$ rpki-client -vvf repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft File: 8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft (raw, json) Hash identifier: YFsLBXsXXRlDfsBXxsV4p/bu6JQ2pfMM73KSf8uxzXM= Subject key identifier: D7:BA:72:96:64:64:D0:C1:CB:BF:82:93:85:5D:61:8D:8C:BC:6B:39 Authority key identifier: 8D:5A:49:C9:E4:2E:37:1B:FD:1E:67:AC:E1:B3:D5:5E:C1:AB:F7:3F Certificate issuer: /CN=8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F Certificate serial: 62650EA26365E8D6DE34DF89CE632D71A18D92FE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft Manifest number: 5F Signing time: Thu 24 Apr 2025 15:20:52 +0000 Manifest this update: Thu 24 Apr 2025 15:15:52 +0000 Manifest next update: Mon 28 Apr 2025 02:56:52 +0000 Files and hashes: 1: 8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.crl (hash: 7pYVNN0leYFIAn9ptw1HNVtnasMf30MIYeR+zcujfSQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.crl rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 19:07:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:65:0e:a2:63:65:e8:d6:de:34:df:89:ce:63:2d:71:a1:8d:92:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F Validity Not Before: Apr 24 15:15:52 2025 GMT Not After : Apr 28 02:56:52 2025 GMT Subject: CN=D7BA72966464D0C1CBBF8293855D618D8CBC6B39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f1:c9:19:c9:f6:b5:16:a6:0f:4d:3e:5e:53: 76:ac:04:6e:87:9f:76:5a:2a:6e:94:19:59:fe:21: 0e:86:92:42:b8:ec:58:2c:14:59:3a:af:3b:1d:9f: 8b:bd:90:15:ff:8c:20:57:7c:75:01:f3:37:f1:fb: 0f:ba:38:10:d4:c9:04:1b:b9:b7:d8:1a:56:13:06: 76:e7:68:ab:2e:dc:dc:9e:9a:2c:a8:5c:70:21:1e: cf:77:a4:bd:a4:d8:11:5f:4c:6c:2b:79:b2:ae:7f: d1:56:f1:ff:46:9c:05:f5:cc:a4:8c:4c:7c:e0:e9: 12:85:c1:b0:05:ad:16:e0:cf:0c:e5:d8:71:33:e3: e9:c5:ca:6c:a8:9c:45:d1:ac:9e:b4:56:18:dd:83: 32:65:ed:20:56:3f:65:b5:b9:cb:6b:04:9c:e2:7b: a7:83:2c:8a:62:f6:47:01:c3:ee:3a:1d:eb:95:c2: 79:01:a2:f7:a3:e3:a7:db:95:4b:f6:94:4f:69:a4: 88:44:a0:da:b3:f9:7f:b4:d9:55:ed:74:1b:69:d1: 22:7e:dd:0e:36:43:a2:82:97:44:9f:bd:f2:ca:92: 08:c8:d4:35:a7:21:d7:8e:43:1a:8f:06:ec:4f:b7: a7:52:bc:52:55:eb:df:ee:2d:f1:66:b9:1f:1d:e8: 91:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:BA:72:96:64:64:D0:C1:CB:BF:82:93:85:5D:61:8D:8C:BC:6B:39 X509v3 Authority Key Identifier: keyid:8D:5A:49:C9:E4:2E:37:1B:FD:1E:67:AC:E1:B3:D5:5E:C1:AB:F7:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:7f:58:30:19:97:f6:a1:c8:ef:e1:03:32:5b:8b:9e:5e:85: f4:95:b7:9c:cc:26:9c:9d:7c:d4:8b:9d:ab:fc:04:6c:89:8f: f2:6c:6a:54:e9:e8:ba:af:30:e4:a5:54:84:d2:46:8b:52:06: 0b:3d:58:c0:44:61:f3:d7:9f:3e:6a:03:05:85:55:b2:13:ae: 67:21:3a:cf:c8:53:d2:76:1b:7e:46:2b:2d:31:8d:ec:30:fe: b2:5d:6a:63:f5:72:a2:e3:ad:be:d9:bd:0c:20:9f:80:1f:c7: 67:dc:4b:c8:63:92:e2:47:b7:aa:e0:d9:bc:2b:b9:46:d9:e0: 5b:49:cf:f4:42:29:2b:cb:cd:31:1d:86:c6:1c:92:09:b5:eb: 8f:30:77:95:57:9d:21:0f:f7:4f:8a:6b:b6:00:f5:c9:c5:84: 16:1f:3f:e7:46:0d:f2:c6:6d:f5:2b:d0:2e:18:69:52:93:7f: 23:7e:03:f4:3f:3f:00:fb:62:d8:0c:52:07:cf:18:8b:be:49: 60:6b:f6:11:51:71:25:96:a4:34:a0:30:f6:7f:e3:af:26:b1: 89:d7:80:b4:48:c5:65:1c:93:7c:76:11:19:52:79:26:0c:ca: 4a:9c:3a:97:b6:a7:43:51:93:23:06:04:76:dc:44:5f:69:82: fa:78:2f:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYmUOomNl6NbeNN+JzmMtcaGNkv4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ1QTQ5QzlFNDJFMzcxQkZEMUU2N0FDRTFCM0Q1NUVD MUFCRjczRjAeFw0yNTA0MjQxNTE1NTJaFw0yNTA0MjgwMjU2NTJaMDMxMTAvBgNV BAMTKEQ3QkE3Mjk2NjQ2NEQwQzFDQkJGODI5Mzg1NUQ2MThEOENCQzZCMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu8ckZyfa1FqYPTT5eU3asBG6H n3ZaKm6UGVn+IQ6GkkK47FgsFFk6rzsdn4u9kBX/jCBXfHUB8zfx+w+6OBDUyQQb ubfYGlYTBnbnaKsu3NyemiyoXHAhHs93pL2k2BFfTGwrebKuf9FW8f9GnAX1zKSM THzg6RKFwbAFrRbgzwzl2HEz4+nFymyonEXRrJ60VhjdgzJl7SBWP2W1uctrBJzi e6eDLIpi9kcBw+46HeuVwnkBovej46fblUv2lE9ppIhEoNqz+X+02VXtdBtp0SJ+ 3Q42Q6KCl0SfvfLKkgjI1DWnIdeOQxqPBuxPt6dSvFJV69/uLfFmuR8d6JHjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU17pylmRk0MHLv4KThV1hjYy8azkwHwYDVR0j BBgwFoAUjVpJyeQuNxv9Hmes4bPVXsGr9z8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MmY1OTg2Yi1jNzY0LTRjZDctYjQxNC1hMjViZDA1YzNmOTIvMC84RDVBNDlDOUU0 MkUzNzFCRkQxRTY3QUNFMUIzRDU1RUMxQUJGNzNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEQ1QTQ5QzlFNDJFMzcxQkZEMUU2N0FDRTFCM0Q1NUVDMUFC RjczRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjJmNTk4NmItYzc2NC00Y2Q3LWI0 MTQtYTI1YmQwNWMzZjkyLzAvOEQ1QTQ5QzlFNDJFMzcxQkZEMUU2N0FDRTFCM0Q1 NUVDMUFCRjczRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE9/WDAZl/ahyO/hAzJbi55ehfSVt5zMJpyd fNSLnav8BGyJj/JsalTp6LqvMOSlVITSRotSBgs9WMBEYfPXnz5qAwWFVbITrmch Os/IU9J2G35GKy0xjeww/rJdamP1cqLjrb7ZvQwgn4Afx2fcS8hjkuJHt6rg2bwr uUbZ4FtJz/RCKSvLzTEdhsYckgm1648wd5VXnSEP90+Ka7YA9cnFhBYfP+dGDfLG bfUr0C4YaVKTfyN+A/Q/PwD7YtgMUgfPGIu+SWBr9hFRcSWWpDSgMPZ/468msYnX gLRIxWUck3x2ERlSeSYMykqcOpe2p0NRkyMGBHbcRF9pgvp4L24= -----END CERTIFICATE-----Generated at Thu Apr 24 18:01:26 2025 by rpki-client on console.sobornost.net