$ rpki-client -vvf repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.mft File: 861DE86D91E4C7508D388EDBC70834681B43B5CA.mft (raw, json) Hash identifier: uh0sBk5jO9Ar6NVyOvHo0vEbQqLvJHnuaNZcN9TNHFg= Subject key identifier: 3B:A5:B5:A1:E5:A1:0D:51:EE:EA:04:07:B8:46:C4:A8:B6:BA:A1:8C Authority key identifier: 86:1D:E8:6D:91:E4:C7:50:8D:38:8E:DB:C7:08:34:68:1B:43:B5:CA Certificate issuer: /CN=861DE86D91E4C7508D388EDBC70834681B43B5CA Certificate serial: 1BFDE3B7656BE7F21EAC52B706376477B04D393E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/861DE86D91E4C7508D388EDBC70834681B43B5CA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.mft Manifest number: 0480 Signing time: Thu 24 Apr 2025 07:31:31 +0000 Manifest this update: Thu 24 Apr 2025 07:26:31 +0000 Manifest next update: Sun 27 Apr 2025 08:29:31 +0000 Files and hashes: 1: 861DE86D91E4C7508D388EDBC70834681B43B5CA.crl (hash: ThlI6/QX2IrM4TLwS2rJ53OoBHCCRFdBXd/F6tFiG/E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.crl rsync://repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/861DE86D91E4C7508D388EDBC70834681B43B5CA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 08:29:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:fd:e3:b7:65:6b:e7:f2:1e:ac:52:b7:06:37:64:77:b0:4d:39:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=861DE86D91E4C7508D388EDBC70834681B43B5CA Validity Not Before: Apr 24 07:26:31 2025 GMT Not After : Apr 27 08:29:31 2025 GMT Subject: CN=3BA5B5A1E5A10D51EEEA0407B846C4A8B6BAA18C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b2:ac:20:c3:3b:f3:f2:36:c3:54:a1:f6:4a: bf:5b:2e:e7:e0:03:91:72:5b:e4:05:57:02:9f:18: 90:d1:2a:c4:f9:ce:44:a4:66:0d:28:fc:0a:d2:1c: cd:55:3a:47:7f:2f:bf:dc:6a:c0:66:65:36:5a:11: 50:e7:84:1f:2c:29:83:1f:5b:3d:0d:ee:cc:88:c4: d7:67:a1:25:95:40:36:a4:5a:e6:f2:9d:3f:c5:a7: b0:a5:fa:3e:b5:8f:87:b8:a0:16:4f:fb:7e:e6:2d: 61:83:b4:54:3a:3d:1e:b0:7f:83:c1:9f:5b:86:c5: 92:13:32:8a:d3:da:c5:7d:6f:9d:86:1a:83:b6:ba: 47:f1:c6:e8:4a:60:8f:55:04:78:65:b3:9a:42:6a: f4:4c:55:04:4d:53:66:1c:bf:2f:1d:40:bc:a8:7f: 66:c6:0f:2f:42:0d:49:8f:97:72:d1:97:de:7f:c4: 41:46:c4:b9:44:f3:e0:7b:3e:89:a2:43:f9:81:a5: 9a:20:2c:bf:74:df:d1:6d:97:1f:75:0a:ee:0a:fb: 33:ef:b2:65:95:bd:21:aa:29:b7:30:2c:39:91:04: 86:ec:a9:1b:a9:3d:34:45:03:b0:77:e6:ae:37:fc: bd:1d:f1:84:e2:8c:8d:91:dd:a5:9d:d0:80:2f:71: 49:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:A5:B5:A1:E5:A1:0D:51:EE:EA:04:07:B8:46:C4:A8:B6:BA:A1:8C X509v3 Authority Key Identifier: keyid:86:1D:E8:6D:91:E4:C7:50:8D:38:8E:DB:C7:08:34:68:1B:43:B5:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/861DE86D91E4C7508D388EDBC70834681B43B5CA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:4a:09:18:1d:e4:5e:bf:2a:a7:a8:6a:4e:3c:f9:16:7f:b0: 54:d4:4f:26:65:2f:bc:d7:1d:10:a3:b3:17:13:33:28:21:38: 3a:0c:b4:bf:d1:4e:1a:37:0c:ac:49:9c:bc:c6:fe:f5:d7:20: 0e:f9:21:05:43:57:ef:8c:55:e5:f0:4a:87:13:dd:76:05:70: a8:c0:da:fe:20:22:16:62:37:32:e0:3f:d7:25:6e:21:8a:2d: ca:f9:b0:95:31:e8:ca:49:f0:f0:16:11:43:6e:b0:09:f7:e9: a6:63:a1:ee:1e:29:c9:1f:37:dd:c7:ca:f0:49:93:12:74:15: 8b:79:57:e2:93:b7:97:15:1c:91:31:58:78:fd:f6:7a:49:e8: 2c:0f:c3:3f:c9:f1:d5:a5:64:ce:9f:cc:0c:05:65:68:0b:bc: 1e:09:d6:95:7a:03:7f:86:f0:21:34:a6:be:f8:5c:10:b0:79: 7f:8d:45:20:3b:54:ea:5a:4e:ca:20:c5:28:2e:39:d0:d3:56: 6c:11:32:2c:89:27:57:ad:f9:fb:eb:04:a5:e0:fd:a8:2e:91: 6c:7f:ea:30:a9:e5:35:55:d4:58:72:0b:0a:8b:82:3d:55:83: 73:c1:69:d2:51:2d:46:51:94:4b:9f:2b:c8:83:1c:4a:67:d4: e6:9b:77:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG/3jt2Vr5/IerFK3Bjdkd7BNOT4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODYxREU4NkQ5MUU0Qzc1MDhEMzg4RURCQzcwODM0Njgx QjQzQjVDQTAeFw0yNTA0MjQwNzI2MzFaFw0yNTA0MjcwODI5MzFaMDMxMTAvBgNV BAMTKDNCQTVCNUExRTVBMTBENTFFRUVBMDQwN0I4NDZDNEE4QjZCQUExOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFsqwgwzvz8jbDVKH2Sr9bLufg A5FyW+QFVwKfGJDRKsT5zkSkZg0o/ArSHM1VOkd/L7/casBmZTZaEVDnhB8sKYMf Wz0N7syIxNdnoSWVQDakWubynT/Fp7Cl+j61j4e4oBZP+37mLWGDtFQ6PR6wf4PB n1uGxZITMorT2sV9b52GGoO2ukfxxuhKYI9VBHhls5pCavRMVQRNU2Ycvy8dQLyo f2bGDy9CDUmPl3LRl95/xEFGxLlE8+B7PomiQ/mBpZogLL9039Ftlx91Cu4K+zPv smWVvSGqKbcwLDmRBIbsqRupPTRFA7B35q43/L0d8YTijI2R3aWd0IAvcUn5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO6W1oeWhDVHu6gQHuEbEqLa6oYwwHwYDVR0j BBgwFoAUhh3obZHkx1CNOI7bxwg0aBtDtcowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NjlmMjk4OC1jYWIzLTQ1YWEtOTdlNS02Mzg1ZjA3ZmYxY2QvMC84NjFERTg2RDkx RTRDNzUwOEQzODhFREJDNzA4MzQ2ODFCNDNCNUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODYxREU4NkQ5MUU0Qzc1MDhEMzg4RURCQzcwODM0NjgxQjQz QjVDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODY5ZjI5ODgtY2FiMy00NWFhLTk3 ZTUtNjM4NWYwN2ZmMWNkLzAvODYxREU4NkQ5MUU0Qzc1MDhEMzg4RURCQzcwODM0 NjgxQjQzQjVDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAxKCRgd5F6/Kqeoak48+RZ/sFTUTyZlL7zX HRCjsxcTMyghODoMtL/RTho3DKxJnLzG/vXXIA75IQVDV++MVeXwSocT3XYFcKjA 2v4gIhZiNzLgP9clbiGKLcr5sJUx6MpJ8PAWEUNusAn36aZjoe4eKckfN93HyvBJ kxJ0FYt5V+KTt5cVHJExWHj99npJ6CwPwz/J8dWlZM6fzAwFZWgLvB4J1pV6A3+G 8CE0pr74XBCweX+NRSA7VOpaTsogxSguOdDTVmwRMiyJJ1et+fvrBKXg/agukWx/ 6jCp5TVV1FhyCwqLgj1Vg3PBadJRLUZRlEufK8iDHEpn1OabdwQ= -----END CERTIFICATE-----Generated at Thu Apr 24 09:03:03 2025 by rpki-client on console.sobornost.net