$ rpki-client -vvf repo-rpki.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.mft File: 4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.mft (raw, json) Hash identifier: /FpGl3ev0UZO9fl6IaePJnyYqrKUK6fjr0QgLiV684Y= Subject key identifier: DA:61:E5:DD:8E:31:BC:4E:FE:38:4D:93:03:7D:8A:30:D3:FC:49:CB Authority key identifier: 4C:0A:2E:84:DC:0F:6F:30:63:6B:6D:D2:52:7A:B6:CD:6A:B8:AF:CD Certificate issuer: /CN=4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD Certificate serial: 267F73334C8975E422E5BF1FEBDAFDBECAC2A439 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.mft Manifest number: 024C Signing time: Thu 24 Apr 2025 20:51:01 +0000 Manifest this update: Thu 24 Apr 2025 20:46:01 +0000 Manifest next update: Sun 27 Apr 2025 22:28:01 +0000 Files and hashes: 1: 4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.crl (hash: 6gr1PsiyiPjJGHz40KSyBsvWMlM3kAru9LtmaHZklKE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.crl rsync://repo-rpki.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:7f:73:33:4c:89:75:e4:22:e5:bf:1f:eb:da:fd:be:ca:c2:a4:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD Validity Not Before: Apr 24 20:46:01 2025 GMT Not After : Apr 27 22:28:01 2025 GMT Subject: CN=DA61E5DD8E31BC4EFE384D93037D8A30D3FC49CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:67:67:ba:93:c6:0a:a8:82:e2:75:99:21:73: c0:73:ad:fd:22:70:29:3b:b3:a6:b3:4d:47:1e:ad: 70:7e:66:e7:fb:7a:ea:c0:ee:a5:8e:9a:98:8b:fd: 8a:61:91:a8:c7:48:d7:e9:85:60:81:15:97:56:4c: 40:27:d4:33:1d:17:6f:04:f2:45:af:e3:ac:50:cf: 2c:89:76:fa:2a:1c:bb:e0:c9:25:a3:cd:05:07:4e: 73:0b:45:aa:58:d1:39:17:d6:4c:19:06:78:66:79: 36:d1:1e:6f:ec:38:f0:d6:c2:46:ba:df:ba:ba:46: e3:6e:ce:89:01:89:ab:4c:b2:a3:f2:ab:77:7c:44: bf:c7:c7:74:4c:86:b0:d5:37:27:b5:81:20:15:13: cb:4b:34:5d:9a:71:e3:50:76:58:40:61:ee:26:72: e3:05:81:dc:66:fe:dc:c2:06:1c:26:fb:28:f3:80: 82:ce:d7:fb:61:ee:ea:05:68:ba:90:53:23:5d:0f: 9c:0f:0c:31:ab:5c:6d:71:8c:f1:39:86:2e:ee:30: 10:e3:b2:65:48:48:49:b4:5f:c3:3b:04:e0:28:5c: 64:d5:98:a9:a9:3f:ee:60:c4:8a:7d:a2:fe:f1:f5: 89:17:1e:8a:05:1f:f3:d2:94:3a:2e:58:8d:82:6e: fb:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:61:E5:DD:8E:31:BC:4E:FE:38:4D:93:03:7D:8A:30:D3:FC:49:CB X509v3 Authority Key Identifier: keyid:4C:0A:2E:84:DC:0F:6F:30:63:6B:6D:D2:52:7A:B6:CD:6A:B8:AF:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:54:27:42:4d:22:55:31:c1:5c:25:a3:6e:12:e5:b1:48:5b: 6b:f5:51:f4:2a:44:c3:3c:e1:d2:a9:df:a2:fe:51:60:4b:04: 01:77:8a:ac:d8:fc:d7:95:14:7b:2a:8e:18:07:75:2b:ed:e6: b1:67:8d:1c:bc:16:da:9a:11:81:54:f3:66:c3:01:2f:52:4c: 64:07:26:c1:f1:78:6e:cf:4e:4f:d5:b1:fc:68:d7:28:b8:88: 0a:05:4a:51:d3:ad:1a:95:a1:54:b2:50:58:b6:07:ac:23:6a: a5:70:c0:30:35:b1:ce:ce:9d:7d:f1:43:00:da:ed:23:68:9f: 84:b6:ea:d0:40:6b:2e:ed:7e:28:83:40:2b:9d:2a:ca:17:71: b7:ff:19:a8:ec:cb:83:72:ac:cf:35:2a:14:c7:7b:41:88:80: 02:8b:03:9a:52:fa:dd:a4:d8:8a:74:85:a6:7e:08:35:17:ed: 49:ee:88:73:88:43:55:ac:6c:41:42:da:5d:4c:92:22:bd:e7: 0c:32:67:78:ab:a4:51:09:6c:81:74:f2:70:bf:5b:5e:34:1f: c3:63:2e:83:32:08:b1:cc:bc:f0:3a:c0:ef:d0:24:48:0f:92: 66:f9:65:49:0c:d2:f5:9e:a4:b0:7d:3d:7a:95:66:45:10:42: 81:ca:1c:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJn9zM0yJdeQi5b8f69r9vsrCpDkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEMwQTJFODREQzBGNkYzMDYzNkI2REQyNTI3QUI2Q0Q2 QUI4QUZDRDAeFw0yNTA0MjQyMDQ2MDFaFw0yNTA0MjcyMjI4MDFaMDMxMTAvBgNV BAMTKERBNjFFNUREOEUzMUJDNEVGRTM4NEQ5MzAzN0Q4QTMwRDNGQzQ5Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmZ2e6k8YKqILidZkhc8Bzrf0i cCk7s6azTUcerXB+Zuf7eurA7qWOmpiL/YphkajHSNfphWCBFZdWTEAn1DMdF28E 8kWv46xQzyyJdvoqHLvgySWjzQUHTnMLRapY0TkX1kwZBnhmeTbRHm/sOPDWwka6 37q6RuNuzokBiatMsqPyq3d8RL/Hx3RMhrDVNye1gSAVE8tLNF2aceNQdlhAYe4m cuMFgdxm/tzCBhwm+yjzgILO1/th7uoFaLqQUyNdD5wPDDGrXG1xjPE5hi7uMBDj smVISEm0X8M7BOAoXGTVmKmpP+5gxIp9ov7x9YkXHooFH/PSlDouWI2CbvtjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2mHl3Y4xvE7+OE2TA32KMNP8ScswHwYDVR0j BBgwFoAUTAouhNwPbzBja23SUnq2zWq4r80wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDYyNTYyMS1mMDBmLTQ4MzMtYmJhYi01NmIyNjk3MjE1NDkvMC80QzBBMkU4NERD MEY2RjMwNjM2QjZERDI1MjdBQjZDRDZBQjhBRkNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEMwQTJFODREQzBGNkYzMDYzNkI2REQyNTI3QUI2Q0Q2QUI4 QUZDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQ2MjU2MjEtZjAwZi00ODMzLWJi YWItNTZiMjY5NzIxNTQ5LzAvNEMwQTJFODREQzBGNkYzMDYzNkI2REQyNTI3QUI2 Q0Q2QUI4QUZDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEhUJ0JNIlUxwVwlo24S5bFIW2v1UfQqRMM8 4dKp36L+UWBLBAF3iqzY/NeVFHsqjhgHdSvt5rFnjRy8FtqaEYFU82bDAS9STGQH JsHxeG7PTk/Vsfxo1yi4iAoFSlHTrRqVoVSyUFi2B6wjaqVwwDA1sc7OnX3xQwDa 7SNon4S26tBAay7tfiiDQCudKsoXcbf/Gajsy4NyrM81KhTHe0GIgAKLA5pS+t2k 2Ip0haZ+CDUX7UnuiHOIQ1WsbEFC2l1MkiK95wwyZ3irpFEJbIF08nC/W140H8Nj LoMyCLHMvPA6wO/QJEgPkmb5ZUkM0vWepLB9PXqVZkUQQoHKHAM= -----END CERTIFICATE-----Generated at Fri Apr 25 00:06:28 2025 by rpki-client on console.sobornost.net