC3E469E56E0E9D19 Certificate serial: 1ED1E0621082C0FE1DA25A2E2E73CD1B7CE2ED3F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft Manifest number: 017C Signing time: Wed 23 Apr 2025 23:30:40 +0000 Manifest this update: Wed 23 Apr 2025 23:25:40 +0000 Manifest next update: Sun 27 Apr 2025 04:05:40 +0000 Files and hashes: 1: DC509E8257EC53E1695B56ABC3E469E56E0E9D19.crl (hash: xyIHciOsaLV6KUzfVoAE3QhEIuJLt6E0PqOQSSXrXQ8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.crl rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 04:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:d1:e0:62:10:82:c0:fe:1d:a2:5a:2e:2e:73:cd:1b:7c:e2:ed:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC509E8257EC53E1695B56ABC3E469E56E0E9D19 Validity Not Before: Apr 23 23:25:40 2025 GMT Not After : Apr 27 04:05:40 2025 GMT Subject: CN=7877B7DFE4F414C4FFC4D55141867417B6792923 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e8:2f:2e:47:6c:fd:20:d7:bf:4e:86:cb:2b: 89:90:5d:b6:0f:4f:4b:39:1b:97:20:dd:4a:ae:57: c9:fa:47:65:7a:bf:ed:43:1b:ba:77:c2:8f:bc:97: 81:65:98:1b:29:4f:03:31:dc:6e:22:3b:af:9e:75: 09:73:91:3f:66:ce:05:37:37:dc:4d:ed:46:cf:73: 80:e8:22:6b:ce:f9:f5:f6:d8:76:6e:18:70:35:90: 8b:17:ca:78:ee:48:31:a1:c1:c0:53:95:6c:fb:21: df:37:8b:f7:ad:e5:f4:48:1e:82:df:31:c0:68:09: 09:35:ee:83:33:d5:8c:b4:72:b1:10:8c:c8:32:8f: af:72:ce:13:78:9d:bf:92:64:94:d6:22:80:ea:8a: bd:95:91:e5:f3:6f:22:05:a8:cd:9f:85:d6:df:eb: 54:14:1a:77:e1:58:9c:1e:ab:15:1f:da:c4:9f:a5: 05:79:d3:fa:8a:fb:b3:19:bd:84:d6:99:8e:bb:08: 5f:58:68:0f:5f:4c:5e:0b:6a:45:4e:4d:f2:d3:6f: 5e:3f:c5:32:07:f0:77:08:61:dc:e4:a7:03:2c:86: 2b:b4:67:45:e3:f9:82:f3:46:75:3f:d3:23:e6:36: 73:4a:f4:dd:02:13:45:eb:90:ed:d0:68:76:bb:0e: 6d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:77:B7:DF:E4:F4:14:C4:FF:C4:D5:51:41:86:74:17:B6:79:29:23 X509v3 Authority Key Identifier: keyid:DC:50:9E:82:57:EC:53:E1:69:5B:56:AB:C3:E4:69:E5:6E:0E:9D:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:c1:6e:01:6f:eb:f6:dc:2d:73:1b:fd:84:2e:21:c3:e2:c5: 58:f3:6c:8e:05:5e:34:71:8f:37:f4:ed:5b:da:13:b6:58:26: 12:a2:72:1f:3d:bc:98:97:ea:6a:10:dc:80:38:ea:5b:b0:4e: 2c:76:71:b5:76:ae:f4:b5:c9:81:1b:2c:11:0d:d0:27:76:b2: f5:02:8c:47:f4:b5:4a:e1:f8:91:36:de:6f:94:ff:80:66:3f: 30:a0:c2:b7:4f:bf:ca:b6:b6:74:85:41:4c:6b:f5:7c:9a:c2: 00:5a:de:f9:85:c8:1e:ea:4e:2e:95:29:0c:a0:1d:cd:ed:80: 23:11:b2:76:ed:30:e8:80:ef:3f:0e:fe:d8:2e:fd:9a:dd:ec: 6a:20:d1:49:91:c5:cc:e9:2b:f3:4c:06:f4:0a:f0:ab:60:02: e6:cf:3a:1f:57:61:2f:13:d5:63:f3:3d:90:de:8d:9c:ee:0b: ee:44:31:79:dc:3c:48:8f:51:9d:29:a2:90:13:e3:06:c2:1a: 9a:95:16:cf:e7:2f:54:b3:67:15:d1:e1:98:fd:01:5b:89:86: 7e:c9:cf:14:61:52:67:38:17:62:0f:30:82:3d:1d:8e:5c:46: b3:5d:8d:16:2f:75:8c:59:c3:e5:52:03:20:a3:e0:5d:aa:7b: f1:bf:0f:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHtHgYhCCwP4dolouLnPNG3zi7T8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREM1MDlFODI1N0VDNTNFMTY5NUI1NkFCQzNFNDY5RTU2 RTBFOUQxOTAeFw0yNTA0MjMyMzI1NDBaFw0yNTA0MjcwNDA1NDBaMDMxMTAvBgNV BAMTKDc4NzdCN0RGRTRGNDE0QzRGRkM0RDU1MTQxODY3NDE3QjY3OTI5MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe6C8uR2z9INe/TobLK4mQXbYP T0s5G5cg3UquV8n6R2V6v+1DG7p3wo+8l4FlmBspTwMx3G4iO6+edQlzkT9mzgU3 N9xN7UbPc4DoImvO+fX22HZuGHA1kIsXynjuSDGhwcBTlWz7Id83i/et5fRIHoLf McBoCQk17oMz1Yy0crEQjMgyj69yzhN4nb+SZJTWIoDqir2VkeXzbyIFqM2fhdbf 61QUGnfhWJweqxUf2sSfpQV50/qK+7MZvYTWmY67CF9YaA9fTF4LakVOTfLTb14/ xTIH8HcIYdzkpwMshiu0Z0Xj+YLzRnU/0yPmNnNK9N0CE0XrkO3QaHa7Dm09AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeHe33+T0FMT/xNVRQYZ0F7Z5KSMwHwYDVR0j BBgwFoAU3FCeglfsU+FpW1arw+Rp5W4OnRkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTkzMDJjZS0xN2U5LTQwMzktYjNmOS05OTVlNzg2NzFjMjQvMC9EQzUwOUU4MjU3 RUM1M0UxNjk1QjU2QUJDM0U0NjlFNTZFMEU5RDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREM1MDlFODI1N0VDNTNFMTY5NUI1NkFCQzNFNDY5RTU2RTBF OUQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE5MzAyY2UtMTdlOS00MDM5LWIz ZjktOTk1ZTc4NjcxYzI0LzAvREM1MDlFODI1N0VDNTNFMTY5NUI1NkFCQzNFNDY5 RTU2RTBFOUQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJTBbgFv6/bcLXMb/YQuIcPixVjzbI4FXjRx jzf07VvaE7ZYJhKich89vJiX6moQ3IA46luwTix2cbV2rvS1yYEbLBEN0Cd2svUC jEf0tUrh+JE23m+U/4BmPzCgwrdPv8q2tnSFQUxr9XyawgBa3vmFyB7qTi6VKQyg Hc3tgCMRsnbtMOiA7z8O/tgu/Zrd7Gog0UmRxczpK/NMBvQK8KtgAubPOh9XYS8T 1WPzPZDejZzuC+5EMXncPEiPUZ0popAT4wbCGpqVFs/nL1SzZxXR4Zj9AVuJhn7J zxRhUmc4F2IPMII9HY5cRrNdjRYvdYxZw+VSAyCj4F2qe/G/D84= -----END CERTIFICATE-----Generated at Thu Apr 24 04:31:37 2025 by rpki-client on console.sobornost.net