$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft File: F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft (raw, json) Hash identifier: gaD7OY03vbBq9QnNR2YOtlsbAgP8kLM79e0PgJCgxmw= Subject key identifier: 74:49:4C:AA:69:F9:31:BC:B4:96:EA:EA:27:5A:0E:AC:BD:F4:CE:80 Authority key identifier: F2:A9:6B:01:3D:78:D9:DD:2A:D0:46:F9:05:29:AB:07:E8:32:FD:44 Certificate issuer: /CN=F2A96B013D78D9DD2AD046F90529AB07E832FD44 Certificate serial: 7BD335CCFCAD9BE50E5884D93AF6983B3BC55A29 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2A96B013D78D9DD2AD046F90529AB07E832FD44.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft Manifest number: 0150 Signing time: Wed 23 Apr 2025 11:21:58 +0000 Manifest this update: Wed 23 Apr 2025 11:16:58 +0000 Manifest next update: Sat 26 Apr 2025 13:53:58 +0000 Files and hashes: 1: F2A96B013D78D9DD2AD046F90529AB07E832FD44.crl (hash: nxKn5ef0g9C5DEYyntDsAc21iZ7P84buHZ4hzQf/evM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.crl rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2A96B013D78D9DD2AD046F90529AB07E832FD44.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 12:29:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:d3:35:cc:fc:ad:9b:e5:0e:58:84:d9:3a:f6:98:3b:3b:c5:5a:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2A96B013D78D9DD2AD046F90529AB07E832FD44 Validity Not Before: Apr 23 11:16:58 2025 GMT Not After : Apr 26 13:53:58 2025 GMT Subject: CN=74494CAA69F931BCB496EAEA275A0EACBDF4CE80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b1:24:90:b8:82:07:ec:54:f4:98:cf:cd:23: d1:c2:4f:06:a0:1a:59:a8:03:e8:b8:3e:6d:49:70: 49:dd:a8:23:1a:b1:b7:a9:a5:51:c1:70:6a:08:0e: 56:fc:eb:79:92:25:15:10:33:0b:f5:2d:a3:3e:e9: 55:9b:dd:8e:7e:59:4a:5e:cf:30:fc:74:41:8a:05: 5d:4c:c2:71:e2:9e:be:af:c0:1b:62:3e:12:8f:20: a6:6a:cb:39:b4:84:ee:c5:26:e5:38:e0:92:cb:84: 82:c7:5a:80:d1:7c:0e:dd:61:6b:30:06:fb:d1:7f: 37:99:91:91:19:49:12:31:b9:ee:2e:37:7f:b1:6d: 34:1e:76:7e:c1:85:90:8c:04:a8:3b:20:0b:23:10: 65:ce:f4:ad:da:ef:78:4a:d5:be:5c:c3:51:57:5d: 11:e1:6d:f7:87:c1:ce:f1:f9:84:4c:3e:21:44:ff: c8:f7:e5:88:b1:3d:a8:a3:b1:c0:be:63:9f:24:38: 64:4e:88:a9:9b:eb:cc:7e:5d:a6:86:ad:dc:a4:f0: 58:73:92:76:6a:93:bf:eb:4a:e3:fd:38:1a:e4:ec: dc:ce:62:1d:58:3b:23:39:05:23:ca:61:5a:f9:2d: 53:97:88:7c:24:7d:0f:19:e3:9b:36:cf:65:f5:de: 59:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:49:4C:AA:69:F9:31:BC:B4:96:EA:EA:27:5A:0E:AC:BD:F4:CE:80 X509v3 Authority Key Identifier: keyid:F2:A9:6B:01:3D:78:D9:DD:2A:D0:46:F9:05:29:AB:07:E8:32:FD:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2A96B013D78D9DD2AD046F90529AB07E832FD44.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:b2:44:73:fb:8f:a5:35:e4:ce:2b:82:fa:99:57:24:92:db: ff:bf:85:fa:21:66:23:2e:50:a9:78:ec:bf:7a:e3:b6:22:aa: dd:0c:ed:9e:71:e4:16:ee:79:26:57:87:9d:91:32:ea:df:c9: 7e:4c:32:a5:e9:bd:3c:21:c1:7f:32:4b:2d:33:1b:ba:0f:96: 27:fb:2d:3b:0f:bd:2a:8e:89:44:b9:b5:e5:70:3a:8a:cd:d2: 94:07:40:25:ef:87:48:60:49:ca:22:b8:e4:7c:de:51:28:b9: 8e:fc:a7:65:4e:bc:76:d3:5a:18:33:11:36:9d:9a:0d:ea:6b: 82:a0:40:5e:27:b6:e5:ba:52:e8:4c:56:62:29:75:0b:33:96: 68:95:41:a2:1c:8e:51:1e:3b:3c:12:17:3a:26:a6:6b:74:69: 18:b4:86:66:0b:2e:75:3d:7b:a9:c1:b7:26:f2:fb:32:dd:24: 48:aa:15:2d:c0:b0:c7:b8:68:1a:da:55:0a:60:1c:f4:7d:9f: af:17:cc:e9:29:af:dd:3c:ba:6e:0e:31:f8:f0:f2:9e:73:fb: e0:f9:ba:00:87:1a:ab:a8:43:c4:20:85:f4:9c:bd:85:d3:ec: 3f:cd:15:89:bd:51:7e:21:ef:86:e2:55:6c:14:21:0d:00:8c: 59:94:e7:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe9M1zPytm+UOWITZOvaYOzvFWikwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJBOTZCMDEzRDc4RDlERDJBRDA0NkY5MDUyOUFCMDdF ODMyRkQ0NDAeFw0yNTA0MjMxMTE2NThaFw0yNTA0MjYxMzUzNThaMDMxMTAvBgNV BAMTKDc0NDk0Q0FBNjlGOTMxQkNCNDk2RUFFQTI3NUEwRUFDQkRGNENFODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhsSSQuIIH7FT0mM/NI9HCTwag GlmoA+i4Pm1JcEndqCMasbeppVHBcGoIDlb863mSJRUQMwv1LaM+6VWb3Y5+WUpe zzD8dEGKBV1MwnHinr6vwBtiPhKPIKZqyzm0hO7FJuU44JLLhILHWoDRfA7dYWsw BvvRfzeZkZEZSRIxue4uN3+xbTQedn7BhZCMBKg7IAsjEGXO9K3a73hK1b5cw1FX XRHhbfeHwc7x+YRMPiFE/8j35YixPaijscC+Y58kOGROiKmb68x+XaaGrdyk8Fhz knZqk7/rSuP9OBrk7NzOYh1YOyM5BSPKYVr5LVOXiHwkfQ8Z45s2z2X13lnTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdElMqmn5Mby0lurqJ1oOrL30zoAwHwYDVR0j BBgwFoAU8qlrAT142d0q0Eb5BSmrB+gy/UQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YzRlMTY2OS02OGY3LTRhMzktYWNjMC01N2M3MTg3YjZjYjcvMC9GMkE5NkIwMTNE NzhEOUREMkFEMDQ2RjkwNTI5QUIwN0U4MzJGRDQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjJBOTZCMDEzRDc4RDlERDJBRDA0NkY5MDUyOUFCMDdFODMy RkQ0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmM0ZTE2NjktNjhmNy00YTM5LWFj YzAtNTdjNzE4N2I2Y2I3LzAvRjJBOTZCMDEzRDc4RDlERDJBRDA0NkY5MDUyOUFC MDdFODMyRkQ0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAImyRHP7j6U15M4rgvqZVySS2/+/hfohZiMu UKl47L9647Yiqt0M7Z5x5BbueSZXh52RMurfyX5MMqXpvTwhwX8ySy0zG7oPlif7 LTsPvSqOiUS5teVwOorN0pQHQCXvh0hgScoiuOR83lEouY78p2VOvHbTWhgzETad mg3qa4KgQF4ntuW6UuhMVmIpdQszlmiVQaIcjlEeOzwSFzompmt0aRi0hmYLLnU9 e6nBtyby+zLdJEiqFS3AsMe4aBraVQpgHPR9n68XzOkpr908um4OMfjw8p5z++D5 ugCHGquoQ8QghfScvYXT7D/NFYm9UX4h74biVWwUIQ0AjFmU54g= -----END CERTIFICATE-----Generated at Wed Apr 23 13:25:32 2025 by rpki-client on console.sobornost.net