$ rpki-client -vvf repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft File: 66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft (raw, json) Hash identifier: 2yszTA725yMB3UqJbkgFMZiIOVpyVPV93Qjz0IGNgyg= Subject key identifier: E9:04:2A:E0:25:3D:D4:F7:99:FE:ED:69:97:E3:4C:52:29:96:F9:29 Authority key identifier: 66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A Certificate issuer: /CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A Certificate serial: 6B0469B4129993549C7581B693CE7A0954C161E9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft Manifest number: 02BA Signing time: Thu 24 Apr 2025 13:41:52 +0000 Manifest this update: Thu 24 Apr 2025 13:36:52 +0000 Manifest next update: Sun 27 Apr 2025 14:36:52 +0000 Files and hashes: 1: 66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl (hash: rZmKn5phrxTwm+pX95x2d5rljLkqLkzUJH/c29jTNKM=) 2: AS23693.roa (hash: pL7oANWV3EHBMRJbesQAv/snWyA8Ed65nc6Fa6jqk58=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 14:36:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:04:69:b4:12:99:93:54:9c:75:81:b6:93:ce:7a:09:54:c1:61:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A Validity Not Before: Apr 24 13:36:52 2025 GMT Not After : Apr 27 14:36:52 2025 GMT Subject: CN=E9042AE0253DD4F799FEED6997E34C522996F929 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d1:1a:28:53:ce:95:92:75:77:98:43:01:c1: 14:41:fe:44:8d:d9:4e:77:62:2e:82:5e:e9:8e:11: b3:36:0a:4e:74:4e:c3:54:d4:76:5b:56:5f:c3:99: 63:58:f5:a5:7c:49:cf:c3:4c:e6:04:88:87:8b:41: e1:1f:d3:76:5a:d1:e6:91:30:7c:67:97:3d:12:b8: c8:4c:cc:01:a1:88:ed:8f:cd:44:60:17:6c:9a:d0: 63:e8:1d:41:a8:42:b9:92:9a:7f:d0:ec:d4:d1:d2: ac:61:56:3a:36:33:6b:26:77:bc:d0:f6:f3:c3:4b: d0:26:7f:f9:84:ba:da:0f:cc:b5:19:44:a5:ea:b5: 83:d5:b0:e6:49:66:c7:55:32:7d:20:7c:a1:c3:2c: 76:4e:2a:1a:0e:66:ed:3f:d8:d3:8b:c9:b3:03:48: 86:95:31:85:bc:b9:10:cd:c9:d5:0f:8c:6a:f3:e8: 9a:fd:3d:8b:13:f3:05:ca:ff:db:2d:45:29:9f:11: 4b:d7:fa:56:b4:e8:07:d0:1f:9d:5c:54:08:a2:91: 59:71:74:dc:8e:d5:d0:4e:3d:1c:b7:54:6e:4e:62: 29:8a:4c:94:b4:bc:65:d7:11:3f:8c:77:04:ad:b0: 7b:2f:d9:d2:97:63:de:f8:84:f4:18:15:98:5e:f6: c2:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:04:2A:E0:25:3D:D4:F7:99:FE:ED:69:97:E3:4C:52:29:96:F9:29 X509v3 Authority Key Identifier: keyid:66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:51:9e:69:87:e4:e5:77:97:15:6f:13:04:0b:5c:21:cd:8f: ba:8c:dc:60:48:12:1c:5e:e4:4f:16:41:eb:08:28:54:5f:30: 77:8a:3a:e3:99:ee:bb:fa:ba:a8:04:c8:19:0e:de:1b:9c:f3: df:9e:68:86:91:c3:aa:4c:75:df:36:00:e8:98:56:8c:9d:20: 43:df:c2:d0:bd:d4:7b:d0:2a:f5:71:a3:6e:c7:c5:70:56:a2: 31:0f:0f:55:02:c4:14:37:b9:39:b1:74:eb:3f:b1:df:27:20: b6:43:be:aa:d3:2f:e0:7e:6b:b9:f0:a8:e2:a1:60:b1:4e:93: ce:67:78:7f:4e:b7:b8:7e:8f:91:e8:7e:62:6b:51:c2:8b:67: 11:8c:a0:19:eb:a1:b5:bc:e0:2f:98:58:40:18:e3:91:ca:75: 74:54:e3:ef:ff:4a:1d:96:f7:2f:af:67:bd:40:8d:11:89:6c: 83:6c:f5:f6:db:d1:83:3d:e8:9f:01:4a:f5:97:55:ae:4d:8f: 10:02:72:de:b9:8a:11:c7:f3:9c:71:a4:2e:d4:59:ec:c0:6b: 66:c9:26:33:2f:d4:a4:83:e1:c5:5b:c6:1d:fd:f0:88:69:01: ef:9e:62:17:73:ea:81:86:ef:4c:19:06:11:53:ee:48:32:28: bb:c8:8c:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUawRptBKZk1ScdYG2k856CVTBYekwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjY0NDJCODU2M0I1QTU5MEVEODRGNzJBOEM3Qjk3QTE2 QjlDOUYzQTAeFw0yNTA0MjQxMzM2NTJaFw0yNTA0MjcxNDM2NTJaMDMxMTAvBgNV BAMTKEU5MDQyQUUwMjUzREQ0Rjc5OUZFRUQ2OTk3RTM0QzUyMjk5NkY5MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK0RooU86VknV3mEMBwRRB/kSN 2U53Yi6CXumOEbM2Ck50TsNU1HZbVl/DmWNY9aV8Sc/DTOYEiIeLQeEf03Za0eaR MHxnlz0SuMhMzAGhiO2PzURgF2ya0GPoHUGoQrmSmn/Q7NTR0qxhVjo2M2smd7zQ 9vPDS9Amf/mEutoPzLUZRKXqtYPVsOZJZsdVMn0gfKHDLHZOKhoOZu0/2NOLybMD SIaVMYW8uRDNydUPjGrz6Jr9PYsT8wXK/9stRSmfEUvX+la06AfQH51cVAiikVlx dNyO1dBOPRy3VG5OYimKTJS0vGXXET+MdwStsHsv2dKXY974hPQYFZhe9sIFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6QQq4CU91PeZ/u1pl+NMUimW+SkwHwYDVR0j BBgwFoAUZkQrhWO1pZDthPcqjHuXoWucnzowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MzI4ZjI0ZS1kYzdmLTQ1NjItYTUxZC1lMmUzOGMzNjc3ZDEvMC82NjQ0MkI4NTYz QjVBNTkwRUQ4NEY3MkE4QzdCOTdBMTZCOUM5RjNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjY0NDJCODU2M0I1QTU5MEVEODRGNzJBOEM3Qjk3QTE2QjlD OUYzQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzMyOGYyNGUtZGM3Zi00NTYyLWE1 MWQtZTJlMzhjMzY3N2QxLzAvNjY0NDJCODU2M0I1QTU5MEVEODRGNzJBOEM3Qjk3 QTE2QjlDOUYzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABlRnmmH5OV3lxVvEwQLXCHNj7qM3GBIEhxe 5E8WQesIKFRfMHeKOuOZ7rv6uqgEyBkO3huc89+eaIaRw6pMdd82AOiYVoydIEPf wtC91HvQKvVxo27HxXBWojEPD1UCxBQ3uTmxdOs/sd8nILZDvqrTL+B+a7nwqOKh YLFOk85neH9Ot7h+j5HofmJrUcKLZxGMoBnrobW84C+YWEAY45HKdXRU4+//Sh2W 9y+vZ71AjRGJbINs9fbb0YM96J8BSvWXVa5NjxACct65ihHH85xxpC7UWezAa2bJ JjMv1KSD4cVbxh398IhpAe+eYhdz6oGG70wZBhFT7kgyKLvIjL4= -----END CERTIFICATE-----Generated at Thu Apr 24 15:50:03 2025 by rpki-client on console.sobornost.net