$ rpki-client -vvf repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft File: 245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft (raw, json) Hash identifier: RJ3csqtN0Rpxht4V1LBewhNdFksgVlgX/hyeN6pfLeU= Subject key identifier: 24:24:CB:17:07:86:EC:6C:B5:3C:A3:E7:38:A4:F4:31:65:AA:D9:9E Authority key identifier: 24:5A:17:CA:DB:2B:B2:FD:C5:78:6C:27:E5:BE:95:96:36:E7:F4:09 Certificate issuer: /CN=245A17CADB2BB2FDC5786C27E5BE959636E7F409 Certificate serial: 69A61428CA4EF539C28CAAA6DF9DA2C75CA18645 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/245A17CADB2BB2FDC5786C27E5BE959636E7F409.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft Manifest number: D3 Signing time: Wed 23 Apr 2025 14:01:19 +0000 Manifest this update: Wed 23 Apr 2025 13:56:19 +0000 Manifest next update: Sat 26 Apr 2025 19:02:19 +0000 Files and hashes: 1: 245A17CADB2BB2FDC5786C27E5BE959636E7F409.crl (hash: bWvVNRZRtw4+nEyHALojVFWG0lziRQf29ghszBEcx4s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.crl rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/245A17CADB2BB2FDC5786C27E5BE959636E7F409.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 12:29:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:a6:14:28:ca:4e:f5:39:c2:8c:aa:a6:df:9d:a2:c7:5c:a1:86:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=245A17CADB2BB2FDC5786C27E5BE959636E7F409 Validity Not Before: Apr 23 13:56:19 2025 GMT Not After : Apr 26 19:02:19 2025 GMT Subject: CN=2424CB170786EC6CB53CA3E738A4F43165AAD99E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:18:70:18:e7:c3:fe:c3:dd:fc:62:88:1d:1f: 5f:89:b2:b7:30:7e:fb:b3:74:da:0a:57:52:0d:fe: 19:51:89:ef:3b:1d:0a:4c:80:c2:14:9d:45:ad:cc: 97:a1:ad:82:14:b8:8d:70:6a:2e:08:4c:cb:fb:18: 11:6e:f5:8a:bc:89:33:91:00:cd:4a:90:8e:bd:81: 2f:8e:04:47:00:58:1c:3d:78:3a:1e:8b:4e:ce:41: e2:5c:b5:c0:7f:17:17:5c:00:ee:0f:3e:04:03:28: 8a:de:9f:18:e6:12:95:13:4e:be:eb:de:60:82:ab: df:22:d7:b7:42:10:86:23:1d:5a:b3:36:c0:dd:a8: 3b:3a:5f:74:89:57:6a:5b:b9:bd:6e:fb:79:41:fc: d8:0e:81:3f:ca:86:7a:ba:42:ce:94:aa:c6:9f:ff: 5d:b8:0e:35:39:50:a4:c9:34:9d:97:f4:16:7d:5e: 0f:91:f8:e8:6e:bd:79:38:53:85:5c:9e:c8:a8:9e: 10:cd:48:c5:34:ac:ac:a8:26:12:b2:d6:ca:3e:c1: ea:80:ad:85:57:1e:27:5e:1e:d9:fa:20:9e:3c:16: b5:19:d5:e2:47:25:c4:1d:37:42:a1:80:c1:e7:1c: 60:18:d5:04:c0:d5:fe:1a:cb:21:f1:4f:25:ac:7d: 96:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:24:CB:17:07:86:EC:6C:B5:3C:A3:E7:38:A4:F4:31:65:AA:D9:9E X509v3 Authority Key Identifier: keyid:24:5A:17:CA:DB:2B:B2:FD:C5:78:6C:27:E5:BE:95:96:36:E7:F4:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/245A17CADB2BB2FDC5786C27E5BE959636E7F409.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:d8:56:35:a8:8a:c0:d3:2c:1b:92:29:84:21:6c:be:2c:3b: 11:52:67:f8:83:76:e1:54:40:09:41:72:2c:87:2d:80:98:36: c9:6f:62:fb:8c:11:f1:5e:21:11:19:1c:cf:3a:c3:0b:3f:44: 58:f2:1f:3e:ae:f6:10:ce:5b:37:6a:5d:61:f6:84:f9:90:48: 8f:2d:af:3d:a7:87:dc:ee:d8:92:d5:fe:93:56:56:59:79:39: 6e:6d:68:d4:48:71:f2:f1:9d:7a:fd:f9:c5:93:d9:cf:d8:21: 88:5a:ac:c7:42:17:6d:cc:bb:e0:df:21:0d:77:22:fd:34:4a: ff:1d:00:b8:0f:bb:45:94:07:0b:47:1b:fd:53:87:78:a5:6e: 4d:43:ab:6c:a0:df:bb:f5:7e:c9:2f:e8:82:8c:7c:96:e1:6a: cd:10:51:86:29:2a:d0:79:a2:71:5d:a0:22:2e:18:b2:72:34: 79:0a:6b:57:b6:d6:20:1e:54:c1:bb:3b:6c:7d:91:cb:4b:21: 79:a4:a5:5c:60:0b:e9:4b:9e:18:ff:00:75:50:cb:10:e5:11: 06:d1:51:e7:16:42:89:35:74:c3:75:f1:4f:8f:ea:6d:8b:50: f9:d6:3d:20:c4:c7:72:f8:c3:c4:eb:2c:a9:14:1b:b8:51:1a: 44:f3:58:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaaYUKMpO9TnCjKqm352ix1yhhkUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQ1QTE3Q0FEQjJCQjJGREM1Nzg2QzI3RTVCRTk1OTYz NkU3RjQwOTAeFw0yNTA0MjMxMzU2MTlaFw0yNTA0MjYxOTAyMTlaMDMxMTAvBgNV BAMTKDI0MjRDQjE3MDc4NkVDNkNCNTNDQTNFNzM4QTRGNDMxNjVBQUQ5OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAGHAY58P+w938YogdH1+Jsrcw fvuzdNoKV1IN/hlRie87HQpMgMIUnUWtzJehrYIUuI1wai4ITMv7GBFu9Yq8iTOR AM1KkI69gS+OBEcAWBw9eDoei07OQeJctcB/FxdcAO4PPgQDKIrenxjmEpUTTr7r 3mCCq98i17dCEIYjHVqzNsDdqDs6X3SJV2pbub1u+3lB/NgOgT/Khnq6Qs6Uqsaf /124DjU5UKTJNJ2X9BZ9Xg+R+OhuvXk4U4VcnsionhDNSMU0rKyoJhKy1so+weqA rYVXHideHtn6IJ48FrUZ1eJHJcQdN0KhgMHnHGAY1QTA1f4ayyHxTyWsfZZTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJCTLFweG7Gy1PKPnOKT0MWWq2Z4wHwYDVR0j BBgwFoAUJFoXytsrsv3FeGwn5b6Vljbn9AkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZjEzYTZlZi0zNDM0LTQ0MDEtYjNlMS02NTE1MzA2NmZiM2UvMC8yNDVBMTdDQURC MkJCMkZEQzU3ODZDMjdFNUJFOTU5NjM2RTdGNDA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjQ1QTE3Q0FEQjJCQjJGREM1Nzg2QzI3RTVCRTk1OTYzNkU3 RjQwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmYxM2E2ZWYtMzQzNC00NDAxLWIz ZTEtNjUxNTMwNjZmYjNlLzAvMjQ1QTE3Q0FEQjJCQjJGREM1Nzg2QzI3RTVCRTk1 OTYzNkU3RjQwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADjYVjWoisDTLBuSKYQhbL4sOxFSZ/iDduFU QAlBciyHLYCYNslvYvuMEfFeIREZHM86wws/RFjyHz6u9hDOWzdqXWH2hPmQSI8t rz2nh9zu2JLV/pNWVll5OW5taNRIcfLxnXr9+cWT2c/YIYharMdCF23Mu+DfIQ13 Iv00Sv8dALgPu0WUBwtHG/1Th3ilbk1Dq2yg37v1fskv6IKMfJbhas0QUYYpKtB5 onFdoCIuGLJyNHkKa1e21iAeVMG7O2x9kctLIXmkpVxgC+lLnhj/AHVQyxDlEQbR UecWQok1dMN18U+P6m2LUPnWPSDEx3L4w8TrLKkUG7hRGkTzWDU= -----END CERTIFICATE-----Generated at Wed Apr 23 15:33:57 2025 by rpki-client on console.sobornost.net