$ rpki-client -vvf repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft File: 2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft (raw, json) Hash identifier: VpPXDpseptYZZEeZElrw37XET5QBlQ+r4SxPCi/eP6Y= Subject key identifier: AE:CF:B3:74:FC:30:70:E9:A4:BD:AF:A7:B2:E0:F9:AB:94:3E:D1:AA Authority key identifier: 2A:86:5C:A2:F4:F7:0C:CC:B0:3F:98:C2:B6:E1:7E:89:3A:B8:7D:0C Certificate issuer: /CN=2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C Certificate serial: 39ACCFA644D664152F4287223B977B8632FD61E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft Manifest number: 01C7 Signing time: Thu 24 Apr 2025 12:01:50 +0000 Manifest this update: Thu 24 Apr 2025 11:56:50 +0000 Manifest next update: Sun 27 Apr 2025 12:55:50 +0000 Files and hashes: 1: 2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.crl (hash: 3Zy+UvvHbspak/WSG6w0jvFttbaRjAg75TfeakXaV8g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.crl rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 12:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:ac:cf:a6:44:d6:64:15:2f:42:87:22:3b:97:7b:86:32:fd:61:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C Validity Not Before: Apr 24 11:56:50 2025 GMT Not After : Apr 27 12:55:50 2025 GMT Subject: CN=AECFB374FC3070E9A4BDAFA7B2E0F9AB943ED1AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:2e:73:11:37:0d:67:d0:cb:35:8a:a0:78:d9: f6:f4:a1:ad:3a:8b:25:1a:12:8a:31:58:e7:cb:21: 76:33:ec:09:5a:c1:e0:63:c2:2e:4f:08:36:27:42: 8a:03:89:3e:91:8a:25:e4:77:db:10:31:42:fc:d1: 0c:5a:9e:c7:61:a1:c7:e2:7f:9c:85:63:01:7e:13: 29:6b:37:da:5d:22:5f:7b:26:55:d3:07:62:22:a0: da:1c:e1:4c:0b:56:8a:7b:fb:99:a3:87:bf:6b:ab: 17:f1:41:ab:c3:64:7e:c6:27:1e:ef:8e:f6:1c:2a: 74:58:84:68:cf:29:78:07:8c:fd:b5:e7:06:a2:3b: aa:a8:de:34:4a:df:34:3d:b8:a0:aa:9e:e3:e6:20: 80:fd:7f:71:44:5b:92:77:7b:b6:ca:b8:bd:1c:7a: e8:b4:d6:ff:f0:af:86:68:d3:5e:71:de:69:b1:70: 3e:b8:13:e9:d2:58:de:3e:bb:49:90:6a:2d:cd:0d: ff:94:e3:51:0c:1f:18:e5:3d:35:0d:1b:12:36:b5: 5a:76:4f:06:bf:b8:a0:c5:3c:22:a9:53:ee:7d:09: 15:2f:91:0d:e1:f4:f0:7b:94:ba:fd:96:6f:87:91: 1d:c1:c0:13:de:f7:b2:b2:2b:05:0f:f4:74:68:bd: ae:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:CF:B3:74:FC:30:70:E9:A4:BD:AF:A7:B2:E0:F9:AB:94:3E:D1:AA X509v3 Authority Key Identifier: keyid:2A:86:5C:A2:F4:F7:0C:CC:B0:3F:98:C2:B6:E1:7E:89:3A:B8:7D:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:3b:ec:2b:bf:82:d2:77:7c:d0:4a:1c:35:b6:90:f2:7e:5a: e3:ce:48:e8:65:88:d5:cb:bf:52:14:f8:9c:c9:ad:ab:3d:75: f1:17:6d:b4:e2:4e:77:09:9b:60:a4:5c:e0:26:9e:13:b7:10: c2:c4:1b:6e:4b:98:6e:ce:f5:f4:e8:15:1f:e8:f1:45:38:29: e0:cf:d6:ac:c9:ba:b5:be:11:1b:b2:59:9e:74:7a:94:13:60: 1b:73:24:5e:c5:a0:27:db:97:de:3a:be:8e:7e:15:78:17:a1: 4e:6a:d0:3a:af:54:0c:62:7b:a0:ad:99:93:fe:fd:2d:01:8e: a3:96:bb:c5:9c:1f:39:8a:9f:73:45:e5:6b:53:fd:d8:e3:60: d9:c4:28:f9:84:38:36:ff:54:16:a4:40:7c:99:8b:a9:7a:4e: ee:9a:50:e3:e9:14:1e:5d:58:96:cc:df:a9:60:13:ea:9e:1f: 8e:34:97:70:e2:66:53:1a:3b:f0:40:54:c2:54:94:69:9d:89: 93:f9:fa:8b:c3:5d:f1:2c:4e:5d:3b:d2:1b:fb:9f:eb:46:d7: 47:07:b0:f2:be:23:ba:3a:f5:97:cf:4d:c1:ed:56:bb:17:7b: 87:c8:39:77:60:08:18:2b:ce:fa:47:41:93:0e:27:06:3e:87: 33:33:db:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOazPpkTWZBUvQociO5d7hjL9YeYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE4NjVDQTJGNEY3MENDQ0IwM0Y5OEMyQjZFMTdFODkz QUI4N0QwQzAeFw0yNTA0MjQxMTU2NTBaFw0yNTA0MjcxMjU1NTBaMDMxMTAvBgNV BAMTKEFFQ0ZCMzc0RkMzMDcwRTlBNEJEQUZBN0IyRTBGOUFCOTQzRUQxQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRLnMRNw1n0Ms1iqB42fb0oa06 iyUaEooxWOfLIXYz7AlaweBjwi5PCDYnQooDiT6RiiXkd9sQMUL80Qxansdhocfi f5yFYwF+EylrN9pdIl97JlXTB2IioNoc4UwLVop7+5mjh79rqxfxQavDZH7GJx7v jvYcKnRYhGjPKXgHjP215waiO6qo3jRK3zQ9uKCqnuPmIID9f3FEW5J3e7bKuL0c eui01v/wr4Zo015x3mmxcD64E+nSWN4+u0mQai3NDf+U41EMHxjlPTUNGxI2tVp2 Twa/uKDFPCKpU+59CRUvkQ3h9PB7lLr9lm+HkR3BwBPe97KyKwUP9HRova4nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrs+zdPwwcOmkva+nsuD5q5Q+0aowHwYDVR0j BBgwFoAUKoZcovT3DMywP5jCtuF+iTq4fQwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDJiNzhhZC1kZjIzLTQzZTItYTk0ZC0zYjQ1NGNiYzdmYzUvMC8yQTg2NUNBMkY0 RjcwQ0NDQjAzRjk4QzJCNkUxN0U4OTNBQjg3RDBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkE4NjVDQTJGNEY3MENDQ0IwM0Y5OEMyQjZFMTdFODkzQUI4 N0QwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTAyYjc4YWQtZGYyMy00M2UyLWE5 NGQtM2I0NTRjYmM3ZmM1LzAvMkE4NjVDQTJGNEY3MENDQ0IwM0Y5OEMyQjZFMTdF ODkzQUI4N0QwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHQ77Cu/gtJ3fNBKHDW2kPJ+WuPOSOhliNXL v1IU+JzJras9dfEXbbTiTncJm2CkXOAmnhO3EMLEG25LmG7O9fToFR/o8UU4KeDP 1qzJurW+ERuyWZ50epQTYBtzJF7FoCfbl946vo5+FXgXoU5q0DqvVAxie6CtmZP+ /S0BjqOWu8WcHzmKn3NF5WtT/djjYNnEKPmEODb/VBakQHyZi6l6Tu6aUOPpFB5d WJbM36lgE+qeH440l3DiZlMaO/BAVMJUlGmdiZP5+ovDXfEsTl070hv7n+tG10cH sPK+I7o69ZfPTcHtVrsXe4fIOXdgCBgrzvpHQZMOJwY+hzMz20U= -----END CERTIFICATE-----Generated at Thu Apr 24 13:38:49 2025 by rpki-client on console.sobornost.net