$ rpki-client -vvf repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft File: 33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft (raw, json) Hash identifier: q1X82jnBMj65Wo/slmEF3rf0TbcqOL/p5StdijbEhFk= Subject key identifier: 1B:92:3F:AC:A9:AC:73:A3:3D:FE:F0:C5:75:74:3C:0D:1C:B5:3C:41 Authority key identifier: 33:D2:F1:EA:E4:46:34:CC:F2:B0:28:FD:CA:2A:11:51:3D:83:B4:2D Certificate issuer: /CN=33D2F1EAE44634CCF2B028FDCA2A11513D83B42D Certificate serial: 45D990A29FEBA3E457371036F5FF0BA7A248AE94 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft Manifest number: 7C Signing time: Thu 24 Apr 2025 23:22:14 +0000 Manifest this update: Thu 24 Apr 2025 23:17:14 +0000 Manifest next update: Mon 28 Apr 2025 00:41:14 +0000 Files and hashes: 1: 33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.crl (hash: v2odW/XZLkZuM78Ex0gX2H5XIPBmVn0GyqIV8maZT4c=) 2: 323030313a6466333a643334303a3a2f34382d3438203d3e20313532373439.roa (hash: xJ7jPZiRN5p9CCeavvlkfOq9xqVrWGN0H9fWEY/Ic+k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.crl rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:d9:90:a2:9f:eb:a3:e4:57:37:10:36:f5:ff:0b:a7:a2:48:ae:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33D2F1EAE44634CCF2B028FDCA2A11513D83B42D Validity Not Before: Apr 24 23:17:14 2025 GMT Not After : Apr 28 00:41:14 2025 GMT Subject: CN=1B923FACA9AC73A33DFEF0C575743C0D1CB53C41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a4:d0:4e:f1:2c:bf:9d:66:5d:82:f7:ad:26: 1f:16:a8:54:43:42:fe:c9:de:ce:a7:0e:7c:d6:a0: a5:62:4a:fe:27:bf:9e:83:e3:f7:b6:0a:50:c3:bb: e5:62:29:a3:23:0a:f9:f7:20:c6:cc:2e:f3:21:9f: 7a:fc:b3:74:6c:74:8e:ff:97:34:5e:c4:f0:a0:63: 77:7a:04:36:a8:b3:bb:41:27:d8:4e:3e:91:53:35: 72:a7:ed:46:46:b0:f0:fa:75:52:36:e9:cc:b4:10: c1:0e:b8:66:23:82:61:18:f6:18:89:3b:f4:3d:71: 7e:02:15:3f:c7:3f:58:c5:bf:3a:be:d6:99:63:73: 65:cd:3d:ea:ec:83:0d:00:69:bb:27:6b:2b:c9:5c: d6:b4:02:d8:67:de:ec:3d:1c:5e:fa:9e:ac:60:d7: b5:c8:a3:37:ac:74:54:2c:02:ba:d8:88:23:19:7e: 53:da:dc:07:82:fd:96:c7:e9:3d:b9:89:29:ac:0f: 7a:65:a6:d7:a8:1f:27:c6:1a:83:3d:dc:1e:da:e7: 06:c7:a1:a8:6f:9c:5e:33:51:3f:6b:69:0e:4a:5a: 70:ac:cf:2f:0f:1a:38:f8:60:a3:6d:07:ef:ae:70: 1f:7f:d2:c2:37:b9:0f:f8:c1:21:5d:0e:41:5c:f2: 9e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:92:3F:AC:A9:AC:73:A3:3D:FE:F0:C5:75:74:3C:0D:1C:B5:3C:41 X509v3 Authority Key Identifier: keyid:33:D2:F1:EA:E4:46:34:CC:F2:B0:28:FD:CA:2A:11:51:3D:83:B4:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/33D2F1EAE44634CCF2B028FDCA2A11513D83B42D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:9c:80:a4:a0:41:65:dc:79:dc:99:78:7b:d4:25:3d:b6:e2: b0:3c:d2:cc:a5:d7:50:a3:34:d6:62:c2:01:cd:98:8e:a1:e5: 17:56:a4:c5:fb:50:81:37:13:60:bc:69:0e:68:18:c8:78:44: c9:21:1b:4b:f2:40:d5:1d:44:57:3a:09:aa:86:ab:70:2b:6b: cd:f5:4a:ce:7a:5e:9a:e1:4d:39:ac:34:c1:49:ce:da:20:54: 67:b9:2c:d4:6d:b7:7e:1d:99:68:a9:b9:9f:cd:90:a9:4d:c0: ee:62:65:ea:d2:23:c5:c4:d5:5e:0d:bb:a2:bd:86:7b:0d:6f: 71:4e:99:d0:fa:4e:f7:8b:83:c0:87:37:17:9e:b5:73:34:f9: b6:8b:79:d1:f3:d7:2c:e9:ab:41:39:e6:78:11:05:68:78:78: 56:c0:0b:d5:2d:ff:38:54:f2:dc:c6:c6:ce:4e:13:71:f8:e0: 72:9c:75:30:dc:20:cd:c5:51:d2:83:b9:8f:c2:54:c3:40:a6: 2f:1f:29:da:ef:02:81:31:60:74:03:52:eb:23:35:45:20:22: 86:6a:69:a0:20:b1:de:cc:65:4e:7c:d3:62:e9:dd:6c:08:aa: 0f:a0:35:0a:0c:50:07:9a:4e:38:e4:ca:0d:6b:51:5d:05:34: 6e:8c:8e:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURdmQop/ro+RXNxA29f8Lp6JIrpQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNEMkYxRUFFNDQ2MzRDQ0YyQjAyOEZEQ0EyQTExNTEz RDgzQjQyRDAeFw0yNTA0MjQyMzE3MTRaFw0yNTA0MjgwMDQxMTRaMDMxMTAvBgNV BAMTKDFCOTIzRkFDQTlBQzczQTMzREZFRjBDNTc1NzQzQzBEMUNCNTNDNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkpNBO8Sy/nWZdgvetJh8WqFRD Qv7J3s6nDnzWoKViSv4nv56D4/e2ClDDu+ViKaMjCvn3IMbMLvMhn3r8s3RsdI7/ lzRexPCgY3d6BDaos7tBJ9hOPpFTNXKn7UZGsPD6dVI26cy0EMEOuGYjgmEY9hiJ O/Q9cX4CFT/HP1jFvzq+1pljc2XNPersgw0AabsnayvJXNa0Athn3uw9HF76nqxg 17XIozesdFQsArrYiCMZflPa3AeC/ZbH6T25iSmsD3plpteoHyfGGoM93B7a5wbH oahvnF4zUT9raQ5KWnCszy8PGjj4YKNtB++ucB9/0sI3uQ/4wSFdDkFc8p4zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG5I/rKmsc6M9/vDFdXQ8DRy1PEEwHwYDVR0j BBgwFoAUM9Lx6uRGNMzysCj9yioRUT2DtC0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjczM2RjZi05ZjVlLTQ3NzUtOWNlNy05ZGQ1MjViNDRiODYvMS8zM0QyRjFFQUU0 NDYzNENDRjJCMDI4RkRDQTJBMTE1MTNEODNCNDJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzNEMkYxRUFFNDQ2MzRDQ0YyQjAyOEZEQ0EyQTExNTEzRDgz QjQyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWI3MzNkY2YtOWY1ZS00Nzc1LTlj ZTctOWRkNTI1YjQ0Yjg2LzEvMzNEMkYxRUFFNDQ2MzRDQ0YyQjAyOEZEQ0EyQTEx NTEzRDgzQjQyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK6cgKSgQWXcedyZeHvUJT224rA80syl11Cj NNZiwgHNmI6h5RdWpMX7UIE3E2C8aQ5oGMh4RMkhG0vyQNUdRFc6CaqGq3Ara831 Ss56XprhTTmsNMFJztogVGe5LNRtt34dmWipuZ/NkKlNwO5iZerSI8XE1V4Nu6K9 hnsNb3FOmdD6TveLg8CHNxeetXM0+baLedHz1yzpq0E55ngRBWh4eFbAC9Ut/zhU 8tzGxs5OE3H44HKcdTDcIM3FUdKDuY/CVMNApi8fKdrvAoExYHQDUusjNUUgIoZq aaAgsd7MZU5802Lp3WwIqg+gNQoMUAeaTjjkyg1rUV0FNG6Mjoo= -----END CERTIFICATE-----Generated at Fri Apr 25 03:46:17 2025 by rpki-client on console.sobornost.net