$ rpki-client -vvf repo-rpki.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.mft File: 2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.mft (raw, json) Hash identifier: ZR4OGkUeqivWhR+9HcSbz3qQiZcxfq/BqvGaDC7VOlI= Subject key identifier: D5:44:2D:D2:D6:5D:17:20:9F:1B:56:73:43:D2:6C:44:20:A8:F0:E1 Authority key identifier: 26:64:CB:E1:0F:2B:9F:F1:BE:C5:0A:6A:85:DC:7A:A5:2B:9F:17:FA Certificate issuer: /CN=2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA Certificate serial: 27529DC23E0A0E86E55DB0B7CF3B5B78BE17D720 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.mft Manifest number: 0379 Signing time: Thu 24 Apr 2025 18:12:06 +0000 Manifest this update: Thu 24 Apr 2025 18:07:06 +0000 Manifest next update: Mon 28 Apr 2025 02:20:06 +0000 Files and hashes: 1: 2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.crl (hash: aSjOGxUhTCc5fSRxspYCuorXxkpAnx6JK9V0P8DcK58=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.crl rsync://repo-rpki.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:52:9d:c2:3e:0a:0e:86:e5:5d:b0:b7:cf:3b:5b:78:be:17:d7:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA Validity Not Before: Apr 24 18:07:06 2025 GMT Not After : Apr 28 02:20:06 2025 GMT Subject: CN=D5442DD2D65D17209F1B567343D26C4420A8F0E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:0b:ea:07:67:9b:ec:01:68:53:74:8e:36:59: ba:aa:19:b1:86:d2:c3:8c:61:5f:42:e6:3f:94:7d: 76:a9:65:b3:f8:3f:ca:e2:6b:0a:ec:53:4a:7c:f9: bd:45:f6:b8:bc:bd:6b:ee:82:c9:a3:a7:48:fb:5c: d9:f1:f0:6f:fd:6c:00:83:f6:38:11:29:f3:eb:c3: 08:3b:63:fc:27:63:5b:49:b5:a1:5c:cc:ee:96:0b: 3d:b9:11:d5:b3:1d:0a:78:16:c9:ff:d7:73:fd:61: d7:26:be:36:6d:a5:81:4b:ed:89:5a:ab:b6:45:f5: 69:93:8c:ee:57:84:b9:90:49:bf:6e:07:10:6d:7d: 3c:39:d2:37:b9:f8:f5:54:b4:64:7f:d2:91:d3:38: d8:ce:33:5a:3d:18:95:bb:5b:42:60:9c:f3:5a:54: fe:34:f1:1e:7e:2b:7a:a0:78:3b:f8:6b:49:0e:9e: b3:ea:ec:c6:3d:6c:22:99:10:3e:11:74:93:4b:a3: 17:92:37:7d:4e:5c:a1:3c:30:d5:85:15:17:1d:8f: 8b:1a:e8:27:e6:1a:bd:37:62:be:2f:14:2c:d9:00: 44:0b:e5:6e:af:1a:e7:26:a8:0e:25:39:34:58:ae: f0:9c:00:fd:47:4d:11:4a:2a:95:98:41:b9:0f:fc: 97:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:44:2D:D2:D6:5D:17:20:9F:1B:56:73:43:D2:6C:44:20:A8:F0:E1 X509v3 Authority Key Identifier: keyid:26:64:CB:E1:0F:2B:9F:F1:BE:C5:0A:6A:85:DC:7A:A5:2B:9F:17:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:f0:ee:89:56:34:96:b3:51:84:2c:a5:10:cf:7b:46:62:9b: 55:1e:1a:2d:c8:0d:15:8c:15:26:97:5a:0e:5d:63:a4:21:02: b6:fe:1d:86:0e:1f:f5:d1:32:d2:55:82:30:6e:07:54:96:1e: 06:98:a5:83:87:55:e4:b4:a4:cd:40:b4:e8:53:d7:6d:eb:bf: df:c8:51:e2:b6:97:6e:a1:e1:db:49:b0:b4:36:54:f1:77:a1: cd:3c:0e:91:79:09:92:96:18:38:bc:56:9c:36:27:80:0a:2a: c5:47:89:c6:71:76:f6:99:10:88:dc:e7:0e:fb:6b:04:2f:b9: 08:b4:41:68:70:88:dd:15:b0:94:64:dc:e2:05:67:6b:89:cd: 8b:57:d1:2f:23:81:6b:c8:e3:ac:42:89:5d:04:97:96:4b:9f: a7:6b:f0:c1:48:17:c1:48:f9:8d:50:ad:35:a8:2a:4f:43:dd: 48:0c:d1:74:66:ec:8a:ce:5b:2a:27:86:16:41:c6:28:6e:41: d3:26:fa:0b:b1:cb:c8:8d:64:07:e1:62:73:74:3f:ba:88:48: 93:81:cb:a7:ea:07:66:a9:80:8a:a1:ac:e0:bd:b2:a2:19:d2: 2d:4d:79:a1:09:a5:f9:0d:36:c7:3f:cc:71:7a:fb:9a:77:a2: 10:01:f8:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ1Kdwj4KDoblXbC3zztbeL4X1yAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjY2NENCRTEwRjJCOUZGMUJFQzUwQTZBODVEQzdBQTUy QjlGMTdGQTAeFw0yNTA0MjQxODA3MDZaFw0yNTA0MjgwMjIwMDZaMDMxMTAvBgNV BAMTKEQ1NDQyREQyRDY1RDE3MjA5RjFCNTY3MzQzRDI2QzQ0MjBBOEYwRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWC+oHZ5vsAWhTdI42WbqqGbGG 0sOMYV9C5j+UfXapZbP4P8riawrsU0p8+b1F9ri8vWvugsmjp0j7XNnx8G/9bACD 9jgRKfPrwwg7Y/wnY1tJtaFczO6WCz25EdWzHQp4Fsn/13P9YdcmvjZtpYFL7Yla q7ZF9WmTjO5XhLmQSb9uBxBtfTw50je5+PVUtGR/0pHTONjOM1o9GJW7W0JgnPNa VP408R5+K3qgeDv4a0kOnrPq7MY9bCKZED4RdJNLoxeSN31OXKE8MNWFFRcdj4sa 6CfmGr03Yr4vFCzZAEQL5W6vGucmqA4lOTRYrvCcAP1HTRFKKpWYQbkP/JeNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1UQt0tZdFyCfG1ZzQ9JsRCCo8OEwHwYDVR0j BBgwFoAUJmTL4Q8rn/G+xQpqhdx6pSufF/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Y2YzYzIxMS0wNjQ1LTQ4ODItYTRmMS00NmJlODY3Yjc5ODMvMC8yNjY0Q0JFMTBG MkI5RkYxQkVDNTBBNkE4NURDN0FBNTJCOUYxN0ZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjY2NENCRTEwRjJCOUZGMUJFQzUwQTZBODVEQzdBQTUyQjlG MTdGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGNmM2MyMTEtMDY0NS00ODgyLWE0 ZjEtNDZiZTg2N2I3OTgzLzAvMjY2NENCRTEwRjJCOUZGMUJFQzUwQTZBODVEQzdB QTUyQjlGMTdGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAITw7olWNJazUYQspRDPe0Zim1UeGi3IDRWM FSaXWg5dY6QhArb+HYYOH/XRMtJVgjBuB1SWHgaYpYOHVeS0pM1AtOhT123rv9/I UeK2l26h4dtJsLQ2VPF3oc08DpF5CZKWGDi8Vpw2J4AKKsVHicZxdvaZEIjc5w77 awQvuQi0QWhwiN0VsJRk3OIFZ2uJzYtX0S8jgWvI46xCiV0El5ZLn6dr8MFIF8FI +Y1QrTWoKk9D3UgM0XRm7IrOWyonhhZBxihuQdMm+guxy8iNZAfhYnN0P7qISJOB y6fqB2apgIqhrOC9sqIZ0i1NeaEJpfkNNsc/zHF6+5p3ohAB+G0= -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:11 2025 by rpki-client on console.sobornost.net