$ rpki-client -vvf repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.mft File: B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.mft (raw, json) Hash identifier: r/TXGKKS1CNfRTwnm9Wq2TbTxAsEhsZgO2u6NoiqWts= Subject key identifier: 03:90:23:0D:47:CD:79:40:A7:EC:BF:C3:80:8F:D9:3E:52:6D:18:BF Authority key identifier: B2:A7:61:D6:1C:BF:02:4F:24:CD:3A:18:BE:96:E5:8F:7E:D6:C9:09 Certificate issuer: /CN=B2A761D61CBF024F24CD3A18BE96E58F7ED6C909 Certificate serial: 6E4AAE14FB06A46444E7156A14CB496B74741524 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.mft Manifest number: 0492 Signing time: Thu 24 Apr 2025 20:51:09 +0000 Manifest this update: Thu 24 Apr 2025 20:46:09 +0000 Manifest next update: Sun 27 Apr 2025 23:54:09 +0000 Files and hashes: 1: B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.crl (hash: d1PxWa0X8HOBbEi1XUxeqfM77wwG+UgrZ+p5x3whm3Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.crl rsync://repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:4a:ae:14:fb:06:a4:64:44:e7:15:6a:14:cb:49:6b:74:74:15:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2A761D61CBF024F24CD3A18BE96E58F7ED6C909 Validity Not Before: Apr 24 20:46:09 2025 GMT Not After : Apr 27 23:54:09 2025 GMT Subject: CN=0390230D47CD7940A7ECBFC3808FD93E526D18BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:cf:a2:5c:95:51:1a:0b:af:99:63:41:49:ea: 66:98:a6:7b:40:51:ca:51:20:7b:05:5e:03:40:bd: 8c:1f:0b:4f:ec:44:31:7e:68:f8:ee:f6:ee:00:80: 88:b7:e8:91:ff:40:5d:26:96:3c:09:5d:23:a8:40: 53:73:a4:1e:18:5a:5f:ba:73:2d:02:c2:d4:5d:ab: f0:5f:93:1d:07:e0:7b:4b:35:ea:dd:e3:32:43:8f: ff:f7:3e:38:22:f8:db:1a:29:21:3a:6d:0c:10:cb: d2:81:5e:c4:d3:65:6b:27:c6:d9:58:de:a3:b5:5c: 5b:a3:a0:88:97:8e:43:b2:a4:b1:6a:26:b9:a2:93: 3a:b5:46:bc:ad:1a:9c:a0:87:9d:7d:00:01:a2:14: c5:a8:e8:cf:f0:f8:bc:80:16:bd:b7:b2:05:1c:a0: 16:08:0a:58:60:0f:93:70:04:65:df:99:8c:a7:64: 98:f7:50:26:74:59:c0:27:4d:7d:27:9c:6b:51:c2: 49:8d:f1:02:5c:c3:d8:0a:0d:ef:c6:eb:be:03:63: be:7c:f5:ee:03:ae:f3:78:14:d6:3d:da:09:b4:84: ad:7a:0f:e0:ac:0d:ff:ac:51:08:18:4e:d4:23:96: a8:e8:58:17:8c:2d:10:da:aa:31:cb:64:eb:7c:bc: 95:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:90:23:0D:47:CD:79:40:A7:EC:BF:C3:80:8F:D9:3E:52:6D:18:BF X509v3 Authority Key Identifier: keyid:B2:A7:61:D6:1C:BF:02:4F:24:CD:3A:18:BE:96:E5:8F:7E:D6:C9:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:be:a9:01:4f:82:0b:7e:58:0e:84:7c:e6:20:7c:48:e9:c6: 79:41:34:55:4c:a0:bc:89:07:ac:01:b9:43:28:33:13:f1:3a: 3c:fa:75:49:24:41:c3:7a:97:82:57:09:e0:ce:3b:25:ad:20: d5:83:3e:d2:10:6a:4c:49:25:ce:8e:dc:06:ce:71:da:4b:1c: ff:74:2e:e0:5b:c4:67:6c:cc:3c:c9:89:e5:58:71:87:eb:83: c3:6e:76:4a:ba:a4:28:08:7e:36:78:ed:6a:d9:c8:f8:ab:11: 36:b6:1e:8f:19:02:28:20:c0:74:30:7d:6d:f1:95:9a:3c:86: 9c:8a:96:20:40:d3:06:f3:81:fc:44:7b:a9:62:24:6f:28:5a: 67:b5:f0:20:b3:a1:fe:22:3a:97:e6:6f:49:aa:83:1d:42:50: 0e:66:fc:94:17:23:43:c3:8a:f7:90:55:e3:2b:d7:fb:4b:b9: 9a:06:dc:22:3b:bb:13:03:f1:f3:37:8d:6e:f8:cd:fd:c0:05: 08:d5:c8:ba:9c:74:86:52:09:0d:47:d4:74:c2:df:e7:cd:9f: b3:e4:4c:1c:10:fb:78:38:d9:3c:8c:c3:82:ba:6e:25:a1:82: f1:5f:7f:72:a0:24:8f:c4:73:54:b1:64:9a:d6:ea:9d:c4:97: 11:7e:3f:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbkquFPsGpGRE5xVqFMtJa3R0FSQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJBNzYxRDYxQ0JGMDI0RjI0Q0QzQTE4QkU5NkU1OEY3 RUQ2QzkwOTAeFw0yNTA0MjQyMDQ2MDlaFw0yNTA0MjcyMzU0MDlaMDMxMTAvBgNV BAMTKDAzOTAyMzBENDdDRDc5NDBBN0VDQkZDMzgwOEZEOTNFNTI2RDE4QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJz6JclVEaC6+ZY0FJ6maYpntA UcpRIHsFXgNAvYwfC0/sRDF+aPju9u4AgIi36JH/QF0mljwJXSOoQFNzpB4YWl+6 cy0CwtRdq/Bfkx0H4HtLNerd4zJDj//3Pjgi+NsaKSE6bQwQy9KBXsTTZWsnxtlY 3qO1XFujoIiXjkOypLFqJrmikzq1RrytGpygh519AAGiFMWo6M/w+LyAFr23sgUc oBYIClhgD5NwBGXfmYynZJj3UCZ0WcAnTX0nnGtRwkmN8QJcw9gKDe/G674DY758 9e4DrvN4FNY92gm0hK16D+CsDf+sUQgYTtQjlqjoWBeMLRDaqjHLZOt8vJUHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA5AjDUfNeUCn7L/DgI/ZPlJtGL8wHwYDVR0j BBgwFoAUsqdh1hy/Ak8kzToYvpblj37WyQkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YmE5N2IwYi0zOWFlLTRjMmMtYjEzYi0wMWUzOTViN2EyNGIvMC9CMkE3NjFENjFD QkYwMjRGMjRDRDNBMThCRTk2RTU4RjdFRDZDOTA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjJBNzYxRDYxQ0JGMDI0RjI0Q0QzQTE4QkU5NkU1OEY3RUQ2 QzkwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmJhOTdiMGItMzlhZS00YzJjLWIx M2ItMDFlMzk1YjdhMjRiLzAvQjJBNzYxRDYxQ0JGMDI0RjI0Q0QzQTE4QkU5NkU1 OEY3RUQ2QzkwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIy+qQFPggt+WA6EfOYgfEjpxnlBNFVMoLyJ B6wBuUMoMxPxOjz6dUkkQcN6l4JXCeDOOyWtINWDPtIQakxJJc6O3AbOcdpLHP90 LuBbxGdszDzJieVYcYfrg8Nudkq6pCgIfjZ47WrZyPirETa2Ho8ZAiggwHQwfW3x lZo8hpyKliBA0wbzgfxEe6liJG8oWme18CCzof4iOpfmb0mqgx1CUA5m/JQXI0PD iveQVeMr1/tLuZoG3CI7uxMD8fM3jW74zf3ABQjVyLqcdIZSCQ1H1HTC3+fNn7Pk TBwQ+3g42TyMw4K6biWhgvFff3KgJI/Ec1SxZJrW6p3ElxF+PyQ= -----END CERTIFICATE-----Generated at Fri Apr 25 00:06:29 2025 by rpki-client on console.sobornost.net