$ rpki-client -vvf repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft File: 1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft (raw, json) Hash identifier: rrNX6etECuyPTL5cQe+nh6J5Q0VVhGv9SeA4laAxUgY= Subject key identifier: 7C:C6:86:02:70:A1:F5:B8:D4:DA:56:03:88:97:60:D8:11:53:97:71 Authority key identifier: 1D:02:4B:7D:F6:A4:F5:42:13:C5:0C:40:5A:E1:E3:7B:85:21:B4:9A Certificate issuer: /CN=1D024B7DF6A4F54213C50C405AE1E37B8521B49A Certificate serial: 513F8B6F9A64186ABC7EDECBC69312C871006FEE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft Manifest number: 42 Signing time: Fri 25 Apr 2025 07:01:11 +0000 Manifest this update: Fri 25 Apr 2025 06:56:11 +0000 Manifest next update: Mon 28 Apr 2025 16:43:11 +0000 Files and hashes: 1: 1D024B7DF6A4F54213C50C405AE1E37B8521B49A.crl (hash: dy8n9VEGEkIqaRLAxZR4VAI7bLKXznh9P6lHyUvYaSg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.crl rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 14:02:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:3f:8b:6f:9a:64:18:6a:bc:7e:de:cb:c6:93:12:c8:71:00:6f:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D024B7DF6A4F54213C50C405AE1E37B8521B49A Validity Not Before: Apr 25 06:56:11 2025 GMT Not After : Apr 28 16:43:11 2025 GMT Subject: CN=7CC6860270A1F5B8D4DA5603889760D811539771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b9:ef:a8:ad:7f:4d:1a:8a:c5:73:d8:ec:c0: 22:62:4d:83:ff:9d:7b:c7:3c:f2:5b:a4:52:76:94: f3:54:56:b6:67:7d:2d:24:68:d9:cf:c9:3f:68:1a: 91:34:40:3f:20:78:9e:6a:40:eb:cf:d1:87:7e:6f: d5:0b:9a:70:b0:03:31:c0:dc:1b:f0:80:cb:48:01: 16:a2:3b:1c:6e:18:14:8c:24:ae:54:76:fb:c9:ba: 66:9f:28:6a:22:9a:56:95:cb:14:e2:eb:6f:b2:4c: ea:b2:8e:59:50:d5:0b:a9:83:60:bd:48:24:3e:0a: a1:3e:66:f9:2b:ec:5f:f8:d4:d8:03:2f:bd:04:ad: 13:9b:cf:35:a3:f7:81:a7:8c:4b:2f:b9:d9:c8:a4: 03:93:ab:8b:c1:00:64:97:9e:89:a0:7b:16:5a:51: 6d:6a:bf:61:bd:4e:d6:29:ea:ef:dd:5a:ab:02:94: 52:e2:7f:14:43:6a:ed:11:e7:1f:4f:ac:b2:61:d6: a8:ea:78:ea:94:3c:7c:d6:c3:ac:c2:d7:43:f7:87: c6:6b:24:06:89:3d:4d:8a:4f:4b:86:b9:20:d2:ff: 37:6e:7c:e9:6d:9e:59:60:76:ac:b9:ba:a0:fd:c1: e7:d8:da:0c:78:3e:fd:81:35:cb:16:36:40:75:b1: 52:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:C6:86:02:70:A1:F5:B8:D4:DA:56:03:88:97:60:D8:11:53:97:71 X509v3 Authority Key Identifier: keyid:1D:02:4B:7D:F6:A4:F5:42:13:C5:0C:40:5A:E1:E3:7B:85:21:B4:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:52:4c:93:cd:96:c4:31:a9:44:26:03:b4:bd:6b:36:c7:3b: 94:af:28:e7:76:68:c0:29:aa:42:96:c9:9e:36:c5:07:3e:66: 29:91:a4:8e:61:14:62:aa:74:66:37:50:7e:75:28:c1:b6:00: f0:42:08:f2:07:49:a9:59:10:55:30:eb:3a:5b:dc:18:9c:3a: a0:7d:b0:91:84:fd:7f:42:6a:3d:bf:49:cd:60:c6:8d:e4:49: 75:8e:dd:43:99:ce:c9:46:46:6e:f2:ad:c4:c9:39:7a:da:80: 10:da:1c:fd:61:8e:ef:01:9a:db:a3:15:0f:8a:09:a5:83:1d: 8d:77:56:5f:25:9c:44:a8:46:5a:75:2a:85:c0:d7:0c:02:cf: 80:e6:2b:9a:bd:64:c5:5e:4c:be:07:0f:a9:c1:30:4f:d6:0f: ad:46:ae:31:41:98:80:5e:c4:0e:2f:7e:44:e6:33:b9:70:5f: 51:fe:0c:4c:c7:fb:ae:11:94:b5:cd:11:ee:db:75:57:0e:51: 22:b3:07:e4:fd:12:b0:5d:e1:db:08:f4:fa:52:3c:66:30:70: f8:67:f5:4e:e9:a5:01:01:99:4b:6e:d2:a3:68:61:a7:be:0c: 7f:9a:c0:81:1e:c0:d4:8d:5d:f5:bc:69:34:23:fa:a9:80:07: 6a:e6:4f:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUT+Lb5pkGGq8ft7LxpMSyHEAb+4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQwMjRCN0RGNkE0RjU0MjEzQzUwQzQwNUFFMUUzN0I4 NTIxQjQ5QTAeFw0yNTA0MjUwNjU2MTFaFw0yNTA0MjgxNjQzMTFaMDMxMTAvBgNV BAMTKDdDQzY4NjAyNzBBMUY1QjhENERBNTYwMzg4OTc2MEQ4MTE1Mzk3NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUue+orX9NGorFc9jswCJiTYP/ nXvHPPJbpFJ2lPNUVrZnfS0kaNnPyT9oGpE0QD8geJ5qQOvP0Yd+b9ULmnCwAzHA 3BvwgMtIARaiOxxuGBSMJK5UdvvJumafKGoimlaVyxTi62+yTOqyjllQ1Qupg2C9 SCQ+CqE+Zvkr7F/41NgDL70ErRObzzWj94GnjEsvudnIpAOTq4vBAGSXnomgexZa UW1qv2G9TtYp6u/dWqsClFLifxRDau0R5x9PrLJh1qjqeOqUPHzWw6zC10P3h8Zr JAaJPU2KT0uGuSDS/zdufOltnllgdqy5uqD9wefY2gx4Pv2BNcsWNkB1sVLfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfMaGAnCh9bjU2lYDiJdg2BFTl3EwHwYDVR0j BBgwFoAUHQJLffak9UITxQxAWuHje4UhtJowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTNkZTNlYy00ZDNjLTQ0MDItYTdiOC04YTFiOTYyMjZlNzUvMS8xRDAyNEI3REY2 QTRGNTQyMTNDNTBDNDA1QUUxRTM3Qjg1MjFCNDlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQwMjRCN0RGNkE0RjU0MjEzQzUwQzQwNUFFMUUzN0I4NTIx QjQ5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTEzZGUzZWMtNGQzYy00NDAyLWE3 YjgtOGExYjk2MjI2ZTc1LzEvMUQwMjRCN0RGNkE0RjU0MjEzQzUwQzQwNUFFMUUz N0I4NTIxQjQ5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHxSTJPNlsQxqUQmA7S9azbHO5SvKOd2aMAp qkKWyZ42xQc+ZimRpI5hFGKqdGY3UH51KMG2APBCCPIHSalZEFUw6zpb3BicOqB9 sJGE/X9Caj2/Sc1gxo3kSXWO3UOZzslGRm7yrcTJOXragBDaHP1hju8BmtujFQ+K CaWDHY13Vl8lnESoRlp1KoXA1wwCz4DmK5q9ZMVeTL4HD6nBME/WD61GrjFBmIBe xA4vfkTmM7lwX1H+DEzH+64RlLXNEe7bdVcOUSKzB+T9ErBd4dsI9PpSPGYwcPhn 9U7ppQEBmUtu0qNoYae+DH+awIEewNSNXfW8aTQj+qmAB2rmT+4= -----END CERTIFICATE-----Generated at Fri Apr 25 10:36:52 2025 by rpki-client on console.sobornost.net