$ rpki-client -vvf repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft File: 7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft (raw, json) Hash identifier: Q5ssAGJw0h+e4PP7Ia2TD6EJjXCnEBhiySk7KCE4yB4= Subject key identifier: B1:12:86:93:8C:F9:AC:18:98:3A:14:29:52:90:85:AC:23:C9:53:C7 Authority key identifier: 7D:50:8B:22:53:50:B0:D2:04:F1:94:3F:4F:53:D4:D8:6A:C4:FC:31 Certificate issuer: /CN=7D508B225350B0D204F1943F4F53D4D86AC4FC31 Certificate serial: 5E41B9CCC988CE60033D6B2F2014DE9AB2BCEFFA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D508B225350B0D204F1943F4F53D4D86AC4FC31.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft Manifest number: 75 Signing time: Fri 25 Apr 2025 13:22:27 +0000 Manifest this update: Fri 25 Apr 2025 13:17:27 +0000 Manifest next update: Mon 28 Apr 2025 20:02:27 +0000 Files and hashes: 1: 7D508B225350B0D204F1943F4F53D4D86AC4FC31.crl (hash: dLCLgIqcblXFE/dNY0+SgEbLqrysVrPL6nqX/XXDBGc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.crl rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D508B225350B0D204F1943F4F53D4D86AC4FC31.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 20:02:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:41:b9:cc:c9:88:ce:60:03:3d:6b:2f:20:14:de:9a:b2:bc:ef:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D508B225350B0D204F1943F4F53D4D86AC4FC31 Validity Not Before: Apr 25 13:17:27 2025 GMT Not After : Apr 28 20:02:27 2025 GMT Subject: CN=B11286938CF9AC18983A1429529085AC23C953C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:2a:20:0a:7c:f7:09:fe:20:a2:03:1f:c0:83: 5f:3b:54:c2:14:8d:de:5f:d0:62:d5:69:45:78:d3: 13:4c:42:d3:e9:0e:dd:3e:84:48:9b:dc:16:13:59: 83:47:c8:98:a8:fc:64:d9:57:dc:28:c7:bb:5a:a6: 12:a5:67:0d:77:4c:37:f8:f6:0a:82:bd:b0:b0:71: d6:53:c5:80:ab:47:11:61:b1:0b:c6:94:7c:e0:be: d1:91:8a:e4:37:d3:1c:84:72:2d:66:01:05:a7:28: 5b:7d:39:05:03:49:43:8d:fe:ab:53:aa:d1:8a:98: 82:a7:ee:5c:16:37:20:48:81:9a:f9:56:0c:7d:56: c2:b7:41:7b:6f:01:89:38:f8:ba:f6:1a:1a:0a:12: 99:f1:ed:fa:eb:93:a2:28:11:e5:e6:67:b1:ff:3c: c1:d1:29:02:fa:5f:9e:bb:cf:fb:00:66:d5:da:bc: 5b:42:1e:20:57:7f:e5:93:e7:f5:58:ac:1e:9a:60: f6:e2:c7:f4:e2:c2:0b:12:55:49:dc:12:09:3f:9e: e5:9e:e2:8f:1a:83:56:a1:55:4b:d3:be:0b:2c:b6: 74:8b:06:40:0f:ad:fb:6b:6d:9e:8e:5c:08:9a:f3: 7e:4d:57:fb:96:0a:f6:0e:f9:bd:33:71:5c:13:03: 94:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:12:86:93:8C:F9:AC:18:98:3A:14:29:52:90:85:AC:23:C9:53:C7 X509v3 Authority Key Identifier: keyid:7D:50:8B:22:53:50:B0:D2:04:F1:94:3F:4F:53:D4:D8:6A:C4:FC:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D508B225350B0D204F1943F4F53D4D86AC4FC31.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:39:a5:18:89:f7:28:e5:23:b4:f5:46:0b:3f:da:32:0f:70: 72:27:c3:47:58:4a:3c:ab:65:ec:59:dc:04:2a:67:73:8f:bb: 7e:e3:30:75:a0:19:9c:30:e7:c3:ad:ad:60:01:df:81:99:1a: dd:28:6a:27:e1:50:ca:42:2a:b1:ec:35:70:24:13:50:44:97: 51:4b:d1:ff:c3:cf:47:1b:01:c8:b3:72:0f:84:68:33:90:3e: 73:30:a7:62:14:bc:b0:c5:55:35:0d:a9:ec:65:df:f4:04:ea: 8c:12:2f:31:3d:1c:67:94:a0:c4:ac:4a:4a:d1:42:49:ab:47: 80:73:cb:0c:74:85:d4:4b:1b:09:f0:8a:5d:84:68:8f:46:1c: cf:90:45:76:1f:48:97:63:f6:31:54:e1:d2:d5:15:cd:36:d7: 3c:cf:20:fb:2c:eb:55:e6:c9:bb:e9:4b:c0:3e:ed:dc:72:e6: df:94:74:77:ed:94:77:a4:b3:b4:25:76:ac:15:5d:57:5d:3b: 04:b5:07:e2:b3:8d:83:e6:c5:67:e3:f6:e9:89:e4:3f:e4:b6: 89:38:f0:69:57:a0:16:a6:fe:4f:92:99:1c:13:a4:07:49:2f: dc:b5:e4:e6:97:6f:88:45:55:10:57:d4:cf:5f:0c:30:89:ee: 7b:4d:66:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXkG5zMmIzmADPWsvIBTemrK87/owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q1MDhCMjI1MzUwQjBEMjA0RjE5NDNGNEY1M0Q0RDg2 QUM0RkMzMTAeFw0yNTA0MjUxMzE3MjdaFw0yNTA0MjgyMDAyMjdaMDMxMTAvBgNV BAMTKEIxMTI4NjkzOENGOUFDMTg5ODNBMTQyOTUyOTA4NUFDMjNDOTUzQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcKiAKfPcJ/iCiAx/Ag187VMIU jd5f0GLVaUV40xNMQtPpDt0+hEib3BYTWYNHyJio/GTZV9wox7taphKlZw13TDf4 9gqCvbCwcdZTxYCrRxFhsQvGlHzgvtGRiuQ30xyEci1mAQWnKFt9OQUDSUON/qtT qtGKmIKn7lwWNyBIgZr5Vgx9VsK3QXtvAYk4+Lr2GhoKEpnx7frrk6IoEeXmZ7H/ PMHRKQL6X567z/sAZtXavFtCHiBXf+WT5/VYrB6aYPbix/TiwgsSVUncEgk/nuWe 4o8ag1ahVUvTvgsstnSLBkAPrftrbZ6OXAia835NV/uWCvYO+b0zcVwTA5S/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsRKGk4z5rBiYOhQpUpCFrCPJU8cwHwYDVR0j BBgwFoAUfVCLIlNQsNIE8ZQ/T1PU2GrE/DEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjNiMjMwYS1mZmYxLTQ3ZjAtYmY5MS03Y2ViOGQzNjA5NmUvMC83RDUwOEIyMjUz NTBCMEQyMDRGMTk0M0Y0RjUzRDREODZBQzRGQzMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q1MDhCMjI1MzUwQjBEMjA0RjE5NDNGNEY1M0Q0RDg2QUM0 RkMzMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWIzYjIzMGEtZmZmMS00N2YwLWJm OTEtN2NlYjhkMzYwOTZlLzAvN0Q1MDhCMjI1MzUwQjBEMjA0RjE5NDNGNEY1M0Q0 RDg2QUM0RkMzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEU5pRiJ9yjlI7T1Rgs/2jIPcHInw0dYSjyr ZexZ3AQqZ3OPu37jMHWgGZww58OtrWAB34GZGt0oaifhUMpCKrHsNXAkE1BEl1FL 0f/Dz0cbAcizcg+EaDOQPnMwp2IUvLDFVTUNqexl3/QE6owSLzE9HGeUoMSsSkrR QkmrR4Bzywx0hdRLGwnwil2EaI9GHM+QRXYfSJdj9jFU4dLVFc021zzPIPss61Xm ybvpS8A+7dxy5t+UdHftlHeks7QldqwVXVddOwS1B+KzjYPmxWfj9umJ5D/ktok4 8GlXoBam/k+SmRwTpAdJL9y15OaXb4hFVRBX1M9fDDCJ7ntNZl8= -----END CERTIFICATE-----Generated at Fri Apr 25 17:11:51 2025 by rpki-client on console.sobornost.net