$ rpki-client -vvf repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.mft File: 33D26363FA5B5B53C17981915CBADB375AE27253.mft (raw, json) Hash identifier: Na8sLK368zd/NaYKZb+GXy296nK8xcHjig+jAkW+ZnA= Subject key identifier: D3:70:29:A4:9B:06:7A:7B:F3:25:DD:5C:D7:28:55:78:79:30:3E:35 Authority key identifier: 33:D2:63:63:FA:5B:5B:53:C1:79:81:91:5C:BA:DB:37:5A:E2:72:53 Certificate issuer: /CN=33D26363FA5B5B53C17981915CBADB375AE27253 Certificate serial: 15BBA44C969B9C95255613FFD269BF960F136F8C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D26363FA5B5B53C17981915CBADB375AE27253.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.mft Manifest number: 40 Signing time: Thu 24 Apr 2025 08:41:23 +0000 Manifest this update: Thu 24 Apr 2025 08:36:23 +0000 Manifest next update: Sun 27 Apr 2025 15:21:23 +0000 Files and hashes: 1: 33D26363FA5B5B53C17981915CBADB375AE27253.crl (hash: T2G2F/DllfBREoyKkUqwMTXt0U54Bn6f3BMuHXSHMss=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.crl rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D26363FA5B5B53C17981915CBADB375AE27253.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 10:42:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:bb:a4:4c:96:9b:9c:95:25:56:13:ff:d2:69:bf:96:0f:13:6f:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33D26363FA5B5B53C17981915CBADB375AE27253 Validity Not Before: Apr 24 08:36:23 2025 GMT Not After : Apr 27 15:21:23 2025 GMT Subject: CN=D37029A49B067A7BF325DD5CD728557879303E35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:58:54:b7:9c:d7:d7:03:78:0f:97:d7:85:35: 90:42:f9:06:a0:f7:a3:de:c0:8d:51:1f:af:f7:59: 37:cb:69:48:02:a1:e9:b1:43:fb:73:00:54:b4:a4: f5:86:4a:cb:77:16:70:0b:2f:66:e7:d1:31:d0:85: e6:4f:d7:2a:b6:75:d8:da:7e:a1:b1:bd:e0:8d:b7: 1c:44:7e:ef:3b:fc:d9:cb:9d:5e:6e:28:ec:d4:df: 09:8d:58:b3:a2:36:a6:56:27:75:70:9f:df:6d:5a: 92:61:08:7a:0e:b6:41:60:c4:ce:3c:6c:33:1f:93: 3f:35:9b:53:1c:f1:86:86:7e:80:3d:63:1b:9f:d1: e1:d1:82:a8:2d:7d:2e:6b:c1:06:7f:c1:9f:b5:79: 84:18:16:ed:44:0e:f6:43:5c:71:97:f3:90:d7:bc: 59:e7:72:ac:15:5a:3a:db:db:46:ca:30:6c:4c:60: 6c:43:98:41:53:3e:e8:ac:d2:f3:a7:29:76:dc:59: 2a:a5:1c:a6:4f:eb:07:52:a1:2f:bc:0d:7b:dc:98: 58:2c:ee:42:e6:d4:e8:75:72:79:da:96:03:2c:0a: 78:73:a1:f6:47:fe:76:b4:19:6e:2f:2b:9b:43:08: a6:a8:e4:a7:69:b3:76:ab:ac:84:c2:1e:ad:43:af: 4c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:70:29:A4:9B:06:7A:7B:F3:25:DD:5C:D7:28:55:78:79:30:3E:35 X509v3 Authority Key Identifier: keyid:33:D2:63:63:FA:5B:5B:53:C1:79:81:91:5C:BA:DB:37:5A:E2:72:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D26363FA5B5B53C17981915CBADB375AE27253.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/33D26363FA5B5B53C17981915CBADB375AE27253.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:a4:60:f4:d1:ac:b9:8d:ad:1b:16:90:2f:1e:e7:0e:2f:57: ad:47:ce:e4:a3:28:fc:cd:34:40:4f:73:60:68:73:11:a9:94: e1:59:e1:f0:86:35:54:64:ff:57:45:c5:39:ea:45:f4:6f:0d: 87:23:cf:53:b7:5a:8c:5a:78:ae:c6:10:dc:c8:6b:59:a4:80: 87:fe:23:89:53:84:f6:4d:50:b7:70:d9:20:f9:4b:77:89:ff: d6:f1:17:16:95:14:f9:d1:3c:37:74:65:de:02:1c:9a:b4:98: 08:62:02:00:ca:32:75:48:62:ba:06:5b:b7:45:85:4e:69:9d: 56:55:39:ec:66:fa:fd:4f:e9:1f:ef:50:b6:8d:fa:13:c4:4d: c3:aa:e7:6c:82:83:cc:00:af:bf:07:a8:32:ba:53:43:4a:55: ec:1a:46:eb:92:c1:d7:c7:bf:48:e4:ab:a6:a9:48:c5:05:d7: 51:36:b2:d0:e1:58:87:cb:0e:6f:18:a4:2d:27:a4:22:76:7b: 4d:0b:7b:da:8d:9b:1b:bb:13:80:49:f6:68:80:08:0f:00:01: 50:c7:a8:c5:56:97:23:df:9c:26:bc:71:e5:dc:f2:af:90:6e: 00:03:1e:ec:e2:3d:1c:7f:c5:62:2d:0f:01:3d:83:3a:16:c5: 44:98:cb:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFbukTJabnJUlVhP/0mm/lg8Tb4wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNEMjYzNjNGQTVCNUI1M0MxNzk4MTkxNUNCQURCMzc1 QUUyNzI1MzAeFw0yNTA0MjQwODM2MjNaFw0yNTA0MjcxNTIxMjNaMDMxMTAvBgNV BAMTKEQzNzAyOUE0OUIwNjdBN0JGMzI1REQ1Q0Q3Mjg1NTc4NzkzMDNFMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLWFS3nNfXA3gPl9eFNZBC+Qag 96PewI1RH6/3WTfLaUgCoemxQ/tzAFS0pPWGSst3FnALL2bn0THQheZP1yq2ddja fqGxveCNtxxEfu87/NnLnV5uKOzU3wmNWLOiNqZWJ3Vwn99tWpJhCHoOtkFgxM48 bDMfkz81m1Mc8YaGfoA9Yxuf0eHRgqgtfS5rwQZ/wZ+1eYQYFu1EDvZDXHGX85DX vFnncqwVWjrb20bKMGxMYGxDmEFTPuis0vOnKXbcWSqlHKZP6wdSoS+8DXvcmFgs 7kLm1Oh1cnnalgMsCnhzofZH/na0GW4vK5tDCKao5Kdps3arrITCHq1Dr0xlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU03AppJsGenvzJd1c1yhVeHkwPjUwHwYDVR0j BBgwFoAUM9JjY/pbW1PBeYGRXLrbN1riclMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YzU4ZmI3Yy02N2I4LTRiY2UtOTZkOS1iZTkxMmUzZjczZGQvMS8zM0QyNjM2M0ZB NUI1QjUzQzE3OTgxOTE1Q0JBREIzNzVBRTI3MjUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNEMjYzNjNGQTVCNUI1M0MxNzk4MTkxNUNCQURCMzc1QUUy NzI1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGM1OGZiN2MtNjdiOC00YmNlLTk2 ZDktYmU5MTJlM2Y3M2RkLzEvMzNEMjYzNjNGQTVCNUI1M0MxNzk4MTkxNUNCQURC Mzc1QUUyNzI1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACWkYPTRrLmNrRsWkC8e5w4vV61HzuSjKPzN NEBPc2BocxGplOFZ4fCGNVRk/1dFxTnqRfRvDYcjz1O3WoxaeK7GENzIa1mkgIf+ I4lThPZNULdw2SD5S3eJ/9bxFxaVFPnRPDd0Zd4CHJq0mAhiAgDKMnVIYroGW7dF hU5pnVZVOexm+v1P6R/vULaN+hPETcOq52yCg8wAr78HqDK6U0NKVewaRuuSwdfH v0jkq6apSMUF11E2stDhWIfLDm8YpC0npCJ2e00Le9qNmxu7E4BJ9miACA8AAVDH qMVWlyPfnCa8ceXc8q+QbgADHuziPRx/xWItDwE9gzoWxUSYyzo= -----END CERTIFICATE-----Generated at Thu Apr 24 11:25:12 2025 by rpki-client on console.sobornost.net