$ rpki-client -vvf repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft File: A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft (raw, json) Hash identifier: B30YfWrXopRjPL0o+6dBdTfWPtbMPDmzTgQy84HbsMQ= Subject key identifier: 07:53:0D:BE:24:F6:3F:86:5F:EE:DD:C8:A9:10:78:E7:E1:27:A9:9A Authority key identifier: A8:CD:D5:76:A9:B5:E4:48:A8:69:BE:A4:D5:16:BA:FC:5A:87:95:03 Certificate issuer: /CN=A8CDD576A9B5E448A869BEA4D516BAFC5A879503 Certificate serial: 6A822916BC28760654A5A25F785837515569891F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft Manifest number: 89 Signing time: Tue 22 Apr 2025 23:22:19 +0000 Manifest this update: Tue 22 Apr 2025 23:17:19 +0000 Manifest next update: Sat 26 Apr 2025 09:26:19 +0000 Files and hashes: 1: A8CDD576A9B5E448A869BEA4D516BAFC5A879503.crl (hash: k1Ow/uHKNubdwrokFQhsfYcFwnMQjFpkL/kJiUFBlB8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.crl rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 01:36:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:82:29:16:bc:28:76:06:54:a5:a2:5f:78:58:37:51:55:69:89:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8CDD576A9B5E448A869BEA4D516BAFC5A879503 Validity Not Before: Apr 22 23:17:19 2025 GMT Not After : Apr 26 09:26:19 2025 GMT Subject: CN=07530DBE24F63F865FEEDDC8A91078E7E127A99A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7d:eb:4d:64:e4:3e:c5:9c:74:0b:43:99:c7: 11:b1:16:9a:70:b0:e3:97:96:93:76:25:07:8e:99: b7:54:5a:83:1d:37:53:18:16:93:75:79:f0:14:2e: f0:1b:ef:90:9b:35:2c:79:74:1d:7e:9b:4b:19:1a: 20:b4:61:28:dc:32:7b:a5:04:16:70:f8:bc:98:66: 3c:9b:a0:c3:6b:00:50:e9:59:52:4c:fc:e9:be:91: 6a:5b:e9:35:4c:0f:e6:f3:74:5c:b7:30:53:bf:94: 95:1c:e1:39:e0:94:a3:8d:02:f2:f7:24:5b:a9:08: 41:81:f6:9d:36:f2:d4:e6:e1:2b:ea:e0:a6:d6:15: ef:d1:31:b9:4b:37:7c:98:e5:d1:7e:d2:58:c2:65: 9c:c6:18:6c:af:a9:ac:24:15:05:36:fb:ca:cf:57: c7:93:26:5f:21:35:cd:ee:a2:2b:47:69:58:b9:78: bc:a1:93:6d:55:d9:be:77:f9:71:d2:86:98:64:4a: 76:19:8e:84:75:27:39:c1:79:45:cd:74:2a:aa:dd: 3e:a4:51:e4:e4:eb:ef:30:c3:f2:ae:5e:05:f5:ba: 06:bd:ce:fe:c6:5c:9d:50:ca:97:d7:7e:36:63:d1: 89:cf:17:57:9e:30:ca:50:ac:75:65:34:0d:b2:3f: a4:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:53:0D:BE:24:F6:3F:86:5F:EE:DD:C8:A9:10:78:E7:E1:27:A9:9A X509v3 Authority Key Identifier: keyid:A8:CD:D5:76:A9:B5:E4:48:A8:69:BE:A4:D5:16:BA:FC:5A:87:95:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:34:88:8f:0d:02:92:6c:5e:bd:18:5f:bd:17:64:4d:e7:f6: 59:71:0c:dd:33:3c:6b:1b:53:8d:2f:6f:76:e8:b7:e7:e6:2d: 00:ed:80:10:15:d3:04:f9:0c:ed:eb:d4:fc:ac:ed:48:e5:d8: 78:d2:17:83:5e:e1:5c:2e:a9:18:87:9c:01:d7:89:d8:13:77: 24:7b:5b:a0:0f:a1:5a:56:7f:53:4e:0d:45:e6:53:bc:43:4d: 68:a4:eb:32:0e:2a:5b:62:1c:4c:bb:04:4c:97:74:49:8e:8e: b2:6e:2c:fe:da:bb:0a:40:cf:bc:fd:7e:e7:55:ef:3d:f6:0d: 5a:32:31:ef:c1:11:0a:db:e0:3f:e0:00:60:fc:10:9a:17:04: 0c:7e:f1:1f:f9:36:c2:42:d6:e3:37:d4:63:fa:52:01:ca:a4: c1:70:c0:aa:ad:2c:60:1a:2f:12:86:10:29:4d:c9:4a:d4:5e: fe:96:d9:71:29:f5:8d:1a:43:dd:7a:f9:6b:c4:44:47:00:37: b5:5e:42:ff:82:55:57:26:31:27:4f:54:d2:f4:1a:0c:e8:de: f3:6b:d6:58:cf:84:15:07:d3:76:45:10:a9:b2:c1:a1:f3:4b: a4:8f:d7:ce:d5:96:ff:bc:fc:f8:37:d8:82:34:9a:d9:9e:4d: 8c:ed:6e:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaoIpFrwodgZUpaJfeFg3UVVpiR8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQThDREQ1NzZBOUI1RTQ0OEE4NjlCRUE0RDUxNkJBRkM1 QTg3OTUwMzAeFw0yNTA0MjIyMzE3MTlaFw0yNTA0MjYwOTI2MTlaMDMxMTAvBgNV BAMTKDA3NTMwREJFMjRGNjNGODY1RkVFRERDOEE5MTA3OEU3RTEyN0E5OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnfetNZOQ+xZx0C0OZxxGxFppw sOOXlpN2JQeOmbdUWoMdN1MYFpN1efAULvAb75CbNSx5dB1+m0sZGiC0YSjcMnul BBZw+LyYZjyboMNrAFDpWVJM/Om+kWpb6TVMD+bzdFy3MFO/lJUc4TnglKONAvL3 JFupCEGB9p028tTm4Svq4KbWFe/RMblLN3yY5dF+0ljCZZzGGGyvqawkFQU2+8rP V8eTJl8hNc3uoitHaVi5eLyhk21V2b53+XHShphkSnYZjoR1JznBeUXNdCqq3T6k UeTk6+8ww/KuXgX1uga9zv7GXJ1QypfXfjZj0YnPF1eeMMpQrHVlNA2yP6RRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB1MNviT2P4Zf7t3IqRB45+EnqZowHwYDVR0j BBgwFoAUqM3Vdqm15Eioab6k1Ra6/FqHlQMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MmU1ZmY4MS1iMDgyLTQzMzQtYWQyOS01NWRjOGQxZTUzYjkvMC9BOENERDU3NkE5 QjVFNDQ4QTg2OUJFQTRENTE2QkFGQzVBODc5NTAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQThDREQ1NzZBOUI1RTQ0OEE4NjlCRUE0RDUxNkJBRkM1QTg3 OTUwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTJlNWZmODEtYjA4Mi00MzM0LWFk MjktNTVkYzhkMWU1M2I5LzAvQThDREQ1NzZBOUI1RTQ0OEE4NjlCRUE0RDUxNkJB RkM1QTg3OTUwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGg0iI8NApJsXr0YX70XZE3n9llxDN0zPGsb U40vb3bot+fmLQDtgBAV0wT5DO3r1Pys7Ujl2HjSF4Ne4VwuqRiHnAHXidgTdyR7 W6APoVpWf1NODUXmU7xDTWik6zIOKltiHEy7BEyXdEmOjrJuLP7auwpAz7z9fudV 7z32DVoyMe/BEQrb4D/gAGD8EJoXBAx+8R/5NsJC1uM31GP6UgHKpMFwwKqtLGAa LxKGEClNyUrUXv6W2XEp9Y0aQ916+WvEREcAN7VeQv+CVVcmMSdPVNL0Ggzo3vNr 1ljPhBUH03ZFEKmywaHzS6SP187Vlv+8/Pg32II0mtmeTYztbgU= -----END CERTIFICATE-----Generated at Wed Apr 23 04:06:29 2025 by rpki-client on console.sobornost.net