$ rpki-client -vvf repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft File: D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft (raw, json) Hash identifier: Hs3MKj5MtvhBnySfyk2v7YCR3aN+of5U1+92Tr5Lf2o= Subject key identifier: 8A:68:86:C7:DE:DA:AB:D5:1D:D7:DB:1D:FF:A7:1B:9F:B6:F6:EC:B9 Authority key identifier: D5:54:24:C9:15:3D:E3:C2:85:DA:2B:00:86:FF:76:EF:FD:F6:D0:ED Certificate issuer: /CN=D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED Certificate serial: 59B690A11C79E3A4F1A57C3392FA4BA68FF5554D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft Manifest number: 4A Signing time: Wed 23 Apr 2025 01:21:02 +0000 Manifest this update: Wed 23 Apr 2025 01:16:02 +0000 Manifest next update: Sat 26 Apr 2025 10:38:02 +0000 Files and hashes: 1: D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.crl (hash: 74BhE4VQMh2b26ZVTh5vx+qSEUoo6Qvf0d4z5KFGrKw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.crl rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 10:38:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:b6:90:a1:1c:79:e3:a4:f1:a5:7c:33:92:fa:4b:a6:8f:f5:55:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED Validity Not Before: Apr 23 01:16:02 2025 GMT Not After : Apr 26 10:38:02 2025 GMT Subject: CN=8A6886C7DEDAABD51DD7DB1DFFA71B9FB6F6ECB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c8:f8:fa:f6:dc:84:6a:a1:77:32:52:f4:7c: dd:a2:41:fe:79:39:41:ff:fd:b0:51:0f:ad:6e:c1: dd:18:5b:a8:c3:2c:78:cf:7b:80:56:7e:87:e9:97: 64:30:ec:dd:c2:63:c8:29:76:22:2d:20:9c:b6:ce: 60:12:4f:bd:ee:aa:89:85:b7:46:93:c1:04:eb:fa: 63:30:e0:ea:24:42:55:f6:ce:66:29:5f:52:40:50: 2c:98:a6:8f:c0:9a:55:c1:c4:45:66:b8:35:6e:a3: 0e:d3:f6:70:4a:2e:8d:fb:e8:3b:05:9e:42:01:3a: d8:d6:91:b0:91:17:b3:26:65:05:03:8d:0e:5f:34: df:9d:a2:15:e8:c3:9d:c5:1a:c5:bf:72:aa:db:2c: 76:7c:47:1a:da:93:6c:bf:3a:69:ab:08:85:a6:61: 6c:62:af:57:4b:3a:c3:7b:9e:27:71:b1:b6:25:35: 6a:b4:2f:1d:4b:4d:70:05:81:0b:23:55:96:ea:a0: f4:a6:c7:17:42:60:42:c9:c7:26:1b:02:7e:96:60: 43:a7:31:17:a4:66:7e:9b:95:93:b4:2a:94:bb:89: 82:1f:5a:96:7c:fc:d5:58:23:95:79:a3:a5:aa:7b: 82:c6:cf:18:ab:71:5c:df:23:f6:04:de:04:4a:5a: 08:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:68:86:C7:DE:DA:AB:D5:1D:D7:DB:1D:FF:A7:1B:9F:B6:F6:EC:B9 X509v3 Authority Key Identifier: keyid:D5:54:24:C9:15:3D:E3:C2:85:DA:2B:00:86:FF:76:EF:FD:F6:D0:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:bf:57:b2:c4:98:74:8b:2e:10:c2:65:8e:f3:7b:6f:5d:12: 3c:49:46:9d:8b:c9:5e:d4:39:3a:d9:40:6b:e5:a7:1f:18:9f: 21:c0:3d:f6:58:e0:54:0b:29:80:d2:4e:f1:88:2a:93:f4:12: 4b:02:68:ce:29:0d:77:f7:6a:07:b4:e5:79:cc:06:97:db:03: bc:08:dd:c4:ec:38:32:6a:52:67:8a:32:55:91:cb:10:62:8e: a3:17:1a:a3:d8:0b:c7:83:89:3c:30:11:47:be:98:90:f4:78: 53:a9:4c:0c:2e:2d:fe:b7:ab:63:20:fa:1a:49:0a:dc:d9:84: ad:0b:68:bc:2b:d2:bf:63:9a:aa:c4:22:14:e1:83:bb:cf:41: 50:64:d2:b0:3a:7c:90:54:fb:84:9a:76:3a:d1:e8:26:41:9e: 31:3c:ed:96:02:29:a1:e1:8f:06:ee:4e:58:b6:f8:d0:c7:da: d5:0f:c9:71:e0:96:43:82:a4:d9:e1:45:40:59:87:88:1d:b6: 50:2c:63:98:32:96:35:22:54:d8:8b:c0:18:b5:a8:86:e8:21: 7f:58:a9:23:7c:3a:01:b3:4f:33:1a:ee:da:8d:1b:c7:53:f3: e2:84:de:ad:2f:08:8a:fd:c7:50:b5:63:00:42:b4:5f:27:9e: 60:54:ec:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWbaQoRx546TxpXwzkvpLpo/1VU0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU1NDI0QzkxNTNERTNDMjg1REEyQjAwODZGRjc2RUZG REY2RDBFRDAeFw0yNTA0MjMwMTE2MDJaFw0yNTA0MjYxMDM4MDJaMDMxMTAvBgNV BAMTKDhBNjg4NkM3REVEQUFCRDUxREQ3REIxREZGQTcxQjlGQjZGNkVDQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJyPj69tyEaqF3MlL0fN2iQf55 OUH//bBRD61uwd0YW6jDLHjPe4BWfofpl2Qw7N3CY8gpdiItIJy2zmAST73uqomF t0aTwQTr+mMw4OokQlX2zmYpX1JAUCyYpo/AmlXBxEVmuDVuow7T9nBKLo376DsF nkIBOtjWkbCRF7MmZQUDjQ5fNN+dohXow53FGsW/cqrbLHZ8Rxrak2y/OmmrCIWm YWxir1dLOsN7nidxsbYlNWq0Lx1LTXAFgQsjVZbqoPSmxxdCYELJxyYbAn6WYEOn MRekZn6blZO0KpS7iYIfWpZ8/NVYI5V5o6Wqe4LGzxircVzfI/YE3gRKWggRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUimiGx97aq9Ud19sd/6cbn7b27LkwHwYDVR0j BBgwFoAU1VQkyRU948KF2isAhv927/320O0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MjExZjM0Ny1hMWU3LTQ3MWQtYWQyMC1kYTc2YWFiZjM4NGMvMS9ENTU0MjRDOTE1 M0RFM0MyODVEQTJCMDA4NkZGNzZFRkZERjZEMEVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDU1NDI0QzkxNTNERTNDMjg1REEyQjAwODZGRjc2RUZGREY2 RDBFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTIxMWYzNDctYTFlNy00NzFkLWFk MjAtZGE3NmFhYmYzODRjLzEvRDU1NDI0QzkxNTNERTNDMjg1REEyQjAwODZGRjc2 RUZGREY2RDBFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADW/V7LEmHSLLhDCZY7ze29dEjxJRp2LyV7U OTrZQGvlpx8YnyHAPfZY4FQLKYDSTvGIKpP0EksCaM4pDXf3age05XnMBpfbA7wI 3cTsODJqUmeKMlWRyxBijqMXGqPYC8eDiTwwEUe+mJD0eFOpTAwuLf63q2Mg+hpJ CtzZhK0LaLwr0r9jmqrEIhThg7vPQVBk0rA6fJBU+4SadjrR6CZBnjE87ZYCKaHh jwbuTli2+NDH2tUPyXHglkOCpNnhRUBZh4gdtlAsY5gyljUiVNiLwBi1qIboIX9Y qSN8OgGzTzMa7tqNG8dT8+KE3q0vCIr9x1C1YwBCtF8nnmBU7PE= -----END CERTIFICATE-----Generated at Wed Apr 23 06:32:01 2025 by rpki-client on console.sobornost.net