$ rpki-client -vvf repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft File: E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft (raw, json) Hash identifier: qbkGJ7pQLMYkWtlrn0XHLZYRSaS++2lKaHLa7AJPHBU= Subject key identifier: 24:21:59:19:08:D7:44:6F:B2:12:31:00:6C:E6:FC:26:BD:ED:66:A6 Authority key identifier: E3:36:CD:49:5C:4F:48:0E:C4:FA:92:EB:0B:59:42:D9:8D:E4:B8:8C Certificate issuer: /CN=E336CD495C4F480EC4FA92EB0B5942D98DE4B88C Certificate serial: 06C01480399D81BE9C2BBC39003EEE48716DAB08 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft Manifest number: CB Signing time: Thu 24 Apr 2025 12:21:58 +0000 Manifest this update: Thu 24 Apr 2025 12:16:58 +0000 Manifest next update: Sun 27 Apr 2025 15:08:58 +0000 Files and hashes: 1: E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.crl (hash: YY3E8DkpE2xoSsGB3I975IWhZs5LPX2Cz2rTlOw04Rg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.crl rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 15:08:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:c0:14:80:39:9d:81:be:9c:2b:bc:39:00:3e:ee:48:71:6d:ab:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E336CD495C4F480EC4FA92EB0B5942D98DE4B88C Validity Not Before: Apr 24 12:16:58 2025 GMT Not After : Apr 27 15:08:58 2025 GMT Subject: CN=2421591908D7446FB21231006CE6FC26BDED66A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:82:7d:bf:bb:8c:c2:74:8c:1f:a6:d0:3d:02: 59:0a:b8:56:6b:8a:e0:b4:a0:d2:38:68:94:7d:40: 4d:ea:53:f8:ac:95:1d:05:9a:25:73:ce:e4:bc:6f: eb:c6:b2:4c:60:68:be:94:10:78:26:ba:0c:1e:7c: ad:bf:c0:41:97:59:d1:2a:81:b6:f3:27:fc:1d:36: 31:50:9b:1c:0b:fd:3f:43:f1:42:06:85:c6:de:0b: 36:ab:f6:51:bc:d7:71:99:4b:a6:3d:7c:2c:82:22: 59:68:ad:13:67:74:33:e4:8d:92:97:a4:64:a0:df: 47:2d:5e:ba:3b:5a:09:46:db:90:53:ac:51:90:74: 41:aa:0e:cf:fd:2f:81:7d:2b:3f:c0:42:3c:9c:ef: e6:b8:d0:98:40:b3:df:d0:05:76:7a:a8:46:57:d7: 64:06:10:96:c7:4f:41:cc:37:28:62:0b:05:1f:ff: 74:9f:cb:f0:c1:52:02:96:da:0c:81:c7:5a:87:5d: 28:7d:8f:49:11:00:cb:e5:19:8c:a6:d7:27:a4:f9: fb:b8:83:fb:fd:ec:c1:4c:02:07:07:55:68:28:12: bb:cf:51:06:e6:bd:51:b1:a0:d7:76:40:79:ea:61: 7f:16:1c:10:2c:0c:ec:78:f5:72:af:30:67:de:1e: 63:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:21:59:19:08:D7:44:6F:B2:12:31:00:6C:E6:FC:26:BD:ED:66:A6 X509v3 Authority Key Identifier: keyid:E3:36:CD:49:5C:4F:48:0E:C4:FA:92:EB:0B:59:42:D9:8D:E4:B8:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:ab:47:a3:9e:d3:e7:67:24:3e:ff:1c:ba:45:c5:af:dd:8c: 09:7c:d0:2b:68:2f:2a:07:cb:cb:d2:b1:5a:46:ee:3c:d8:61: 69:d2:21:f6:02:02:7e:2d:c9:fe:bf:ec:61:a7:0d:dd:90:6b: ed:88:82:70:3d:05:9e:ca:c5:cd:ca:c6:be:d2:fa:5d:06:b8: a8:3a:97:2f:1e:a4:6e:33:8b:df:a4:1c:c2:ab:d8:3a:25:75: 23:20:8a:c0:cc:6f:59:0c:e1:07:e1:fa:ab:98:b3:12:d0:fb: 6c:7c:56:d1:82:2e:a5:9e:2c:74:75:d9:eb:e4:4a:36:2b:d3: bc:74:a6:12:ff:36:49:ff:bf:b6:b9:9b:e1:26:8f:6f:a3:da: 43:be:79:f8:92:33:e1:af:5a:03:ce:b8:69:9f:e9:64:82:78: a4:bc:25:1d:d5:ba:c6:00:67:c4:c6:c4:63:ab:55:24:a0:f7: b5:a3:b6:32:d4:d0:ed:55:fd:64:df:3b:12:20:0f:28:8a:d3: fc:9c:9a:15:4b:c6:80:53:33:4f:60:5c:47:c6:3a:1b:92:49: 5e:a9:56:93:6d:88:62:c7:1d:bf:c9:c1:5f:8b:99:ea:46:0f: c1:bb:73:c7:8a:a3:ce:7a:af:ca:7c:a8:b4:dd:47:00:12:c2: 2d:2b:53:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBsAUgDmdgb6cK7w5AD7uSHFtqwgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTMzNkNENDk1QzRGNDgwRUM0RkE5MkVCMEI1OTQyRDk4 REU0Qjg4QzAeFw0yNTA0MjQxMjE2NThaFw0yNTA0MjcxNTA4NThaMDMxMTAvBgNV BAMTKDI0MjE1OTE5MDhENzQ0NkZCMjEyMzEwMDZDRTZGQzI2QkRFRDY2QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCugn2/u4zCdIwfptA9AlkKuFZr iuC0oNI4aJR9QE3qU/islR0FmiVzzuS8b+vGskxgaL6UEHgmugwefK2/wEGXWdEq gbbzJ/wdNjFQmxwL/T9D8UIGhcbeCzar9lG813GZS6Y9fCyCIllorRNndDPkjZKX pGSg30ctXro7WglG25BTrFGQdEGqDs/9L4F9Kz/AQjyc7+a40JhAs9/QBXZ6qEZX 12QGEJbHT0HMNyhiCwUf/3Sfy/DBUgKW2gyBx1qHXSh9j0kRAMvlGYym1yek+fu4 g/v97MFMAgcHVWgoErvPUQbmvVGxoNd2QHnqYX8WHBAsDOx49XKvMGfeHmMxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJCFZGQjXRG+yEjEAbOb8Jr3tZqYwHwYDVR0j BBgwFoAU4zbNSVxPSA7E+pLrC1lC2Y3kuIwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZjdiZDk0NC0wMTdhLTQzYTMtOTRmMy1mZjQ3YWYwMzg5ODAvMC9FMzM2Q0Q0OTVD NEY0ODBFQzRGQTkyRUIwQjU5NDJEOThERTRCODhDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTMzNkNENDk1QzRGNDgwRUM0RkE5MkVCMEI1OTQyRDk4REU0 Qjg4Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2Y3YmQ5NDQtMDE3YS00M2EzLTk0 ZjMtZmY0N2FmMDM4OTgwLzAvRTMzNkNENDk1QzRGNDgwRUM0RkE5MkVCMEI1OTQy RDk4REU0Qjg4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAGrR6Oe0+dnJD7/HLpFxa/djAl80CtoLyoH y8vSsVpG7jzYYWnSIfYCAn4tyf6/7GGnDd2Qa+2IgnA9BZ7Kxc3Kxr7S+l0GuKg6 ly8epG4zi9+kHMKr2DoldSMgisDMb1kM4Qfh+quYsxLQ+2x8VtGCLqWeLHR12evk SjYr07x0phL/Nkn/v7a5m+Emj2+j2kO+efiSM+GvWgPOuGmf6WSCeKS8JR3VusYA Z8TGxGOrVSSg97WjtjLU0O1V/WTfOxIgDyiK0/ycmhVLxoBTM09gXEfGOhuSSV6p VpNtiGLHHb/JwV+LmepGD8G7c8eKo856r8p8qLTdRwASwi0rU3k= -----END CERTIFICATE-----Generated at Thu Apr 24 15:50:03 2025 by rpki-client on console.sobornost.net