$ rpki-client -vvf repo-rpki.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.mft File: 9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.mft (raw, json) Hash identifier: erQCXO8xXQiNmx1whGoZcUczsfMqmc3qgBPtxIRBCXQ= Subject key identifier: 29:89:93:CD:8B:B4:E2:58:F2:F9:82:A4:DC:E3:F9:61:5B:7C:50:9E Authority key identifier: 9F:5F:18:EC:02:2F:5E:04:65:72:CD:5F:5C:C4:21:FA:9D:AF:FA:EA Certificate issuer: /CN=9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA Certificate serial: 4E6BF24B92993F2CE2186D9391241C3ADD299085 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.mft Manifest number: 36 Signing time: Thu 24 Apr 2025 18:20:03 +0000 Manifest this update: Thu 24 Apr 2025 18:15:03 +0000 Manifest next update: Sun 27 Apr 2025 23:25:03 +0000 Files and hashes: 1: 9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.crl (hash: yV2SzPuSSL5aVqIp34ukKjl5pK+eX6bze10ahb0elks=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.crl rsync://repo-rpki.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:6b:f2:4b:92:99:3f:2c:e2:18:6d:93:91:24:1c:3a:dd:29:90:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA Validity Not Before: Apr 24 18:15:03 2025 GMT Not After : Apr 27 23:25:03 2025 GMT Subject: CN=298993CD8BB4E258F2F982A4DCE3F9615B7C509E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:cd:0c:58:74:30:fe:77:0e:55:81:8f:7b:c7: 36:31:66:66:80:e8:bb:20:d0:27:df:f4:1e:c5:a0: 34:f9:7d:cb:d3:2f:1a:8f:ee:7e:2c:55:73:e8:0f: 8d:2d:7b:e5:98:b5:2b:5b:a0:be:da:65:c5:a1:b6: 54:96:b1:62:be:1c:cc:51:bf:0d:c6:38:40:e5:aa: b1:9a:d7:e4:47:48:8b:9e:1c:ff:1e:8b:f0:f4:12: 85:05:b7:e2:75:08:0c:77:2d:af:a1:d7:00:82:0e: 03:05:35:ea:1d:b1:0f:01:a0:94:22:79:0e:98:05: ff:11:f0:cf:21:74:0a:9c:1a:68:d6:c9:0a:f4:7e: 20:c8:bc:5c:2f:eb:99:e6:95:a6:fd:20:da:e5:b9: 2c:56:9d:02:7a:64:d6:4e:d5:2a:c9:67:d5:d8:9c: b9:1f:fc:c9:2b:37:9c:9f:d2:37:22:2d:4f:3c:3d: 72:8d:49:ee:dd:f8:92:28:6d:6a:ab:56:cd:3c:13: 0e:53:d4:ba:b4:ae:3f:7b:84:ec:4d:f0:a5:70:20: f6:d6:c0:eb:c6:ba:66:9d:76:64:3f:6c:81:79:ec: b5:e0:1e:02:fa:e1:e3:58:09:0c:00:7d:74:a8:fc: 79:c8:1c:27:9b:87:27:a4:bb:6c:ae:55:9d:e7:b5: 70:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:89:93:CD:8B:B4:E2:58:F2:F9:82:A4:DC:E3:F9:61:5B:7C:50:9E X509v3 Authority Key Identifier: keyid:9F:5F:18:EC:02:2F:5E:04:65:72:CD:5F:5C:C4:21:FA:9D:AF:FA:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:82:2b:7c:cb:5c:a8:15:ac:7a:ba:01:dc:79:fb:a5:d7:02: 21:dd:eb:ef:24:63:62:b3:8e:ed:08:ef:c8:7a:8c:59:04:b5: 26:de:d1:87:08:be:07:b9:9b:0b:93:d5:28:c3:6b:4b:1f:91: 1d:bc:e1:84:2d:2f:6c:ba:b6:e0:38:ad:b3:4e:35:bc:2f:54: f9:02:2c:73:3f:54:ac:08:bf:f6:79:0b:72:42:67:da:3a:ba: 2d:88:71:95:e1:07:bf:88:d3:c7:1a:90:f3:08:be:85:d4:f8: d5:a0:29:b6:51:30:9f:bb:08:36:a7:97:23:90:f3:87:5b:18: 82:c5:14:62:be:cc:52:16:7f:ee:ff:ea:d8:8d:d9:22:7c:50: d2:70:1c:ae:cc:5d:88:7e:b8:60:52:79:92:83:af:07:05:a3: cb:69:e4:9c:a2:cb:ce:6d:4e:22:64:1d:e8:95:d8:44:f5:0f: bb:0c:81:0e:d4:9c:69:83:97:ae:fa:ae:4c:55:3a:f7:81:0b: bd:3c:fe:e4:42:49:79:8f:07:73:55:a1:8d:b0:24:0f:2d:74: 2b:27:cc:76:9a:fb:e0:6f:e7:46:28:21:1d:c9:1b:e5:f9:33: e7:86:62:bf:02:7d:a7:1d:d0:5a:d9:12:a7:f7:25:f7:8c:2e: 2a:b1:e6:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTmvyS5KZPyziGG2TkSQcOt0pkIUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY1RjE4RUMwMjJGNUUwNDY1NzJDRDVGNUNDNDIxRkE5 REFGRkFFQTAeFw0yNTA0MjQxODE1MDNaFw0yNTA0MjcyMzI1MDNaMDMxMTAvBgNV BAMTKDI5ODk5M0NEOEJCNEUyNThGMkY5ODJBNERDRTNGOTYxNUI3QzUwOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuzQxYdDD+dw5VgY97xzYxZmaA 6Lsg0Cff9B7FoDT5fcvTLxqP7n4sVXPoD40te+WYtStboL7aZcWhtlSWsWK+HMxR vw3GOEDlqrGa1+RHSIueHP8ei/D0EoUFt+J1CAx3La+h1wCCDgMFNeodsQ8BoJQi eQ6YBf8R8M8hdAqcGmjWyQr0fiDIvFwv65nmlab9INrluSxWnQJ6ZNZO1SrJZ9XY nLkf/MkrN5yf0jciLU88PXKNSe7d+JIobWqrVs08Ew5T1Lq0rj97hOxN8KVwIPbW wOvGumaddmQ/bIF57LXgHgL64eNYCQwAfXSo/HnIHCebhyeku2yuVZ3ntXAXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKYmTzYu04ljy+YKk3OP5YVt8UJ4wHwYDVR0j BBgwFoAUn18Y7AIvXgRlcs1fXMQh+p2v+uowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MmFlNWUyMS0wOGNjLTRjYTQtYjk5Yy01ZmY1YTBkNDY0OTAvMC85RjVGMThFQzAy MkY1RTA0NjU3MkNENUY1Q0M0MjFGQTlEQUZGQUVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY1RjE4RUMwMjJGNUUwNDY1NzJDRDVGNUNDNDIxRkE5REFG RkFFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjJhZTVlMjEtMDhjYy00Y2E0LWI5 OWMtNWZmNWEwZDQ2NDkwLzAvOUY1RjE4RUMwMjJGNUUwNDY1NzJDRDVGNUNDNDIx RkE5REFGRkFFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIyCK3zLXKgVrHq6Adx5+6XXAiHd6+8kY2Kz ju0I78h6jFkEtSbe0YcIvge5mwuT1SjDa0sfkR284YQtL2y6tuA4rbNONbwvVPkC LHM/VKwIv/Z5C3JCZ9o6ui2IcZXhB7+I08cakPMIvoXU+NWgKbZRMJ+7CDanlyOQ 84dbGILFFGK+zFIWf+7/6tiN2SJ8UNJwHK7MXYh+uGBSeZKDrwcFo8tp5Jyiy85t TiJkHeiV2ET1D7sMgQ7UnGmDl676rkxVOveBC708/uRCSXmPB3NVoY2wJA8tdCsn zHaa++Bv50YoIR3JG+X5M+eGYr8Cfacd0FrZEqf3JfeMLiqx5ms= -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:24 2025 by rpki-client on console.sobornost.net