$ rpki-client -vvf repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.mft File: F21589FF449CC6950642FB6826CF5416005D740C.mft (raw, json) Hash identifier: 3mmtX8s+3MEqBhw/6demaNfCHH+j3PR7UnwOuGIEN1w= Subject key identifier: A2:1C:DF:50:07:25:CC:E6:EF:46:FB:0F:95:FA:F9:C8:C6:2E:AB:DE Authority key identifier: F2:15:89:FF:44:9C:C6:95:06:42:FB:68:26:CF:54:16:00:5D:74:0C Certificate issuer: /CN=F21589FF449CC6950642FB6826CF5416005D740C Certificate serial: 7E9A63F191EABA9EFE97C4D4EBF41CD36873A7B4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F21589FF449CC6950642FB6826CF5416005D740C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.mft Manifest number: EE Signing time: Thu 24 Apr 2025 22:00:54 +0000 Manifest this update: Thu 24 Apr 2025 21:55:54 +0000 Manifest next update: Mon 28 Apr 2025 05:39:54 +0000 Files and hashes: 1: F21589FF449CC6950642FB6826CF5416005D740C.crl (hash: 1ZLTcgbsKKVgxMgZTT6B73FhoVsz1qxaCDmGOx3TkOk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.crl rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F21589FF449CC6950642FB6826CF5416005D740C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:9a:63:f1:91:ea:ba:9e:fe:97:c4:d4:eb:f4:1c:d3:68:73:a7:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F21589FF449CC6950642FB6826CF5416005D740C Validity Not Before: Apr 24 21:55:54 2025 GMT Not After : Apr 28 05:39:54 2025 GMT Subject: CN=A21CDF500725CCE6EF46FB0F95FAF9C8C62EABDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:95:66:f4:c9:5f:5b:a1:01:2d:5d:ef:55:2b: 7f:40:51:4c:8b:01:f0:ed:9b:52:3e:87:a2:61:64: 73:3d:ca:7e:83:fd:35:f5:ca:59:af:33:56:1f:b5: cf:58:33:8b:67:f2:01:71:f7:10:b0:93:c3:43:86: 5b:1e:cb:61:c8:56:0c:a0:49:d7:60:4c:14:bb:f3: 2b:9a:e5:e2:e0:78:37:bf:2e:ac:44:75:9b:81:42: 2d:41:65:e1:ff:b6:14:6c:a2:8e:6e:1c:02:3a:9f: f9:ca:b2:03:61:6e:e4:e7:5c:bb:d2:c8:78:b4:a2: 00:88:bb:61:91:38:f2:f1:af:96:59:bc:de:0b:82: c1:92:59:30:07:38:96:88:89:7d:38:1a:7a:6d:cf: 21:74:63:44:18:db:fc:a8:02:6f:c7:0b:64:2d:22: 4e:27:7a:0f:48:bd:d2:e5:10:33:65:f7:16:06:75: 0b:42:68:0a:f6:48:be:f4:5d:b7:23:0c:c2:38:07: 17:ac:c4:68:f7:ba:3e:7e:a2:9f:11:36:31:27:ca: 86:1f:83:c1:18:cb:86:dc:e2:32:bc:24:ed:c8:e2: ae:86:cc:da:b2:dc:7b:0a:6f:7b:6e:2f:af:f5:11: 1b:4c:d3:0c:01:63:5a:17:62:1b:fe:db:be:bd:46: b3:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:1C:DF:50:07:25:CC:E6:EF:46:FB:0F:95:FA:F9:C8:C6:2E:AB:DE X509v3 Authority Key Identifier: keyid:F2:15:89:FF:44:9C:C6:95:06:42:FB:68:26:CF:54:16:00:5D:74:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F21589FF449CC6950642FB6826CF5416005D740C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:92:77:68:aa:9c:12:ec:4e:46:fc:cc:7f:97:25:f1:60:4f: aa:48:7e:f6:e9:20:44:df:c6:4c:83:72:28:e5:8e:20:43:36: 71:6b:9a:ed:c3:5b:71:9e:93:88:1c:4e:52:0c:b2:14:21:01: 2b:24:3c:ec:fc:12:63:32:67:93:33:fb:dd:bc:13:24:b5:0f: 00:c5:cd:44:f9:77:c8:10:5f:1b:af:bf:a7:05:a1:05:0d:c7: b2:00:b4:f6:54:b3:fb:ec:ff:58:98:4e:2b:12:53:25:ba:f9: a9:3c:db:6a:4b:cb:1c:20:b9:ba:a5:20:56:58:b4:86:b9:38: fe:53:22:42:0f:dc:7e:c4:f2:a7:c4:0a:e0:d2:6e:a5:6b:49: 11:16:96:fb:6b:22:3c:54:a1:fa:c4:e2:e9:93:b2:69:f3:d2: 01:77:87:f1:22:70:53:85:96:d6:89:48:9c:cb:6d:7f:09:38: 2d:ff:c6:a0:b5:f1:78:70:01:57:82:a9:92:fc:ed:83:90:cd: 7f:cd:45:41:58:b0:97:1f:b2:da:4f:35:e9:22:b0:32:81:fe: dd:24:de:db:a3:01:83:a6:83:d8:b7:28:10:a6:f5:14:03:1e: 05:8f:d2:75:6c:ed:f5:93:2a:f3:e7:3e:1f:ad:67:34:09:00: b8:9f:b0:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfppj8ZHqup7+l8TU6/Qc02hzp7QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjIxNTg5RkY0NDlDQzY5NTA2NDJGQjY4MjZDRjU0MTYw MDVENzQwQzAeFw0yNTA0MjQyMTU1NTRaFw0yNTA0MjgwNTM5NTRaMDMxMTAvBgNV BAMTKEEyMUNERjUwMDcyNUNDRTZFRjQ2RkIwRjk1RkFGOUM4QzYyRUFCREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDClWb0yV9boQEtXe9VK39AUUyL AfDtm1I+h6JhZHM9yn6D/TX1ylmvM1Yftc9YM4tn8gFx9xCwk8NDhlsey2HIVgyg SddgTBS78yua5eLgeDe/LqxEdZuBQi1BZeH/thRsoo5uHAI6n/nKsgNhbuTnXLvS yHi0ogCIu2GROPLxr5ZZvN4LgsGSWTAHOJaIiX04GnptzyF0Y0QY2/yoAm/HC2Qt Ik4neg9IvdLlEDNl9xYGdQtCaAr2SL70XbcjDMI4BxesxGj3uj5+op8RNjEnyoYf g8EYy4bc4jK8JO3I4q6GzNqy3HsKb3tuL6/1ERtM0wwBY1oXYhv+2769RrPtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUohzfUAclzObvRvsPlfr5yMYuq94wHwYDVR0j BBgwFoAU8hWJ/0ScxpUGQvtoJs9UFgBddAwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MDZiMWJjNy1jNjVhLTRhMTEtOTI3My04MTRjNDYwYjZjYmEvMC9GMjE1ODlGRjQ0 OUNDNjk1MDY0MkZCNjgyNkNGNTQxNjAwNUQ3NDBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjIxNTg5RkY0NDlDQzY5NTA2NDJGQjY4MjZDRjU0MTYwMDVE NzQwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTA2YjFiYzctYzY1YS00YTExLTky NzMtODE0YzQ2MGI2Y2JhLzAvRjIxNTg5RkY0NDlDQzY5NTA2NDJGQjY4MjZDRjU0 MTYwMDVENzQwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF6Sd2iqnBLsTkb8zH+XJfFgT6pIfvbpIETf xkyDcijljiBDNnFrmu3DW3Gek4gcTlIMshQhASskPOz8EmMyZ5Mz+928EyS1DwDF zUT5d8gQXxuvv6cFoQUNx7IAtPZUs/vs/1iYTisSUyW6+ak822pLyxwgubqlIFZY tIa5OP5TIkIP3H7E8qfECuDSbqVrSREWlvtrIjxUofrE4umTsmnz0gF3h/EicFOF ltaJSJzLbX8JOC3/xqC18XhwAVeCqZL87YOQzX/NRUFYsJcfstpPNekisDKB/t0k 3tujAYOmg9i3KBCm9RQDHgWP0nVs7fWTKvPnPh+tZzQJALifsFQ= -----END CERTIFICATE-----Generated at Fri Apr 25 03:46:16 2025 by rpki-client on console.sobornost.net