$ rpki-client -vvf repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft File: 988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft (raw, json) Hash identifier: LTFfMoNraIQuh24fIf8+wci3oNqVbLbwOE6Y68xGUf0= Subject key identifier: A2:B6:BB:DD:6C:81:B9:BA:E9:8E:6C:1D:74:E5:D0:3D:B2:11:75:32 Authority key identifier: 98:8E:03:77:88:2A:47:82:CA:DF:C6:65:BE:A7:5B:F6:4B:FB:AF:8E Certificate issuer: /CN=988E0377882A4782CADFC665BEA75BF64BFBAF8E Certificate serial: 1E08E2EABE9D1C0C6D5F74FB90C90FDA4BCD93CC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/988E0377882A4782CADFC665BEA75BF64BFBAF8E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft Manifest number: 0285 Signing time: Sat 26 Apr 2025 19:30:36 +0000 Manifest this update: Sat 26 Apr 2025 19:25:36 +0000 Manifest next update: Wed 30 Apr 2025 04:05:36 +0000 Files and hashes: 1: 988E0377882A4782CADFC665BEA75BF64BFBAF8E.crl (hash: 4p/jkZ2+z6qORwO7zSFG14p+XM/yWG5N0IUMnT6TYrU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.crl rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/988E0377882A4782CADFC665BEA75BF64BFBAF8E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 20:11:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:08:e2:ea:be:9d:1c:0c:6d:5f:74:fb:90:c9:0f:da:4b:cd:93:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=988E0377882A4782CADFC665BEA75BF64BFBAF8E Validity Not Before: Apr 26 19:25:36 2025 GMT Not After : Apr 30 04:05:36 2025 GMT Subject: CN=A2B6BBDD6C81B9BAE98E6C1D74E5D03DB2117532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7b:0b:73:c2:54:f5:5c:11:17:46:44:1d:1f: 1b:83:6a:be:5c:79:1f:5e:c9:a0:40:91:29:3b:84: 3c:b3:85:c3:e8:3a:6d:b2:b4:91:08:8a:cc:5f:3d: 4e:d2:d5:f0:cf:e4:c2:fc:3a:bd:6d:66:32:98:c5: 5e:15:39:09:38:ef:98:c2:ad:f0:b9:1e:80:0c:71: 7a:6f:0b:fb:f8:0a:d0:20:f9:54:15:2a:d1:f0:40: ca:ec:be:2c:86:18:10:36:74:fb:99:f4:3e:60:e6: 81:6d:05:eb:a5:a1:6b:5a:ce:b7:ac:6e:62:07:80: 40:1e:fe:97:bf:88:b5:ef:43:ed:02:4a:02:15:47: cd:a9:80:da:9d:f8:79:a7:69:22:a6:32:ae:31:36: b3:ec:b6:04:0b:ad:15:79:8d:02:0d:24:95:3a:36: 44:32:2e:64:25:23:5d:f7:4f:c8:9c:1e:6a:b1:2c: c1:78:24:f0:17:38:d2:d4:85:55:88:22:ed:e6:e8: 42:bb:62:dd:00:9d:5d:7a:52:6d:9c:4f:a2:29:57: 54:39:c2:7f:2f:23:ab:e6:67:55:22:aa:f1:a3:1c: ca:73:41:84:2e:6a:8e:de:1e:6a:49:ec:61:7f:f2: 11:d5:fa:ed:cf:13:fb:a5:bc:ab:8f:39:8a:fb:51: cf:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:B6:BB:DD:6C:81:B9:BA:E9:8E:6C:1D:74:E5:D0:3D:B2:11:75:32 X509v3 Authority Key Identifier: keyid:98:8E:03:77:88:2A:47:82:CA:DF:C6:65:BE:A7:5B:F6:4B:FB:AF:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/988E0377882A4782CADFC665BEA75BF64BFBAF8E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:70:39:c9:0f:66:38:c8:7c:56:16:2c:e8:84:00:c9:2b:9e: 1d:38:45:46:c9:fc:23:10:c4:3a:d9:74:5d:64:da:6d:6d:dc: 5a:99:6c:51:05:08:42:a0:c5:d5:05:e6:2e:97:6b:71:3d:42: 44:67:d5:3e:c3:d8:bf:76:92:b6:50:bb:a6:5a:7e:0d:7c:12: b1:be:15:20:3a:cf:e4:9a:ce:4d:c1:7a:17:a9:c9:2f:90:1e: 31:86:f0:82:7d:09:d8:43:f3:9c:e7:d2:f1:29:ac:f9:df:4f: a4:0a:ef:89:a6:ae:64:43:a7:ec:97:ef:c0:ac:40:51:30:d2: 20:e6:fa:3a:1f:9a:63:f9:b1:a0:5b:0c:2e:86:3a:73:b2:5b: b8:27:f4:a3:a3:1c:40:20:ed:02:3a:5d:7c:75:99:f2:0e:ca: 40:c0:9c:99:d6:d1:7b:f6:59:9d:67:b4:53:21:b9:f4:40:2a: ad:a0:05:2e:fc:d0:fe:c8:24:85:82:ba:41:28:39:bf:96:9f: db:20:ad:3b:cd:75:c8:96:ee:a7:c4:00:8a:49:24:75:6f:94: 93:c0:7c:fd:b5:b0:41:93:3e:1e:db:df:44:4b:e1:73:95:c1: dd:48:3f:f7:4c:52:d4:28:28:3c:09:1e:0e:db:63:68:39:38: b6:d1:1c:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHgji6r6dHAxtX3T7kMkP2kvNk8wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg4RTAzNzc4ODJBNDc4MkNBREZDNjY1QkVBNzVCRjY0 QkZCQUY4RTAeFw0yNTA0MjYxOTI1MzZaFw0yNTA0MzAwNDA1MzZaMDMxMTAvBgNV BAMTKEEyQjZCQkRENkM4MUI5QkFFOThFNkMxRDc0RTVEMDNEQjIxMTc1MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2ewtzwlT1XBEXRkQdHxuDar5c eR9eyaBAkSk7hDyzhcPoOm2ytJEIisxfPU7S1fDP5ML8Or1tZjKYxV4VOQk475jC rfC5HoAMcXpvC/v4CtAg+VQVKtHwQMrsviyGGBA2dPuZ9D5g5oFtBeuloWtazres bmIHgEAe/pe/iLXvQ+0CSgIVR82pgNqd+HmnaSKmMq4xNrPstgQLrRV5jQINJJU6 NkQyLmQlI133T8icHmqxLMF4JPAXONLUhVWIIu3m6EK7Yt0AnV16Um2cT6IpV1Q5 wn8vI6vmZ1UiqvGjHMpzQYQuao7eHmpJ7GF/8hHV+u3PE/ulvKuPOYr7Uc8RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUora73WyBubrpjmwddOXQPbIRdTIwHwYDVR0j BBgwFoAUmI4Dd4gqR4LK38Zlvqdb9kv7r44wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MmYzOWMxNy02NzI1LTQyYmUtYmVkNC1mMGViYmJhMmQ0ZmQvMC85ODhFMDM3Nzg4 MkE0NzgyQ0FERkM2NjVCRUE3NUJGNjRCRkJBRjhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg4RTAzNzc4ODJBNDc4MkNBREZDNjY1QkVBNzVCRjY0QkZC QUY4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDJmMzljMTctNjcyNS00MmJlLWJl ZDQtZjBlYmJiYTJkNGZkLzAvOTg4RTAzNzc4ODJBNDc4MkNBREZDNjY1QkVBNzVC RjY0QkZCQUY4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL9wOckPZjjIfFYWLOiEAMkrnh04RUbJ/CMQ xDrZdF1k2m1t3FqZbFEFCEKgxdUF5i6Xa3E9QkRn1T7D2L92krZQu6Zafg18ErG+ FSA6z+Sazk3BehepyS+QHjGG8IJ9CdhD85zn0vEprPnfT6QK74mmrmRDp+yX78Cs QFEw0iDm+jofmmP5saBbDC6GOnOyW7gn9KOjHEAg7QI6XXx1mfIOykDAnJnW0Xv2 WZ1ntFMhufRAKq2gBS780P7IJIWCukEoOb+Wn9sgrTvNdciW7qfEAIpJJHVvlJPA fP21sEGTPh7b30RL4XOVwd1IP/dMUtQoKDwJHg7bY2g5OLbRHIE= -----END CERTIFICATE-----Generated at Sun Apr 27 00:13:02 2025 by rpki-client on console.sobornost.net