$ rpki-client -vvf repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft File: 9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft (raw, json) Hash identifier: g+2fQpCCLWiq1/i0CgUPdP3gO+wYHp0aEUeMSpwf6is= Subject key identifier: 27:00:DE:24:00:E8:6B:7B:3A:D1:69:81:FE:93:4B:53:32:B1:85:BA Authority key identifier: 95:64:13:4E:E3:E4:CE:65:FB:9D:07:7E:90:B1:BE:B5:25:D6:99:EB Certificate issuer: /CN=9564134EE3E4CE65FB9D077E90B1BEB525D699EB Certificate serial: 58DB9CB778296D79F3DCE0B62D56355E1A844B32 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft Manifest number: B0 Signing time: Thu 24 Apr 2025 11:02:44 +0000 Manifest this update: Thu 24 Apr 2025 10:57:44 +0000 Manifest next update: Sun 27 Apr 2025 18:14:44 +0000 Files and hashes: 1: 9564134EE3E4CE65FB9D077E90B1BEB525D699EB.crl (hash: cAc6SuZ/bGcK80IRIDtEL3pHX8U7RXzBeWhg5FAwRjc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.crl rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 10:32:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:db:9c:b7:78:29:6d:79:f3:dc:e0:b6:2d:56:35:5e:1a:84:4b:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9564134EE3E4CE65FB9D077E90B1BEB525D699EB Validity Not Before: Apr 24 10:57:44 2025 GMT Not After : Apr 27 18:14:44 2025 GMT Subject: CN=2700DE2400E86B7B3AD16981FE934B5332B185BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:83:f4:27:14:15:13:3f:b4:da:d2:cf:21:24: 15:d9:10:7e:af:53:aa:82:90:0c:cc:95:68:c6:87: a5:4e:8c:8a:3c:06:32:72:49:de:44:eb:cf:0e:ee: 09:ff:7f:be:8d:fb:3d:d0:be:6e:11:f5:2b:74:22: 23:b5:d4:18:1f:a3:35:b8:04:55:b2:74:f7:ff:a2: 67:f1:66:a2:a4:ce:88:0a:f5:61:f5:1b:5c:f5:ef: b4:e3:f3:ca:36:eb:32:dc:cb:7a:af:1f:f8:21:ac: 40:ae:e5:6d:50:08:75:6d:44:50:07:ee:f6:ed:40: 9d:f0:2a:d9:9b:02:ed:b6:56:47:56:bc:40:14:8e: 55:38:e3:59:1e:a6:75:30:f7:03:f9:76:d1:15:fa: 26:bc:37:46:d4:42:31:10:7e:99:17:d8:9b:d3:bf: 4b:e2:c6:fd:d0:e3:45:d6:94:a1:b6:55:40:95:ea: 5e:5c:ac:ab:49:62:45:c6:45:97:e6:59:2f:02:c7: ed:d3:91:ef:c3:53:01:9c:ea:68:62:1c:01:2c:40: 5c:0c:b9:26:dc:e3:38:a9:a4:8e:8d:82:8c:7b:d1: 2a:17:c6:4f:2a:7a:a0:8d:cd:74:b7:a3:6c:1c:16: 44:8c:56:2b:21:f0:9c:3c:73:bf:4d:49:3b:3a:ef: 80:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:00:DE:24:00:E8:6B:7B:3A:D1:69:81:FE:93:4B:53:32:B1:85:BA X509v3 Authority Key Identifier: keyid:95:64:13:4E:E3:E4:CE:65:FB:9D:07:7E:90:B1:BE:B5:25:D6:99:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:11:85:04:b0:10:d4:ae:b8:5a:67:cd:8b:37:4e:8d:65:37: 70:66:79:1d:38:4d:64:04:0e:b5:70:25:57:af:5a:fe:ab:b6: ea:82:24:c9:d3:a8:34:82:e7:71:9a:62:0c:f4:0b:25:d6:1e: 9f:21:51:52:fe:49:32:04:3a:d4:b4:ea:be:19:25:b2:26:d9: 39:0d:b6:05:3d:1a:16:e9:37:fe:1a:ac:54:6c:9c:41:6d:0e: 48:e1:d1:3d:26:61:77:3f:9e:5e:b0:6c:eb:f4:f6:1a:55:a4: b1:5b:1a:e9:38:d4:85:b4:49:35:a2:03:82:bb:a4:75:9b:1d: 86:8a:d0:20:d2:4e:16:44:c6:dc:44:40:cf:ac:54:76:b3:2b: 1c:89:d4:f5:96:56:30:eb:78:4d:a7:fc:e3:23:48:b6:2c:6e: 8e:14:b9:f2:1f:0b:34:6e:33:72:39:2f:ad:13:07:a2:53:59: be:e7:0f:67:18:a1:87:fa:af:2e:08:97:85:b2:c1:f3:c6:32: ad:8f:a1:38:8c:1f:ef:9d:51:95:21:f4:df:94:c2:15:93:41: da:67:bf:43:58:74:ad:33:07:66:01:a8:8d:fe:07:d8:92:3b: 62:29:c0:fd:1e:41:6d:0b:9c:a8:b2:0c:2d:a0:9b:9c:78:ae: 32:af:9d:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWNuct3gpbXnz3OC2LVY1XhqESzIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU2NDEzNEVFM0U0Q0U2NUZCOUQwNzdFOTBCMUJFQjUy NUQ2OTlFQjAeFw0yNTA0MjQxMDU3NDRaFw0yNTA0MjcxODE0NDRaMDMxMTAvBgNV BAMTKDI3MDBERTI0MDBFODZCN0IzQUQxNjk4MUZFOTM0QjUzMzJCMTg1QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDig/QnFBUTP7Ta0s8hJBXZEH6v U6qCkAzMlWjGh6VOjIo8BjJySd5E688O7gn/f76N+z3Qvm4R9St0IiO11BgfozW4 BFWydPf/omfxZqKkzogK9WH1G1z177Tj88o26zLcy3qvH/ghrECu5W1QCHVtRFAH 7vbtQJ3wKtmbAu22VkdWvEAUjlU441kepnUw9wP5dtEV+ia8N0bUQjEQfpkX2JvT v0vixv3Q40XWlKG2VUCV6l5crKtJYkXGRZfmWS8Cx+3Tke/DUwGc6mhiHAEsQFwM uSbc4zippI6Ngox70SoXxk8qeqCNzXS3o2wcFkSMVish8Jw8c79NSTs674BXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJwDeJADoa3s60WmB/pNLUzKxhbowHwYDVR0j BBgwFoAUlWQTTuPkzmX7nQd+kLG+tSXWmeswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MDg4NjQ4Zi01ZTBiLTQzMzgtOTExYy05ZDY0NjdiMDBhM2UvMC85NTY0MTM0RUUz RTRDRTY1RkI5RDA3N0U5MEIxQkVCNTI1RDY5OUVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTU2NDEzNEVFM0U0Q0U2NUZCOUQwNzdFOTBCMUJFQjUyNUQ2 OTlFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODA4ODY0OGYtNWUwYi00MzM4LTkx MWMtOWQ2NDY3YjAwYTNlLzAvOTU2NDEzNEVFM0U0Q0U2NUZCOUQwNzdFOTBCMUJF QjUyNUQ2OTlFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHkRhQSwENSuuFpnzYs3To1lN3BmeR04TWQE DrVwJVevWv6rtuqCJMnTqDSC53GaYgz0CyXWHp8hUVL+STIEOtS06r4ZJbIm2TkN tgU9GhbpN/4arFRsnEFtDkjh0T0mYXc/nl6wbOv09hpVpLFbGuk41IW0STWiA4K7 pHWbHYaK0CDSThZExtxEQM+sVHazKxyJ1PWWVjDreE2n/OMjSLYsbo4UufIfCzRu M3I5L60TB6JTWb7nD2cYoYf6ry4Il4WywfPGMq2PoTiMH++dUZUh9N+UwhWTQdpn v0NYdK0zB2YBqI3+B9iSO2IpwP0eQW0LnKiyDC2gm5x4rjKvnSE= -----END CERTIFICATE-----Generated at Thu Apr 24 13:38:49 2025 by rpki-client on console.sobornost.net