$ rpki-client -vvf repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.mft File: 67C19D4C4526841EC686B5194BEE908F203AF744.mft (raw, json) Hash identifier: ggK+xFlfQaiH7BQkTVIu1iYf0VR2njy/gSHtqQEeWrE= Subject key identifier: 3B:71:14:13:B6:FE:EC:CF:FB:08:2C:C5:6C:D4:9F:BC:77:37:DD:A8 Authority key identifier: 67:C1:9D:4C:45:26:84:1E:C6:86:B5:19:4B:EE:90:8F:20:3A:F7:44 Certificate issuer: /CN=67C19D4C4526841EC686B5194BEE908F203AF744 Certificate serial: 1487AB0E5EECE133C600737B4A2DB7ABBBE65231 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/67C19D4C4526841EC686B5194BEE908F203AF744.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.mft Manifest number: 4A Signing time: Thu 24 Apr 2025 01:11:02 +0000 Manifest this update: Thu 24 Apr 2025 01:06:02 +0000 Manifest next update: Sun 27 Apr 2025 07:09:02 +0000 Files and hashes: 1: 67C19D4C4526841EC686B5194BEE908F203AF744.crl (hash: +Zev6aFWwB3rNkgwFjUw5HREa9wLG70UgYegm6sxTg8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.crl rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/67C19D4C4526841EC686B5194BEE908F203AF744.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 18:38:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:87:ab:0e:5e:ec:e1:33:c6:00:73:7b:4a:2d:b7:ab:bb:e6:52:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67C19D4C4526841EC686B5194BEE908F203AF744 Validity Not Before: Apr 24 01:06:02 2025 GMT Not After : Apr 27 07:09:02 2025 GMT Subject: CN=3B711413B6FEECCFFB082CC56CD49FBC7737DDA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:31:bb:3a:ba:cb:87:4f:37:6d:7a:22:a3:17: 52:3c:17:fe:fc:b9:cf:a4:65:c7:83:1b:4d:71:23: 74:e5:0a:08:72:d6:2b:13:03:f0:e7:fe:2d:75:ab: 98:5c:e6:2a:bd:a7:8a:da:57:bb:1c:2d:b8:0e:fc: 5d:45:45:29:ba:4f:c0:d1:7c:17:06:c8:3a:e6:0f: a7:d3:e3:f5:42:c9:b1:41:ea:4d:78:f3:88:48:5f: 23:5a:e5:2f:b2:12:cc:30:e4:10:12:1e:cd:d3:93: 00:6c:cb:a4:ca:c7:f7:68:5a:d1:9e:ce:a7:5f:cb: 7e:7f:8b:a5:eb:05:de:96:92:78:64:64:2d:92:3d: d1:a8:16:b1:43:d0:54:f5:13:32:0f:34:57:25:1c: 19:f7:0f:98:50:df:33:fb:eb:24:71:1c:7d:b1:ee: 0e:5d:34:e1:7c:7c:6b:7e:1b:c7:1f:b8:45:69:1e: ce:76:97:ba:3c:d5:8a:8c:4d:d1:7a:2e:6f:18:7e: 90:05:a4:bb:9a:1b:6a:81:94:d7:d4:25:d0:82:18: 5f:9d:ee:d4:d6:2d:a9:60:5b:e1:b0:dc:33:0e:cc: 1b:88:0d:81:c5:a4:e8:70:46:df:f4:0e:09:04:31: 76:cc:07:5a:f1:93:d3:11:f2:fd:00:b5:ac:23:89: e4:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:71:14:13:B6:FE:EC:CF:FB:08:2C:C5:6C:D4:9F:BC:77:37:DD:A8 X509v3 Authority Key Identifier: keyid:67:C1:9D:4C:45:26:84:1E:C6:86:B5:19:4B:EE:90:8F:20:3A:F7:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/67C19D4C4526841EC686B5194BEE908F203AF744.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:81:3b:b6:57:19:05:ef:26:96:03:23:cf:ac:70:2c:85:09: 2b:f6:d2:11:3b:ef:98:49:6e:89:ba:ae:7c:b5:be:39:6e:ef: 46:05:aa:cd:af:cc:d3:50:f6:7d:7b:7d:b1:86:c9:7a:d7:55: b3:49:89:13:54:c3:e3:e1:84:4f:40:0f:25:6e:16:e4:81:2d: a0:12:6d:82:3a:5e:53:42:a0:7e:6b:94:80:35:e0:d0:3f:4d: 1e:c2:e6:30:5c:cd:58:37:29:69:39:11:ca:cf:e9:e6:99:5c: c6:e4:44:85:7c:3b:f1:b2:0d:0b:4f:1e:23:60:3f:55:3c:8d: 0a:56:91:0a:00:be:48:f6:ea:6e:30:d4:ed:60:55:e4:32:2e: 2f:ee:69:c5:d1:6d:f2:d1:85:6a:3b:b2:f0:f4:41:ec:b7:9e: 65:63:92:dc:86:08:8c:9c:c3:10:88:12:e3:cd:7b:e2:1a:52: 2a:d6:a2:cd:d4:2c:3d:f0:16:e5:d8:52:b6:4f:a0:4e:c8:23: b2:37:39:d3:1e:e9:d9:6c:a8:7c:22:9b:c5:fb:48:55:bc:5e: c2:e9:ad:61:ad:5a:41:14:0a:9a:59:27:d4:21:91:ef:f9:be: 0e:97:d6:b9:ed:fa:16:08:20:ee:6c:a7:6f:ef:b5:40:1b:e2: e8:45:4d:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFIerDl7s4TPGAHN7Si23q7vmUjEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdDMTlENEM0NTI2ODQxRUM2ODZCNTE5NEJFRTkwOEYy MDNBRjc0NDAeFw0yNTA0MjQwMTA2MDJaFw0yNTA0MjcwNzA5MDJaMDMxMTAvBgNV BAMTKDNCNzExNDEzQjZGRUVDQ0ZGQjA4MkNDNTZDRDQ5RkJDNzczN0REQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZMbs6usuHTzdteiKjF1I8F/78 uc+kZceDG01xI3TlCghy1isTA/Dn/i11q5hc5iq9p4raV7scLbgO/F1FRSm6T8DR fBcGyDrmD6fT4/VCybFB6k1484hIXyNa5S+yEsww5BASHs3TkwBsy6TKx/doWtGe zqdfy35/i6XrBd6WknhkZC2SPdGoFrFD0FT1EzIPNFclHBn3D5hQ3zP76yRxHH2x 7g5dNOF8fGt+G8cfuEVpHs52l7o81YqMTdF6Lm8YfpAFpLuaG2qBlNfUJdCCGF+d 7tTWLalgW+Gw3DMOzBuIDYHFpOhwRt/0DgkEMXbMB1rxk9MR8v0AtawjieThAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO3EUE7b+7M/7CCzFbNSfvHc33agwHwYDVR0j BBgwFoAUZ8GdTEUmhB7GhrUZS+6QjyA690QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MjExZjM0Ny1hMWU3LTQ3MWQtYWQyMC1kYTc2YWFiZjM4NGMvMC82N0MxOUQ0QzQ1 MjY4NDFFQzY4NkI1MTk0QkVFOTA4RjIwM0FGNzQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjdDMTlENEM0NTI2ODQxRUM2ODZCNTE5NEJFRTkwOEYyMDNB Rjc0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTIxMWYzNDctYTFlNy00NzFkLWFk MjAtZGE3NmFhYmYzODRjLzAvNjdDMTlENEM0NTI2ODQxRUM2ODZCNTE5NEJFRTkw OEYyMDNBRjc0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACWBO7ZXGQXvJpYDI8+scCyFCSv20hE775hJ bom6rny1vjlu70YFqs2vzNNQ9n17fbGGyXrXVbNJiRNUw+PhhE9ADyVuFuSBLaAS bYI6XlNCoH5rlIA14NA/TR7C5jBczVg3KWk5EcrP6eaZXMbkRIV8O/GyDQtPHiNg P1U8jQpWkQoAvkj26m4w1O1gVeQyLi/uacXRbfLRhWo7svD0Qey3nmVjktyGCIyc wxCIEuPNe+IaUirWos3ULD3wFuXYUrZPoE7II7I3OdMe6dlsqHwim8X7SFW8XsLp rWGtWkEUCppZJ9Qhke/5vg6X1rnt+hYIIO5sp2/vtUAb4uhFTVQ= -----END CERTIFICATE-----Generated at Thu Apr 24 04:31:49 2025 by rpki-client on console.sobornost.net