$ rpki-client -vvf repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft File: C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft (raw, json) Hash identifier: UWolQzQvEx2EOGfUlBNr0Yhbm9v9ikrdrcomDcKIpTg= Subject key identifier: A5:D7:51:C9:13:B7:E9:FA:10:CA:37:4D:D0:53:00:4B:51:1A:40:53 Authority key identifier: C1:66:91:03:D8:70:A3:90:C5:6C:8D:FD:3C:1B:FE:23:E4:8B:05:40 Certificate issuer: /CN=C1669103D870A390C56C8DFD3C1BFE23E48B0540 Certificate serial: 1E36AE4D99C5E7A3C74BEAF6F2D3DF882EE25705 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1669103D870A390C56C8DFD3C1BFE23E48B0540.cer Subject info access: rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft Manifest number: 91 Signing time: Wed 23 Apr 2025 15:51:21 +0000 Manifest this update: Wed 23 Apr 2025 15:46:21 +0000 Manifest next update: Sat 26 Apr 2025 21:37:21 +0000 Files and hashes: 1: C1669103D870A390C56C8DFD3C1BFE23E48B0540.crl (hash: jT5reHsie7qLrCnOP3+xqVnN1B+6DLiYdSNYVdWCeyw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.crl rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1669103D870A390C56C8DFD3C1BFE23E48B0540.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 12:29:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:36:ae:4d:99:c5:e7:a3:c7:4b:ea:f6:f2:d3:df:88:2e:e2:57:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1669103D870A390C56C8DFD3C1BFE23E48B0540 Validity Not Before: Apr 23 15:46:21 2025 GMT Not After : Apr 26 21:37:21 2025 GMT Subject: CN=A5D751C913B7E9FA10CA374DD053004B511A4053 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5f:b4:bd:18:30:da:60:32:29:d5:dd:32:68: 27:ea:eb:a7:a3:e2:be:7e:e8:00:c9:ca:df:ce:22: e0:1b:01:43:41:ae:3c:bb:a1:14:1e:93:7b:7c:d6: 58:1b:4e:44:46:d3:6c:24:35:39:5d:e0:ea:64:cb: 22:04:b4:85:8b:4d:56:75:3b:af:b8:e2:a0:52:f1: af:1e:da:48:a2:61:fe:e1:8b:23:d9:83:fb:1a:0d: e3:69:6f:69:f8:5b:41:cd:c8:7c:d7:cd:3d:3f:f7: 55:be:3e:47:1e:a7:90:94:37:57:4d:d5:2f:6e:e7: 56:19:56:14:21:f7:3e:bc:c9:74:85:d1:20:4a:b9: 5c:80:e1:0a:9c:09:51:0b:04:f8:bd:80:c6:6c:b0: 71:65:c7:39:4d:65:3b:d0:2b:e9:3d:c0:de:af:25: aa:e6:1f:01:df:1c:65:85:ba:d7:df:e9:51:cc:72: 68:55:72:67:3a:be:ec:b1:e7:9a:d1:60:82:6c:cc: 86:99:4e:22:d2:f8:1d:3e:e4:10:4b:33:b0:e3:dc: a8:4b:08:ae:41:1a:05:f7:78:a0:10:8d:d0:a3:cd: bc:54:80:27:4b:e4:af:74:47:37:d1:02:07:d8:96: 66:37:b4:3e:64:91:56:24:59:f9:cb:bb:c4:f3:1b: d3:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:D7:51:C9:13:B7:E9:FA:10:CA:37:4D:D0:53:00:4B:51:1A:40:53 X509v3 Authority Key Identifier: keyid:C1:66:91:03:D8:70:A3:90:C5:6C:8D:FD:3C:1B:FE:23:E4:8B:05:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1669103D870A390C56C8DFD3C1BFE23E48B0540.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:0a:a2:04:fc:d7:3e:d5:d4:9f:48:2a:90:01:95:02:65:28: e3:11:80:71:bb:79:99:cc:51:0b:ec:de:66:c1:a4:fa:e5:5e: 98:92:ea:6b:46:4d:9f:37:d4:1a:89:43:31:f0:52:88:de:87: d4:1f:d0:81:d2:06:72:21:7b:b3:f4:0e:c1:b9:4a:36:ac:91: 09:a9:e7:7c:6a:93:95:52:4f:72:68:c6:06:fb:a8:60:1d:c5: 42:42:b0:33:88:b3:b1:46:d8:66:df:ae:a2:4d:ea:e3:8f:c1: 96:95:1a:f1:f3:f1:53:21:05:df:63:6b:be:5f:53:ff:25:9e: 00:5f:5b:cb:ed:2c:5d:65:4b:b6:9d:9b:2c:bd:8e:df:af:a5: fb:f8:d5:aa:47:a0:40:e9:0a:61:7e:26:86:b7:bb:65:61:9c: b9:98:c5:96:ba:51:e7:0a:20:e8:2b:00:29:8a:e5:81:5c:ec: 92:8e:50:95:5a:34:87:0c:18:fb:ff:90:8c:03:e4:f4:09:2c: e6:56:6c:dd:28:b8:6e:09:b2:1e:57:f8:8a:af:e3:b1:64:1d: af:78:18:7d:61:b3:e4:70:96:a5:25:c0:19:82:22:d5:c1:0f: 32:01:6d:9d:36:40:b2:b0:54:c0:89:46:6f:a1:f4:48:26:b3: ba:bd:89:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHjauTZnF56PHS+r28tPfiC7iVwUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE2NjkxMDNEODcwQTM5MEM1NkM4REZEM0MxQkZFMjNF NDhCMDU0MDAeFw0yNTA0MjMxNTQ2MjFaFw0yNTA0MjYyMTM3MjFaMDMxMTAvBgNV BAMTKEE1RDc1MUM5MTNCN0U5RkExMENBMzc0REQwNTMwMDRCNTExQTQwNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyX7S9GDDaYDIp1d0yaCfq66ej 4r5+6ADJyt/OIuAbAUNBrjy7oRQek3t81lgbTkRG02wkNTld4OpkyyIEtIWLTVZ1 O6+44qBS8a8e2kiiYf7hiyPZg/saDeNpb2n4W0HNyHzXzT0/91W+Pkcep5CUN1dN 1S9u51YZVhQh9z68yXSF0SBKuVyA4QqcCVELBPi9gMZssHFlxzlNZTvQK+k9wN6v JarmHwHfHGWFutff6VHMcmhVcmc6vuyx55rRYIJszIaZTiLS+B0+5BBLM7Dj3KhL CK5BGgX3eKAQjdCjzbxUgCdL5K90RzfRAgfYlmY3tD5kkVYkWfnLu8TzG9PrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpddRyRO36foQyjdN0FMAS1EaQFMwHwYDVR0j BBgwFoAUwWaRA9hwo5DFbI39PBv+I+SLBUAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ODhkMGI2ZS1iMmVkLTQ5YzgtYTQ5OC04ZmQyOTlhZmI3MDEvMC9DMTY2OTEwM0Q4 NzBBMzkwQzU2QzhERkQzQzFCRkUyM0U0OEIwNTQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzE2NjkxMDNEODcwQTM5MEM1NkM4REZEM0MxQkZFMjNFNDhC MDU0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODg4ZDBiNmUtYjJlZC00OWM4LWE0 OTgtOGZkMjk5YWZiNzAxLzAvQzE2NjkxMDNEODcwQTM5MEM1NkM4REZEM0MxQkZF MjNFNDhCMDU0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABsKogT81z7V1J9IKpABlQJlKOMRgHG7eZnM UQvs3mbBpPrlXpiS6mtGTZ831BqJQzHwUojeh9Qf0IHSBnIhe7P0DsG5SjaskQmp 53xqk5VST3Joxgb7qGAdxUJCsDOIs7FG2GbfrqJN6uOPwZaVGvHz8VMhBd9ja75f U/8lngBfW8vtLF1lS7admyy9jt+vpfv41apHoEDpCmF+Joa3u2VhnLmYxZa6UecK IOgrACmK5YFc7JKOUJVaNIcMGPv/kIwD5PQJLOZWbN0ouG4Jsh5X+Iqv47FkHa94 GH1hs+RwlqUlwBmCItXBDzIBbZ02QLKwVMCJRm+h9Egms7q9ibg= -----END CERTIFICATE-----Generated at Wed Apr 23 17:38:31 2025 by rpki-client on console.sobornost.net