$ rpki-client -vvf repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.mft File: 507CD1ABEB911954F33A18A2DF9A31CE320DAF97.mft (raw, json) Hash identifier: WepOxvUoNhQ37UTRqvaNJcfoqWpXxwibFL4DlZPr5GE= Subject key identifier: 56:8F:66:05:6C:E7:09:19:C4:FD:F1:4E:E9:F6:C5:64:48:AF:93:98 Authority key identifier: 50:7C:D1:AB:EB:91:19:54:F3:3A:18:A2:DF:9A:31:CE:32:0D:AF:97 Certificate issuer: /CN=507CD1ABEB911954F33A18A2DF9A31CE320DAF97 Certificate serial: 62F66C45E14926E37A02702DA07FEDFC96ECAA54 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.cer Subject info access: rsync://repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.mft Manifest number: 0333 Signing time: Thu 24 Apr 2025 02:10:38 +0000 Manifest this update: Thu 24 Apr 2025 02:05:38 +0000 Manifest next update: Sun 27 Apr 2025 10:35:38 +0000 Files and hashes: 1: 507CD1ABEB911954F33A18A2DF9A31CE320DAF97.crl (hash: UzLyCxoaAasB6qll12Hy2UgDvu68+gg4NMH1qXMmJmk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.crl rsync://repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 08:10:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:f6:6c:45:e1:49:26:e3:7a:02:70:2d:a0:7f:ed:fc:96:ec:aa:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=507CD1ABEB911954F33A18A2DF9A31CE320DAF97 Validity Not Before: Apr 24 02:05:38 2025 GMT Not After : Apr 27 10:35:38 2025 GMT Subject: CN=568F66056CE70919C4FDF14EE9F6C56448AF9398 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:86:0b:a5:73:ef:8c:c5:17:80:14:45:a9:33: 69:02:52:02:2d:63:87:f2:29:f9:de:92:56:56:df: 91:1d:42:51:6d:6f:51:5b:8a:55:0d:b8:cd:72:ac: 72:04:d1:31:77:3a:4e:95:b2:24:a2:1d:0c:96:e2: 3f:b1:34:80:8a:3a:b2:ae:52:59:c1:89:7b:25:f3: e5:29:e1:69:48:4d:b2:c6:9a:a0:c0:a4:67:58:ea: f5:eb:e0:a5:71:a8:27:3c:35:3f:e5:5f:aa:13:37: 61:a0:ef:f6:d1:1f:44:a4:b6:37:34:34:27:ae:38: 70:9d:6e:7e:1c:d6:ff:0a:af:5f:ba:f0:77:70:08: 70:95:39:27:99:4b:e5:af:78:48:39:70:0e:43:65: df:5a:d4:e7:40:a3:51:44:38:74:60:1a:6d:60:d3: 89:52:87:84:b5:55:87:45:f3:5f:63:8c:60:88:67: fd:0e:60:3d:a6:69:96:e5:8f:07:67:16:f3:80:5a: 63:01:9e:e4:ed:d1:ee:9f:b4:f4:87:7f:3c:4e:98: e3:69:4a:0a:15:63:9b:6b:8e:8c:74:98:01:f0:23: 90:9c:8c:0e:be:ea:b6:2c:bf:ae:4b:47:8f:de:f5: 8e:73:36:cb:a8:7b:9e:ce:9c:79:68:53:6d:05:8b: fa:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:8F:66:05:6C:E7:09:19:C4:FD:F1:4E:E9:F6:C5:64:48:AF:93:98 X509v3 Authority Key Identifier: keyid:50:7C:D1:AB:EB:91:19:54:F3:3A:18:A2:DF:9A:31:CE:32:0D:AF:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:01:7b:fd:a5:f4:dd:d0:ae:d3:bb:26:74:04:f5:a6:71:92: 53:09:d4:43:bb:a1:3b:58:73:05:65:49:1f:ba:63:47:ab:19: 29:b8:d6:77:d1:21:14:c0:47:68:3e:7f:b6:d1:99:2b:ae:a6: da:df:30:ba:e9:99:08:12:98:9a:60:52:9f:a8:b8:5b:33:78: ef:b4:07:36:30:bc:d0:6b:6b:be:b2:a1:ea:52:2c:79:db:6c: 0f:47:f0:80:bc:33:e6:1b:91:f6:ff:73:65:0d:4b:80:00:2d: b9:80:3d:0f:4f:46:05:74:6e:ca:86:50:fd:4b:0f:82:a4:14: 6d:bb:6c:02:b4:fc:f2:39:c1:c8:1d:31:41:1d:46:53:5f:9d: b5:fc:f3:f0:04:3a:0c:f6:ed:c4:20:eb:c9:62:1d:39:7f:bf: c9:39:08:98:2e:8c:28:ed:ec:0d:d0:e5:cb:0b:21:84:66:28: bf:9b:22:5c:22:46:9d:e8:4a:41:6c:4c:4e:82:2f:35:a3:82: 72:00:d5:12:3d:73:fb:2c:82:d8:8b:ac:c2:59:d2:f8:44:92: 7f:8d:f5:11:ce:99:e0:ac:c8:2b:d4:8a:8d:51:04:68:15:21: 73:17:22:39:fc:ba:23:ff:9a:8d:45:10:f7:2d:21:8f:d6:fd: e9:07:e1:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYvZsReFJJuN6AnAtoH/t/JbsqlQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTA3Q0QxQUJFQjkxMTk1NEYzM0ExOEEyREY5QTMxQ0Uz MjBEQUY5NzAeFw0yNTA0MjQwMjA1MzhaFw0yNTA0MjcxMDM1MzhaMDMxMTAvBgNV BAMTKDU2OEY2NjA1NkNFNzA5MTlDNEZERjE0RUU5RjZDNTY0NDhBRjkzOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOhgulc++MxReAFEWpM2kCUgIt Y4fyKfneklZW35EdQlFtb1FbilUNuM1yrHIE0TF3Ok6VsiSiHQyW4j+xNICKOrKu UlnBiXsl8+Up4WlITbLGmqDApGdY6vXr4KVxqCc8NT/lX6oTN2Gg7/bRH0Sktjc0 NCeuOHCdbn4c1v8Kr1+68HdwCHCVOSeZS+WveEg5cA5DZd9a1OdAo1FEOHRgGm1g 04lSh4S1VYdF819jjGCIZ/0OYD2maZbljwdnFvOAWmMBnuTt0e6ftPSHfzxOmONp SgoVY5trjox0mAHwI5CcjA6+6rYsv65LR4/e9Y5zNsuoe57OnHloU20Fi/pzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVo9mBWznCRnE/fFO6fbFZEivk5gwHwYDVR0j BBgwFoAUUHzRq+uRGVTzOhii35oxzjINr5cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZmNhZjI3ZC02NGU5LTQ3NGItYTczYi0zNWFkYmU5YjJmMDEvMC81MDdDRDFBQkVC OTExOTU0RjMzQTE4QTJERjlBMzFDRTMyMERBRjk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTA3Q0QxQUJFQjkxMTk1NEYzM0ExOEEyREY5QTMxQ0UzMjBE QUY5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWZjYWYyN2QtNjRlOS00NzRiLWE3 M2ItMzVhZGJlOWIyZjAxLzAvNTA3Q0QxQUJFQjkxMTk1NEYzM0ExOEEyREY5QTMx Q0UzMjBEQUY5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIMBe/2l9N3QrtO7JnQE9aZxklMJ1EO7oTtY cwVlSR+6Y0erGSm41nfRIRTAR2g+f7bRmSuuptrfMLrpmQgSmJpgUp+ouFszeO+0 BzYwvNBra76yoepSLHnbbA9H8IC8M+Ybkfb/c2UNS4AALbmAPQ9PRgV0bsqGUP1L D4KkFG27bAK0/PI5wcgdMUEdRlNfnbX88/AEOgz27cQg68liHTl/v8k5CJgujCjt 7A3Q5csLIYRmKL+bIlwiRp3oSkFsTE6CLzWjgnIA1RI9c/ssgtiLrMJZ0vhEkn+N 9RHOmeCsyCvUio1RBGgVIXMXIjn8uiP/mo1FEPctIY/W/ekH4Wc= -----END CERTIFICATE-----Generated at Thu Apr 24 04:31:49 2025 by rpki-client on console.sobornost.net