$ rpki-client -vvf repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft File: DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft (raw, json) Hash identifier: 12uzVbxf6tF03mzD03Y0Tbefy9J9qHxo3SljbzSivL4= Subject key identifier: 15:5A:11:E5:DF:A6:0F:32:2F:54:F7:AA:96:DE:EC:0B:D7:68:45:84 Authority key identifier: DE:5F:8F:89:EA:28:57:71:91:25:EA:66:66:F5:93:A8:27:9B:3C:D9 Certificate issuer: /CN=DE5F8F89EA2857719125EA6666F593A8279B3CD9 Certificate serial: 2B078571AEA9873A62A510828D88215B61BBEE20 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE5F8F89EA2857719125EA6666F593A8279B3CD9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft Manifest number: 7F Signing time: Sat 26 Apr 2025 11:20:48 +0000 Manifest this update: Sat 26 Apr 2025 11:15:48 +0000 Manifest next update: Tue 29 Apr 2025 21:25:48 +0000 Files and hashes: 1: DE5F8F89EA2857719125EA6666F593A8279B3CD9.crl (hash: 0zuJxWroRkiMgnEA6m9KiJDuk5RfpSlE1LugpZsTfes=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.crl rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE5F8F89EA2857719125EA6666F593A8279B3CD9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 09:52:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:07:85:71:ae:a9:87:3a:62:a5:10:82:8d:88:21:5b:61:bb:ee:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE5F8F89EA2857719125EA6666F593A8279B3CD9 Validity Not Before: Apr 26 11:15:48 2025 GMT Not After : Apr 29 21:25:48 2025 GMT Subject: CN=155A11E5DFA60F322F54F7AA96DEEC0BD7684584 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c9:bc:a9:fc:5e:ec:d1:bb:fb:67:e3:4f:ba: 0b:74:55:b4:15:d9:fa:63:15:97:3f:97:a8:70:f4: 08:a0:27:6c:45:20:d5:90:a7:bb:40:2c:18:4f:c0: 15:1c:f7:9a:d5:36:48:56:c5:0c:74:28:0e:30:e1: cd:10:7a:08:5b:c7:d5:ad:92:99:3d:2c:40:c5:24: 1d:d9:46:bf:f4:59:22:1f:f0:82:4f:62:a7:b3:d3: fc:6a:64:aa:6f:f2:6e:45:5e:f4:0d:d6:8b:22:66: 56:70:cb:ab:1f:89:ca:94:15:8b:d4:a9:39:f2:bb: 14:b6:99:93:e0:41:01:53:f3:1b:24:67:14:a7:b6: a1:b8:25:e4:c4:bf:16:f7:d4:0b:a8:ed:95:ac:c6: 6a:12:2a:ef:22:65:e9:dd:98:14:b2:4b:9b:40:a1: 7b:4a:0d:d7:3d:cc:1f:40:ac:34:2b:67:cb:1d:70: 7f:9a:73:89:a4:9c:58:26:41:8b:c1:a2:9d:67:23: cf:b5:ee:7a:42:a3:d9:be:e3:d4:27:b5:d2:e9:d0: 02:33:47:19:f6:d5:2d:73:70:c1:80:57:00:cd:d0: b3:00:34:89:d1:46:33:8b:65:fa:de:aa:13:c7:43: f5:e2:89:5f:f6:47:21:52:9a:a5:f1:a3:ef:3e:71: 52:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:5A:11:E5:DF:A6:0F:32:2F:54:F7:AA:96:DE:EC:0B:D7:68:45:84 X509v3 Authority Key Identifier: keyid:DE:5F:8F:89:EA:28:57:71:91:25:EA:66:66:F5:93:A8:27:9B:3C:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE5F8F89EA2857719125EA6666F593A8279B3CD9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:7d:aa:d7:2c:7a:b7:8e:a7:00:3e:b4:01:a3:59:a1:5d:12: c2:21:8f:54:6d:ad:29:96:ef:0c:07:93:7d:52:e7:ba:b4:e3: 82:88:0f:c9:53:9b:28:41:f8:5f:8e:ba:53:d1:4c:2c:f1:93: 10:11:5b:f6:35:75:e2:76:f0:94:91:3a:72:86:db:74:f7:97: b0:91:c7:74:b6:77:30:1f:1b:f6:ec:24:d1:5f:6c:63:da:98: 2d:d6:9d:c6:52:ff:fe:45:fd:1d:b1:d0:f2:ae:e8:41:fd:38: 08:65:2f:fb:33:a6:23:49:ad:ef:ed:8a:50:37:17:d4:83:60: f2:3c:36:96:7f:c2:76:ca:ce:fa:c1:bb:6c:19:ce:c9:39:81: 46:1d:94:34:34:7f:46:c1:0e:eb:7c:4a:df:3d:56:7b:25:1c: 8a:6e:60:9c:d6:8b:19:76:bb:bc:02:6a:72:92:aa:3a:ef:fa: e9:95:ac:23:88:f8:f0:23:58:34:a5:ca:c2:57:de:16:19:72: 51:e2:e4:e4:06:15:66:18:76:c8:82:80:2d:62:a7:7c:ca:e4: ad:c3:60:73:b1:42:89:d3:12:4f:5d:96:e2:ca:53:e7:2b:3b: c6:e7:bc:88:88:5b:d5:2d:da:3c:3e:69:f2:c9:0b:f2:c1:fe: 48:a0:6c:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKweFca6phzpipRCCjYghW2G77iAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU1RjhGODlFQTI4NTc3MTkxMjVFQTY2NjZGNTkzQTgy NzlCM0NEOTAeFw0yNTA0MjYxMTE1NDhaFw0yNTA0MjkyMTI1NDhaMDMxMTAvBgNV BAMTKDE1NUExMUU1REZBNjBGMzIyRjU0RjdBQTk2REVFQzBCRDc2ODQ1ODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZybyp/F7s0bv7Z+NPugt0VbQV 2fpjFZc/l6hw9AigJ2xFINWQp7tALBhPwBUc95rVNkhWxQx0KA4w4c0Qeghbx9Wt kpk9LEDFJB3ZRr/0WSIf8IJPYqez0/xqZKpv8m5FXvQN1osiZlZwy6sficqUFYvU qTnyuxS2mZPgQQFT8xskZxSntqG4JeTEvxb31Auo7ZWsxmoSKu8iZendmBSyS5tA oXtKDdc9zB9ArDQrZ8sdcH+ac4mknFgmQYvBop1nI8+17npCo9m+49QntdLp0AIz Rxn21S1zcMGAVwDN0LMANInRRjOLZfreqhPHQ/XiiV/2RyFSmqXxo+8+cVKjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFVoR5d+mDzIvVPeqlt7sC9doRYQwHwYDVR0j BBgwFoAU3l+PieooV3GRJepmZvWTqCebPNkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZmQ2ZWFjYS1mNWZkLTRhY2ItODVhNS1lYjhkMzcwODIzYWYvMC9ERTVGOEY4OUVB Mjg1NzcxOTEyNUVBNjY2NkY1OTNBODI3OUIzQ0Q5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREU1RjhGODlFQTI4NTc3MTkxMjVFQTY2NjZGNTkzQTgyNzlC M0NEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGZkNmVhY2EtZjVmZC00YWNiLTg1 YTUtZWI4ZDM3MDgyM2FmLzAvREU1RjhGODlFQTI4NTc3MTkxMjVFQTY2NjZGNTkz QTgyNzlCM0NEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACN9qtcsereOpwA+tAGjWaFdEsIhj1RtrSmW 7wwHk31S57q044KID8lTmyhB+F+OulPRTCzxkxARW/Y1deJ28JSROnKG23T3l7CR x3S2dzAfG/bsJNFfbGPamC3WncZS//5F/R2x0PKu6EH9OAhlL/szpiNJre/tilA3 F9SDYPI8NpZ/wnbKzvrBu2wZzsk5gUYdlDQ0f0bBDut8St89VnslHIpuYJzWixl2 u7wCanKSqjrv+umVrCOI+PAjWDSlysJX3hYZclHi5OQGFWYYdsiCgC1ip3zK5K3D YHOxQonTEk9dluLKU+crO8bnvIiIW9Ut2jw+afLJC/LB/kigbAc= -----END CERTIFICATE-----Generated at Sat Apr 26 13:37:03 2025 by rpki-client on console.sobornost.net