$ rpki-client -vvf repo-rpki.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/F389B5570A768F4811B6377427EE5A9710A3078F.mft File: F389B5570A768F4811B6377427EE5A9710A3078F.mft (raw, json) Hash identifier: W+1AKXyf1LZmr9ey0MnaZ2ozd1ayV/74xNKY5xvkVaU= Subject key identifier: 26:64:BC:02:49:56:02:36:B0:03:E0:25:E0:42:83:9E:2D:E1:F2:23 Authority key identifier: F3:89:B5:57:0A:76:8F:48:11:B6:37:74:27:EE:5A:97:10:A3:07:8F Certificate issuer: /CN=F389B5570A768F4811B6377427EE5A9710A3078F Certificate serial: 010D5391870E4A4B8EB9D37C83ADB8E565D60734 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F389B5570A768F4811B6377427EE5A9710A3078F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/F389B5570A768F4811B6377427EE5A9710A3078F.mft Manifest number: 030F Signing time: Wed 23 Apr 2025 12:20:50 +0000 Manifest this update: Wed 23 Apr 2025 12:15:50 +0000 Manifest next update: Sat 26 Apr 2025 18:03:50 +0000 Files and hashes: 1: F389B5570A768F4811B6377427EE5A9710A3078F.crl (hash: mSm6eGlyGFcQcRFDBSo8vFWxVvY0yEhCLGNbXNlrYXE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/F389B5570A768F4811B6377427EE5A9710A3078F.crl rsync://repo-rpki.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/F389B5570A768F4811B6377427EE5A9710A3078F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F389B5570A768F4811B6377427EE5A9710A3078F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 12:29:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:53:91:87:0e:4a:4b:8e:b9:d3:7c:83:ad:b8:e5:65:d6:07:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F389B5570A768F4811B6377427EE5A9710A3078F Validity Not Before: Apr 23 12:15:50 2025 GMT Not After : Apr 26 18:03:50 2025 GMT Subject: CN=2664BC0249560236B003E025E042839E2DE1F223 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c4:6a:a2:84:18:00:4c:8c:63:7d:95:37:18: 80:c1:2c:71:99:23:de:58:df:a3:6d:bb:45:65:a5: aa:92:0f:9c:08:73:10:9a:20:9f:c8:6c:0a:6f:33: 86:16:0a:5e:bd:13:c2:c7:2b:be:f3:1c:18:40:cb: aa:f7:5b:2b:a4:d7:0c:4b:db:31:14:b0:d9:9d:f3: b1:d7:39:79:15:cf:6e:df:ad:1c:88:62:55:71:e2: 55:67:6d:bb:90:97:f7:fc:e3:90:ba:0a:46:23:ca: 3b:38:aa:50:a0:1d:67:26:86:82:00:7d:d3:e4:46: 33:2c:b1:57:60:9c:73:64:a9:51:35:e6:c5:46:cc: ba:bf:97:1b:86:5c:ef:69:77:e5:8c:a7:42:f5:88: ee:6b:b0:5e:a5:6c:c8:39:2a:e1:c8:f4:b3:66:12: 7a:79:d8:fc:59:15:68:5e:13:e1:25:bb:0f:8c:da: 3b:f1:ab:ac:ae:ed:a2:6a:d6:67:d2:d8:e4:ed:79: 21:0f:59:15:e8:33:bb:d8:e5:57:8f:01:7d:88:12: 2f:cd:93:70:ff:99:88:db:8e:bf:a6:ac:55:67:bc: 02:8e:19:92:6a:e6:9f:10:dc:bc:c5:7d:d6:51:6a: d8:f8:fc:eb:c4:02:4d:12:9d:58:82:be:9d:e9:02: c1:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:64:BC:02:49:56:02:36:B0:03:E0:25:E0:42:83:9E:2D:E1:F2:23 X509v3 Authority Key Identifier: keyid:F3:89:B5:57:0A:76:8F:48:11:B6:37:74:27:EE:5A:97:10:A3:07:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/F389B5570A768F4811B6377427EE5A9710A3078F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F389B5570A768F4811B6377427EE5A9710A3078F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/F389B5570A768F4811B6377427EE5A9710A3078F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:39:c7:f0:93:18:ad:42:ec:92:b6:33:6f:e7:a1:6c:4f:cb: a4:16:0e:e6:46:6d:2b:4c:a5:17:7d:c0:7e:11:3f:c3:85:bd: 62:da:31:a9:66:02:11:2e:18:ed:aa:ec:c4:e7:90:f7:06:fd: e0:01:cd:84:7d:c5:c1:0a:34:ec:a1:69:4c:65:fb:3d:90:8f: 7d:40:bc:60:b6:7a:90:eb:b7:fc:27:4a:a3:30:af:a6:51:f4: 10:c3:c9:06:c2:0c:86:8d:c8:9f:8c:17:63:70:94:be:ac:bc: 6d:3c:2a:f5:91:90:32:b0:78:6e:1c:6f:8b:5b:a5:65:f1:3c: 5a:ec:86:7b:12:f6:6e:c9:52:11:42:95:5c:7b:cd:e8:0c:58: dc:64:0d:28:f0:fc:fe:30:fc:90:1f:d9:27:7c:69:9e:39:3a: 85:5d:dc:58:35:e6:5d:fd:0d:6c:dc:11:57:a2:e6:f6:9d:24: e4:14:b7:33:7f:9a:2f:86:17:99:43:9b:14:e5:5d:b3:ec:1b: 2a:01:e1:44:37:8e:4c:c6:5d:6f:66:a8:e1:55:12:89:54:bc: 20:69:4f:4b:91:86:56:23:5c:d3:ce:ca:db:9a:2d:ad:2b:50: d7:0b:87:22:c4:27:10:d5:83:e3:c1:aa:36:f2:da:68:e3:7e: 83:46:fb:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAQ1TkYcOSkuOudN8g6245WXWBzQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM4OUI1NTcwQTc2OEY0ODExQjYzNzc0MjdFRTVBOTcx MEEzMDc4RjAeFw0yNTA0MjMxMjE1NTBaFw0yNTA0MjYxODAzNTBaMDMxMTAvBgNV BAMTKDI2NjRCQzAyNDk1NjAyMzZCMDAzRTAyNUUwNDI4MzlFMkRFMUYyMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyxGqihBgATIxjfZU3GIDBLHGZ I95Y36Ntu0VlpaqSD5wIcxCaIJ/IbApvM4YWCl69E8LHK77zHBhAy6r3Wyuk1wxL 2zEUsNmd87HXOXkVz27frRyIYlVx4lVnbbuQl/f845C6CkYjyjs4qlCgHWcmhoIA fdPkRjMssVdgnHNkqVE15sVGzLq/lxuGXO9pd+WMp0L1iO5rsF6lbMg5KuHI9LNm Enp52PxZFWheE+Eluw+M2jvxq6yu7aJq1mfS2OTteSEPWRXoM7vY5VePAX2IEi/N k3D/mYjbjr+mrFVnvAKOGZJq5p8Q3LzFfdZRatj4/OvEAk0SnViCvp3pAsEdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJmS8AklWAjawA+Al4EKDni3h8iMwHwYDVR0j BBgwFoAU84m1Vwp2j0gRtjd0J+5alxCjB48wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YzhhYjNlMC1jYTY4LTQyZjYtOThmNi02NTRhMjUyYTg2NDgvMC9GMzg5QjU1NzBB NzY4RjQ4MTFCNjM3NzQyN0VFNUE5NzEwQTMwNzhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjM4OUI1NTcwQTc2OEY0ODExQjYzNzc0MjdFRTVBOTcxMEEz MDc4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M4YWIzZTAtY2E2OC00MmY2LTk4 ZjYtNjU0YTI1MmE4NjQ4LzAvRjM4OUI1NTcwQTc2OEY0ODExQjYzNzc0MjdFRTVB OTcxMEEzMDc4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC85x/CTGK1C7JK2M2/noWxPy6QWDuZGbStM pRd9wH4RP8OFvWLaMalmAhEuGO2q7MTnkPcG/eABzYR9xcEKNOyhaUxl+z2Qj31A vGC2epDrt/wnSqMwr6ZR9BDDyQbCDIaNyJ+MF2NwlL6svG08KvWRkDKweG4cb4tb pWXxPFrshnsS9m7JUhFClVx7zegMWNxkDSjw/P4w/JAf2Sd8aZ45OoVd3Fg15l39 DWzcEVei5vadJOQUtzN/mi+GF5lDmxTlXbPsGyoB4UQ3jkzGXW9mqOFVEolUvCBp T0uRhlYjXNPOytuaLa0rUNcLhyLEJxDVg+PBqjby2mjjfoNG+x8= -----END CERTIFICATE-----Generated at Wed Apr 23 15:33:57 2025 by rpki-client on console.sobornost.net