$ rpki-client -vvf repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.mft File: FF102371565831DDB9C06DF47DF79B1120C9861E.mft (raw, json) Hash identifier: MT1aTaXRKJZwKusnDA5Q/ZUuRxRCWVD71sDnSrEdio0= Subject key identifier: 67:9C:DF:83:A0:A7:CC:61:E2:8B:55:C3:36:D7:72:D4:14:D2:22:24 Authority key identifier: FF:10:23:71:56:58:31:DD:B9:C0:6D:F4:7D:F7:9B:11:20:C9:86:1E Certificate issuer: /CN=FF102371565831DDB9C06DF47DF79B1120C9861E Certificate serial: 5ADCE3112D28A972DA0743B8E55F9A5C4464477D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF102371565831DDB9C06DF47DF79B1120C9861E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.mft Manifest number: 79 Signing time: Thu 24 Apr 2025 11:41:07 +0000 Manifest this update: Thu 24 Apr 2025 11:36:07 +0000 Manifest next update: Sun 27 Apr 2025 15:56:07 +0000 Files and hashes: 1: FF102371565831DDB9C06DF47DF79B1120C9861E.crl (hash: j/1GU2LocRWEXe3NseUc9XA94OCns4ksk0yW1doTgEs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.crl rsync://repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF102371565831DDB9C06DF47DF79B1120C9861E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 15:56:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:dc:e3:11:2d:28:a9:72:da:07:43:b8:e5:5f:9a:5c:44:64:47:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF102371565831DDB9C06DF47DF79B1120C9861E Validity Not Before: Apr 24 11:36:07 2025 GMT Not After : Apr 27 15:56:07 2025 GMT Subject: CN=679CDF83A0A7CC61E28B55C336D772D414D22224 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:90:c4:aa:93:f7:63:cb:a8:5e:dd:f0:c1:35: d3:55:98:fa:78:0e:e9:37:cb:be:0b:78:3b:58:32: 4f:7f:b4:cd:b6:5c:42:2a:a1:70:09:e3:4f:e7:71: 2a:a7:71:18:0e:08:95:90:13:47:9f:32:00:25:cd: 84:78:12:e0:31:3e:74:75:65:d0:8a:8e:51:c1:21: 25:69:70:60:92:13:38:99:39:8a:65:b1:9b:de:16: 71:6b:f6:f3:b0:97:8c:28:87:df:93:8b:3e:c7:e6: 5c:45:b0:97:98:bb:c6:ae:85:3f:78:46:61:e4:a9: c0:48:c3:d7:06:9e:47:53:a8:09:e1:c5:30:ed:4a: 08:13:6b:d9:be:32:0e:0c:07:60:4e:f1:6d:f6:44: 32:38:0f:98:4a:cd:d6:b5:3d:32:f0:5b:90:bd:d4: 72:00:19:29:19:b2:5a:ae:82:f0:b0:6d:95:c8:fa: df:c7:42:82:67:dc:60:b2:80:f3:99:5f:3d:cb:e0: cf:df:19:10:60:55:4c:27:45:38:c5:3a:6b:d0:4e: c3:8f:10:ad:ea:7b:1e:20:15:3a:43:2b:fd:1d:06: f4:47:f6:b7:34:e8:f5:7c:38:e3:60:bb:bc:4f:7b: 43:1e:3d:30:2c:32:2e:b1:4d:8a:ac:83:34:59:65: 02:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:9C:DF:83:A0:A7:CC:61:E2:8B:55:C3:36:D7:72:D4:14:D2:22:24 X509v3 Authority Key Identifier: keyid:FF:10:23:71:56:58:31:DD:B9:C0:6D:F4:7D:F7:9B:11:20:C9:86:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF102371565831DDB9C06DF47DF79B1120C9861E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:d8:d1:85:a6:2b:cc:4a:79:ec:f9:06:dd:ee:ab:aa:b4:8d: 76:d6:76:fb:21:ae:0d:b5:b2:30:da:7a:6f:52:8e:77:02:8a: 0e:4a:8c:48:cd:e6:eb:4f:22:fa:82:c5:9d:14:71:a5:2e:d5: e9:f8:a7:b0:9a:7a:35:37:84:14:8e:39:0d:b7:b9:0e:1b:93: 12:88:de:0f:06:b2:b0:67:d2:45:d6:38:7e:a5:2c:63:b0:2c: c1:e7:27:5f:fd:7a:57:e8:76:01:1e:e7:7e:11:38:8a:f6:45: fb:7f:fd:36:32:80:d4:3f:bb:48:e3:3a:85:8e:de:e6:83:ed: 22:08:0d:13:f8:76:4a:3e:e0:4f:73:d3:51:d9:65:73:22:b5: ed:94:8d:07:ad:4e:d1:45:05:9c:19:41:74:58:6c:00:58:4e: 85:ff:e4:5e:48:55:ab:8d:99:4c:ba:74:e6:c3:cf:c6:22:ec: 36:c3:29:55:fc:e0:8c:ba:f0:8c:b9:f8:14:14:ca:b0:d7:87: 14:2c:ef:aa:02:4c:8e:8e:f1:cd:67:33:54:c7:40:5e:aa:fc: 3d:29:d5:28:6f:ca:ab:14:d2:4b:ca:ba:1f:6f:14:a1:e1:85: 94:8d:b0:b4:9f:7e:a7:8c:47:33:36:29:37:83:c1:1f:48:54: 18:ac:7a:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWtzjES0oqXLaB0O45V+aXERkR30wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkYxMDIzNzE1NjU4MzFEREI5QzA2REY0N0RGNzlCMTEy MEM5ODYxRTAeFw0yNTA0MjQxMTM2MDdaFw0yNTA0MjcxNTU2MDdaMDMxMTAvBgNV BAMTKDY3OUNERjgzQTBBN0NDNjFFMjhCNTVDMzM2RDc3MkQ0MTREMjIyMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvkMSqk/djy6he3fDBNdNVmPp4 Duk3y74LeDtYMk9/tM22XEIqoXAJ40/ncSqncRgOCJWQE0efMgAlzYR4EuAxPnR1 ZdCKjlHBISVpcGCSEziZOYplsZveFnFr9vOwl4woh9+Tiz7H5lxFsJeYu8auhT94 RmHkqcBIw9cGnkdTqAnhxTDtSggTa9m+Mg4MB2BO8W32RDI4D5hKzda1PTLwW5C9 1HIAGSkZslqugvCwbZXI+t/HQoJn3GCygPOZXz3L4M/fGRBgVUwnRTjFOmvQTsOP EK3qex4gFTpDK/0dBvRH9rc06PV8OONgu7xPe0MePTAsMi6xTYqsgzRZZQKhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ5zfg6CnzGHii1XDNtdy1BTSIiQwHwYDVR0j BBgwFoAU/xAjcVZYMd25wG30ffebESDJhh4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NDNmMjllYS04NzRhLTRkMWEtYWJjYy03NTI5M2NiNTFhNmQvMC9GRjEwMjM3MTU2 NTgzMUREQjlDMDZERjQ3REY3OUIxMTIwQzk4NjFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkYxMDIzNzE1NjU4MzFEREI5QzA2REY0N0RGNzlCMTEyMEM5 ODYxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzQzZjI5ZWEtODc0YS00ZDFhLWFi Y2MtNzUyOTNjYjUxYTZkLzAvRkYxMDIzNzE1NjU4MzFEREI5QzA2REY0N0RGNzlC MTEyMEM5ODYxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKbY0YWmK8xKeez5Bt3uq6q0jXbWdvshrg21 sjDaem9SjncCig5KjEjN5utPIvqCxZ0UcaUu1en4p7CaejU3hBSOOQ23uQ4bkxKI 3g8GsrBn0kXWOH6lLGOwLMHnJ1/9elfodgEe534ROIr2Rft//TYygNQ/u0jjOoWO 3uaD7SIIDRP4dko+4E9z01HZZXMite2UjQetTtFFBZwZQXRYbABYToX/5F5IVauN mUy6dObDz8Yi7DbDKVX84Iy68Iy5+BQUyrDXhxQs76oCTI6O8c1nM1THQF6q/D0p 1ShvyqsU0kvKuh9vFKHhhZSNsLSffqeMRzM2KTeDwR9IVBiseks= -----END CERTIFICATE-----Generated at Thu Apr 24 13:38:49 2025 by rpki-client on console.sobornost.net