$ rpki-client -vvf repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.mft File: 248C652A73F35EA32B7EC526D977784EB15D2C7D.mft (raw, json) Hash identifier: 4CFIiBY89K03gVF+OupUYXO4nNGi+klgOSbPbsFQ6Gc= Subject key identifier: 22:3B:C1:12:2D:18:57:17:E3:AA:9A:3B:77:F3:67:13:6C:47:08:1E Authority key identifier: 24:8C:65:2A:73:F3:5E:A3:2B:7E:C5:26:D9:77:78:4E:B1:5D:2C:7D Certificate issuer: /CN=248C652A73F35EA32B7EC526D977784EB15D2C7D Certificate serial: 2D892DE31039D193C1580491EBA7C95D300F838C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/248C652A73F35EA32B7EC526D977784EB15D2C7D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.mft Manifest number: F3 Signing time: Thu 24 Apr 2025 18:21:59 +0000 Manifest this update: Thu 24 Apr 2025 18:16:59 +0000 Manifest next update: Sun 27 Apr 2025 21:02:59 +0000 Files and hashes: 1: 248C652A73F35EA32B7EC526D977784EB15D2C7D.crl (hash: 4V7fc24ja+UM4y+QTEPedrPMwftE3WryGhDMJX6TTj0=) 2: 3130332e39312e35352e302f32342d3234203d3e20313530323538.roa (hash: InZb4Svv3A2DHv8YSHBBCPvqo5sWpcXYdxwGVe0a300=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.crl rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/248C652A73F35EA32B7EC526D977784EB15D2C7D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:89:2d:e3:10:39:d1:93:c1:58:04:91:eb:a7:c9:5d:30:0f:83:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=248C652A73F35EA32B7EC526D977784EB15D2C7D Validity Not Before: Apr 24 18:16:59 2025 GMT Not After : Apr 27 21:02:59 2025 GMT Subject: CN=223BC1122D185717E3AA9A3B77F367136C47081E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f6:d9:01:29:87:67:bb:2f:60:71:c6:da:03: 0d:5c:07:05:94:86:b2:e4:0e:46:b5:07:1c:42:f4: 1b:13:48:89:76:11:64:cb:f2:8f:a8:bc:a3:15:df: e6:ab:a2:9b:c5:c6:3f:70:ad:c2:0b:8c:d3:88:30: 2f:8b:30:53:59:1e:ff:f0:8c:f7:ce:78:d2:ba:fa: 03:bb:3b:ef:50:a5:80:dd:92:96:42:bf:ea:ce:3f: 36:d5:52:3b:b8:b0:78:7a:01:d2:86:35:f8:c2:67: 5e:28:1b:aa:62:08:07:ba:19:4b:2b:d3:77:4e:ce: 9d:08:9f:ed:50:6d:e4:88:b1:ae:bd:d1:f3:14:ff: 9f:4a:00:b1:3a:92:a8:43:d9:a9:2d:97:04:a8:dc: bb:b9:42:80:1a:6c:bf:45:b6:79:d8:84:a7:7f:06: 6f:a7:c5:bc:f2:47:e0:2a:e9:98:62:41:50:3d:e7: f4:fd:72:87:2f:36:4e:8c:c2:67:2e:15:e6:de:62: c5:9c:70:ec:a0:88:51:7d:60:33:1f:3d:d4:ee:1a: 67:00:b7:47:01:8c:32:aa:36:e6:ce:fd:7a:ec:b8: 91:2a:70:cc:ed:2a:c8:00:7c:96:17:16:4c:ab:b4: 73:9f:85:c4:62:f5:9e:6c:b1:a7:fb:46:c3:73:f3: ce:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:3B:C1:12:2D:18:57:17:E3:AA:9A:3B:77:F3:67:13:6C:47:08:1E X509v3 Authority Key Identifier: keyid:24:8C:65:2A:73:F3:5E:A3:2B:7E:C5:26:D9:77:78:4E:B1:5D:2C:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/248C652A73F35EA32B7EC526D977784EB15D2C7D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:e2:4f:fd:30:af:de:5b:42:45:6a:3c:93:c0:4f:7c:40:20: dd:10:79:b5:26:8d:23:eb:5a:a7:58:39:20:32:fa:f5:b6:4b: e4:c6:4b:2c:36:53:15:50:89:f9:84:4d:a7:93:7d:2a:7f:8d: 7b:ba:a3:d7:22:62:be:b0:b2:4e:9c:c5:30:3b:f2:e3:48:41: 63:f9:18:f9:09:26:cd:ec:32:1d:b9:a8:93:3d:5d:18:e9:bd: 03:8e:45:51:40:aa:4b:e0:95:d8:e1:3a:45:0b:dd:56:cf:73: 5b:e6:c3:f2:cc:9f:5c:bb:78:3d:d7:5d:0a:ec:3c:f4:3a:b5: 46:ec:7a:e3:45:99:72:c6:8b:72:12:42:04:82:b9:b7:63:85: 0f:81:39:b8:36:7c:ca:35:09:31:f4:ec:a6:1f:de:ff:b2:91: 6a:58:08:10:f3:e0:2d:b5:d5:a4:4c:fc:82:7f:37:65:79:53: db:1c:06:59:16:0c:ea:e9:4c:14:d1:8f:6a:14:2a:c8:e1:5a: c0:c2:71:19:dd:f7:01:d9:8d:16:52:8f:db:73:3c:fe:ac:42: f2:66:c1:35:7a:b6:82:2b:ed:ad:03:f8:0f:69:ed:1b:40:51: ba:3e:73:85:a6:e4:8b:05:5c:65:80:a0:c6:15:42:59:69:9b: e5:f1:1d:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULYkt4xA50ZPBWASR66fJXTAPg4wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQ4QzY1MkE3M0YzNUVBMzJCN0VDNTI2RDk3Nzc4NEVC MTVEMkM3RDAeFw0yNTA0MjQxODE2NTlaFw0yNTA0MjcyMTAyNTlaMDMxMTAvBgNV BAMTKDIyM0JDMTEyMkQxODU3MTdFM0FBOUEzQjc3RjM2NzEzNkM0NzA4MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH9tkBKYdnuy9gccbaAw1cBwWU hrLkDka1BxxC9BsTSIl2EWTL8o+ovKMV3+aropvFxj9wrcILjNOIMC+LMFNZHv/w jPfOeNK6+gO7O+9QpYDdkpZCv+rOPzbVUju4sHh6AdKGNfjCZ14oG6piCAe6GUsr 03dOzp0In+1QbeSIsa690fMU/59KALE6kqhD2aktlwSo3Lu5QoAabL9FtnnYhKd/ Bm+nxbzyR+Aq6ZhiQVA95/T9cocvNk6MwmcuFebeYsWccOygiFF9YDMfPdTuGmcA t0cBjDKqNubO/XrsuJEqcMztKsgAfJYXFkyrtHOfhcRi9Z5ssaf7RsNz884NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIjvBEi0YVxfjqpo7d/NnE2xHCB4wHwYDVR0j BBgwFoAUJIxlKnPzXqMrfsUm2Xd4TrFdLH0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZmZiYWY3MS0yZDU3LTRlNGEtOTFkMC1jYWM4YWIwYWNlZmUvMC8yNDhDNjUyQTcz RjM1RUEzMkI3RUM1MjZEOTc3Nzg0RUIxNUQyQzdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjQ4QzY1MkE3M0YzNUVBMzJCN0VDNTI2RDk3Nzc4NEVCMTVE MkM3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmZmYmFmNzEtMmQ1Ny00ZTRhLTkx ZDAtY2FjOGFiMGFjZWZlLzAvMjQ4QzY1MkE3M0YzNUVBMzJCN0VDNTI2RDk3Nzc4 NEVCMTVEMkM3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGDiT/0wr95bQkVqPJPAT3xAIN0QebUmjSPr WqdYOSAy+vW2S+TGSyw2UxVQifmETaeTfSp/jXu6o9ciYr6wsk6cxTA78uNIQWP5 GPkJJs3sMh25qJM9XRjpvQOORVFAqkvgldjhOkUL3VbPc1vmw/LMn1y7eD3XXQrs PPQ6tUbseuNFmXLGi3ISQgSCubdjhQ+BObg2fMo1CTH07KYf3v+ykWpYCBDz4C21 1aRM/IJ/N2V5U9scBlkWDOrpTBTRj2oUKsjhWsDCcRnd9wHZjRZSj9tzPP6sQvJm wTV6toIr7a0D+A9p7RtAUbo+c4Wm5IsFXGWAoMYVQllpm+XxHeY= -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:10 2025 by rpki-client on console.sobornost.net