$ rpki-client -vvf repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft File: 5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft (raw, json) Hash identifier: GFz0H3g3YDfo3/OQ06zONF52v7egfdralzEAu/atKhw= Subject key identifier: 97:3C:4F:D0:A0:82:5E:2E:0F:72:40:64:26:AE:BC:83:14:EE:6A:92 Authority key identifier: 5B:12:21:03:D3:C1:C7:30:AE:CE:59:A7:ED:28:A7:9D:D0:C7:99:48 Certificate issuer: /CN=5B122103D3C1C730AECE59A7ED28A79DD0C79948 Certificate serial: 12F86EBE165938CBFC543777B450CD835A93821F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B122103D3C1C730AECE59A7ED28A79DD0C79948.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft Manifest number: 04C6 Signing time: Thu 24 Apr 2025 13:50:41 +0000 Manifest this update: Thu 24 Apr 2025 13:45:41 +0000 Manifest next update: Mon 28 Apr 2025 00:45:41 +0000 Files and hashes: 1: 5B122103D3C1C730AECE59A7ED28A79DD0C79948.crl (hash: VBRfwPvPZoRuWc0Lmj3T46/dOxQn0C9jqeKfSGRkBWY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.crl rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B122103D3C1C730AECE59A7ED28A79DD0C79948.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 17:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:f8:6e:be:16:59:38:cb:fc:54:37:77:b4:50:cd:83:5a:93:82:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B122103D3C1C730AECE59A7ED28A79DD0C79948 Validity Not Before: Apr 24 13:45:41 2025 GMT Not After : Apr 28 00:45:41 2025 GMT Subject: CN=973C4FD0A0825E2E0F72406426AEBC8314EE6A92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f4:90:ee:46:a0:18:7f:bc:32:11:8b:5c:ed: d9:c6:85:15:24:46:39:2d:3c:b6:bd:40:e7:90:fd: 48:e0:8a:2f:b3:76:1e:0e:5c:13:b3:8d:ba:a0:5d: 46:00:39:86:38:ff:b9:ff:e3:3f:b1:b4:30:10:a9: e7:bf:a6:8c:96:a7:a1:ba:0e:6c:5d:53:ee:c8:fc: 60:2a:28:97:88:b9:39:13:a6:ce:c5:01:a1:9c:73: 78:49:af:cf:b5:da:7b:b6:68:0b:76:3a:d1:81:47: 64:50:6a:50:39:1c:d9:79:5f:a7:72:66:a5:9c:a6: e1:5e:8d:05:f5:52:a9:3e:ce:63:9a:35:a9:f2:37: a6:07:5a:dc:97:e8:65:83:e8:f6:9c:b8:c7:19:e6: 05:1b:4b:12:4a:b4:77:bb:f8:28:17:e6:33:4e:f9: db:ec:6b:bb:ab:d9:49:9a:45:c6:23:2d:aa:f5:49: 43:df:ff:fc:3c:55:08:05:6c:2d:dd:b4:f6:10:61: 2c:43:13:74:d7:98:67:e9:d3:e3:d5:77:10:f2:0c: b6:07:d0:6b:85:0c:50:07:e1:0d:1a:d9:16:69:63: 14:9a:ae:a4:0f:0f:4f:fd:63:9f:23:3e:36:ac:14: d9:fa:78:2d:29:07:96:3f:1a:14:cf:6c:21:d4:c8: 42:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:3C:4F:D0:A0:82:5E:2E:0F:72:40:64:26:AE:BC:83:14:EE:6A:92 X509v3 Authority Key Identifier: keyid:5B:12:21:03:D3:C1:C7:30:AE:CE:59:A7:ED:28:A7:9D:D0:C7:99:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B122103D3C1C730AECE59A7ED28A79DD0C79948.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:49:ce:1e:2b:fe:19:b0:c7:7b:21:2f:4b:ec:a6:01:37:fc: 48:75:ac:23:2c:b0:01:94:45:42:55:c1:70:45:ef:ad:25:b1: bc:fb:24:bb:40:3a:38:94:87:c1:fe:3e:8b:79:0b:2b:d8:c6: 32:50:af:f3:91:97:1f:b1:cb:31:9e:7e:d3:94:19:c6:e8:ec: 76:f9:74:ec:0e:42:dc:30:fd:a8:1d:07:ba:d8:b7:4a:6b:82: c9:c4:5a:b7:05:35:69:9b:a3:94:fb:47:ed:91:70:70:81:6c: 86:e2:25:b1:57:0f:b6:aa:30:62:a7:c9:56:68:b4:9b:89:11: cb:30:17:bb:ee:37:5b:6d:ad:65:98:ee:1d:e1:f9:d6:3e:e0: e2:84:7f:87:89:bc:ff:6d:16:b9:db:5b:90:56:4e:24:4f:5a: 5b:a0:e6:47:48:23:6d:be:f6:ad:8a:10:6d:f0:c4:2a:a9:b5: 8c:3f:44:0e:f3:85:96:25:38:7f:77:5a:79:2f:91:e6:bf:8d: 94:13:3f:ad:5c:3b:86:bd:06:70:2b:c0:a7:91:d2:18:6f:da: 72:f8:a0:e8:d1:6e:fe:30:1b:dd:e7:ed:66:1e:cd:fa:d2:a4: 6e:03:5b:83:34:8a:c4:0c:63:e6:a1:75:77:12:fd:20:f3:84: 4b:c7:2e:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEvhuvhZZOMv8VDd3tFDNg1qTgh8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUIxMjIxMDNEM0MxQzczMEFFQ0U1OUE3RUQyOEE3OURE MEM3OTk0ODAeFw0yNTA0MjQxMzQ1NDFaFw0yNTA0MjgwMDQ1NDFaMDMxMTAvBgNV BAMTKDk3M0M0RkQwQTA4MjVFMkUwRjcyNDA2NDI2QUVCQzgzMTRFRTZBOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA9JDuRqAYf7wyEYtc7dnGhRUk RjktPLa9QOeQ/Ujgii+zdh4OXBOzjbqgXUYAOYY4/7n/4z+xtDAQqee/poyWp6G6 DmxdU+7I/GAqKJeIuTkTps7FAaGcc3hJr8+12nu2aAt2OtGBR2RQalA5HNl5X6dy ZqWcpuFejQX1Uqk+zmOaNanyN6YHWtyX6GWD6PacuMcZ5gUbSxJKtHe7+CgX5jNO +dvsa7ur2UmaRcYjLar1SUPf//w8VQgFbC3dtPYQYSxDE3TXmGfp0+PVdxDyDLYH 0GuFDFAH4Q0a2RZpYxSarqQPD0/9Y58jPjasFNn6eC0pB5Y/GhTPbCHUyEIvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlzxP0KCCXi4PckBkJq68gxTuapIwHwYDVR0j BBgwFoAUWxIhA9PBxzCuzlmn7SinndDHmUgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MTcyZWVmOS1lYzZhLTQ1NTgtODE4MS1hMTFmZTY1YjhmZjgvMC81QjEyMjEwM0Qz QzFDNzMwQUVDRTU5QTdFRDI4QTc5REQwQzc5OTQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUIxMjIxMDNEM0MxQzczMEFFQ0U1OUE3RUQyOEE3OUREMEM3 OTk0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjE3MmVlZjktZWM2YS00NTU4LTgx ODEtYTExZmU2NWI4ZmY4LzAvNUIxMjIxMDNEM0MxQzczMEFFQ0U1OUE3RUQyOEE3 OUREMEM3OTk0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABRJzh4r/hmwx3shL0vspgE3/Eh1rCMssAGU RUJVwXBF760lsbz7JLtAOjiUh8H+Pot5CyvYxjJQr/ORlx+xyzGeftOUGcbo7Hb5 dOwOQtww/agdB7rYt0prgsnEWrcFNWmbo5T7R+2RcHCBbIbiJbFXD7aqMGKnyVZo tJuJEcswF7vuN1ttrWWY7h3h+dY+4OKEf4eJvP9tFrnbW5BWTiRPWlug5kdII22+ 9q2KEG3wxCqptYw/RA7zhZYlOH93Wnkvkea/jZQTP61cO4a9BnArwKeR0hhv2nL4 oOjRbv4wG93n7WYezfrSpG4DW4M0isQMY+ahdXcS/SDzhEvHLlU= -----END CERTIFICATE-----Generated at Thu Apr 24 15:50:03 2025 by rpki-client on console.sobornost.net