$ rpki-client -vvf repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.mft File: 8902A1A2A87110119F8477271D6D224973A35F04.mft (raw, json) Hash identifier: kPnDgrDMjNbdWHM4P+nMswq98JWKPxbK6l7q6Rk+9w0= Subject key identifier: 79:32:3A:69:20:B3:B6:83:6D:1F:73:9F:BE:98:F0:5A:25:70:47:48 Authority key identifier: 89:02:A1:A2:A8:71:10:11:9F:84:77:27:1D:6D:22:49:73:A3:5F:04 Certificate issuer: /CN=8902A1A2A87110119F8477271D6D224973A35F04 Certificate serial: 0AD91BE95408AAA786F7047C060F363A52C32B63 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8902A1A2A87110119F8477271D6D224973A35F04.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.mft Manifest number: 0252 Signing time: Sat 26 Apr 2025 13:10:03 +0000 Manifest this update: Sat 26 Apr 2025 13:05:03 +0000 Manifest next update: Tue 29 Apr 2025 19:32:03 +0000 Files and hashes: 1: 8902A1A2A87110119F8477271D6D224973A35F04.crl (hash: xcp/IG+ohUEJkjgG+QnoruLDVf5hPVt3mLvAIG/FLz0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.crl rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8902A1A2A87110119F8477271D6D224973A35F04.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 19:32:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:d9:1b:e9:54:08:aa:a7:86:f7:04:7c:06:0f:36:3a:52:c3:2b:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8902A1A2A87110119F8477271D6D224973A35F04 Validity Not Before: Apr 26 13:05:03 2025 GMT Not After : Apr 29 19:32:03 2025 GMT Subject: CN=79323A6920B3B6836D1F739FBE98F05A25704748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:02:4c:0d:b7:9f:40:20:1e:c2:66:2e:9e:2a: c7:2d:30:4a:42:93:9e:f6:33:d6:6d:31:41:15:7b: a9:48:3d:7a:4d:8c:45:7f:e6:93:c1:a6:e2:9e:81: 0b:6f:c7:a2:cc:e0:66:e6:8a:53:b9:7e:8f:57:a8: 21:0f:0d:ff:bb:65:b2:a7:ff:b1:bd:b2:b5:e5:21: f4:f6:00:60:7a:e7:da:29:4b:85:22:ca:d2:e6:07: a8:fd:e9:d9:66:ca:39:96:c9:ca:1e:3c:75:04:0c: 76:1d:bf:3a:7b:d0:56:3f:f2:6c:4c:e1:a1:3c:7d: 39:f1:dc:f2:57:5b:24:a6:20:f4:f5:5d:77:55:7d: 63:a3:57:88:40:5a:f7:0e:f2:f1:32:3e:f9:3b:62: 41:a2:35:81:b4:cd:9c:ae:9e:1f:3f:b3:3c:ea:a9: b5:6f:f9:be:19:98:f8:f4:87:be:2d:7c:e2:64:d8: d4:da:bb:23:c3:57:78:4f:22:65:96:7f:69:5a:f5: 78:6a:ce:9b:3c:6a:b5:a2:60:5e:ef:e6:b9:66:ea: a7:50:12:d3:c7:29:61:fd:8c:61:3b:69:b2:3d:ac: 07:d2:b5:1c:1e:1c:c4:99:3f:b5:e7:8a:15:4b:56: ce:11:5e:96:e3:79:ef:b1:fb:73:e0:bb:02:96:d3: 82:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:32:3A:69:20:B3:B6:83:6D:1F:73:9F:BE:98:F0:5A:25:70:47:48 X509v3 Authority Key Identifier: keyid:89:02:A1:A2:A8:71:10:11:9F:84:77:27:1D:6D:22:49:73:A3:5F:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8902A1A2A87110119F8477271D6D224973A35F04.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:19:49:b7:c8:19:03:d1:d2:59:7f:cf:df:a0:f1:11:a4:a0: 0c:73:cc:ba:16:c0:f5:44:9d:26:d6:f5:44:36:18:f8:61:8b: 18:15:e6:a8:b9:91:6e:8a:b4:34:98:b5:db:dd:3c:48:41:aa: ee:e5:23:f5:41:95:16:b0:42:cf:f6:45:a3:ff:c7:9d:07:de: b0:4c:72:0c:d3:ac:7e:e1:51:ae:a5:94:fd:65:46:3a:37:5b: 4a:59:a8:f5:9d:42:a3:d6:53:0b:f6:17:24:80:bd:34:9e:4a: 6b:98:73:d7:2d:c0:03:9b:ca:2a:f6:0b:dc:8d:52:94:02:7e: 62:2f:4a:b6:e1:61:17:54:0d:6d:c1:ac:c7:c9:22:f8:e0:25: 2e:46:11:e5:e1:15:3b:77:22:a4:f8:a2:ea:90:15:fd:4f:7a: 32:07:d0:e2:19:1d:29:8c:84:a2:ee:8a:fa:a2:fd:98:70:02: 1e:3f:e2:e2:97:e9:50:db:e1:7e:d2:69:2a:5e:1a:af:30:0b: 1d:d7:a5:fc:b3:e8:77:15:41:5f:0e:09:09:e9:cd:66:62:ce: 33:ca:5c:f5:57:5d:fb:84:0e:2c:46:e9:9e:67:f3:ee:f8:8a: 63:63:cc:66:4b:4b:d2:50:c9:8f:6c:12:f8:d7:7d:fa:b4:e3: ec:0b:96:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCtkb6VQIqqeG9wR8Bg82OlLDK2MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkwMkExQTJBODcxMTAxMTlGODQ3NzI3MUQ2RDIyNDk3 M0EzNUYwNDAeFw0yNTA0MjYxMzA1MDNaFw0yNTA0MjkxOTMyMDNaMDMxMTAvBgNV BAMTKDc5MzIzQTY5MjBCM0I2ODM2RDFGNzM5RkJFOThGMDVBMjU3MDQ3NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYAkwNt59AIB7CZi6eKsctMEpC k572M9ZtMUEVe6lIPXpNjEV/5pPBpuKegQtvx6LM4GbmilO5fo9XqCEPDf+7ZbKn /7G9srXlIfT2AGB659opS4UiytLmB6j96dlmyjmWycoePHUEDHYdvzp70FY/8mxM 4aE8fTnx3PJXWySmIPT1XXdVfWOjV4hAWvcO8vEyPvk7YkGiNYG0zZyunh8/szzq qbVv+b4ZmPj0h74tfOJk2NTauyPDV3hPImWWf2la9Xhqzps8arWiYF7v5rlm6qdQ EtPHKWH9jGE7abI9rAfStRweHMSZP7XnihVLVs4RXpbjee+x+3PguwKW04KDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeTI6aSCztoNtH3OfvpjwWiVwR0gwHwYDVR0j BBgwFoAUiQKhoqhxEBGfhHcnHW0iSXOjXwQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OTY1ZGQzOS00OGQwLTQ1NzgtOGZlNS02NmQ5NTMzODRlNTAvMC84OTAyQTFBMkE4 NzExMDExOUY4NDc3MjcxRDZEMjI0OTczQTM1RjA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODkwMkExQTJBODcxMTAxMTlGODQ3NzI3MUQ2RDIyNDk3M0Ez NUYwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzk2NWRkMzktNDhkMC00NTc4LThm ZTUtNjZkOTUzMzg0ZTUwLzAvODkwMkExQTJBODcxMTAxMTlGODQ3NzI3MUQ2RDIy NDk3M0EzNUYwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH0ZSbfIGQPR0ll/z9+g8RGkoAxzzLoWwPVE nSbW9UQ2GPhhixgV5qi5kW6KtDSYtdvdPEhBqu7lI/VBlRawQs/2RaP/x50H3rBM cgzTrH7hUa6llP1lRjo3W0pZqPWdQqPWUwv2FySAvTSeSmuYc9ctwAObyir2C9yN UpQCfmIvSrbhYRdUDW3BrMfJIvjgJS5GEeXhFTt3IqT4ouqQFf1PejIH0OIZHSmM hKLuivqi/ZhwAh4/4uKX6VDb4X7SaSpeGq8wCx3Xpfyz6HcVQV8OCQnpzWZizjPK XPVXXfuEDixG6Z5n8+74imNjzGZLS9JQyY9sEvjXffq04+wLlhk= -----END CERTIFICATE-----Generated at Sat Apr 26 15:54:09 2025 by rpki-client on console.sobornost.net