$ rpki-client -vvf repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.mft File: AD2137BA5758D926364E9E038F19A65DC3F1846E.mft (raw, json) Hash identifier: x1hmE+7mBDC5zuk8znJZt/cMivTdLtJ55PYovp4uVs8= Subject key identifier: 5C:1D:07:9C:91:EE:A9:0C:A1:1E:B8:4A:AC:D0:44:A4:57:D3:90:ED Authority key identifier: AD:21:37:BA:57:58:D9:26:36:4E:9E:03:8F:19:A6:5D:C3:F1:84:6E Certificate issuer: /CN=AD2137BA5758D926364E9E038F19A65DC3F1846E Certificate serial: 655BDB2F3D0E0F4496C711AA3F91929D0D2A100B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD2137BA5758D926364E9E038F19A65DC3F1846E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.mft Manifest number: 020C Signing time: Fri 25 Apr 2025 07:32:02 +0000 Manifest this update: Fri 25 Apr 2025 07:27:02 +0000 Manifest next update: Mon 28 Apr 2025 17:00:02 +0000 Files and hashes: 1: AD2137BA5758D926364E9E038F19A65DC3F1846E.crl (hash: 426KAUCthnQvQHreCd7aIwOk6AfSNr0+WGd10Ly1b1A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.crl rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD2137BA5758D926364E9E038F19A65DC3F1846E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 14:02:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:5b:db:2f:3d:0e:0f:44:96:c7:11:aa:3f:91:92:9d:0d:2a:10:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD2137BA5758D926364E9E038F19A65DC3F1846E Validity Not Before: Apr 25 07:27:02 2025 GMT Not After : Apr 28 17:00:02 2025 GMT Subject: CN=5C1D079C91EEA90CA11EB84AACD044A457D390ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:8f:6b:93:28:36:ae:64:ee:7e:e4:be:76:5a: 91:b1:ea:5e:74:db:3d:ac:19:83:74:55:5f:c8:c3: 12:79:96:c6:5e:d7:dd:fb:d3:a2:e3:7f:b5:c7:61: 9c:d1:51:a6:e9:a4:8c:32:24:f9:56:d4:97:89:9c: e7:f1:f3:72:92:2e:cf:81:b0:4a:a0:54:7e:09:91: 95:20:66:29:1c:a9:fc:56:bf:c9:ad:52:3f:79:3e: ca:62:da:4b:3c:82:1c:6a:b1:84:ff:6b:79:dd:4a: 1f:2f:ca:ae:3b:c4:4a:fd:f1:85:18:67:80:98:21: 84:90:e2:35:db:e8:09:99:b2:16:16:fc:10:4b:82: 46:a5:34:a1:cd:97:98:ec:49:96:be:b4:2c:c4:07: 8c:d9:e3:3e:ac:84:b4:62:2f:2d:e8:db:3d:b6:27: 3f:60:42:e3:f4:f7:36:53:47:1a:93:e5:ec:75:ca: 83:e3:8d:19:d6:c4:68:9d:c7:ca:e3:a9:c4:d0:c0: b4:f9:c6:47:29:4f:c1:cf:06:78:81:d2:d2:88:d2: 06:f8:fe:77:80:ad:db:75:c2:d3:08:72:0f:c2:c3: d8:63:8e:b2:fc:13:e7:b0:dd:15:c2:68:45:fd:01: 28:00:e4:bc:e2:d3:a1:49:8d:32:f1:f7:69:81:ea: 48:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:1D:07:9C:91:EE:A9:0C:A1:1E:B8:4A:AC:D0:44:A4:57:D3:90:ED X509v3 Authority Key Identifier: keyid:AD:21:37:BA:57:58:D9:26:36:4E:9E:03:8F:19:A6:5D:C3:F1:84:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD2137BA5758D926364E9E038F19A65DC3F1846E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:6a:f7:2f:c3:be:cb:32:9a:47:ad:22:0c:b8:a1:20:43:80: 61:0d:1e:83:5c:58:60:c0:5b:5c:4c:8f:66:7c:d9:d0:ee:74: d1:ef:4d:cd:5a:9f:74:bc:39:ec:f1:29:f7:98:20:e0:a8:b0: a1:7a:5d:61:5f:d2:2e:e8:1b:f5:39:0e:75:0a:3c:28:be:88: 0e:9c:20:93:3e:ad:89:cc:82:c2:3e:e2:97:32:15:39:60:ab: ee:82:ed:e0:61:f5:e4:50:4a:c8:7f:71:71:62:2c:ee:b3:be: 8f:af:28:dc:04:54:3c:d5:d7:ce:4d:7b:4b:57:1b:84:db:90: 20:18:90:de:22:d7:b6:67:37:b2:84:5a:88:17:a5:6b:ad:91: c0:ea:b0:72:e9:bb:58:f8:6b:c4:af:37:22:1d:41:e2:01:07: 57:cc:2d:29:83:6f:3a:8b:e5:0a:5b:89:53:1c:ba:4c:02:48: db:30:a3:67:2d:73:ec:58:93:99:5c:b0:e9:6a:73:3c:63:ca: ef:b2:bb:d9:2f:f9:a6:93:5b:c8:2a:93:a4:a1:75:11:eb:f7: ba:77:ff:fc:a2:7e:bf:87:38:79:b1:c6:1f:c4:42:21:fc:99: 36:12:71:6b:12:4e:95:1f:b8:cf:1c:ab:91:ce:28:02:52:70: ff:b3:54:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZVvbLz0OD0SWxxGqP5GSnQ0qEAswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQyMTM3QkE1NzU4RDkyNjM2NEU5RTAzOEYxOUE2NURD M0YxODQ2RTAeFw0yNTA0MjUwNzI3MDJaFw0yNTA0MjgxNzAwMDJaMDMxMTAvBgNV BAMTKDVDMUQwNzlDOTFFRUE5MENBMTFFQjg0QUFDRDA0NEE0NTdEMzkwRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrj2uTKDauZO5+5L52WpGx6l50 2z2sGYN0VV/IwxJ5lsZe193706Ljf7XHYZzRUabppIwyJPlW1JeJnOfx83KSLs+B sEqgVH4JkZUgZikcqfxWv8mtUj95Pspi2ks8ghxqsYT/a3ndSh8vyq47xEr98YUY Z4CYIYSQ4jXb6AmZshYW/BBLgkalNKHNl5jsSZa+tCzEB4zZ4z6shLRiLy3o2z22 Jz9gQuP09zZTRxqT5ex1yoPjjRnWxGidx8rjqcTQwLT5xkcpT8HPBniB0tKI0gb4 /neArdt1wtMIcg/Cw9hjjrL8E+ew3RXCaEX9ASgA5Lzi06FJjTLx92mB6kglAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXB0HnJHuqQyhHrhKrNBEpFfTkO0wHwYDVR0j BBgwFoAUrSE3uldY2SY2Tp4DjxmmXcPxhG4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NzRkMjBhMy0zZDgzLTRjNGYtOTEzOC03NmJjN2M1MTBlYjkvMC9BRDIxMzdCQTU3 NThEOTI2MzY0RTlFMDM4RjE5QTY1REMzRjE4NDZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUQyMTM3QkE1NzU4RDkyNjM2NEU5RTAzOEYxOUE2NURDM0Yx ODQ2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTc0ZDIwYTMtM2Q4My00YzRmLTkx MzgtNzZiYzdjNTEwZWI5LzAvQUQyMTM3QkE1NzU4RDkyNjM2NEU5RTAzOEYxOUE2 NURDM0YxODQ2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMJq9y/DvssymketIgy4oSBDgGENHoNcWGDA W1xMj2Z82dDudNHvTc1an3S8OezxKfeYIOCosKF6XWFf0i7oG/U5DnUKPCi+iA6c IJM+rYnMgsI+4pcyFTlgq+6C7eBh9eRQSsh/cXFiLO6zvo+vKNwEVDzV185Ne0tX G4TbkCAYkN4i17ZnN7KEWogXpWutkcDqsHLpu1j4a8SvNyIdQeIBB1fMLSmDbzqL 5QpbiVMcukwCSNswo2ctc+xYk5lcsOlqczxjyu+yu9kv+aaTW8gqk6ShdRHr97p3 //yifr+HOHmxxh/EQiH8mTYScWsSTpUfuM8cq5HOKAJScP+zVP8= -----END CERTIFICATE-----Generated at Fri Apr 25 10:36:52 2025 by rpki-client on console.sobornost.net