$ rpki-client -vvf repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft File: 1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft (raw, json) Hash identifier: Fm2o44UdX4/DQzDYyd8xSyENsPI4Al/ONpB32NXuFok= Subject key identifier: 34:47:6D:F8:23:0B:00:74:2F:E9:B9:7F:EA:B7:C5:23:13:E4:0F:45 Authority key identifier: 1E:64:BF:65:05:10:52:D9:13:D7:DB:8C:45:12:F6:15:E3:FA:B9:B2 Certificate issuer: /CN=1E64BF65051052D913D7DB8C4512F615E3FAB9B2 Certificate serial: 44B4D56D13DFBB80E628B7478F794277273D3945 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft Manifest number: 8F Signing time: Thu 24 Apr 2025 08:21:03 +0000 Manifest this update: Thu 24 Apr 2025 08:16:03 +0000 Manifest next update: Sun 27 Apr 2025 14:37:03 +0000 Files and hashes: 1: 1E64BF65051052D913D7DB8C4512F615E3FAB9B2.crl (hash: X9WROLjCf4mEJnKFMEeo+8iG4+rOPYEOMPN7dRNIwxI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.crl rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 10:42:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:b4:d5:6d:13:df:bb:80:e6:28:b7:47:8f:79:42:77:27:3d:39:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E64BF65051052D913D7DB8C4512F615E3FAB9B2 Validity Not Before: Apr 24 08:16:03 2025 GMT Not After : Apr 27 14:37:03 2025 GMT Subject: CN=34476DF8230B00742FE9B97FEAB7C52313E40F45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:a6:31:81:ed:6a:63:42:c4:96:08:3a:db:4d: 79:b8:5f:c1:ed:95:f3:3d:da:fa:f1:df:9a:aa:33: a9:23:09:dc:eb:ef:c7:d0:a0:25:7c:8b:13:5d:0e: 6e:42:24:6b:a2:12:8e:f7:32:86:2c:e1:71:17:1f: a6:4d:bf:e4:62:2f:3e:a7:25:4d:e4:a8:d0:8d:b8: e3:3e:b1:58:2d:56:a9:5c:42:4a:22:76:ef:02:f6: 94:b9:01:22:7e:b1:74:eb:f8:13:9b:43:91:f3:a5: b3:28:a6:de:6d:c1:44:db:36:cb:95:7b:80:7f:4b: 5d:32:8b:63:58:25:ed:df:93:52:2a:7d:b7:db:16: 0c:a8:37:19:a8:fc:f0:d3:75:00:d2:ff:75:ce:55: 2e:83:ef:08:19:c5:a7:3d:9f:db:76:5d:c9:f1:54: ad:74:e7:47:c3:ff:bf:e5:30:39:45:60:ec:07:85: be:74:b1:b8:1f:6f:cd:40:b6:f5:27:54:a2:5e:c7: 5f:32:3a:b2:49:43:f4:29:8d:6b:73:6e:de:1e:ec: f9:dd:e9:78:d2:61:a2:92:06:db:00:1c:2e:c9:ac: ea:2a:30:32:b2:16:46:82:6e:29:c2:d3:cc:11:76: 1b:1c:0e:00:07:0b:d7:5b:be:3e:d8:f8:8b:73:a4: fa:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:47:6D:F8:23:0B:00:74:2F:E9:B9:7F:EA:B7:C5:23:13:E4:0F:45 X509v3 Authority Key Identifier: keyid:1E:64:BF:65:05:10:52:D9:13:D7:DB:8C:45:12:F6:15:E3:FA:B9:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:8e:75:af:99:2e:e8:1e:5c:2f:de:d2:3c:28:4f:16:21:a8: 7d:ab:27:f1:58:c1:52:24:3e:90:db:40:21:18:e9:9b:f0:59: 35:3f:8d:f5:89:a6:5f:9f:f1:2b:62:08:65:db:2e:f0:d2:e7: a2:fa:8f:2a:a4:fb:22:5c:7c:2e:f7:e0:1c:f5:95:d1:1c:ea: 11:de:08:60:e3:f3:60:7e:51:cd:0c:a2:ca:df:cd:99:f7:0b: fd:a0:a0:c2:2f:11:d7:1e:89:cc:85:f9:84:05:e9:99:bd:f3: 41:37:63:1d:e2:85:4d:8c:14:f3:29:59:62:9d:8b:49:86:50: 7a:7c:0b:7b:f7:0c:67:d4:9d:7b:10:a8:3e:a7:50:74:85:c8: 26:98:91:ca:37:37:95:07:e5:4f:83:bb:84:e2:82:43:2a:75: d2:86:58:8d:64:22:b5:5f:ea:72:13:57:0c:0e:eb:30:db:9b: ab:99:ba:b1:d3:ae:8a:95:c9:ae:92:19:dc:3a:e7:5c:15:82: 9e:11:14:4b:fc:47:5b:5c:99:a8:f9:3b:aa:84:2d:89:8b:02: 90:50:b5:4e:31:62:b1:ab:94:57:c3:92:de:10:89:e8:2d:bf: 8d:e0:ef:ae:4b:08:d4:dd:ac:95:16:42:1c:4f:71:8e:92:27: 5e:22:80:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURLTVbRPfu4DmKLdHj3lCdyc9OUUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU2NEJGNjUwNTEwNTJEOTEzRDdEQjhDNDUxMkY2MTVF M0ZBQjlCMjAeFw0yNTA0MjQwODE2MDNaFw0yNTA0MjcxNDM3MDNaMDMxMTAvBgNV BAMTKDM0NDc2REY4MjMwQjAwNzQyRkU5Qjk3RkVBQjdDNTIzMTNFNDBGNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgpjGB7WpjQsSWCDrbTXm4X8Ht lfM92vrx35qqM6kjCdzr78fQoCV8ixNdDm5CJGuiEo73MoYs4XEXH6ZNv+RiLz6n JU3kqNCNuOM+sVgtVqlcQkoidu8C9pS5ASJ+sXTr+BObQ5HzpbMopt5twUTbNsuV e4B/S10yi2NYJe3fk1IqfbfbFgyoNxmo/PDTdQDS/3XOVS6D7wgZxac9n9t2Xcnx VK1050fD/7/lMDlFYOwHhb50sbgfb81AtvUnVKJex18yOrJJQ/QpjWtzbt4e7Pnd 6XjSYaKSBtsAHC7JrOoqMDKyFkaCbinC08wRdhscDgAHC9dbvj7Y+ItzpPpVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNEdt+CMLAHQv6bl/6rfFIxPkD0UwHwYDVR0j BBgwFoAUHmS/ZQUQUtkT19uMRRL2FeP6ubIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTE5ODgxNi01YWY5LTQ3ZWYtYjk4OS00MmYyNzMxODQ4YmUvMS8xRTY0QkY2NTA1 MTA1MkQ5MTNEN0RCOEM0NTEyRjYxNUUzRkFCOUIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUU2NEJGNjUwNTEwNTJEOTEzRDdEQjhDNDUxMkY2MTVFM0ZB QjlCMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWUxOTg4MTYtNWFmOS00N2VmLWI5 ODktNDJmMjczMTg0OGJlLzEvMUU2NEJGNjUwNTEwNTJEOTEzRDdEQjhDNDUxMkY2 MTVFM0ZBQjlCMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAOOda+ZLugeXC/e0jwoTxYhqH2rJ/FYwVIk PpDbQCEY6ZvwWTU/jfWJpl+f8StiCGXbLvDS56L6jyqk+yJcfC734Bz1ldEc6hHe CGDj82B+Uc0MosrfzZn3C/2goMIvEdceicyF+YQF6Zm980E3Yx3ihU2MFPMpWWKd i0mGUHp8C3v3DGfUnXsQqD6nUHSFyCaYkco3N5UH5U+Du4TigkMqddKGWI1kIrVf 6nITVwwO6zDbm6uZurHTroqVya6SGdw651wVgp4RFEv8R1tcmaj5O6qELYmLApBQ tU4xYrGrlFfDkt4Qiegtv43g765LCNTdrJUWQhxPcY6SJ14igC8= -----END CERTIFICATE-----Generated at Thu Apr 24 11:25:24 2025 by rpki-client on console.sobornost.net