$ rpki-client -vvf repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft File: 3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft (raw, json) Hash identifier: qZ+J78HfwPUv4XI3NFUMNE9QrUcIUeq57JCPAxwsdvA= Subject key identifier: 18:B3:62:ED:14:69:4E:DE:F6:C1:65:2D:66:19:57:C5:CC:0D:13:0B Authority key identifier: 3D:6B:7D:1E:71:83:96:2C:FD:ED:18:9F:6C:36:FF:F3:03:A0:DA:00 Certificate issuer: /CN=3D6B7D1E7183962CFDED189F6C36FFF303A0DA00 Certificate serial: 27D3413B52C032B8EDA4AEB6C30BDD8C3024F12F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft Manifest number: CD Signing time: Wed 23 Apr 2025 10:10:42 +0000 Manifest this update: Wed 23 Apr 2025 10:05:42 +0000 Manifest next update: Sat 26 Apr 2025 14:08:42 +0000 Files and hashes: 1: 3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.crl (hash: wr3fFH2qm85F78bPFRPp9oOxOIzgvlRfRTjGIm1Fp+k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.crl rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 12:29:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:d3:41:3b:52:c0:32:b8:ed:a4:ae:b6:c3:0b:dd:8c:30:24:f1:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D6B7D1E7183962CFDED189F6C36FFF303A0DA00 Validity Not Before: Apr 23 10:05:42 2025 GMT Not After : Apr 26 14:08:42 2025 GMT Subject: CN=18B362ED14694EDEF6C1652D661957C5CC0D130B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5b:e1:71:aa:a9:c3:b5:fc:9c:91:06:a2:3e: 18:91:a9:91:8e:b8:90:39:1f:fa:28:2c:c3:67:b2: bd:53:3f:50:0f:18:fd:45:1f:34:b6:25:39:dd:23: 36:34:70:99:64:49:16:16:56:34:d5:2b:5e:07:e8: a0:5f:cc:0a:81:2f:50:ff:e8:5a:07:98:6d:32:c9: 55:b9:e8:69:34:c4:b7:46:fb:ed:4f:e9:00:b2:32: 66:d3:db:e1:ba:4c:4f:91:a0:70:26:56:50:17:98: 9a:53:b5:6a:ba:5a:dd:64:f5:cf:a0:6f:6b:10:6e: 22:ae:5e:f0:17:4d:c1:b9:0f:6f:46:80:7b:8b:99: c1:33:0e:f4:bc:c2:ec:d8:cf:27:8f:df:ee:74:05: 46:4a:f3:92:05:d7:24:bb:3a:86:48:7c:e1:34:c7: 8e:7f:bb:e3:a7:3e:22:7c:d4:66:33:b2:a7:e8:1c: 50:9e:04:8c:3a:a8:56:5c:3b:5c:c3:22:85:a7:48: 2f:9f:b1:8f:3d:a4:1a:ba:e7:fa:bc:b9:87:ca:40: af:fd:db:5b:06:c9:52:bf:04:d1:ca:e8:6b:51:78: a4:38:b3:8a:ab:eb:f6:67:eb:48:3b:0d:42:cf:f7: 7e:57:cb:51:86:d2:99:91:cf:1b:7c:04:d9:4d:fd: fa:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:B3:62:ED:14:69:4E:DE:F6:C1:65:2D:66:19:57:C5:CC:0D:13:0B X509v3 Authority Key Identifier: keyid:3D:6B:7D:1E:71:83:96:2C:FD:ED:18:9F:6C:36:FF:F3:03:A0:DA:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:a2:c6:d0:3b:9a:a4:25:bc:f1:20:37:84:d6:6c:31:fc:55: 53:69:7f:7d:0a:09:c5:36:81:7a:1e:18:64:4b:a8:f9:30:7c: 8f:ef:05:dd:b9:f0:7b:79:34:33:48:b0:92:a5:75:c6:6b:cf: 17:07:f8:89:fc:aa:03:22:cd:75:c8:0f:30:e8:8f:56:85:61: 21:0a:4d:c6:d0:43:42:be:e6:ed:59:b3:97:bc:64:d8:a2:cf: bb:1e:e9:2e:84:5b:c1:c0:ed:67:62:ee:9c:68:1f:5b:c8:6b: 80:3c:dd:15:91:c5:3b:f9:93:cc:23:b8:95:9c:a2:1d:a1:3e: a7:bd:9d:b6:a5:64:a2:be:60:64:32:91:76:4c:6c:5f:54:bf: 72:75:dd:d4:57:61:b1:27:cd:89:7f:1c:f6:56:61:23:ae:ec: 88:22:28:c0:36:ad:fe:11:96:3f:77:7b:65:b2:5a:bb:b4:2d: b2:26:86:d7:11:54:33:5e:bd:92:c1:42:b8:fe:eb:14:81:37: b3:b2:22:ad:0a:e6:d7:55:74:4d:fc:ce:d5:04:bb:52:6e:8b: c9:3e:00:8e:df:0c:a4:23:1f:dc:25:76:60:63:18:6a:0a:5c: a5:d4:fa:1f:73:5a:c6:ae:fd:38:26:5a:7d:44:50:5a:7d:3e: 9c:d1:f9:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ9NBO1LAMrjtpK62wwvdjDAk8S8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q2QjdEMUU3MTgzOTYyQ0ZERUQxODlGNkMzNkZGRjMw M0EwREEwMDAeFw0yNTA0MjMxMDA1NDJaFw0yNTA0MjYxNDA4NDJaMDMxMTAvBgNV BAMTKDE4QjM2MkVEMTQ2OTRFREVGNkMxNjUyRDY2MTk1N0M1Q0MwRDEzMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9W+FxqqnDtfyckQaiPhiRqZGO uJA5H/ooLMNnsr1TP1APGP1FHzS2JTndIzY0cJlkSRYWVjTVK14H6KBfzAqBL1D/ 6FoHmG0yyVW56Gk0xLdG++1P6QCyMmbT2+G6TE+RoHAmVlAXmJpTtWq6Wt1k9c+g b2sQbiKuXvAXTcG5D29GgHuLmcEzDvS8wuzYzyeP3+50BUZK85IF1yS7OoZIfOE0 x45/u+OnPiJ81GYzsqfoHFCeBIw6qFZcO1zDIoWnSC+fsY89pBq65/q8uYfKQK/9 21sGyVK/BNHK6GtReKQ4s4qr6/Zn60g7DULP935Xy1GG0pmRzxt8BNlN/frzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGLNi7RRpTt72wWUtZhlXxcwNEwswHwYDVR0j BBgwFoAUPWt9HnGDliz97RifbDb/8wOg2gAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MmJkMGU5NC04NjAzLTQ1N2YtYjUzNy05MjMxMDg0YmM0NTAvMC8zRDZCN0QxRTcx ODM5NjJDRkRFRDE4OUY2QzM2RkZGMzAzQTBEQTAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q2QjdEMUU3MTgzOTYyQ0ZERUQxODlGNkMzNkZGRjMwM0Ew REEwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTJiZDBlOTQtODYwMy00NTdmLWI1 MzctOTIzMTA4NGJjNDUwLzAvM0Q2QjdEMUU3MTgzOTYyQ0ZERUQxODlGNkMzNkZG RjMwM0EwREEwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFeixtA7mqQlvPEgN4TWbDH8VVNpf30KCcU2 gXoeGGRLqPkwfI/vBd258Ht5NDNIsJKldcZrzxcH+In8qgMizXXIDzDoj1aFYSEK TcbQQ0K+5u1Zs5e8ZNiiz7se6S6EW8HA7Wdi7pxoH1vIa4A83RWRxTv5k8wjuJWc oh2hPqe9nbalZKK+YGQykXZMbF9Uv3J13dRXYbEnzYl/HPZWYSOu7IgiKMA2rf4R lj93e2WyWru0LbImhtcRVDNevZLBQrj+6xSBN7OyIq0K5tdVdE38ztUEu1Jui8k+ AI7fDKQjH9wldmBjGGoKXKXU+h9zWsau/TgmWn1EUFp9PpzR+Yw= -----END CERTIFICATE-----Generated at Wed Apr 23 13:25:32 2025 by rpki-client on console.sobornost.net