$ rpki-client -vvf repo-rpki.idnic.net/repo/4f330d06-f92d-495b-9ba0-acdd817b1483/0/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.mft File: B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.mft (raw, json) Hash identifier: 29b1qi/hpJ+nq1Wm2BscqrXau2thogrv83Q3JUqdONg= Subject key identifier: 81:33:DC:E0:7B:52:0F:A7:E2:C3:2E:3E:1D:69:6B:24:08:AC:0C:8A Authority key identifier: B4:41:54:61:B6:EF:70:D3:D4:A8:1E:D6:88:F2:49:7D:53:A7:FB:7A Certificate issuer: /CN=B4415461B6EF70D3D4A81ED688F2497D53A7FB7A Certificate serial: 65D9AAC1E287C8F5DCBB6BF48BCB5205D1AD9410 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4f330d06-f92d-495b-9ba0-acdd817b1483/0/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.mft Manifest number: 12 Signing time: Thu 24 Apr 2025 08:11:32 +0000 Manifest this update: Thu 24 Apr 2025 08:06:32 +0000 Manifest next update: Sun 27 Apr 2025 18:37:32 +0000 Files and hashes: 1: B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.crl (hash: IsbIX4CYRDrCyDgHUcPY5SyH62alohY23BwdbdWYPFU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4f330d06-f92d-495b-9ba0-acdd817b1483/0/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.crl rsync://repo-rpki.idnic.net/repo/4f330d06-f92d-495b-9ba0-acdd817b1483/0/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 10:42:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:d9:aa:c1:e2:87:c8:f5:dc:bb:6b:f4:8b:cb:52:05:d1:ad:94:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4415461B6EF70D3D4A81ED688F2497D53A7FB7A Validity Not Before: Apr 24 08:06:32 2025 GMT Not After : Apr 27 18:37:32 2025 GMT Subject: CN=8133DCE07B520FA7E2C32E3E1D696B2408AC0C8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:fb:2c:c5:cd:ab:92:83:fd:98:48:90:d7:b4: c8:69:34:74:60:da:39:dd:b2:16:60:60:12:b6:36: 82:b6:3e:24:26:bb:d7:19:1a:f9:ff:b6:af:a8:5d: 6b:33:e8:3c:a4:5c:e2:23:0e:bd:1b:9f:84:31:12: f3:25:32:0e:de:cb:0a:cb:99:65:db:99:99:ce:c8: d2:fe:8b:8e:a3:bc:ab:31:e2:98:ca:66:ee:87:bd: ac:c4:5b:73:7a:6b:f2:8e:76:77:56:d3:8d:e0:e5: 72:5e:21:e3:af:3d:06:4c:e1:93:4b:64:f2:1e:6f: 9a:9c:d1:47:e7:08:4f:d7:6d:18:ca:9d:89:f2:4a: f5:d4:6c:66:2d:f3:7d:92:8b:7a:15:64:2f:cf:b5: e1:4b:61:c3:e9:27:56:85:de:8f:32:0e:e7:94:31: 60:3b:03:0d:80:2c:e9:99:74:ed:3f:93:ee:43:23: d1:9f:7a:bf:40:b5:06:e0:41:22:67:4e:b2:f9:7f: cd:e3:9d:72:38:66:3c:d7:60:7b:04:98:ad:02:cb: a7:ac:83:41:3b:ab:cf:f2:c0:a5:5e:af:2d:3a:82: fe:a3:ea:4e:38:13:d5:da:6a:5a:de:99:7a:aa:de: 01:e7:69:eb:a2:56:8c:32:52:fc:5c:53:f2:97:8c: 2f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:33:DC:E0:7B:52:0F:A7:E2:C3:2E:3E:1D:69:6B:24:08:AC:0C:8A X509v3 Authority Key Identifier: keyid:B4:41:54:61:B6:EF:70:D3:D4:A8:1E:D6:88:F2:49:7D:53:A7:FB:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4f330d06-f92d-495b-9ba0-acdd817b1483/0/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f330d06-f92d-495b-9ba0-acdd817b1483/0/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:fe:b4:d1:49:dc:5d:65:10:4d:7f:98:6f:90:7a:7c:43:c5: fb:8f:f0:24:ce:0a:f4:03:f4:f1:0a:5a:c5:47:a1:c7:ea:48: ef:8e:26:cf:79:b7:d7:0f:76:ec:77:f6:fa:04:b2:9b:34:fc: 71:bb:d2:e9:01:2b:e6:13:fd:88:9a:da:30:8a:53:f4:e2:62: b2:77:78:69:b4:2a:59:e7:21:1a:e9:82:f3:81:e4:20:25:b7: 79:2b:00:2b:61:24:29:dd:95:34:e7:94:50:c7:43:dc:3c:b8: 92:b5:39:df:61:55:06:33:df:a5:2c:60:f7:49:ba:78:07:53: 46:ff:fd:76:cd:55:90:10:45:6a:03:16:dd:ce:70:29:42:2b: 52:17:55:93:50:61:0a:62:6c:3d:14:9e:0f:55:3a:e8:fb:34: ce:da:da:f9:ad:c1:61:f1:db:19:d0:a8:df:0a:1b:05:5d:57: e5:5c:63:ae:86:26:fb:47:d2:31:65:a5:d0:cd:2d:fe:aa:17: d3:27:21:cc:be:75:58:4c:70:4c:74:12:06:1c:60:b4:92:2b: fa:ac:e0:0c:58:49:1b:3a:3d:d9:fb:05:d5:4e:17:1b:17:23: 3b:2f:91:dd:75:27:00:62:4e:67:a0:49:4f:05:c5:d4:fb:d9: a3:2d:d1:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZdmqweKHyPXcu2v0i8tSBdGtlBAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQ0MTU0NjFCNkVGNzBEM0Q0QTgxRUQ2ODhGMjQ5N0Q1 M0E3RkI3QTAeFw0yNTA0MjQwODA2MzJaFw0yNTA0MjcxODM3MzJaMDMxMTAvBgNV BAMTKDgxMzNEQ0UwN0I1MjBGQTdFMkMzMkUzRTFENjk2QjI0MDhBQzBDOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP+yzFzauSg/2YSJDXtMhpNHRg 2jndshZgYBK2NoK2PiQmu9cZGvn/tq+oXWsz6DykXOIjDr0bn4QxEvMlMg7eywrL mWXbmZnOyNL+i46jvKsx4pjKZu6HvazEW3N6a/KOdndW043g5XJeIeOvPQZM4ZNL ZPIeb5qc0UfnCE/XbRjKnYnySvXUbGYt832Si3oVZC/PteFLYcPpJ1aF3o8yDueU MWA7Aw2ALOmZdO0/k+5DI9Gfer9AtQbgQSJnTrL5f83jnXI4ZjzXYHsEmK0Cy6es g0E7q8/ywKVery06gv6j6k44E9XaalremXqq3gHnaeuiVowyUvxcU/KXjC9xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgTPc4HtSD6fiwy4+HWlrJAisDIowHwYDVR0j BBgwFoAUtEFUYbbvcNPUqB7WiPJJfVOn+3owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZjMzMGQwNi1mOTJkLTQ5NWItOWJhMC1hY2RkODE3YjE0ODMvMC9CNDQxNTQ2MUI2 RUY3MEQzRDRBODFFRDY4OEYyNDk3RDUzQTdGQjdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjQ0MTU0NjFCNkVGNzBEM0Q0QTgxRUQ2ODhGMjQ5N0Q1M0E3 RkI3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGYzMzBkMDYtZjkyZC00OTViLTli YTAtYWNkZDgxN2IxNDgzLzAvQjQ0MTU0NjFCNkVGNzBEM0Q0QTgxRUQ2ODhGMjQ5 N0Q1M0E3RkI3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABX+tNFJ3F1lEE1/mG+QenxDxfuP8CTOCvQD 9PEKWsVHocfqSO+OJs95t9cPdux39voEsps0/HG70ukBK+YT/Yia2jCKU/TiYrJ3 eGm0KlnnIRrpgvOB5CAlt3krACthJCndlTTnlFDHQ9w8uJK1Od9hVQYz36UsYPdJ ungHU0b//XbNVZAQRWoDFt3OcClCK1IXVZNQYQpibD0Ung9VOuj7NM7a2vmtwWHx 2xnQqN8KGwVdV+VcY66GJvtH0jFlpdDNLf6qF9MnIcy+dVhMcEx0EgYcYLSSK/qs 4AxYSRs6Pdn7BdVOFxsXIzsvkd11JwBiTmegSU8FxdT72aMt0SE= -----END CERTIFICATE-----Generated at Thu Apr 24 11:25:12 2025 by rpki-client on console.sobornost.net