$ rpki-client -vvf repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.mft File: 17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.mft (raw, json) Hash identifier: KAYWT4sjo4Tz8uFoBRvgzmealpxz796E3ikmXS0M1ow= Subject key identifier: 2B:33:94:1D:99:71:32:20:AD:44:C8:C0:0F:AA:79:E2:E4:9D:C5:11 Authority key identifier: 17:A6:00:7E:C6:37:3E:C9:50:1F:99:56:E1:2B:6D:5C:BE:0F:DC:21 Certificate issuer: /CN=17A6007EC6373EC9501F9956E12B6D5CBE0FDC21 Certificate serial: 056EA7E3E625578E0647C043758FA2840ACD72C7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.mft Manifest number: 0142 Signing time: Thu 24 Apr 2025 02:11:51 +0000 Manifest this update: Thu 24 Apr 2025 02:06:51 +0000 Manifest next update: Sun 27 Apr 2025 06:30:51 +0000 Files and hashes: 1: 17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.crl (hash: M0V/d1HANPVL/wYzG5Pq13xLeeutPHfMT5DfhfNixJI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.crl rsync://repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 06:30:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:6e:a7:e3:e6:25:57:8e:06:47:c0:43:75:8f:a2:84:0a:cd:72:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17A6007EC6373EC9501F9956E12B6D5CBE0FDC21 Validity Not Before: Apr 24 02:06:51 2025 GMT Not After : Apr 27 06:30:51 2025 GMT Subject: CN=2B33941D99713220AD44C8C00FAA79E2E49DC511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a4:41:71:e6:4c:15:b1:98:ae:d2:d1:c4:88: f3:69:ef:a6:9f:98:8d:71:77:d0:ca:6c:6b:98:ff: c0:cb:46:48:7d:6b:50:58:ec:0c:c6:bd:ee:a2:ed: e0:72:29:0c:02:4c:e6:85:04:e3:b1:0b:ef:31:c0: c1:08:b4:f0:dc:d8:71:d4:c6:aa:c7:52:64:70:d4: e2:de:aa:3f:73:c9:e8:b4:8c:10:cb:21:88:9b:fc: 47:59:b9:df:ca:b4:d8:8a:08:59:3b:bc:8f:59:12: a9:fc:6a:2b:b9:4a:d5:c6:19:8b:5e:1d:79:0d:b6: e5:92:0c:33:c6:a9:38:8e:cc:a3:7b:9f:d6:c7:98: bd:74:14:e4:86:26:fe:9b:ff:83:8f:1e:a3:9d:04: 78:c3:58:4b:81:c4:05:a2:5a:52:43:9b:43:8f:99: fa:ff:36:75:03:68:4f:41:13:f8:c6:75:70:9b:a7: aa:35:ea:93:5f:e2:dd:21:ad:e4:70:26:2e:0d:48: 29:46:26:01:d1:5c:f1:a6:fc:16:fb:54:e8:a3:1c: f3:4b:78:70:2d:d8:0a:b7:7b:56:6d:a2:c0:d0:98: ef:44:8f:e0:e0:0e:27:af:2a:5c:c5:91:68:8b:81: 12:c4:de:70:c8:f4:bb:c1:18:24:e2:0d:db:6e:58: ea:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:33:94:1D:99:71:32:20:AD:44:C8:C0:0F:AA:79:E2:E4:9D:C5:11 X509v3 Authority Key Identifier: keyid:17:A6:00:7E:C6:37:3E:C9:50:1F:99:56:E1:2B:6D:5C:BE:0F:DC:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:2b:a7:2e:3d:78:79:b3:23:00:da:d4:41:6a:57:21:f8:1d: a9:46:3e:fb:a1:dd:a1:1e:b9:82:36:a6:eb:18:02:0b:a1:3f: ee:b1:2f:dd:6d:93:ab:55:f7:48:1f:73:7d:b7:c3:ef:f1:73: 1a:5e:23:6d:bf:b1:b0:38:ab:2b:03:99:1b:b3:c9:d8:ad:39: b1:a0:dd:a1:78:6c:22:b3:49:ee:4b:f1:b1:5a:40:65:b9:96: 8a:2b:14:45:87:16:5b:c8:4d:fa:92:50:0c:8e:d2:20:c5:49: 53:55:14:ef:5e:e0:84:1c:f8:94:cf:e8:b2:70:29:f6:b8:dd: d4:20:ce:1c:a9:27:78:84:50:37:4f:7d:c5:10:75:86:bf:17: 14:96:fd:bd:0e:63:40:eb:45:69:c3:4b:5a:d5:ac:32:e2:e7: 3b:91:96:27:a1:78:4d:19:cd:bb:9b:fd:55:4d:82:57:5b:13: 50:ae:0c:20:e7:14:ca:2b:ff:90:b3:ac:4a:d0:b3:d3:b4:d5: 72:c5:68:6e:30:2c:cf:bb:d7:77:fd:76:bf:2a:1a:ee:e6:83: c7:27:54:8b:a3:23:d4:5b:1d:91:4e:e8:23:62:5e:92:b2:99: 02:2f:5c:34:4f:7d:e9:6a:f9:e4:f7:45:29:a0:c5:54:a8:16: 8f:f6:2c:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBW6n4+YlV44GR8BDdY+ihArNcscwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTdBNjAwN0VDNjM3M0VDOTUwMUY5OTU2RTEyQjZENUNC RTBGREMyMTAeFw0yNTA0MjQwMjA2NTFaFw0yNTA0MjcwNjMwNTFaMDMxMTAvBgNV BAMTKDJCMzM5NDFEOTk3MTMyMjBBRDQ0QzhDMDBGQUE3OUUyRTQ5REM1MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOpEFx5kwVsZiu0tHEiPNp76af mI1xd9DKbGuY/8DLRkh9a1BY7AzGve6i7eByKQwCTOaFBOOxC+8xwMEItPDc2HHU xqrHUmRw1OLeqj9zyei0jBDLIYib/EdZud/KtNiKCFk7vI9ZEqn8aiu5StXGGYte HXkNtuWSDDPGqTiOzKN7n9bHmL10FOSGJv6b/4OPHqOdBHjDWEuBxAWiWlJDm0OP mfr/NnUDaE9BE/jGdXCbp6o16pNf4t0hreRwJi4NSClGJgHRXPGm/Bb7VOijHPNL eHAt2Aq3e1ZtosDQmO9Ej+DgDievKlzFkWiLgRLE3nDI9LvBGCTiDdtuWOrVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKzOUHZlxMiCtRMjAD6p54uSdxREwHwYDVR0j BBgwFoAUF6YAfsY3PslQH5lW4SttXL4P3CEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OGRlNGFmNy1iZjQ4LTRjYjgtOGY2My04MWNhZTE3MzY0ZGUvMC8xN0E2MDA3RUM2 MzczRUM5NTAxRjk5NTZFMTJCNkQ1Q0JFMEZEQzIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTdBNjAwN0VDNjM3M0VDOTUwMUY5OTU2RTEyQjZENUNCRTBG REMyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYThkZTRhZjctYmY0OC00Y2I4LThm NjMtODFjYWUxNzM2NGRlLzAvMTdBNjAwN0VDNjM3M0VDOTUwMUY5OTU2RTEyQjZE NUNCRTBGREMyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGUrpy49eHmzIwDa1EFqVyH4HalGPvuh3aEe uYI2pusYAguhP+6xL91tk6tV90gfc323w+/xcxpeI22/sbA4qysDmRuzyditObGg 3aF4bCKzSe5L8bFaQGW5loorFEWHFlvITfqSUAyO0iDFSVNVFO9e4IQc+JTP6LJw Kfa43dQgzhypJ3iEUDdPfcUQdYa/FxSW/b0OY0DrRWnDS1rVrDLi5zuRlieheE0Z zbub/VVNgldbE1CuDCDnFMor/5CzrErQs9O01XLFaG4wLM+713f9dr8qGu7mg8cn VIujI9RbHZFO6CNiXpKymQIvXDRPfelq+eT3RSmgxVSoFo/2LOs= -----END CERTIFICATE-----Generated at Thu Apr 24 04:31:49 2025 by rpki-client on console.sobornost.net