$ rpki-client -vvf repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft File: 8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft (raw, json) Hash identifier: HJEcINKdqQ0XsT3knZlrUQlIXI/c7ext5wl06Fry+sY= Subject key identifier: 8B:C8:9B:17:56:33:34:72:9B:A5:BC:AF:66:E9:53:C2:A4:A1:3F:2D Authority key identifier: 85:39:E1:27:E1:6B:79:3E:FD:92:AE:6E:FC:2B:FB:58:79:00:8F:AD Certificate issuer: /CN=8539E127E16B793EFD92AE6EFC2BFB5879008FAD Certificate serial: 61E62C1A6DA1A84A7FAACCAD7E29179E24D6DCAD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft Manifest number: 7F Signing time: Thu 24 Apr 2025 17:01:43 +0000 Manifest this update: Thu 24 Apr 2025 16:56:43 +0000 Manifest next update: Sun 27 Apr 2025 17:27:43 +0000 Files and hashes: 1: 8539E127E16B793EFD92AE6EFC2BFB5879008FAD.crl (hash: 8YhMkViU+HZ7OivR/GjPPbax5U4XwOglw7gJq8/wMbg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.crl rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 17:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:e6:2c:1a:6d:a1:a8:4a:7f:aa:cc:ad:7e:29:17:9e:24:d6:dc:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8539E127E16B793EFD92AE6EFC2BFB5879008FAD Validity Not Before: Apr 24 16:56:43 2025 GMT Not After : Apr 27 17:27:43 2025 GMT Subject: CN=8BC89B17563334729BA5BCAF66E953C2A4A13F2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:cb:e5:09:9d:bd:95:66:0e:e4:7a:6f:94:27: 82:f3:25:dc:ea:cd:99:42:13:d3:57:7a:a7:ec:f4: 55:46:c4:13:96:9e:dd:bb:d1:8f:70:ae:0d:70:b3: b5:4d:1f:e6:e4:6c:d5:9c:a7:74:01:ef:c9:d1:0e: e8:55:7e:96:ff:e9:6a:93:ab:12:33:a1:e6:85:ce: 80:dc:61:c7:d7:cc:f3:b3:e8:36:3a:e0:b7:55:7f: 54:99:1b:ac:03:13:57:7d:44:23:9e:45:6b:3f:d8: 9c:b9:03:7e:83:81:a5:44:52:ea:e7:4a:3c:e6:3d: c0:9a:a9:01:ec:db:7a:f6:4f:06:24:13:5b:a8:ae: 8f:d5:3d:18:52:e8:98:f2:65:9f:c3:e0:d1:5a:55: 46:27:a9:a7:ba:bb:3a:63:11:a8:87:95:1c:19:ed: 70:2f:cb:a3:e4:95:f6:4c:be:20:66:e1:0f:eb:bf: 9e:1b:f5:28:ff:74:1d:8b:5f:36:7a:a7:14:27:8a: d0:4d:39:65:3f:31:70:40:c6:84:f5:40:98:c1:db: 43:c6:af:9b:2d:7d:03:5d:7d:dc:fe:e7:10:d1:66: 37:6b:9b:5a:7c:2c:eb:fe:32:34:1e:d4:a6:a8:10: e1:a7:ad:1a:73:11:90:c4:b0:b8:62:8e:ab:1c:07: c8:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:C8:9B:17:56:33:34:72:9B:A5:BC:AF:66:E9:53:C2:A4:A1:3F:2D X509v3 Authority Key Identifier: keyid:85:39:E1:27:E1:6B:79:3E:FD:92:AE:6E:FC:2B:FB:58:79:00:8F:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:ff:33:c8:89:fb:89:b5:d6:03:59:ed:2e:ba:3a:8f:21:de: 1d:69:d3:78:0a:e1:bd:05:2d:81:c7:c9:65:43:7f:63:4d:cb: a9:21:dc:00:ae:e1:23:4d:5f:d2:94:ba:82:61:4b:cc:8c:99: 10:22:66:ac:7b:11:a4:2c:ef:08:a7:62:58:80:5c:fe:c7:38: b3:bd:51:cd:5a:6b:ad:2b:4e:cb:a6:43:b0:47:af:5b:f8:2d: e4:aa:3a:23:32:1e:75:60:6c:81:97:20:2b:c8:c9:43:da:65: ac:13:40:7a:94:a7:32:02:eb:0f:46:1f:34:89:64:33:b5:cb: 9e:8a:58:bb:33:e8:f0:2f:dd:9f:df:f3:dc:bd:70:40:61:91: a9:be:0f:94:e1:a3:89:cb:be:ae:a3:f9:e6:54:57:9c:d6:87: 48:24:65:71:d4:81:7b:d8:9a:c0:79:c9:45:87:19:3b:90:f4: 38:34:2b:09:45:e8:04:ec:95:e0:06:eb:4c:a6:f4:70:be:2d: db:f4:b1:35:c5:e7:a4:e9:cc:3c:11:05:0c:ca:bb:7a:ca:00: 18:15:89:2a:2a:5d:14:43:6b:74:b7:64:6c:e9:e9:1b:7d:56: 8d:f2:f3:bc:5f:76:7a:ca:52:14:6b:e2:22:28:3a:55:27:02: 0e:8f:90:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYeYsGm2hqEp/qsytfikXniTW3K0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODUzOUUxMjdFMTZCNzkzRUZEOTJBRTZFRkMyQkZCNTg3 OTAwOEZBRDAeFw0yNTA0MjQxNjU2NDNaFw0yNTA0MjcxNzI3NDNaMDMxMTAvBgNV BAMTKDhCQzg5QjE3NTYzMzM0NzI5QkE1QkNBRjY2RTk1M0MyQTRBMTNGMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDby+UJnb2VZg7kem+UJ4LzJdzq zZlCE9NXeqfs9FVGxBOWnt270Y9wrg1ws7VNH+bkbNWcp3QB78nRDuhVfpb/6WqT qxIzoeaFzoDcYcfXzPOz6DY64LdVf1SZG6wDE1d9RCOeRWs/2Jy5A36DgaVEUurn SjzmPcCaqQHs23r2TwYkE1uoro/VPRhS6JjyZZ/D4NFaVUYnqae6uzpjEaiHlRwZ 7XAvy6PklfZMviBm4Q/rv54b9Sj/dB2LXzZ6pxQnitBNOWU/MXBAxoT1QJjB20PG r5stfQNdfdz+5xDRZjdrm1p8LOv+MjQe1KaoEOGnrRpzEZDEsLhijqscB8hFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi8ibF1YzNHKbpbyvZulTwqShPy0wHwYDVR0j BBgwFoAUhTnhJ+FreT79kq5u/Cv7WHkAj60wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OGE4ZWE3Zi0yZjYxLTQ0NmItOGI1MS01MTk0NWIwODJmYWEvMC84NTM5RTEyN0Ux NkI3OTNFRkQ5MkFFNkVGQzJCRkI1ODc5MDA4RkFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODUzOUUxMjdFMTZCNzkzRUZEOTJBRTZFRkMyQkZCNTg3OTAw OEZBRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODhhOGVhN2YtMmY2MS00NDZiLThi NTEtNTE5NDViMDgyZmFhLzAvODUzOUUxMjdFMTZCNzkzRUZEOTJBRTZFRkMyQkZC NTg3OTAwOEZBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKX/M8iJ+4m11gNZ7S66Oo8h3h1p03gK4b0F LYHHyWVDf2NNy6kh3ACu4SNNX9KUuoJhS8yMmRAiZqx7EaQs7winYliAXP7HOLO9 Uc1aa60rTsumQ7BHr1v4LeSqOiMyHnVgbIGXICvIyUPaZawTQHqUpzIC6w9GHzSJ ZDO1y56KWLsz6PAv3Z/f89y9cEBhkam+D5Tho4nLvq6j+eZUV5zWh0gkZXHUgXvY msB5yUWHGTuQ9Dg0KwlF6ATsleAG60ym9HC+Ldv0sTXF56TpzDwRBQzKu3rKABgV iSoqXRRDa3S3ZGzp6Rt9Vo3y87xfdnrKUhRr4iIoOlUnAg6PkBg= -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:11 2025 by rpki-client on console.sobornost.net