$ rpki-client -vvf repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.mft File: 338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.mft (raw, json) Hash identifier: WmL3QLxS5lY8hbr26IJ7cbcmydLpsw8iVU9kuiOzQZA= Subject key identifier: 58:35:F6:02:8C:F4:3C:54:7A:27:CD:4D:48:76:14:87:D7:78:12:7D Authority key identifier: 33:8D:EB:8D:70:51:C6:3F:C6:CC:D7:B1:A5:DD:8C:9E:3C:93:B9:6B Certificate issuer: /CN=338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B Certificate serial: 6C4CB5C501116BB2F61FCF275477A20BC3EB54B0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.mft Manifest number: 0496 Signing time: Thu 24 Apr 2025 03:54:06 +0000 Manifest this update: Thu 24 Apr 2025 03:49:06 +0000 Manifest next update: Sun 27 Apr 2025 08:50:06 +0000 Files and hashes: 1: 338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.crl (hash: Rgtxof+kHtAFa2aKPOh8MTXPT2cZfCbSHdDknouR7y8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.crl rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 08:44:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:4c:b5:c5:01:11:6b:b2:f6:1f:cf:27:54:77:a2:0b:c3:eb:54:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B Validity Not Before: Apr 24 03:49:06 2025 GMT Not After : Apr 27 08:50:06 2025 GMT Subject: CN=5835F6028CF43C547A27CD4D48761487D778127D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:86:7c:e3:04:fa:78:5d:d6:1e:a1:63:33:70: 9b:b4:b7:27:3a:8a:57:29:f9:c6:bf:56:e6:5f:f6: cc:a9:83:a4:1c:41:ee:5e:fd:d0:61:30:c2:56:b4: 00:09:c0:05:12:a5:71:70:ab:35:5e:b7:21:32:01: 5e:bf:89:76:48:ac:09:d5:ea:23:6b:66:86:86:55: dd:11:fc:97:f1:ad:b8:17:6b:e6:8b:dc:5b:3a:c7: 09:6d:16:1c:0a:25:4a:6e:8a:5b:24:28:79:f5:c9: fb:26:ee:db:24:42:e8:48:70:16:86:c7:a4:33:a7: b0:ab:61:16:f3:d8:04:0a:d8:31:01:67:5d:05:d4: 16:12:ac:6a:98:e5:1a:1b:cc:36:1c:61:02:0b:2c: c8:93:50:e4:bf:08:30:b3:91:e4:b0:1a:c4:b2:63: 1b:fe:fa:e0:16:6b:75:d1:0c:a7:9e:17:be:82:44: 0f:0b:b5:5b:70:b0:fc:6b:60:af:58:f5:fa:64:72: 86:68:c2:d0:f6:f6:c9:62:4f:72:7a:df:2b:4b:ce: 3e:b0:7f:e6:2b:d8:aa:87:b6:2c:12:a8:92:a0:17: e8:8e:7b:35:d4:dc:57:24:cf:05:45:e7:50:49:af: 74:97:66:ec:d5:f6:d5:96:ff:99:0b:a6:fd:9d:de: ab:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:35:F6:02:8C:F4:3C:54:7A:27:CD:4D:48:76:14:87:D7:78:12:7D X509v3 Authority Key Identifier: keyid:33:8D:EB:8D:70:51:C6:3F:C6:CC:D7:B1:A5:DD:8C:9E:3C:93:B9:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:fd:bb:92:84:12:91:d7:b4:cc:9f:00:e6:dc:0f:bc:93:f4: af:8d:52:25:bc:99:d9:60:97:8f:91:ca:cf:d8:7d:c0:15:26: ed:32:36:5b:2d:30:c7:46:62:d0:7c:ab:e1:01:c9:5a:d7:5d: af:d4:61:b9:e1:0f:2c:62:4d:c7:90:ea:0f:c0:c1:f9:c9:05: 3e:c6:9c:a9:a1:99:40:8f:1e:27:51:51:86:8c:a4:09:c2:cd: 78:d7:03:a7:61:62:c4:c1:9d:f6:f2:74:3f:8a:77:9a:1a:91: af:0b:fb:ea:dc:a2:8a:29:e0:e3:e0:05:7e:5b:0b:9e:ac:5f: 1e:44:f0:5d:dd:bf:ec:4a:1c:f9:cb:c8:fb:64:ab:25:04:ab: 14:0e:43:5d:31:15:40:61:a6:b9:5c:b1:b4:9e:8c:11:63:34: 99:29:e8:98:a8:97:8a:30:2f:83:f1:f5:03:6d:70:37:44:f5: f5:c1:e2:89:a2:c9:88:d4:7a:5f:2a:0d:5a:c7:5d:64:61:3d: 3f:2d:b9:ac:60:00:5e:56:2e:7a:3b:85:93:1b:72:93:00:46: 9b:34:b2:f9:26:0b:bc:1c:2c:e0:92:ed:19:85:92:da:17:e1: 10:9e:03:a0:2c:e9:e2:dc:1e:3b:55:b3:a9:64:53:d2:aa:f2: d5:20:ba:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbEy1xQERa7L2H88nVHeiC8PrVLAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzM4REVCOEQ3MDUxQzYzRkM2Q0NEN0IxQTVERDhDOUUz QzkzQjk2QjAeFw0yNTA0MjQwMzQ5MDZaFw0yNTA0MjcwODUwMDZaMDMxMTAvBgNV BAMTKDU4MzVGNjAyOENGNDNDNTQ3QTI3Q0Q0RDQ4NzYxNDg3RDc3ODEyN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5hnzjBPp4XdYeoWMzcJu0tyc6 ilcp+ca/VuZf9sypg6QcQe5e/dBhMMJWtAAJwAUSpXFwqzVetyEyAV6/iXZIrAnV 6iNrZoaGVd0R/JfxrbgXa+aL3Fs6xwltFhwKJUpuilskKHn1yfsm7tskQuhIcBaG x6Qzp7CrYRbz2AQK2DEBZ10F1BYSrGqY5RobzDYcYQILLMiTUOS/CDCzkeSwGsSy Yxv++uAWa3XRDKeeF76CRA8LtVtwsPxrYK9Y9fpkcoZowtD29sliT3J63ytLzj6w f+Yr2KqHtiwSqJKgF+iOezXU3FckzwVF51BJr3SXZuzV9tWW/5kLpv2d3qu3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWDX2Aoz0PFR6J81NSHYUh9d4En0wHwYDVR0j BBgwFoAUM43rjXBRxj/GzNexpd2MnjyTuWswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MjRhNjVmNC00ZjRiLTQ0YjYtYTJlYi01OTk1N2JjNmE0ZDMvMC8zMzhERUI4RDcw NTFDNjNGQzZDQ0Q3QjFBNUREOEM5RTNDOTNCOTZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzM4REVCOEQ3MDUxQzYzRkM2Q0NEN0IxQTVERDhDOUUzQzkz Qjk2Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzI0YTY1ZjQtNGY0Yi00NGI2LWEy ZWItNTk5NTdiYzZhNGQzLzAvMzM4REVCOEQ3MDUxQzYzRkM2Q0NEN0IxQTVERDhD OUUzQzkzQjk2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFT9u5KEEpHXtMyfAObcD7yT9K+NUiW8mdlg l4+Rys/YfcAVJu0yNlstMMdGYtB8q+EByVrXXa/UYbnhDyxiTceQ6g/AwfnJBT7G nKmhmUCPHidRUYaMpAnCzXjXA6dhYsTBnfbydD+Kd5oaka8L++rcooop4OPgBX5b C56sXx5E8F3dv+xKHPnLyPtkqyUEqxQOQ10xFUBhprlcsbSejBFjNJkp6Jiol4ow L4Px9QNtcDdE9fXB4omiyYjUel8qDVrHXWRhPT8tuaxgAF5WLno7hZMbcpMARps0 svkmC7wcLOCS7RmFktoX4RCeA6As6eLcHjtVs6lkU9Kq8tUguk0= -----END CERTIFICATE-----Generated at Thu Apr 24 06:49:49 2025 by rpki-client on console.sobornost.net