$ rpki-client -vvf repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft File: 64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft (raw, json) Hash identifier: 5lsC8dxeC1TuPxv5a137fH18DXuMv0JxPUdnASvcAfQ= Subject key identifier: B1:7D:4A:29:76:9F:44:F0:65:A3:01:73:06:2F:A0:71:FF:BB:D9:9D Authority key identifier: 64:EB:10:DD:E8:55:CE:76:4F:FD:FD:8E:FA:E0:62:A4:50:60:C5:22 Certificate issuer: /CN=64EB10DDE855CE764FFDFD8EFAE062A45060C522 Certificate serial: 60FD45F96F42E47C98A878E36B09D4859D087C6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64EB10DDE855CE764FFDFD8EFAE062A45060C522.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft Manifest number: DA Signing time: Sat 26 Apr 2025 11:10:56 +0000 Manifest this update: Sat 26 Apr 2025 11:05:56 +0000 Manifest next update: Tue 29 Apr 2025 20:39:56 +0000 Files and hashes: 1: 64EB10DDE855CE764FFDFD8EFAE062A45060C522.crl (hash: GHuDJK4sygb81DsB78s64b18jvx/wO0AiRFqJJkjBcE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.crl rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64EB10DDE855CE764FFDFD8EFAE062A45060C522.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 09:52:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:fd:45:f9:6f:42:e4:7c:98:a8:78:e3:6b:09:d4:85:9d:08:7c:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64EB10DDE855CE764FFDFD8EFAE062A45060C522 Validity Not Before: Apr 26 11:05:56 2025 GMT Not After : Apr 29 20:39:56 2025 GMT Subject: CN=B17D4A29769F44F065A30173062FA071FFBBD99D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:74:ae:e6:3b:5c:31:fc:05:f3:71:51:24:f2: 6c:ab:f6:1f:dc:5a:7d:02:86:74:6a:3b:48:25:72: 5b:8f:3c:18:20:c4:9f:d5:a5:2c:a0:da:6b:23:7b: a0:1a:d7:98:78:d8:7d:84:9a:ca:73:47:cc:4b:35: 31:32:b9:8c:39:48:5c:3b:3a:f4:7e:28:76:cd:a1: e4:21:f6:58:f3:03:d1:c2:5e:86:63:c3:22:91:a8: ee:00:ce:87:ec:ab:98:d3:de:c8:a4:06:64:e4:7c: ce:f2:c8:24:23:2d:c0:15:de:35:42:95:8b:3c:fb: 64:00:8e:10:3b:d5:72:06:e9:ae:79:b6:54:57:76: 36:3c:ee:f4:74:be:f9:12:8e:6d:c4:34:3c:37:da: d4:f8:f4:0f:ca:fd:a9:c3:21:8d:0f:c5:ba:6c:11: ef:af:66:24:05:dc:99:57:8a:0a:10:44:ba:89:99: 2f:0e:73:3c:e6:05:e9:7b:10:b8:e8:50:1e:c9:94: 42:60:13:3a:fe:4d:b7:c4:c4:9b:82:b8:f0:08:c9: 9b:a0:24:d7:ba:f0:4c:05:c3:b5:34:6f:d8:26:38: 02:30:49:e4:74:fa:9b:c1:ed:17:22:36:dd:55:ae: d3:21:1f:ab:1d:2c:1b:d9:f2:48:78:51:88:bf:64: f2:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:7D:4A:29:76:9F:44:F0:65:A3:01:73:06:2F:A0:71:FF:BB:D9:9D X509v3 Authority Key Identifier: keyid:64:EB:10:DD:E8:55:CE:76:4F:FD:FD:8E:FA:E0:62:A4:50:60:C5:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64EB10DDE855CE764FFDFD8EFAE062A45060C522.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:ab:f2:84:de:8a:b1:04:c0:5f:dd:e0:4a:f4:9f:41:a8:87: 59:5e:5d:1d:70:ff:13:80:95:83:ba:0f:fe:82:2d:a0:e1:72: 3f:6e:70:1c:5f:3c:03:4d:c9:fa:92:5b:6a:fa:12:20:73:37: 61:73:33:fe:3c:d5:46:85:3e:ab:92:1c:7c:11:e4:a1:d1:3a: 28:3c:61:0b:d3:8d:3a:a8:01:8c:2e:72:a6:ea:c3:d2:bf:6b: 4c:b9:78:59:ca:30:4e:0e:98:f2:0b:e7:14:18:4b:b4:0a:9f: 1f:fb:a1:d7:a4:9b:01:e2:82:03:28:09:a9:18:a7:0b:75:21: 9c:ac:77:e1:b5:85:34:37:0a:37:12:9b:3f:4d:06:83:76:62: 63:ee:9c:6e:44:fd:ab:92:b4:99:bf:2f:6a:52:2f:cc:bb:f7: 1e:af:7f:d6:3e:ca:95:fb:68:dd:38:a1:fc:05:f7:79:79:dd: 70:88:b3:bd:c9:1e:0f:fd:b3:bd:62:b0:02:68:09:d7:12:e8: c5:5a:15:5c:46:f3:67:9e:d2:1a:a5:b8:43:1d:2c:65:b5:c3: 50:a0:8b:ac:54:73:04:fa:e2:85:93:b6:d2:be:37:be:04:21: 76:77:64:64:73:83:ac:7e:24:14:8f:c6:7c:ee:b7:84:a0:24: 27:7b:6d:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYP1F+W9C5HyYqHjjawnUhZ0IfG0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRFQjEwRERFODU1Q0U3NjRGRkRGRDhFRkFFMDYyQTQ1 MDYwQzUyMjAeFw0yNTA0MjYxMTA1NTZaFw0yNTA0MjkyMDM5NTZaMDMxMTAvBgNV BAMTKEIxN0Q0QTI5NzY5RjQ0RjA2NUEzMDE3MzA2MkZBMDcxRkZCQkQ5OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMdK7mO1wx/AXzcVEk8myr9h/c Wn0ChnRqO0glcluPPBggxJ/VpSyg2msje6Aa15h42H2EmspzR8xLNTEyuYw5SFw7 OvR+KHbNoeQh9ljzA9HCXoZjwyKRqO4Azofsq5jT3sikBmTkfM7yyCQjLcAV3jVC lYs8+2QAjhA71XIG6a55tlRXdjY87vR0vvkSjm3ENDw32tT49A/K/anDIY0Pxbps Ee+vZiQF3JlXigoQRLqJmS8OczzmBel7ELjoUB7JlEJgEzr+TbfExJuCuPAIyZug JNe68EwFw7U0b9gmOAIwSeR0+pvB7RciNt1VrtMhH6sdLBvZ8kh4UYi/ZPL1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsX1KKXafRPBlowFzBi+gcf+72Z0wHwYDVR0j BBgwFoAUZOsQ3ehVznZP/f2O+uBipFBgxSIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NzA5OWU0Mi0yZTlmLTRlOGEtOTllOC1hZDUwNDUzYjA2NmYvMC82NEVCMTBEREU4 NTVDRTc2NEZGREZEOEVGQUUwNjJBNDUwNjBDNTIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjRFQjEwRERFODU1Q0U3NjRGRkRGRDhFRkFFMDYyQTQ1MDYw QzUyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTcwOTllNDItMmU5Zi00ZThhLTk5 ZTgtYWQ1MDQ1M2IwNjZmLzAvNjRFQjEwRERFODU1Q0U3NjRGRkRGRDhFRkFFMDYy QTQ1MDYwQzUyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHWr8oTeirEEwF/d4Er0n0Goh1leXR1w/xOA lYO6D/6CLaDhcj9ucBxfPANNyfqSW2r6EiBzN2FzM/481UaFPquSHHwR5KHROig8 YQvTjTqoAYwucqbqw9K/a0y5eFnKME4OmPIL5xQYS7QKnx/7odekmwHiggMoCakY pwt1IZysd+G1hTQ3CjcSmz9NBoN2YmPunG5E/auStJm/L2pSL8y79x6vf9Y+ypX7 aN04ofwF93l53XCIs73JHg/9s71isAJoCdcS6MVaFVxG82ee0hqluEMdLGW1w1Cg i6xUcwT64oWTttK+N74EIXZ3ZGRzg6x+JBSPxnzut4SgJCd7bR4= -----END CERTIFICATE-----Generated at Sat Apr 26 13:37:03 2025 by rpki-client on console.sobornost.net