$ rpki-client -vvf repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft File: 9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft (raw, json) Hash identifier: QD+am99GmlHR+PyiZEKSi3GP6DZ6FYU305upvlPOwiU= Subject key identifier: 60:F8:42:93:DA:67:C6:83:E9:E9:8A:E9:D9:86:78:D1:79:17:E4:F7 Authority key identifier: 94:79:B8:C5:D5:AE:8F:AB:DC:57:A9:AB:54:9A:DD:E2:0B:E8:A4:B3 Certificate issuer: /CN=9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3 Certificate serial: 50C6C458B5DA01E870978B3A5B1D83F6514D4898 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft Manifest number: 01B3 Signing time: Wed 23 Apr 2025 10:31:59 +0000 Manifest this update: Wed 23 Apr 2025 10:26:59 +0000 Manifest next update: Sat 26 Apr 2025 16:59:59 +0000 Files and hashes: 1: 9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.crl (hash: YRLazearm5ceG5INv88N08sSnYpeOiO60ews1xUisrM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.crl rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 12:29:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:c6:c4:58:b5:da:01:e8:70:97:8b:3a:5b:1d:83:f6:51:4d:48:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3 Validity Not Before: Apr 23 10:26:59 2025 GMT Not After : Apr 26 16:59:59 2025 GMT Subject: CN=60F84293DA67C683E9E98AE9D98678D17917E4F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:f9:e0:11:a7:a1:76:01:93:17:8b:78:41:15: 59:65:50:88:42:82:f8:b1:90:5e:97:5d:eb:22:e5: da:5c:4a:0b:58:b2:82:26:0b:67:85:ea:9f:13:cd: 7e:8a:87:64:25:71:c5:26:5e:47:5a:26:c3:a7:47: ef:d5:94:3e:70:b5:8f:8d:be:c7:e4:14:23:11:2b: c0:6a:07:10:74:37:db:b5:42:60:d2:d8:b0:a5:93: 92:0e:69:2e:ee:66:6e:9c:b6:53:fa:a7:e4:25:81: c8:a9:58:7a:98:2f:b9:33:15:83:54:20:44:63:d2: 5c:82:a2:b0:29:54:39:63:68:8b:be:b6:6c:38:23: db:ba:01:fd:db:ed:da:50:40:38:19:ef:39:6f:6c: a3:42:29:b4:1a:79:d5:d2:a5:87:42:59:7e:11:1c: 38:a8:5c:01:80:ce:4f:79:3a:cc:40:f4:64:86:60: fb:17:4a:3b:16:ce:4d:ee:6d:d6:bb:df:04:05:d7: 3f:3b:d3:d5:19:4b:df:1e:1c:46:ce:83:29:4d:67: 41:07:6f:bc:47:48:01:d0:7d:73:d2:47:86:a6:47: 0e:37:49:2e:c6:ee:55:f2:ab:f3:ec:c5:d3:67:1a: 2e:a0:d8:db:2b:a0:c9:aa:e2:50:5c:d2:a9:c1:2e: 0c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:F8:42:93:DA:67:C6:83:E9:E9:8A:E9:D9:86:78:D1:79:17:E4:F7 X509v3 Authority Key Identifier: keyid:94:79:B8:C5:D5:AE:8F:AB:DC:57:A9:AB:54:9A:DD:E2:0B:E8:A4:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:03:e7:5f:62:30:90:83:29:30:5a:a4:4a:d4:60:f2:a4:88: 12:bd:fe:f2:23:8d:b7:32:91:79:47:30:30:25:c7:81:60:71: 6a:da:f7:a7:8e:55:18:05:0d:9c:00:7b:30:92:19:12:72:60: fa:bf:61:60:87:02:8a:ea:6d:c0:03:e5:5e:6d:7c:b1:b5:d6: 07:70:3b:2e:0b:28:49:d4:06:37:04:00:34:29:9f:f3:9c:7e: 04:8a:c8:b3:0a:69:40:31:fb:94:58:62:e1:fb:df:ec:6c:7b: 8f:a0:c4:a9:c2:b7:f9:5c:ee:1e:96:4c:bd:70:28:a0:e8:ce: e3:7f:4a:5f:b7:db:27:69:3b:56:6e:f7:8f:63:80:18:a9:c2: bb:e0:ba:5c:4f:b6:c8:36:df:de:56:13:27:34:23:c6:33:e2: c6:d3:86:c8:c8:87:6d:86:47:a1:b7:1a:e6:54:1b:a3:45:65: f3:ee:05:f3:c0:cd:7f:a8:3a:28:70:1d:71:a0:d3:58:80:34: 08:46:59:15:51:4a:f1:1d:b9:06:a3:03:13:3e:2a:4d:e1:83: c3:b3:c8:8e:f7:a0:c9:68:38:4c:fc:3d:6b:d0:c7:0f:94:86: 22:57:16:38:f1:a9:b8:97:30:e0:19:13:ed:0e:fd:40:cc:fe: 28:c6:c5:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUMbEWLXaAehwl4s6Wx2D9lFNSJgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQ3OUI4QzVENUFFOEZBQkRDNTdBOUFCNTQ5QURERTIw QkU4QTRCMzAeFw0yNTA0MjMxMDI2NTlaFw0yNTA0MjYxNjU5NTlaMDMxMTAvBgNV BAMTKDYwRjg0MjkzREE2N0M2ODNFOUU5OEFFOUQ5ODY3OEQxNzkxN0U0RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDv+eARp6F2AZMXi3hBFVllUIhC gvixkF6XXesi5dpcSgtYsoImC2eF6p8TzX6Kh2QlccUmXkdaJsOnR+/VlD5wtY+N vsfkFCMRK8BqBxB0N9u1QmDS2LClk5IOaS7uZm6ctlP6p+QlgcipWHqYL7kzFYNU IERj0lyCorApVDljaIu+tmw4I9u6Af3b7dpQQDgZ7zlvbKNCKbQaedXSpYdCWX4R HDioXAGAzk95OsxA9GSGYPsXSjsWzk3ubda73wQF1z8709UZS98eHEbOgylNZ0EH b7xHSAHQfXPSR4amRw43SS7G7lXyq/PsxdNnGi6g2NsroMmq4lBc0qnBLgzRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYPhCk9pnxoPp6Yrp2YZ40XkX5PcwHwYDVR0j BBgwFoAUlHm4xdWuj6vcV6mrVJrd4gvopLMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTBhYTE1OC02NTgxLTRjYmUtYjZjZS1kODcyMWM3MTlmYTAvMC85NDc5QjhDNUQ1 QUU4RkFCREM1N0E5QUI1NDlBRERFMjBCRThBNEIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTQ3OUI4QzVENUFFOEZBQkRDNTdBOUFCNTQ5QURERTIwQkU4 QTRCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTkwYWExNTgtNjU4MS00Y2JlLWI2 Y2UtZDg3MjFjNzE5ZmEwLzAvOTQ3OUI4QzVENUFFOEZBQkRDNTdBOUFCNTQ5QURE RTIwQkU4QTRCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEkD519iMJCDKTBapErUYPKkiBK9/vIjjbcy kXlHMDAlx4FgcWra96eOVRgFDZwAezCSGRJyYPq/YWCHAorqbcAD5V5tfLG11gdw Oy4LKEnUBjcEADQpn/OcfgSKyLMKaUAx+5RYYuH73+xse4+gxKnCt/lc7h6WTL1w KKDozuN/Sl+32ydpO1Zu949jgBipwrvgulxPtsg2395WEyc0I8Yz4sbThsjIh22G R6G3GuZUG6NFZfPuBfPAzX+oOihwHXGg01iANAhGWRVRSvEduQajAxM+Kk3hg8Oz yI73oMloOEz8PWvQxw+UhiJXFjjxqbiXMOAZE+0O/UDM/ijGxUo= -----END CERTIFICATE-----Generated at Wed Apr 23 13:25:44 2025 by rpki-client on console.sobornost.net