$ rpki-client -vvf repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft File: F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft (raw, json) Hash identifier: iF/+Bz77EsF5Df2bXky+x7ikZh1r1mbJ6qH4974LDKI= Subject key identifier: CF:AF:B4:6B:9A:2E:81:FA:12:EF:DE:10:FC:53:EF:6C:27:7B:87:00 Authority key identifier: F2:B4:D5:C9:8B:07:24:CE:76:E2:12:DF:B6:55:B4:92:8B:4A:C3:25 Certificate issuer: /CN=F2B4D5C98B0724CE76E212DFB655B4928B4AC325 Certificate serial: 4D34322D2F858325CB282E267EA4A219AA341BBE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft Manifest number: 30 Signing time: Thu 24 Apr 2025 01:51:54 +0000 Manifest this update: Thu 24 Apr 2025 01:46:54 +0000 Manifest next update: Sun 27 Apr 2025 09:24:54 +0000 Files and hashes: 1: F2B4D5C98B0724CE76E212DFB655B4928B4AC325.crl (hash: hvicQOUBUafZGzpG3VQ/k9JSMLKyj6aZUcqNMYJ1BCw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.crl rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 08:10:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:34:32:2d:2f:85:83:25:cb:28:2e:26:7e:a4:a2:19:aa:34:1b:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2B4D5C98B0724CE76E212DFB655B4928B4AC325 Validity Not Before: Apr 24 01:46:54 2025 GMT Not After : Apr 27 09:24:54 2025 GMT Subject: CN=CFAFB46B9A2E81FA12EFDE10FC53EF6C277B8700 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:48:9b:a1:8c:a8:bb:4d:f9:ae:68:7b:5f:aa: d1:68:35:5d:e5:9c:21:bf:d9:cf:80:f1:53:da:40: cc:db:9c:6a:8b:7d:91:0f:97:af:9e:9f:22:20:33: ed:84:f0:8d:22:11:b2:60:c2:cf:d2:65:36:55:96: 82:0d:c1:dd:07:21:76:ce:ba:3f:04:62:30:69:f7: f3:eb:84:ef:0a:f2:06:50:6a:bb:87:d7:d8:91:34: 49:fe:a9:9a:50:5d:2e:b4:1f:25:01:55:cf:0c:81: 35:9f:3e:35:ec:d6:74:9e:58:54:d4:27:b0:f6:2d: 39:a0:a4:5a:d9:74:bb:79:72:16:d8:ad:62:90:14: c2:7a:69:3a:6b:38:d6:33:25:51:49:22:d3:b7:35: 77:9f:7b:1c:0f:27:85:0b:bc:38:ce:ad:06:10:b6: b2:30:95:1e:8d:8b:fe:96:9e:a7:ea:cc:54:0f:54: 5a:3d:d6:ce:17:dc:c0:d7:ad:0d:a5:09:5b:b5:fa: 23:28:53:a7:63:04:9e:6b:ce:7a:0c:2b:fd:1f:ad: eb:da:fa:45:78:c1:90:74:73:6a:36:4a:02:e8:63: da:ab:a3:52:b3:a2:3a:0f:f0:af:4c:a0:7a:11:3d: 07:9f:c3:62:ff:6e:aa:01:8b:65:9c:a6:25:93:c1: c4:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:AF:B4:6B:9A:2E:81:FA:12:EF:DE:10:FC:53:EF:6C:27:7B:87:00 X509v3 Authority Key Identifier: keyid:F2:B4:D5:C9:8B:07:24:CE:76:E2:12:DF:B6:55:B4:92:8B:4A:C3:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:60:0c:be:b4:b1:54:0b:60:77:84:77:c8:49:bd:41:12:ef: e1:f0:12:ae:04:38:9a:a3:0e:5e:73:ce:a0:2b:87:df:4b:d6: 16:9e:79:7b:09:26:30:12:46:bc:70:c5:4c:e2:3e:7d:63:07: 05:78:10:72:db:9d:6d:8f:4d:cf:b0:22:07:b7:98:f1:d1:c5: 0b:c7:e1:4a:20:cd:b1:20:01:91:1b:0e:e9:12:7e:cf:35:6c: db:8b:04:b0:d8:ee:0d:62:c9:59:88:f6:67:05:f5:ce:f0:7b: c4:8f:8d:bb:3a:97:b1:ae:9e:0b:f6:eb:c1:09:71:3c:c5:81: fe:14:28:67:bd:57:fc:11:25:94:7b:a3:ff:63:db:97:3d:03: bc:1b:b9:cc:0e:12:a9:db:91:57:d3:06:f7:0e:e7:87:81:ac: a6:5e:0c:54:07:9c:58:25:f0:12:1e:6c:4c:d3:ff:3d:54:66: 8e:24:a9:8f:63:37:fc:92:ba:a9:a8:1b:bc:a6:a7:ff:eb:1d: 48:7d:bf:1a:24:da:f0:ec:f2:21:d7:e2:f1:2d:b4:1e:3f:ef: d9:d8:f7:94:1d:8d:7c:3a:67:b1:ea:5b:a3:b1:5a:24:58:d9: 2f:86:81:79:11:77:f4:af:89:7d:d4:4b:02:7c:b9:54:17:e2: d7:7f:b0:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTTQyLS+FgyXLKC4mfqSiGao0G74wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJCNEQ1Qzk4QjA3MjRDRTc2RTIxMkRGQjY1NUI0OTI4 QjRBQzMyNTAeFw0yNTA0MjQwMTQ2NTRaFw0yNTA0MjcwOTI0NTRaMDMxMTAvBgNV BAMTKENGQUZCNDZCOUEyRTgxRkExMkVGREUxMEZDNTNFRjZDMjc3Qjg3MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQSJuhjKi7TfmuaHtfqtFoNV3l nCG/2c+A8VPaQMzbnGqLfZEPl6+enyIgM+2E8I0iEbJgws/SZTZVloINwd0HIXbO uj8EYjBp9/PrhO8K8gZQaruH19iRNEn+qZpQXS60HyUBVc8MgTWfPjXs1nSeWFTU J7D2LTmgpFrZdLt5chbYrWKQFMJ6aTprONYzJVFJItO3NXefexwPJ4ULvDjOrQYQ trIwlR6Ni/6WnqfqzFQPVFo91s4X3MDXrQ2lCVu1+iMoU6djBJ5rznoMK/0freva +kV4wZB0c2o2SgLoY9qro1KzojoP8K9MoHoRPQefw2L/bqoBi2WcpiWTwcR7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz6+0a5ougfoS794Q/FPvbCd7hwAwHwYDVR0j BBgwFoAU8rTVyYsHJM524hLftlW0kotKwyUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDhlZjExOS03ZGRmLTQ1ZTUtODYzNC0zOGI3NzI1OGNiY2MvMS9GMkI0RDVDOThC MDcyNENFNzZFMjEyREZCNjU1QjQ5MjhCNEFDMzI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjJCNEQ1Qzk4QjA3MjRDRTc2RTIxMkRGQjY1NUI0OTI4QjRB QzMyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQ4ZWYxMTktN2RkZi00NWU1LTg2 MzQtMzhiNzcyNThjYmNjLzEvRjJCNEQ1Qzk4QjA3MjRDRTc2RTIxMkRGQjY1NUI0 OTI4QjRBQzMyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALFgDL60sVQLYHeEd8hJvUES7+HwEq4EOJqj Dl5zzqArh99L1haeeXsJJjASRrxwxUziPn1jBwV4EHLbnW2PTc+wIge3mPHRxQvH 4UogzbEgAZEbDukSfs81bNuLBLDY7g1iyVmI9mcF9c7we8SPjbs6l7Gungv268EJ cTzFgf4UKGe9V/wRJZR7o/9j25c9A7wbucwOEqnbkVfTBvcO54eBrKZeDFQHnFgl 8BIebEzT/z1UZo4kqY9jN/ySuqmoG7ymp//rHUh9vxok2vDs8iHX4vEttB4/79nY 95QdjXw6Z7HqW6OxWiRY2S+GgXkRd/SviX3USwJ8uVQX4td/sJk= -----END CERTIFICATE-----Generated at Thu Apr 24 04:31:37 2025 by rpki-client on console.sobornost.net