$ rpki-client -vvf repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.mft File: 4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.mft (raw, json) Hash identifier: Ly0AsQGU6mTVrqKJ7xtTGZ4ccZk6YqNMyUVBvxJ7SMQ= Subject key identifier: 08:25:1D:56:01:62:9C:FA:E6:E3:14:CA:C8:D8:57:D3:3B:77:5E:95 Authority key identifier: 4A:8B:6A:33:95:61:2C:D3:3D:A8:B3:C3:81:D6:ED:CF:A4:A4:5A:1F Certificate issuer: /CN=4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F Certificate serial: 32629BFF9D681A3FEEDA49C6E3A6C7EC145C54 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.mft Manifest number: 01CB Signing time: Thu 24 Apr 2025 14:11:05 +0000 Manifest this update: Thu 24 Apr 2025 14:06:05 +0000 Manifest next update: Sun 27 Apr 2025 22:24:05 +0000 Files and hashes: 1: 4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.crl (hash: IhXZjUmAE1Q1TR++3nrHvRMK18CSO7wteWpJ4ghNa7U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.crl rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 17:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:62:9b:ff:9d:68:1a:3f:ee:da:49:c6:e3:a6:c7:ec:14:5c:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F Validity Not Before: Apr 24 14:06:05 2025 GMT Not After : Apr 27 22:24:05 2025 GMT Subject: CN=08251D5601629CFAE6E314CAC8D857D33B775E95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:3e:8f:3a:15:ab:9f:9b:eb:33:3e:79:0d:6b: ac:f6:fe:85:31:99:26:47:ea:0d:52:8b:2b:03:ef: 4f:7b:9c:9f:3e:5a:6a:03:85:19:0b:d9:9c:a2:f6: 57:a4:77:d4:97:6f:dc:93:72:aa:a5:6e:42:34:02: d5:dd:9b:10:b9:e7:19:c7:af:5c:fc:af:52:b6:27: 96:32:6a:ab:79:ee:25:ed:af:59:d1:14:92:4f:8b: 7a:92:2b:1b:d9:e0:93:d6:9c:c6:1c:8c:e0:b6:6c: 65:30:03:be:29:c4:35:9b:37:ca:f2:35:49:01:6b: 46:c8:05:3e:97:1c:a1:69:fe:8d:4a:10:a0:de:ca: 2b:c7:97:e1:30:67:f5:d4:bc:2b:45:d1:81:c9:3f: 4c:6b:87:84:ab:a9:52:3d:f5:4f:e8:23:ab:7a:ad: 48:bd:c4:7c:1c:44:fe:12:58:2e:5d:66:00:88:df: 8d:b3:0c:40:94:70:50:38:56:19:98:ab:44:0e:29: 13:7e:84:75:22:ef:52:f1:98:70:20:15:77:b6:3b: bd:16:3a:3d:69:55:d9:72:07:1d:e9:f6:5c:63:05: 99:c6:8f:b5:94:44:e5:b2:1c:40:04:86:1c:34:e5: 30:58:ed:aa:84:9d:07:cf:ee:c6:d6:0e:e8:47:2c: b0:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:25:1D:56:01:62:9C:FA:E6:E3:14:CA:C8:D8:57:D3:3B:77:5E:95 X509v3 Authority Key Identifier: keyid:4A:8B:6A:33:95:61:2C:D3:3D:A8:B3:C3:81:D6:ED:CF:A4:A4:5A:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:9e:4c:87:62:ef:21:a8:cf:fe:95:38:ff:99:ce:0f:62:82: c7:da:92:7e:8f:df:0b:6c:84:2d:a0:44:25:26:66:37:33:85: 92:d7:a1:f3:0d:b5:8f:3f:58:c9:48:78:5e:46:aa:a9:e0:09: 23:cb:99:55:d8:bb:31:2c:83:7b:22:4e:41:30:5f:bb:1b:34: 57:ac:66:c4:2d:21:e5:de:7f:77:f2:f5:f4:94:55:ef:a3:70: 08:d6:17:23:9b:2a:05:56:17:74:86:cb:9a:2f:51:be:91:71: 56:13:c8:d0:d9:2c:13:98:66:f1:39:bc:76:d6:61:ee:2c:f7: 80:6e:46:b3:6b:a0:38:4a:af:7d:c8:0a:d1:f6:7b:d2:e6:15: f8:0f:c3:8a:e1:80:07:fe:a0:be:fe:5a:8e:79:9e:2f:a7:d9: 0c:35:8c:da:fd:2a:f9:73:a4:56:e1:b3:62:3f:9d:23:89:9a: 65:76:88:ab:c5:7b:ca:63:a5:df:62:e2:8f:c3:a0:d6:56:89: aa:cd:2e:a0:24:8a:c3:ac:35:5d:c7:f7:77:1d:7f:3f:63:19: 08:96:e8:3b:41:7e:f6:55:dd:09:0a:68:38:0c:ed:e3:c3:0d: e3:5a:c3:56:99:40:4c:69:5a:8c:f7:fe:28:13:2e:08:c6:c9: db:8e:c5:f1 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITMmKb/51oGj/u2knG46bH7BRcVDANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg0QThCNkEzMzk1NjEyQ0QzM0RBOEIzQzM4MUQ2RURDRkE0 QTQ1QTFGMB4XDTI1MDQyNDE0MDYwNVoXDTI1MDQyNzIyMjQwNVowMzExMC8GA1UE AxMoMDgyNTFENTYwMTYyOUNGQUU2RTMxNENBQzhEODU3RDMzQjc3NUU5NTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANY+jzoVq5+b6zM+eQ1rrPb+hTGZ JkfqDVKLKwPvT3ucnz5aagOFGQvZnKL2V6R31Jdv3JNyqqVuQjQC1d2bELnnGcev XPyvUrYnljJqq3nuJe2vWdEUkk+LepIrG9ngk9acxhyM4LZsZTADvinENZs3yvI1 SQFrRsgFPpccoWn+jUoQoN7KK8eX4TBn9dS8K0XRgck/TGuHhKupUj31T+gjq3qt SL3EfBxE/hJYLl1mAIjfjbMMQJRwUDhWGZirRA4pE36EdSLvUvGYcCAVd7Y7vRY6 PWlV2XIHHen2XGMFmcaPtZRE5bIcQASGHDTlMFjtqoSdB8/uxtYO6EcssGcCAwEA AaOCAjwwggI4MB0GA1UdDgQWBBQIJR1WAWKc+ubjFMrI2FfTO3delTAfBgNVHSME GDAWgBRKi2ozlWEs0z2os8OB1u3PpKRaHzAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU5 YTM3YWVjLTYzYzItNDVkMS05NmFlLWRhMTZkMTAxOGIwZi8wLzRBOEI2QTMzOTU2 MTJDRDMzREE4QjNDMzgxRDZFRENGQTRBNDVBMUYuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v SUROSUMtSUQvMi80QThCNkEzMzk1NjEyQ0QzM0RBOEIzQzM4MUQ2RURDRkE0QTQ1 QTFGLmNlcjCBkwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzov L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81OWEzN2FlYy02M2MyLTQ1ZDEtOTZh ZS1kYTE2ZDEwMThiMGYvMC80QThCNkEzMzk1NjEyQ0QzM0RBOEIzQzM4MUQ2RURD RkE0QTQ1QTFGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAKJ5Mh2LvIajP/pU4/5nOD2KCx9qSfo/fC2yE LaBEJSZmNzOFkteh8w21jz9YyUh4XkaqqeAJI8uZVdi7MSyDeyJOQTBfuxs0V6xm xC0h5d5/d/L19JRV76NwCNYXI5sqBVYXdIbLmi9RvpFxVhPI0NksE5hm8Tm8dtZh 7iz3gG5Gs2ugOEqvfcgK0fZ70uYV+A/DiuGAB/6gvv5ajnmeL6fZDDWM2v0q+XOk VuGzYj+dI4maZXaIq8V7ymOl32Lij8Og1laJqs0uoCSKw6w1Xcf3dx1/P2MZCJbo O0F+9lXdCQpoOAzt48MN41rDVplATGlajPf+KBMuCMbJ247F8Q== -----END CERTIFICATE-----Generated at Thu Apr 24 15:50:03 2025 by rpki-client on console.sobornost.net