$ rpki-client -vvf repo-rpki.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/D00472C77B42BC0E23D929360AA568BBAE2AA668.mft File: D00472C77B42BC0E23D929360AA568BBAE2AA668.mft (raw, json) Hash identifier: 3oAQ+/PkFl5WdsMwF+016S3cpnS6gPDtlvVtk2o01ZI= Subject key identifier: 5C:DD:B0:E3:BC:34:AE:1E:78:36:8C:16:B9:67:78:E9:1B:62:C5:3C Authority key identifier: D0:04:72:C7:7B:42:BC:0E:23:D9:29:36:0A:A5:68:BB:AE:2A:A6:68 Certificate issuer: /CN=D00472C77B42BC0E23D929360AA568BBAE2AA668 Certificate serial: 4955AD2EB8A3135DC598DB5A5BC549F408708B8D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D00472C77B42BC0E23D929360AA568BBAE2AA668.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/D00472C77B42BC0E23D929360AA568BBAE2AA668.mft Manifest number: 01ED Signing time: Thu 24 Apr 2025 08:40:04 +0000 Manifest this update: Thu 24 Apr 2025 08:35:04 +0000 Manifest next update: Sun 27 Apr 2025 14:17:04 +0000 Files and hashes: 1: D00472C77B42BC0E23D929360AA568BBAE2AA668.crl (hash: cT6V+3TRcf+qWrfmP7mA1NQ8WUc2NblQUyLHmXgDJsg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/D00472C77B42BC0E23D929360AA568BBAE2AA668.crl rsync://repo-rpki.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/D00472C77B42BC0E23D929360AA568BBAE2AA668.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D00472C77B42BC0E23D929360AA568BBAE2AA668.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 10:42:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:55:ad:2e:b8:a3:13:5d:c5:98:db:5a:5b:c5:49:f4:08:70:8b:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D00472C77B42BC0E23D929360AA568BBAE2AA668 Validity Not Before: Apr 24 08:35:04 2025 GMT Not After : Apr 27 14:17:04 2025 GMT Subject: CN=5CDDB0E3BC34AE1E78368C16B96778E91B62C53C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:54:0a:2f:65:1b:00:65:e6:af:da:82:28:83: 92:ff:58:a1:12:da:b9:cc:44:02:ef:c9:2a:02:11: 59:84:f6:1d:5f:9e:06:45:32:e7:1a:07:99:bc:24: 9a:fe:83:f6:f7:8c:ad:15:0a:20:fd:b0:e6:f6:5f: 10:8d:ef:23:50:eb:35:0b:95:fd:f8:91:04:dc:bb: ed:be:10:3e:92:f8:72:4c:6b:c8:d7:29:ad:d1:33: 94:d9:fd:6a:88:50:36:cb:ac:c9:fe:3e:78:30:dd: 07:7d:c4:59:75:9d:29:1c:ce:69:c7:28:cb:7a:95: 71:8d:08:1d:50:f5:dd:90:21:53:2d:20:3e:fc:84: 78:d8:1b:43:eb:45:3b:a0:87:8c:f3:1c:0b:39:24: a8:51:19:b7:39:f5:d9:c3:7c:e3:98:61:20:00:59: c5:15:3f:b7:8b:e7:aa:ec:12:b7:98:f9:39:7d:ae: 52:33:c1:d5:99:a5:76:83:57:b9:97:4c:a1:e5:71: 62:cb:68:1a:3d:78:47:78:3d:87:16:36:2d:2b:50: de:8f:ff:c9:58:d3:db:22:aa:df:6c:c3:6a:e2:b7: 7d:b1:da:cc:50:52:23:96:f0:b5:a5:1a:4f:dd:ec: 1a:dd:7b:2a:e2:5a:da:62:d3:de:aa:6c:6b:81:4f: 3c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:DD:B0:E3:BC:34:AE:1E:78:36:8C:16:B9:67:78:E9:1B:62:C5:3C X509v3 Authority Key Identifier: keyid:D0:04:72:C7:7B:42:BC:0E:23:D9:29:36:0A:A5:68:BB:AE:2A:A6:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/D00472C77B42BC0E23D929360AA568BBAE2AA668.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D00472C77B42BC0E23D929360AA568BBAE2AA668.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/D00472C77B42BC0E23D929360AA568BBAE2AA668.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:78:0d:25:c1:b8:00:af:5d:fa:6f:09:07:05:f6:12:53:b7: 25:a0:a8:c6:c1:e2:f8:4a:7e:cc:06:d5:43:a2:4c:99:f5:74: 23:f2:b1:05:91:41:31:9f:5a:18:24:2f:02:a5:19:06:91:a8: 52:22:a6:c8:a4:bf:52:11:03:fa:6f:ff:b9:be:69:ad:ec:9c: 0a:69:0b:48:25:7b:d2:de:e7:ab:02:87:e4:49:be:83:2b:eb: 1f:8c:4c:62:7f:b1:bb:5f:a0:28:4a:78:e0:a9:d3:25:ff:b7: af:b6:d5:9a:be:f4:08:e5:c2:d4:4a:0b:9b:20:4f:f6:b5:bb: 94:f7:ab:a5:42:f8:80:dd:36:2d:0d:65:10:cc:ea:ea:f9:63: 49:90:43:55:4e:37:1f:d3:db:b0:9d:91:01:e0:27:8f:5a:b2: 0f:48:ed:ce:8f:49:df:bc:eb:24:1d:2f:ae:fb:84:67:cd:86: 98:c8:3c:90:6a:a6:0c:e5:45:1a:c7:33:7e:b9:96:d9:da:3d: 1f:af:c0:05:73:45:78:c2:ab:03:78:dc:1a:ed:b3:8d:5c:68: e0:42:84:33:b9:51:cf:f4:e0:80:c8:3d:68:2b:0d:2f:ea:7f: 3d:d9:a7:cf:16:67:5b:a4:6f:1f:d2:ab:93:e3:44:55:20:c8: be:0f:46:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSVWtLrijE13FmNtaW8VJ9Ahwi40wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDAwNDcyQzc3QjQyQkMwRTIzRDkyOTM2MEFBNTY4QkJB RTJBQTY2ODAeFw0yNTA0MjQwODM1MDRaFw0yNTA0MjcxNDE3MDRaMDMxMTAvBgNV BAMTKDVDRERCMEUzQkMzNEFFMUU3ODM2OEMxNkI5Njc3OEU5MUI2MkM1M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtVAovZRsAZeav2oIog5L/WKES 2rnMRALvySoCEVmE9h1fngZFMucaB5m8JJr+g/b3jK0VCiD9sOb2XxCN7yNQ6zUL lf34kQTcu+2+ED6S+HJMa8jXKa3RM5TZ/WqIUDbLrMn+Pngw3Qd9xFl1nSkczmnH KMt6lXGNCB1Q9d2QIVMtID78hHjYG0PrRTugh4zzHAs5JKhRGbc59dnDfOOYYSAA WcUVP7eL56rsEreY+Tl9rlIzwdWZpXaDV7mXTKHlcWLLaBo9eEd4PYcWNi0rUN6P /8lY09siqt9sw2rit32x2sxQUiOW8LWlGk/d7BrdeyriWtpi096qbGuBTzwXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXN2w47w0rh54NowWuWd46RtixTwwHwYDVR0j BBgwFoAU0ARyx3tCvA4j2Sk2CqVou64qpmgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzE3MzY5YS1iY2MxLTQyYmMtYjhiMi1mOTZkNTBkMzc0OWQvMC9EMDA0NzJDNzdC NDJCQzBFMjNEOTI5MzYwQUE1NjhCQkFFMkFBNjY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDAwNDcyQzc3QjQyQkMwRTIzRDkyOTM2MEFBNTY4QkJBRTJB QTY2OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmMxNzM2OWEtYmNjMS00MmJjLWI4 YjItZjk2ZDUwZDM3NDlkLzAvRDAwNDcyQzc3QjQyQkMwRTIzRDkyOTM2MEFBNTY4 QkJBRTJBQTY2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJZ4DSXBuACvXfpvCQcF9hJTtyWgqMbB4vhK fswG1UOiTJn1dCPysQWRQTGfWhgkLwKlGQaRqFIipsikv1IRA/pv/7m+aa3snApp C0gle9Le56sCh+RJvoMr6x+MTGJ/sbtfoChKeOCp0yX/t6+21Zq+9AjlwtRKC5sg T/a1u5T3q6VC+IDdNi0NZRDM6ur5Y0mQQ1VONx/T27CdkQHgJ49asg9I7c6PSd+8 6yQdL677hGfNhpjIPJBqpgzlRRrHM365ltnaPR+vwAVzRXjCqwN43Brts41caOBC hDO5Uc/04IDIPWgrDS/qfz3Zp88WZ1ukbx/Sq5PjRFUgyL4PRow= -----END CERTIFICATE-----Generated at Thu Apr 24 11:25:12 2025 by rpki-client on console.sobornost.net