$ rpki-client -vvf repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft File: D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft (raw, json) Hash identifier: EwcxALXatO0Nw2+aJpXtF5N7ZRdFzeA+Ed8iHzZ5m2w= Subject key identifier: 6E:49:54:C6:65:1C:54:CA:4A:E3:CB:99:7D:63:7F:0E:A1:A9:93:F8 Authority key identifier: D7:F2:3D:7B:54:89:0F:0E:EC:F5:50:FF:A4:27:99:B6:4D:9B:D4:C9 Certificate issuer: /CN=D7F23D7B54890F0EECF550FFA42799B64D9BD4C9 Certificate serial: 1B6F05662CF3280CB4C3DC616CF0E9DC2355E2CD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft Manifest number: C2 Signing time: Wed 23 Apr 2025 20:21:22 +0000 Manifest this update: Wed 23 Apr 2025 20:16:22 +0000 Manifest next update: Sat 26 Apr 2025 20:49:22 +0000 Files and hashes: 1: D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.crl (hash: JAoj40/CFTVSEXSGEYRG7f54j3NbZFebMpvg2V1ddYQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.crl rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 20:49:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:6f:05:66:2c:f3:28:0c:b4:c3:dc:61:6c:f0:e9:dc:23:55:e2:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7F23D7B54890F0EECF550FFA42799B64D9BD4C9 Validity Not Before: Apr 23 20:16:22 2025 GMT Not After : Apr 26 20:49:22 2025 GMT Subject: CN=6E4954C6651C54CA4AE3CB997D637F0EA1A993F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e9:23:b6:9d:e8:14:45:1d:ac:15:bf:73:ff: e3:0f:7a:7b:5c:3c:fd:c1:9c:dc:da:d7:d9:3a:fc: 46:aa:db:28:32:c5:88:51:49:57:c5:2e:a8:28:5d: 46:a4:b6:a7:23:68:88:d8:ef:a2:44:a3:5f:dd:c3: be:aa:57:db:31:8c:61:c0:84:04:53:8a:15:a0:f5: 9a:42:26:e8:9a:5c:84:58:cf:5f:ce:12:4a:e3:00: 71:0b:8e:99:74:5c:c8:ee:b3:c4:33:0f:f8:47:bd: 60:73:17:f7:05:ab:ee:c1:26:9c:d2:56:38:2d:02: ff:ba:09:0d:14:07:ba:29:64:e6:e5:4a:e7:1a:62: 5d:10:35:02:73:b0:6d:07:e1:be:d5:ac:94:40:e2: 18:3a:85:10:7a:b6:f0:3d:1b:d5:e1:9d:cc:4f:ef: ce:72:05:8c:c9:09:32:4d:75:fb:3e:f9:6f:c3:88: 0a:5e:e2:eb:15:40:db:fa:4c:45:d7:ac:09:2e:97: a9:24:a0:81:58:b6:8d:80:17:6a:eb:cf:ca:c7:97: c0:19:85:ce:09:50:13:9c:e4:23:db:61:78:fc:e2: 86:ac:88:62:52:37:ea:85:bb:4e:e8:ff:f0:6c:71: 0e:79:2e:e4:11:37:a0:da:56:2c:4e:44:3a:e0:f9: 35:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:49:54:C6:65:1C:54:CA:4A:E3:CB:99:7D:63:7F:0E:A1:A9:93:F8 X509v3 Authority Key Identifier: keyid:D7:F2:3D:7B:54:89:0F:0E:EC:F5:50:FF:A4:27:99:B6:4D:9B:D4:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:c4:6e:0a:01:a6:3f:a0:eb:ac:1e:8c:d6:9c:94:aa:29:17: 72:cf:6d:a7:b7:31:08:ad:2d:cb:6c:b1:70:4f:21:c3:59:a4: 66:75:04:d7:e3:8d:a0:7b:db:d5:e7:09:46:ef:f0:df:c1:a6: 47:61:1d:03:03:93:54:3d:ff:78:70:7a:d9:53:2e:0c:ec:4c: d1:8e:a4:d6:76:47:9c:2b:94:14:05:a8:9c:89:9f:b2:29:e3: 02:37:52:25:00:8d:ab:44:10:77:84:f4:c0:e8:2a:13:17:9b: 50:bc:25:a5:5a:68:9d:0a:57:df:67:20:d1:af:09:46:c3:90: 5b:d4:1e:54:47:32:7d:66:b3:23:9d:a1:af:2b:8c:b4:50:e8: 59:b4:b4:09:a6:41:96:10:cf:09:79:c3:53:23:c7:18:ce:4d: e3:ab:30:82:0a:c8:dd:4a:71:9e:ab:fb:24:d8:17:06:15:9c: 8e:f1:55:45:57:d7:3b:a3:e9:87:28:34:9f:90:79:67:48:57: d5:b0:d2:85:36:bd:c0:b4:90:fd:9e:59:2b:f0:9e:1a:03:6b: 5d:65:45:bd:82:9a:aa:49:44:f7:da:dd:18:c2:bf:fc:c9:67: 6f:4e:0a:11:a0:ca:6f:d1:81:92:e9:33:8a:d4:2d:e0:14:31: aa:bd:6d:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG28FZizzKAy0w9xhbPDp3CNV4s0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdGMjNEN0I1NDg5MEYwRUVDRjU1MEZGQTQyNzk5QjY0 RDlCRDRDOTAeFw0yNTA0MjMyMDE2MjJaFw0yNTA0MjYyMDQ5MjJaMDMxMTAvBgNV BAMTKDZFNDk1NEM2NjUxQzU0Q0E0QUUzQ0I5OTdENjM3RjBFQTFBOTkzRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt6SO2negURR2sFb9z/+MPentc PP3BnNza19k6/Eaq2ygyxYhRSVfFLqgoXUaktqcjaIjY76JEo1/dw76qV9sxjGHA hARTihWg9ZpCJuiaXIRYz1/OEkrjAHELjpl0XMjus8QzD/hHvWBzF/cFq+7BJpzS VjgtAv+6CQ0UB7opZOblSucaYl0QNQJzsG0H4b7VrJRA4hg6hRB6tvA9G9XhncxP 785yBYzJCTJNdfs++W/DiApe4usVQNv6TEXXrAkul6kkoIFYto2AF2rrz8rHl8AZ hc4JUBOc5CPbYXj84oasiGJSN+qFu07o//BscQ55LuQRN6DaVixORDrg+TU9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbklUxmUcVMpK48uZfWN/DqGpk/gwHwYDVR0j BBgwFoAU1/I9e1SJDw7s9VD/pCeZtk2b1MkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Yjk4NTFiMS01YTZkLTRlNzUtOWZmZi1jMDNhOWM0OWNmNjkvMC9EN0YyM0Q3QjU0 ODkwRjBFRUNGNTUwRkZBNDI3OTlCNjREOUJENEM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDdGMjNEN0I1NDg5MEYwRUVDRjU1MEZGQTQyNzk5QjY0RDlC RDRDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmI5ODUxYjEtNWE2ZC00ZTc1LTlm ZmYtYzAzYTljNDljZjY5LzAvRDdGMjNEN0I1NDg5MEYwRUVDRjU1MEZGQTQyNzk5 QjY0RDlCRDRDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFfEbgoBpj+g66wejNaclKopF3LPbae3MQit LctssXBPIcNZpGZ1BNfjjaB729XnCUbv8N/BpkdhHQMDk1Q9/3hwetlTLgzsTNGO pNZ2R5wrlBQFqJyJn7Ip4wI3UiUAjatEEHeE9MDoKhMXm1C8JaVaaJ0KV99nINGv CUbDkFvUHlRHMn1msyOdoa8rjLRQ6Fm0tAmmQZYQzwl5w1MjxxjOTeOrMIIKyN1K cZ6r+yTYFwYVnI7xVUVX1zuj6YcoNJ+QeWdIV9Ww0oU2vcC0kP2eWSvwnhoDa11l Rb2CmqpJRPfa3RjCv/zJZ29OChGgym/RgZLpM4rULeAUMaq9bcY= -----END CERTIFICATE-----Generated at Wed Apr 23 22:12:04 2025 by rpki-client on console.sobornost.net