$ rpki-client -vvf repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft File: 1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft (raw, json) Hash identifier: zqhIMu/L5MBjVMWcrN/0lFPfvwwMu3oDBC6GogKrHtI= Subject key identifier: 6C:0A:85:44:1F:A6:AC:ED:42:F2:1D:4C:AB:AA:14:12:52:DC:82:C9 Authority key identifier: 10:07:D1:5C:BB:EA:AB:DE:19:9A:EF:BC:2A:3F:E3:17:B7:57:BD:23 Certificate issuer: /CN=1007D15CBBEAABDE199AEFBC2A3FE317B757BD23 Certificate serial: 7D63E72A0D9DDC1CF9C987D1D5C9BE14337758CD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft Manifest number: 01C2 Signing time: Sat 26 Apr 2025 13:51:53 +0000 Manifest this update: Sat 26 Apr 2025 13:46:53 +0000 Manifest next update: Tue 29 Apr 2025 18:15:53 +0000 Files and hashes: 1: 1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.crl (hash: un91PP7FCEzm/AO3E7xa6QjhN5W+qsQAUc4Acq6YBJg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.crl rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 18:15:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:63:e7:2a:0d:9d:dc:1c:f9:c9:87:d1:d5:c9:be:14:33:77:58:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1007D15CBBEAABDE199AEFBC2A3FE317B757BD23 Validity Not Before: Apr 26 13:46:53 2025 GMT Not After : Apr 29 18:15:53 2025 GMT Subject: CN=6C0A85441FA6ACED42F21D4CABAA141252DC82C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:50:8d:da:6e:40:4b:4d:9d:ab:3e:6f:47:d6: 4b:14:d3:b1:b3:4d:92:d9:54:d4:79:d4:2a:25:7a: 82:62:f7:7e:83:3b:78:fb:3e:b7:fc:a0:39:34:68: 4e:84:2a:34:1a:e5:da:02:88:e8:f2:76:ab:06:32: c2:64:0d:1a:99:6f:6a:6a:36:84:4a:a8:27:14:09: e8:0f:14:eb:42:67:dc:20:62:f5:92:c4:c0:39:10: 93:15:95:e3:d1:29:e2:de:0d:13:63:a7:eb:65:01: 8e:1e:3c:99:58:53:17:61:6f:b1:b2:9d:e0:41:cd: 60:92:c1:6d:34:3d:9f:b0:22:99:b8:c9:9b:a9:db: ee:8b:f2:43:6e:82:8b:d6:7e:d8:18:6c:3c:89:29: 0b:2d:1f:5e:9a:f7:b2:de:c8:b8:40:30:c4:04:24: 57:ee:e8:6b:17:2f:84:96:9c:4c:77:67:09:b8:69: 2b:f0:7e:25:a6:ed:a6:24:d0:f1:8c:4f:e9:8c:66: 1c:5a:a8:41:62:1e:6a:e5:69:3b:05:c3:b9:8d:26: 30:24:0a:6f:41:2c:1d:55:20:b1:70:da:b7:6d:68: db:ac:d4:d9:39:c4:4a:d7:a0:1c:e3:e6:f5:9f:45: bc:74:cd:a6:e0:b2:52:76:99:43:b2:a7:a8:25:cd: 58:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:0A:85:44:1F:A6:AC:ED:42:F2:1D:4C:AB:AA:14:12:52:DC:82:C9 X509v3 Authority Key Identifier: keyid:10:07:D1:5C:BB:EA:AB:DE:19:9A:EF:BC:2A:3F:E3:17:B7:57:BD:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:7d:0e:7e:43:bd:ad:f7:fa:06:a8:e0:68:7f:2c:1f:27:0e: 2d:55:4e:19:3d:a6:2c:9a:14:73:1a:38:63:43:8e:fa:49:1a: f5:d6:59:2e:c4:4a:3f:56:0a:db:d0:b8:a8:b0:62:7e:25:60: cb:76:39:98:63:93:f9:f9:86:3b:2e:a2:71:38:31:88:61:23: 42:e2:4d:b0:13:7b:1c:77:7e:98:fa:0e:1e:5f:f1:6d:fc:d0: 65:d4:78:0d:54:21:6a:ca:77:a5:1c:bd:3a:ee:b2:15:5e:d7: 6c:7f:6e:d5:c7:63:a7:d2:4a:82:ec:8e:1a:55:02:72:c6:a6: 90:d8:c4:a4:73:e5:50:0f:4c:aa:93:10:f3:af:b0:e3:53:de: f5:7c:36:23:f3:a8:a3:37:fb:1e:82:29:c5:f9:bc:05:33:7b: 8d:81:ee:de:96:94:55:eb:53:0c:ba:66:39:b0:2e:fc:03:bd: 0b:45:95:02:6b:b9:cd:93:7c:70:90:4f:5c:d7:be:a6:89:2b: d8:17:f5:5a:83:72:89:9c:50:7a:f1:67:0a:6a:ad:c2:6c:1c: b3:69:08:6c:b4:1e:47:42:bd:8a:fd:28:8f:b4:66:bf:b9:30: 06:44:09:a5:52:ca:fb:df:25:70:9a:69:b8:9f:e9:7e:0c:25: 70:8d:98:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfWPnKg2d3Bz5yYfR1cm+FDN3WM0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTAwN0QxNUNCQkVBQUJERTE5OUFFRkJDMkEzRkUzMTdC NzU3QkQyMzAeFw0yNTA0MjYxMzQ2NTNaFw0yNTA0MjkxODE1NTNaMDMxMTAvBgNV BAMTKDZDMEE4NTQ0MUZBNkFDRUQ0MkYyMUQ0Q0FCQUExNDEyNTJEQzgyQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJUI3abkBLTZ2rPm9H1ksU07Gz TZLZVNR51ColeoJi936DO3j7Prf8oDk0aE6EKjQa5doCiOjydqsGMsJkDRqZb2pq NoRKqCcUCegPFOtCZ9wgYvWSxMA5EJMVlePRKeLeDRNjp+tlAY4ePJlYUxdhb7Gy neBBzWCSwW00PZ+wIpm4yZup2+6L8kNugovWftgYbDyJKQstH16a97LeyLhAMMQE JFfu6GsXL4SWnEx3Zwm4aSvwfiWm7aYk0PGMT+mMZhxaqEFiHmrlaTsFw7mNJjAk Cm9BLB1VILFw2rdtaNus1Nk5xErXoBzj5vWfRbx0zabgslJ2mUOyp6glzVj3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbAqFRB+mrO1C8h1Mq6oUElLcgskwHwYDVR0j BBgwFoAUEAfRXLvqq94Zmu+8Kj/jF7dXvSMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWExNmVjNS01ODdlLTQ3YTQtOGFmZS1kMWJlY2Y1NmI2MTQvMC8xMDA3RDE1Q0JC RUFBQkRFMTk5QUVGQkMyQTNGRTMxN0I3NTdCRDIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTAwN0QxNUNCQkVBQUJERTE5OUFFRkJDMkEzRkUzMTdCNzU3 QkQyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFhMTZlYzUtNTg3ZS00N2E0LThh ZmUtZDFiZWNmNTZiNjE0LzAvMTAwN0QxNUNCQkVBQUJERTE5OUFFRkJDMkEzRkUz MTdCNzU3QkQyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHJ9Dn5Dva33+gao4Gh/LB8nDi1VThk9piya FHMaOGNDjvpJGvXWWS7ESj9WCtvQuKiwYn4lYMt2OZhjk/n5hjsuonE4MYhhI0Li TbATexx3fpj6Dh5f8W380GXUeA1UIWrKd6UcvTrushVe12x/btXHY6fSSoLsjhpV AnLGppDYxKRz5VAPTKqTEPOvsONT3vV8NiPzqKM3+x6CKcX5vAUze42B7t6WlFXr Uwy6ZjmwLvwDvQtFlQJruc2TfHCQT1zXvqaJK9gX9VqDcomcUHrxZwpqrcJsHLNp CGy0HkdCvYr9KI+0Zr+5MAZECaVSyvvfJXCaabif6X4MJXCNmAc= -----END CERTIFICATE-----Generated at Sat Apr 26 15:54:09 2025 by rpki-client on console.sobornost.net