$ rpki-client -vvf repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.mft File: D6FA07102C8726922074D42DFF59946144A13506.mft (raw, json) Hash identifier: M+JqzfKSLtBDtAltnEJvMz8CgkfJDPZczoeZvxwvKcw= Subject key identifier: 91:E1:7C:45:0D:37:CF:7B:22:30:33:4B:37:86:3F:AF:18:BE:8C:EC Authority key identifier: D6:FA:07:10:2C:87:26:92:20:74:D4:2D:FF:59:94:61:44:A1:35:06 Certificate issuer: /CN=D6FA07102C8726922074D42DFF59946144A13506 Certificate serial: 1821D22EEA26A1BF9950A6BE6AB851AD2B824C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D6FA07102C8726922074D42DFF59946144A13506.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.mft Manifest number: 42 Signing time: Sat 26 Apr 2025 09:52:11 +0000 Manifest this update: Sat 26 Apr 2025 09:47:11 +0000 Manifest next update: Tue 29 Apr 2025 19:06:11 +0000 Files and hashes: 1: D6FA07102C8726922074D42DFF59946144A13506.crl (hash: 77HA2aTv+RR2cV4KuHgoDwazBtkCuOqiwAxlJsHToqw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.crl rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D6FA07102C8726922074D42DFF59946144A13506.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 03:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:21:d2:2e:ea:26:a1:bf:99:50:a6:be:6a:b8:51:ad:2b:82:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6FA07102C8726922074D42DFF59946144A13506 Validity Not Before: Apr 26 09:47:11 2025 GMT Not After : Apr 29 19:06:11 2025 GMT Subject: CN=91E17C450D37CF7B2230334B37863FAF18BE8CEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b3:a8:8d:a5:55:db:c2:b9:d9:7b:f5:1b:b9: f3:e6:72:54:41:97:8f:ea:b6:32:a8:0c:fa:ec:c5: a7:b9:ba:e1:80:7d:36:7f:83:71:20:0d:ff:7f:41: ff:11:3f:6f:db:99:a2:a5:41:a5:43:89:4e:9b:24: 1b:ad:2a:d2:12:90:cd:71:0c:2a:e6:29:f2:9e:b0: 3a:d2:5c:62:0b:81:88:d9:ad:ec:ab:7a:31:06:cf: 4b:51:74:10:e0:92:05:cc:af:a7:4a:64:fe:10:47: 2a:4a:93:4f:12:55:09:b6:f9:64:7e:e3:4f:45:1b: 85:6e:d2:82:88:2c:d1:24:b1:6c:54:86:10:c9:f9: 0a:e2:70:90:e1:9a:15:c2:e8:98:51:84:2a:19:81: 5d:09:d3:a8:5a:38:5e:2d:26:06:0f:ed:12:5a:d2: 87:59:72:97:dd:24:7d:f7:4d:1b:46:e0:ed:5e:73: 54:b4:aa:83:8e:42:cd:d3:ef:3a:e3:30:64:59:53: 9b:0b:d5:ef:3f:41:dd:a9:b8:65:92:82:1a:a8:7b: f7:d0:ef:dd:f8:13:11:16:c6:ae:49:1b:d0:a7:04: 69:a4:4d:93:26:82:0d:8e:48:c2:79:d3:54:0e:9d: 39:e6:4a:84:b7:56:48:a9:46:a7:08:7c:97:31:e0: 67:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:E1:7C:45:0D:37:CF:7B:22:30:33:4B:37:86:3F:AF:18:BE:8C:EC X509v3 Authority Key Identifier: keyid:D6:FA:07:10:2C:87:26:92:20:74:D4:2D:FF:59:94:61:44:A1:35:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D6FA07102C8726922074D42DFF59946144A13506.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d63a6e6-cab3-4f0c-85c7-e02bd641e3ce/0/D6FA07102C8726922074D42DFF59946144A13506.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:47:b9:dd:4a:1f:15:77:9f:ae:dd:66:d6:86:db:16:8b:30: d0:8d:fc:e4:25:51:b6:58:8a:7a:a8:8e:5c:f5:93:61:47:d6: 13:6c:62:1e:1c:6c:82:68:bc:22:4c:7c:32:56:19:67:a1:8b: ae:b4:9a:60:ab:c3:ee:65:d3:b2:5e:3c:4f:89:a6:f9:c8:a5: 8c:db:72:3d:e3:73:c7:46:cf:0b:7e:11:3c:3b:55:00:53:e5: 07:b5:7f:11:aa:30:18:b7:33:e6:37:c6:7d:ab:fe:cc:d1:5f: c2:6b:e6:13:20:1b:57:6e:b7:81:51:24:0c:03:4c:54:54:63: 46:68:4a:8a:18:85:78:5e:b3:3d:f4:a1:f3:68:8b:cc:dc:2c: f2:08:65:d7:f0:2a:c1:09:5f:b6:38:32:5d:fd:da:bf:fe:48: 16:ce:81:b8:ad:08:7b:76:f2:88:3a:59:79:76:e2:25:2e:d5: be:24:32:3a:05:e3:5a:1d:77:57:46:4a:80:67:04:d6:c8:be: 99:07:29:77:3b:cc:01:67:06:4e:b3:f2:67:7b:bb:7b:35:68: 43:28:b9:ba:72:7f:a7:46:51:c4:11:06:e2:df:08:5f:29:9a: f0:17:18:16:46:b2:b0:5b:ce:c8:9f:b8:3d:b1:06:be:ce:68: 8f:61:fc:04 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITGCHSLuomob+ZUKa+arhRrSuCTDANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhENkZBMDcxMDJDODcyNjkyMjA3NEQ0MkRGRjU5OTQ2MTQ0 QTEzNTA2MB4XDTI1MDQyNjA5NDcxMVoXDTI1MDQyOTE5MDYxMVowMzExMC8GA1UE AxMoOTFFMTdDNDUwRDM3Q0Y3QjIyMzAzMzRCMzc4NjNGQUYxOEJFOENFQzCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJqzqI2lVdvCudl79Ru58+ZyVEGX j+q2MqgM+uzFp7m64YB9Nn+DcSAN/39B/xE/b9uZoqVBpUOJTpskG60q0hKQzXEM KuYp8p6wOtJcYguBiNmt7Kt6MQbPS1F0EOCSBcyvp0pk/hBHKkqTTxJVCbb5ZH7j T0UbhW7Sgogs0SSxbFSGEMn5CuJwkOGaFcLomFGEKhmBXQnTqFo4Xi0mBg/tElrS h1lyl90kffdNG0bg7V5zVLSqg45CzdPvOuMwZFlTmwvV7z9B3am4ZZKCGqh799Dv 3fgTERbGrkkb0KcEaaRNkyaCDY5IwnnTVA6dOeZKhLdWSKlGpwh8lzHgZ4kCAwEA AaOCAjwwggI4MB0GA1UdDgQWBBSR4XxFDTfPeyIwM0s3hj+vGL6M7DAfBgNVHSME GDAWgBTW+gcQLIcmkiB01C3/WZRhRKE1BjAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdk NjNhNmU2LWNhYjMtNGYwYy04NWM3LWUwMmJkNjQxZTNjZS8wL0Q2RkEwNzEwMkM4 NzI2OTIyMDc0RDQyREZGNTk5NDYxNDRBMTM1MDYuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v SUROSUMtSUQvMS9ENkZBMDcxMDJDODcyNjkyMjA3NEQ0MkRGRjU5OTQ2MTQ0QTEz NTA2LmNlcjCBkwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzov L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83ZDYzYTZlNi1jYWIzLTRmMGMtODVj Ny1lMDJiZDY0MWUzY2UvMC9ENkZBMDcxMDJDODcyNjkyMjA3NEQ0MkRGRjU5OTQ2 MTQ0QTEzNTA2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEARUe53UofFXefrt1m1obbFosw0I385CVRtliK eqiOXPWTYUfWE2xiHhxsgmi8Ikx8MlYZZ6GLrrSaYKvD7mXTsl48T4mm+ciljNty PeNzx0bPC34RPDtVAFPlB7V/EaowGLcz5jfGfav+zNFfwmvmEyAbV263gVEkDANM VFRjRmhKihiFeF6zPfSh82iLzNws8ghl1/AqwQlftjgyXf3av/5IFs6BuK0Ie3by iDpZeXbiJS7VviQyOgXjWh13V0ZKgGcE1si+mQcpdzvMAWcGTrPyZ3u7ezVoQyi5 unJ/p0ZRxBEG4t8IXyma8BcYFkaysFvOyJ+4PbEGvs5oj2H8BA== -----END CERTIFICATE-----Generated at Sat Apr 26 11:16:29 2025 by rpki-client on console.sobornost.net