$ rpki-client -vvf repo-rpki.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.mft File: 20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.mft (raw, json) Hash identifier: llagszwlo27IxUqeF0wwAnbIBno/N6O3v4nYYnZ12Jk= Subject key identifier: 67:9C:81:42:29:20:DD:77:0D:1F:4A:B2:8C:5F:BD:B3:2F:84:51:19 Authority key identifier: 20:A4:A2:CE:A0:09:88:40:AF:6A:1C:5B:F3:D8:4E:41:5D:7F:18:D5 Certificate issuer: /CN=20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5 Certificate serial: 2A52B6453A729FD154BAB2E67B43C8D2DB9341A0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.mft Manifest number: 66 Signing time: Thu 24 Apr 2025 20:50:00 +0000 Manifest this update: Thu 24 Apr 2025 20:45:00 +0000 Manifest next update: Mon 28 Apr 2025 08:47:00 +0000 Files and hashes: 1: 20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.crl (hash: tNizTUdXMn8ZE2rAJuOMlPXY4c3NZYXwa9aMmbI4iaM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.crl rsync://repo-rpki.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:52:b6:45:3a:72:9f:d1:54:ba:b2:e6:7b:43:c8:d2:db:93:41:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5 Validity Not Before: Apr 24 20:45:00 2025 GMT Not After : Apr 28 08:47:00 2025 GMT Subject: CN=679C81422920DD770D1F4AB28C5FBDB32F845119 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:5c:15:91:8a:0d:00:f1:90:a6:e6:6c:43:82: e1:dd:2e:34:d9:8f:a3:31:07:30:61:63:ed:a1:0b: 1c:02:ce:5b:05:3f:ee:ae:1c:58:44:72:08:ed:49: 75:41:5a:95:6b:8b:04:b0:19:ca:66:7d:69:e1:e6: 28:78:04:df:7a:d0:95:3a:8a:a8:a5:f9:8d:ca:e4: f3:d7:4c:ca:5f:c3:b1:a4:e8:01:0c:3c:6d:66:0f: fb:48:8b:e8:99:18:4d:1c:73:79:0f:c5:9a:5a:72: 79:2e:85:ef:5f:4f:1a:4f:a3:ee:06:3e:ee:fc:6f: 87:12:ed:57:99:69:c0:88:f7:36:7d:2f:c7:5a:84: dd:a0:0a:74:a6:fb:4a:43:84:cc:0b:82:49:9c:cb: 3b:c3:b2:29:75:2d:3a:d6:48:20:51:e8:32:ba:80: b7:11:07:36:0e:8f:8f:9b:db:e7:99:d2:e5:ba:2b: dd:07:3c:f0:b2:d8:ee:f1:1e:6e:a3:9e:9c:be:11: 84:b3:4c:48:b9:a2:f2:a6:eb:5c:53:3e:45:1b:69: 1c:5a:16:84:ff:27:9e:d2:22:c0:34:17:8b:6d:43: 99:00:cb:40:51:27:9f:8e:10:8d:09:d8:85:23:d8: 43:67:b1:eb:11:90:c5:10:4c:a5:5d:9a:75:64:e8: 79:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:9C:81:42:29:20:DD:77:0D:1F:4A:B2:8C:5F:BD:B3:2F:84:51:19 X509v3 Authority Key Identifier: keyid:20:A4:A2:CE:A0:09:88:40:AF:6A:1C:5B:F3:D8:4E:41:5D:7F:18:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:57:86:35:cd:52:ac:81:5e:7a:3e:3a:97:bd:7b:d2:37:a0: a9:36:3d:e3:fc:c4:5f:3c:34:95:bd:d4:29:28:09:8b:43:a5: 48:b2:f8:55:14:4b:dc:86:6d:a5:c4:e4:09:77:de:f6:b5:13: ef:e8:3d:23:04:9b:9e:36:75:76:d2:2b:b2:f6:72:d6:5e:82: 61:a0:5b:64:43:1a:ba:ea:e4:6f:92:46:04:17:ad:61:8d:d8: c5:39:1a:08:9e:e1:48:34:b8:1b:ea:d9:52:52:ca:35:6a:46: 07:83:17:36:59:69:f3:2d:a2:f3:22:af:77:8c:8f:49:42:ed: 07:c7:08:dc:89:9e:61:6e:e6:f6:ea:95:21:ef:de:cc:41:e2: 52:97:d2:00:dc:18:f9:b7:07:e6:45:ec:35:5c:fc:eb:f1:85: 71:07:b0:01:fe:87:76:ae:c6:ab:c7:2f:d5:c2:44:a5:a8:1a: a9:8a:13:96:ab:82:dd:c7:85:8f:13:e8:c1:b9:8d:df:a0:25: fa:84:7b:50:44:64:7f:ad:33:5e:5b:f2:86:dd:95:52:a9:8a: 98:8d:b7:0d:ea:e5:33:20:7c:32:93:b1:9e:1a:46:69:17:da: 72:77:62:a2:a4:be:c7:c8:18:34:6d:f2:35:85:d9:82:19:6b: 91:ba:1b:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKlK2RTpyn9FUurLme0PI0tuTQaAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBBNEEyQ0VBMDA5ODg0MEFGNkExQzVCRjNEODRFNDE1 RDdGMThENTAeFw0yNTA0MjQyMDQ1MDBaFw0yNTA0MjgwODQ3MDBaMDMxMTAvBgNV BAMTKDY3OUM4MTQyMjkyMERENzcwRDFGNEFCMjhDNUZCREIzMkY4NDUxMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxXBWRig0A8ZCm5mxDguHdLjTZ j6MxBzBhY+2hCxwCzlsFP+6uHFhEcgjtSXVBWpVriwSwGcpmfWnh5ih4BN960JU6 iqil+Y3K5PPXTMpfw7Gk6AEMPG1mD/tIi+iZGE0cc3kPxZpacnkuhe9fTxpPo+4G Pu78b4cS7VeZacCI9zZ9L8dahN2gCnSm+0pDhMwLgkmcyzvDsil1LTrWSCBR6DK6 gLcRBzYOj4+b2+eZ0uW6K90HPPCy2O7xHm6jnpy+EYSzTEi5ovKm61xTPkUbaRxa FoT/J57SIsA0F4ttQ5kAy0BRJ5+OEI0J2IUj2ENnsesRkMUQTKVdmnVk6HldAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ5yBQikg3XcNH0qyjF+9sy+EURkwHwYDVR0j BBgwFoAUIKSizqAJiECvahxb89hOQV1/GNUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YzgxZTZlYy1jODdiLTRmZGItYTJmYS1lY2M0NzBjNDFkNTMvMC8yMEE0QTJDRUEw MDk4ODQwQUY2QTFDNUJGM0Q4NEU0MTVEN0YxOEQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjBBNEEyQ0VBMDA5ODg0MEFGNkExQzVCRjNEODRFNDE1RDdG MThENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWM4MWU2ZWMtYzg3Yi00ZmRiLWEy ZmEtZWNjNDcwYzQxZDUzLzAvMjBBNEEyQ0VBMDA5ODg0MEFGNkExQzVCRjNEODRF NDE1RDdGMThENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACxXhjXNUqyBXno+Ope9e9I3oKk2PeP8xF88 NJW91CkoCYtDpUiy+FUUS9yGbaXE5Al33va1E+/oPSMEm542dXbSK7L2ctZegmGg W2RDGrrq5G+SRgQXrWGN2MU5Ggie4Ug0uBvq2VJSyjVqRgeDFzZZafMtovMir3eM j0lC7QfHCNyJnmFu5vbqlSHv3sxB4lKX0gDcGPm3B+ZF7DVc/OvxhXEHsAH+h3au xqvHL9XCRKWoGqmKE5argt3HhY8T6MG5jd+gJfqEe1BEZH+tM15b8obdlVKpipiN tw3q5TMgfDKTsZ4aRmkX2nJ3YqKkvsfIGDRt8jWF2YIZa5G6Gxc= -----END CERTIFICATE-----Generated at Fri Apr 25 00:06:29 2025 by rpki-client on console.sobornost.net