$ rpki-client -vvf repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft File: 88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft (raw, json) Hash identifier: sxjC6s7QjZbB6Ckrg6KNmIAfioLhb5WAc0dQfqP/QqE= Subject key identifier: D4:47:F9:E9:A5:AE:3C:E0:A7:C2:E4:C0:DC:F9:E8:39:60:BD:71:78 Authority key identifier: 88:E1:28:87:FF:4C:1B:DD:31:B6:A1:B2:2A:29:3C:B9:1F:46:5A:A9 Certificate issuer: /CN=88E12887FF4C1BDD31B6A1B22A293CB91F465AA9 Certificate serial: 0AEA5F1C3ADA7B19780472649256910BCD5294DF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft Manifest number: 8E Signing time: Thu 24 Apr 2025 19:01:24 +0000 Manifest this update: Thu 24 Apr 2025 18:56:24 +0000 Manifest next update: Sun 27 Apr 2025 19:15:24 +0000 Files and hashes: 1: 88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.crl (hash: 6kEKCO5lwVbkBfWdSu+1e2Rc6od5KLXP4r1vufJ2Rjg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.crl rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 19:15:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:ea:5f:1c:3a:da:7b:19:78:04:72:64:92:56:91:0b:cd:52:94:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88E12887FF4C1BDD31B6A1B22A293CB91F465AA9 Validity Not Before: Apr 24 18:56:24 2025 GMT Not After : Apr 27 19:15:24 2025 GMT Subject: CN=D447F9E9A5AE3CE0A7C2E4C0DCF9E83960BD7178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:18:44:3f:01:7c:c9:89:c4:ad:9f:24:1e:a0: 3e:48:44:13:d1:50:a3:3c:96:3f:a6:fd:da:d2:3b: e2:a0:b7:2e:80:68:a1:7f:5d:bc:cb:ca:94:c6:4d: fe:01:27:76:4b:09:8b:04:61:fe:f7:a5:3b:76:39: 7c:08:7a:0d:5d:03:e4:97:39:d9:18:24:af:b2:85: 81:6e:2b:c8:d1:6b:e5:8a:34:4a:b3:94:4d:4b:52: 92:28:09:90:63:0f:e0:d0:9d:13:3d:54:a8:1e:f6: f5:c3:3e:ac:c0:e2:a2:09:ee:66:58:28:d4:61:ac: e4:67:34:98:2d:5b:39:70:69:1a:6e:76:3b:16:38: 30:b4:ce:c8:b6:6b:21:3e:7d:a0:ec:64:25:c8:8b: 86:4d:32:37:be:6f:0f:3c:61:8d:fb:d2:02:59:cc: 42:53:fa:c2:5a:a7:44:4e:cb:ee:91:59:ca:1a:39: 57:ea:70:0c:9e:7a:f9:8f:20:f1:e8:f0:2d:e7:cd: 31:e4:e6:1c:7b:0c:c9:68:3f:1e:98:ba:7c:25:ad: 6c:04:91:ee:37:9c:69:08:35:87:9f:c6:f3:e0:ad: f8:8c:ff:72:ae:f2:06:34:6f:26:fe:1e:47:d5:de: e7:f7:6c:13:7b:21:42:d6:bd:54:fd:cc:c7:e3:42: 40:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:47:F9:E9:A5:AE:3C:E0:A7:C2:E4:C0:DC:F9:E8:39:60:BD:71:78 X509v3 Authority Key Identifier: keyid:88:E1:28:87:FF:4C:1B:DD:31:B6:A1:B2:2A:29:3C:B9:1F:46:5A:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:1d:1c:43:b2:a8:2b:29:fc:01:62:97:c8:8f:7e:a7:a6:e0: 2b:57:82:f1:c6:b0:3b:84:bf:52:74:68:af:80:3e:64:42:2f: 8a:ec:28:43:1f:16:b3:d7:95:b3:f6:f0:94:03:71:cf:e8:f7: 4f:c2:36:23:66:89:86:52:bf:6f:20:52:b0:95:73:c5:c2:3f: 92:0a:d3:fe:40:93:48:a3:8e:4f:b3:ca:38:36:43:67:64:0a: c5:8e:6b:91:a3:94:af:2e:d8:0a:3b:1a:dd:bb:08:0e:5c:3d: 64:23:38:d5:7d:b8:b4:a8:5a:d1:bc:b5:c8:96:35:51:8c:d4: df:e7:5f:8a:17:d8:ae:c1:27:9d:32:6d:d4:ab:39:a4:19:74: b3:1b:54:1f:13:dc:40:d8:67:b6:1e:e1:f3:94:de:59:57:f4: 04:86:eb:3a:7d:0c:48:0a:77:33:54:fe:c0:13:89:81:51:89: c3:0b:82:ca:a7:2b:a0:ad:04:a0:29:12:e7:de:ef:59:39:b4: 91:c8:91:c4:9d:5c:cd:bd:28:b0:57:b0:2b:8e:86:d8:5c:06: af:46:46:c4:0f:09:b3:53:21:13:64:c0:49:41:07:a9:e1:b0: 17:32:ad:e7:3a:55:3b:29:30:41:06:c6:60:10:7e:35:c4:94: 27:05:69:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCupfHDraexl4BHJkklaRC81SlN8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhFMTI4ODdGRjRDMUJERDMxQjZBMUIyMkEyOTNDQjkx RjQ2NUFBOTAeFw0yNTA0MjQxODU2MjRaFw0yNTA0MjcxOTE1MjRaMDMxMTAvBgNV BAMTKEQ0NDdGOUU5QTVBRTNDRTBBN0MyRTRDMERDRjlFODM5NjBCRDcxNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuGEQ/AXzJicStnyQeoD5IRBPR UKM8lj+m/drSO+Kgty6AaKF/XbzLypTGTf4BJ3ZLCYsEYf73pTt2OXwIeg1dA+SX OdkYJK+yhYFuK8jRa+WKNEqzlE1LUpIoCZBjD+DQnRM9VKge9vXDPqzA4qIJ7mZY KNRhrORnNJgtWzlwaRpudjsWODC0zsi2ayE+faDsZCXIi4ZNMje+bw88YY370gJZ zEJT+sJap0ROy+6RWcoaOVfqcAyeevmPIPHo8C3nzTHk5hx7DMloPx6YunwlrWwE ke43nGkINYefxvPgrfiM/3Ku8gY0byb+HkfV3uf3bBN7IULWvVT9zMfjQkA/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1Ef56aWuPOCnwuTA3PnoOWC9cXgwHwYDVR0j BBgwFoAUiOEoh/9MG90xtqGyKik8uR9GWqkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NGRhNDE1Yi01ZjE3LTQ2MDItOWJkOS1mZDg0YWMyY2FlODYvMS84OEUxMjg4N0ZG NEMxQkREMzFCNkExQjIyQTI5M0NCOTFGNDY1QUE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODhFMTI4ODdGRjRDMUJERDMxQjZBMUIyMkEyOTNDQjkxRjQ2 NUFBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODRkYTQxNWItNWYxNy00NjAyLTli ZDktZmQ4NGFjMmNhZTg2LzEvODhFMTI4ODdGRjRDMUJERDMxQjZBMUIyMkEyOTND QjkxRjQ2NUFBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD0dHEOyqCsp/AFil8iPfqem4CtXgvHGsDuE v1J0aK+APmRCL4rsKEMfFrPXlbP28JQDcc/o90/CNiNmiYZSv28gUrCVc8XCP5IK 0/5Ak0ijjk+zyjg2Q2dkCsWOa5GjlK8u2Ao7Gt27CA5cPWQjONV9uLSoWtG8tciW NVGM1N/nX4oX2K7BJ50ybdSrOaQZdLMbVB8T3EDYZ7Ye4fOU3llX9ASG6zp9DEgK dzNU/sATiYFRicMLgsqnK6CtBKApEufe71k5tJHIkcSdXM29KLBXsCuOhthcBq9G RsQPCbNTIRNkwElBB6nhsBcyrec6VTspMEEGxmAQfjXElCcFaTc= -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:11 2025 by rpki-client on console.sobornost.net