$ rpki-client -vvf repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft File: C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft (raw, json) Hash identifier: 2ggMeVi1PXeqNjCGJjcT11nMS6KM5o/GPfnJSJicFYA= Subject key identifier: 86:6D:18:0E:E2:75:74:1C:96:1B:DE:24:CB:26:DC:15:74:39:F4:22 Authority key identifier: C8:C5:B7:81:B7:F4:3C:62:74:BD:AA:C3:FD:8A:E1:91:4A:BE:ED:88 Certificate issuer: /CN=C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88 Certificate serial: 67A8E49ACCF1C3C5A00D35F310BC2FAF71F962A1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft Manifest number: 4D Signing time: Fri 25 Apr 2025 05:21:49 +0000 Manifest this update: Fri 25 Apr 2025 05:16:49 +0000 Manifest next update: Mon 28 Apr 2025 07:06:49 +0000 Files and hashes: 1: C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.crl (hash: bZQOaIibw3bbkQ2yMYI3oigz5y8SpOhD33MLcfo7GYY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.crl rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:a8:e4:9a:cc:f1:c3:c5:a0:0d:35:f3:10:bc:2f:af:71:f9:62:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88 Validity Not Before: Apr 25 05:16:49 2025 GMT Not After : Apr 28 07:06:49 2025 GMT Subject: CN=866D180EE275741C961BDE24CB26DC157439F422 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:07:8d:50:f2:90:f0:a5:d2:e3:b2:0d:46:17: f2:19:90:de:46:bd:bd:00:6d:1e:0c:25:c6:99:a8: 7c:e9:06:6e:92:c1:81:db:87:20:02:b1:ef:f9:54: 53:ca:29:75:d0:cc:40:6b:d1:c1:79:fe:b4:46:4a: 55:12:bb:17:e0:25:09:83:7f:cd:71:4b:14:5a:15: c4:9c:d2:54:8d:e3:5d:45:11:4e:01:57:95:69:04: 40:17:78:41:7f:17:32:3b:e8:e4:40:2a:03:97:f5: 6e:4c:f0:c6:a3:81:ac:57:0b:0e:e4:dd:ff:59:36: d3:cc:54:78:17:2e:3d:70:24:14:38:1c:87:5b:59: 19:20:d4:84:28:a3:cb:3f:98:e8:f5:2a:5b:fb:74: 1f:86:b3:3b:6e:1d:32:85:d4:84:8b:38:14:75:74: 5b:fa:cb:94:b4:f5:57:15:82:d1:4a:8c:2b:0f:85: 91:04:86:ff:70:21:f8:8b:aa:14:fa:21:be:50:c0: bb:7e:d9:c7:30:d3:1c:db:49:2d:b6:de:0c:43:f5: de:3e:51:ec:3b:93:bc:8a:fd:cd:28:fa:3b:66:ab: 8d:c7:e7:bd:d5:49:f1:e2:b8:6f:ff:ca:8a:08:07: 8e:a7:55:dc:b5:c9:14:07:4d:83:a3:a5:b6:b5:8b: 2d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:6D:18:0E:E2:75:74:1C:96:1B:DE:24:CB:26:DC:15:74:39:F4:22 X509v3 Authority Key Identifier: keyid:C8:C5:B7:81:B7:F4:3C:62:74:BD:AA:C3:FD:8A:E1:91:4A:BE:ED:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:1a:f0:61:e8:9e:00:a2:a0:b6:c8:c4:d5:4e:c9:1a:34:b2: 91:10:bf:cf:6c:1f:02:77:ef:7c:c0:a1:87:1b:35:11:be:fd: aa:78:0f:a2:92:df:1d:a8:ed:0a:1a:6d:6b:8e:a5:83:37:f0: d7:d7:af:ad:f1:9f:1d:fd:cf:7b:a1:5c:1b:e8:43:5f:e7:41: 9c:36:91:8f:70:ce:b4:af:2b:1e:d7:85:45:41:e0:7d:36:90: af:ad:62:d5:1e:c9:2d:cf:9d:1a:5a:a8:08:11:48:93:2f:dd: 55:e2:4b:ad:91:d4:f5:50:0f:19:1d:e8:0c:6c:0c:cb:06:53: e8:3f:62:57:38:28:f6:36:ad:51:4c:93:f2:1e:08:10:a1:d4: d5:96:ff:fa:78:e8:1b:f5:6a:af:c2:9c:f1:f6:bd:de:07:a2: c4:50:36:e9:27:db:66:ec:5b:76:b8:e0:7e:11:e0:64:4c:48: 32:b8:30:49:30:6d:0a:b5:16:04:83:7d:2a:85:8e:22:d8:de: 2c:79:ff:d1:d3:ed:1d:0d:ad:83:29:b5:02:46:da:7e:20:d1: f2:f8:39:16:5a:8b:62:50:d2:b9:59:08:63:ee:2f:18:46:da: 2b:89:5b:9c:ed:c8:7a:10:49:f1:6f:8e:e9:7b:f4:51:78:c4: 31:d4:14:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ6jkmszxw8WgDTXzELwvr3H5YqEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhDNUI3ODFCN0Y0M0M2Mjc0QkRBQUMzRkQ4QUUxOTE0 QUJFRUQ4ODAeFw0yNTA0MjUwNTE2NDlaFw0yNTA0MjgwNzA2NDlaMDMxMTAvBgNV BAMTKDg2NkQxODBFRTI3NTc0MUM5NjFCREUyNENCMjZEQzE1NzQzOUY0MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWB41Q8pDwpdLjsg1GF/IZkN5G vb0AbR4MJcaZqHzpBm6SwYHbhyACse/5VFPKKXXQzEBr0cF5/rRGSlUSuxfgJQmD f81xSxRaFcSc0lSN411FEU4BV5VpBEAXeEF/FzI76ORAKgOX9W5M8MajgaxXCw7k 3f9ZNtPMVHgXLj1wJBQ4HIdbWRkg1IQoo8s/mOj1Klv7dB+GsztuHTKF1ISLOBR1 dFv6y5S09VcVgtFKjCsPhZEEhv9wIfiLqhT6Ib5QwLt+2ccw0xzbSS223gxD9d4+ Uew7k7yK/c0o+jtmq43H573VSfHiuG//yooIB46nVdy1yRQHTYOjpba1iy01AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhm0YDuJ1dByWG94kyybcFXQ59CIwHwYDVR0j BBgwFoAUyMW3gbf0PGJ0varD/YrhkUq+7YgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ODg1M2FhYi04ZDZjLTQ1N2YtOWQ1Ny00ODRhY2FjZWE5ZDgvMS9DOEM1Qjc4MUI3 RjQzQzYyNzRCREFBQzNGRDhBRTE5MTRBQkVFRDg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhDNUI3ODFCN0Y0M0M2Mjc0QkRBQUMzRkQ4QUUxOTE0QUJF RUQ4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTg4NTNhYWItOGQ2Yy00NTdmLTlk NTctNDg0YWNhY2VhOWQ4LzEvQzhDNUI3ODFCN0Y0M0M2Mjc0QkRBQUMzRkQ4QUUx OTE0QUJFRUQ4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALAa8GHongCioLbIxNVOyRo0spEQv89sHwJ3 73zAoYcbNRG+/ap4D6KS3x2o7QoabWuOpYM38NfXr63xnx39z3uhXBvoQ1/nQZw2 kY9wzrSvKx7XhUVB4H02kK+tYtUeyS3PnRpaqAgRSJMv3VXiS62R1PVQDxkd6Axs DMsGU+g/Ylc4KPY2rVFMk/IeCBCh1NWW//p46Bv1aq/CnPH2vd4HosRQNukn22bs W3a44H4R4GRMSDK4MEkwbQq1FgSDfSqFjiLY3ix5/9HT7R0NrYMptQJG2n4g0fL4 ORZai2JQ0rlZCGPuLxhG2iuJW5ztyHoQSfFvjul79FF4xDHUFJY= -----END CERTIFICATE-----Generated at Fri Apr 25 08:21:08 2025 by rpki-client on console.sobornost.net