$ rpki-client -vvf repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft File: DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft (raw, json) Hash identifier: ZEb2biXNyGheSd9wU9aUFQgGEzvI0mucA1gp+eGXAuM= Subject key identifier: 50:74:53:E5:1E:6F:B4:16:E4:19:1D:54:2F:36:55:AE:DA:98:09:18 Authority key identifier: DD:4F:B2:C1:0E:F3:28:AC:D9:71:AC:7F:3B:A4:0F:3A:52:F8:D4:C9 Certificate issuer: /CN=DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9 Certificate serial: 01821137636D1B1B929C127C9D4F7950A17F163C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft Manifest number: 0484 Signing time: Fri 25 Apr 2025 04:50:40 +0000 Manifest this update: Fri 25 Apr 2025 04:45:40 +0000 Manifest next update: Mon 28 Apr 2025 07:55:40 +0000 Files and hashes: 1: DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.crl (hash: IpjV6GSUhMf/SP5qmQizfpbBJ+fFMP/BtOEMNOL7Tso=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.crl rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:82:11:37:63:6d:1b:1b:92:9c:12:7c:9d:4f:79:50:a1:7f:16:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9 Validity Not Before: Apr 25 04:45:40 2025 GMT Not After : Apr 28 07:55:40 2025 GMT Subject: CN=507453E51E6FB416E4191D542F3655AEDA980918 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d5:18:f0:87:af:02:07:dc:05:f6:41:1c:36: a2:dc:4f:c2:7b:49:2b:f8:70:21:1a:df:3b:86:49: 1c:ac:3d:a8:6b:47:a2:29:d1:72:92:6c:05:f6:1c: d8:6f:80:3e:2e:0d:01:08:85:00:e8:9a:a2:05:a1: 30:4f:7f:be:79:33:3d:d2:2f:de:51:45:fb:c7:44: ae:b9:7a:7c:83:e8:bc:b5:00:51:8b:e9:08:f0:fe: 8b:9a:00:39:1a:ad:44:d2:cb:29:23:f3:d8:2c:12: 14:97:6a:03:b7:bb:b8:81:9e:ea:b1:69:cc:76:a5: 92:9b:fb:a3:6b:de:5d:f8:9f:80:8b:72:4b:42:3d: 73:ba:55:03:95:ab:da:8b:4b:32:e0:35:61:3f:de: 9d:c1:ef:f6:f4:bd:d4:5a:2c:36:c0:f0:4e:9f:8b: 4f:66:1f:0d:a0:9a:1b:8b:eb:90:37:04:e3:cf:6d: 98:17:87:94:20:d5:95:d5:57:58:34:9c:31:af:dc: 9a:16:2f:58:b8:69:a1:1c:de:35:b7:2b:da:6b:db: a4:cd:30:06:9c:99:53:2e:ca:4d:c1:a7:32:08:15: 0d:f6:ae:6e:45:f6:b6:1f:89:c3:0e:3a:00:47:f3: fb:e2:61:48:57:f3:e9:35:54:79:cb:06:f0:03:76: 0c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:74:53:E5:1E:6F:B4:16:E4:19:1D:54:2F:36:55:AE:DA:98:09:18 X509v3 Authority Key Identifier: keyid:DD:4F:B2:C1:0E:F3:28:AC:D9:71:AC:7F:3B:A4:0F:3A:52:F8:D4:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:e5:67:bb:be:d8:80:56:c2:db:9f:5c:37:6b:cd:33:99:78: f2:d0:98:6d:5b:1f:13:13:01:ee:48:08:f5:67:24:a8:89:82: 9c:06:0a:6d:0c:3d:c4:5b:75:31:ae:ca:61:45:d4:b3:a5:2a: 99:74:4a:9c:75:8d:ba:a5:d7:1d:14:95:94:cb:fe:fb:8b:ba: df:49:ab:5c:27:02:35:15:86:85:22:4e:33:bc:01:82:b8:2c: ac:29:0e:50:f4:a5:03:78:76:43:9d:ce:84:cb:f5:8b:24:2b: c9:70:a9:6a:b3:60:5e:ba:95:70:8b:0e:43:45:32:f1:a6:55: 27:67:87:44:b7:54:d0:22:95:7f:51:e7:82:6e:37:49:08:72: 4e:18:58:5a:6a:de:de:82:8c:a3:25:e8:77:8e:cd:bd:b4:ec: fe:f7:11:d7:15:89:e6:26:19:3c:f6:3b:ad:8d:ee:57:37:44: 87:69:69:3b:c2:0e:bb:42:7d:a6:10:11:7e:d2:d4:f5:82:b1: 3a:97:0c:76:b3:bc:c9:b6:9d:09:a6:1b:7c:3c:dc:2c:89:a5: 42:44:ad:78:c9:55:27:54:f5:0b:a4:3f:6f:4d:e7:03:ff:39: 5c:62:85:19:91:8e:9a:8c:f5:41:28:c1:f9:2b:62:26:f1:b0: 9e:5d:af:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAYIRN2NtGxuSnBJ8nU95UKF/FjwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ0RkIyQzEwRUYzMjhBQ0Q5NzFBQzdGM0JBNDBGM0E1 MkY4RDRDOTAeFw0yNTA0MjUwNDQ1NDBaFw0yNTA0MjgwNzU1NDBaMDMxMTAvBgNV BAMTKDUwNzQ1M0U1MUU2RkI0MTZFNDE5MUQ1NDJGMzY1NUFFREE5ODA5MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/1Rjwh68CB9wF9kEcNqLcT8J7 SSv4cCEa3zuGSRysPahrR6Ip0XKSbAX2HNhvgD4uDQEIhQDomqIFoTBPf755Mz3S L95RRfvHRK65enyD6Ly1AFGL6Qjw/ouaADkarUTSyykj89gsEhSXagO3u7iBnuqx acx2pZKb+6Nr3l34n4CLcktCPXO6VQOVq9qLSzLgNWE/3p3B7/b0vdRaLDbA8E6f i09mHw2gmhuL65A3BOPPbZgXh5Qg1ZXVV1g0nDGv3JoWL1i4aaEc3jW3K9pr26TN MAacmVMuyk3BpzIIFQ32rm5F9rYficMOOgBH8/viYUhX8+k1VHnLBvADdgwbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUHRT5R5vtBbkGR1ULzZVrtqYCRgwHwYDVR0j BBgwFoAU3U+ywQ7zKKzZcax/O6QPOlL41MkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjQwZjY3Mi03NmQ0LTQxNTgtYWVkZi02ZGYwYWYyOWYzNWIvMC9ERDRGQjJDMTBF RjMyOEFDRDk3MUFDN0YzQkE0MEYzQTUyRjhENEM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQ0RkIyQzEwRUYzMjhBQ0Q5NzFBQzdGM0JBNDBGM0E1MkY4 RDRDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzY0MGY2NzItNzZkNC00MTU4LWFl ZGYtNmRmMGFmMjlmMzViLzAvREQ0RkIyQzEwRUYzMjhBQ0Q5NzFBQzdGM0JBNDBG M0E1MkY4RDRDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHflZ7u+2IBWwtufXDdrzTOZePLQmG1bHxMT Ae5ICPVnJKiJgpwGCm0MPcRbdTGuymFF1LOlKpl0Spx1jbql1x0UlZTL/vuLut9J q1wnAjUVhoUiTjO8AYK4LKwpDlD0pQN4dkOdzoTL9YskK8lwqWqzYF66lXCLDkNF MvGmVSdnh0S3VNAilX9R54JuN0kIck4YWFpq3t6CjKMl6HeOzb207P73EdcVieYm GTz2O62N7lc3RIdpaTvCDrtCfaYQEX7S1PWCsTqXDHazvMm2nQmmG3w83CyJpUJE rXjJVSdU9QukP29N5wP/OVxihRmRjpqM9UEowfkrYibxsJ5drzQ= -----END CERTIFICATE-----Generated at Fri Apr 25 08:21:09 2025 by rpki-client on console.sobornost.net