$ rpki-client -vvf repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.mft File: 9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.mft (raw, json) Hash identifier: pfJun1FjDA0ZY3FYnOez5IGjuq5z2Ggp5tSLyxrqMHQ= Subject key identifier: 99:B4:B1:54:5F:6D:CC:A6:C4:A9:C5:E3:B0:E3:D1:B8:44:47:6F:EA Authority key identifier: 9F:0F:0B:61:BB:6A:FA:ED:E5:A1:E7:59:1E:D4:84:13:13:DF:D6:FF Certificate issuer: /CN=9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF Certificate serial: 2A61059F0970D3F5971EFA4AE0377749556E249E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.mft Manifest number: 0195 Signing time: Thu 24 Apr 2025 18:21:55 +0000 Manifest this update: Thu 24 Apr 2025 18:16:55 +0000 Manifest next update: Mon 28 Apr 2025 00:53:55 +0000 Files and hashes: 1: 9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.crl (hash: yl/UEAMANyXrLYwmHIh+A2ZvlgMbteu7gJfe63mihyI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.crl rsync://repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:61:05:9f:09:70:d3:f5:97:1e:fa:4a:e0:37:77:49:55:6e:24:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF Validity Not Before: Apr 24 18:16:55 2025 GMT Not After : Apr 28 00:53:55 2025 GMT Subject: CN=99B4B1545F6DCCA6C4A9C5E3B0E3D1B844476FEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b1:fd:c7:7d:26:43:dd:29:94:b4:2c:d7:62: 5e:2e:c7:8e:98:86:3a:20:2f:42:25:6c:e4:33:81: 28:8f:08:f3:00:8a:dd:a2:17:f7:65:10:42:51:c8: 61:8c:98:f7:5b:e4:b0:80:2b:05:e4:01:5a:3a:bf: 98:13:e9:b7:3d:18:27:92:01:66:a8:6d:44:58:c8: 42:48:4f:5c:62:3f:14:4a:bc:88:05:b5:d7:04:f0: 9d:5c:e1:a8:70:ec:03:3f:c3:41:18:c9:f5:04:7f: ec:9e:3e:fb:54:fb:51:3d:41:37:6a:15:f0:39:ad: 9c:dc:1f:62:3c:83:99:78:8d:c0:91:57:f5:3f:a7: 53:cd:76:55:af:01:34:e2:04:64:e1:c1:4e:99:08: fd:5c:56:54:f3:ce:36:81:5b:9a:30:a8:93:d7:3e: 69:88:af:5f:b7:e3:50:95:36:39:d1:4a:72:e7:48: 08:3f:08:78:8f:3c:89:5d:15:de:74:19:e6:9f:3b: a6:7b:86:98:7f:56:7a:4a:43:21:29:b6:d6:46:49: b8:fe:87:2b:f0:17:d1:37:0a:b7:08:e7:e0:3d:5b: f5:98:45:44:b1:09:1e:db:95:27:b3:93:cc:67:bf: 2b:c8:73:8e:fb:ee:57:27:d5:3f:ff:33:14:c9:7a: 27:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:B4:B1:54:5F:6D:CC:A6:C4:A9:C5:E3:B0:E3:D1:B8:44:47:6F:EA X509v3 Authority Key Identifier: keyid:9F:0F:0B:61:BB:6A:FA:ED:E5:A1:E7:59:1E:D4:84:13:13:DF:D6:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:bd:bc:a6:7e:c4:7f:17:ea:23:0e:0e:f7:66:88:a7:78:8b: ff:2d:e5:f8:17:e7:aa:fa:51:ce:da:da:e9:56:18:b1:3f:51: a4:14:80:3c:af:00:a7:f1:d1:6e:5d:d6:ac:9a:2c:f5:54:28: ab:66:17:1d:21:69:b8:12:fe:3e:f0:9d:ea:7c:8d:be:dd:59: f6:15:74:1c:f7:57:fc:99:cb:15:3b:62:e7:b4:f5:32:1b:97: aa:c4:24:d6:e8:21:2d:c5:95:aa:2d:7f:1a:06:03:22:0a:69: c9:f2:8c:1c:f1:41:92:db:33:7f:c9:83:23:3f:a3:ab:f4:8d: d6:72:2b:a6:93:e0:fe:f7:92:3a:0c:24:ea:15:6e:9e:73:67: 3f:4f:76:c1:ea:18:bc:76:3c:66:50:5f:f0:eb:ee:2c:c9:23: 6b:1a:b6:ec:6a:a1:73:ca:db:42:50:39:d3:9e:53:14:c2:99: 9b:02:5a:59:ec:cb:66:1d:c8:66:b5:59:df:3a:8a:7c:e0:30: 12:4b:e7:02:d5:dd:5f:ae:f6:3d:fa:a3:63:34:79:34:da:35: 8b:8d:08:c2:4f:89:ac:74:ee:0a:8d:31:07:45:7a:32:d6:f4: 22:3f:1a:28:da:39:b3:f9:b2:ea:d6:b6:61:ac:a4:7c:48:78: cf:da:af:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKmEFnwlw0/WXHvpK4Dd3SVVuJJ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUYwRjBCNjFCQjZBRkFFREU1QTFFNzU5MUVENDg0MTMx M0RGRDZGRjAeFw0yNTA0MjQxODE2NTVaFw0yNTA0MjgwMDUzNTVaMDMxMTAvBgNV BAMTKDk5QjRCMTU0NUY2RENDQTZDNEE5QzVFM0IwRTNEMUI4NDQ0NzZGRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8sf3HfSZD3SmUtCzXYl4ux46Y hjogL0IlbOQzgSiPCPMAit2iF/dlEEJRyGGMmPdb5LCAKwXkAVo6v5gT6bc9GCeS AWaobURYyEJIT1xiPxRKvIgFtdcE8J1c4ahw7AM/w0EYyfUEf+yePvtU+1E9QTdq FfA5rZzcH2I8g5l4jcCRV/U/p1PNdlWvATTiBGThwU6ZCP1cVlTzzjaBW5owqJPX PmmIr1+341CVNjnRSnLnSAg/CHiPPIldFd50GeafO6Z7hph/VnpKQyEpttZGSbj+ hyvwF9E3CrcI5+A9W/WYRUSxCR7blSezk8xnvyvIc4777lcn1T//MxTJeicpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmbSxVF9tzKbEqcXjsOPRuERHb+owHwYDVR0j BBgwFoAUnw8LYbtq+u3loedZHtSEExPf1v8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MGYyNDczMy1lOGRhLTQyYzgtODQ2Yi1lNzk0ZTFiNDM5ZGEvMC85RjBGMEI2MUJC NkFGQUVERTVBMUU3NTkxRUQ0ODQxMzEzREZENkZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUYwRjBCNjFCQjZBRkFFREU1QTFFNzU5MUVENDg0MTMxM0RG RDZGRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDBmMjQ3MzMtZThkYS00MmM4LTg0 NmItZTc5NGUxYjQzOWRhLzAvOUYwRjBCNjFCQjZBRkFFREU1QTFFNzU5MUVENDg0 MTMxM0RGRDZGRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADC9vKZ+xH8X6iMODvdmiKd4i/8t5fgX56r6 Uc7a2ulWGLE/UaQUgDyvAKfx0W5d1qyaLPVUKKtmFx0habgS/j7wnep8jb7dWfYV dBz3V/yZyxU7Yue09TIbl6rEJNboIS3FlaotfxoGAyIKacnyjBzxQZLbM3/JgyM/ o6v0jdZyK6aT4P73kjoMJOoVbp5zZz9PdsHqGLx2PGZQX/Dr7izJI2satuxqoXPK 20JQOdOeUxTCmZsCWlnsy2YdyGa1Wd86inzgMBJL5wLV3V+u9j36o2M0eTTaNYuN CMJPiax07gqNMQdFejLW9CI/GijaObP5surWtmGspHxIeM/arx0= -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:11 2025 by rpki-client on console.sobornost.net