$ rpki-client -vvf repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.mft File: 4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.mft (raw, json) Hash identifier: CkWLAbuTRvMcFDYe6qQAcC9AOCsX0odvUWWNMW72jy4= Subject key identifier: 5C:22:B6:53:C1:48:E1:C2:16:74:9C:9E:2A:02:1E:24:76:2B:48:51 Authority key identifier: 4B:6A:F7:33:5E:C0:7F:E7:46:BC:2A:36:83:02:43:6E:F6:B1:B9:EB Certificate issuer: /CN=4B6AF7335EC07FE746BC2A368302436EF6B1B9EB Certificate serial: 3FD29612C92551487176E6ADFE4FC80FC9E91F0E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.mft Manifest number: 0459 Signing time: Thu 24 Apr 2025 16:41:25 +0000 Manifest this update: Thu 24 Apr 2025 16:36:25 +0000 Manifest next update: Sun 27 Apr 2025 19:04:25 +0000 Files and hashes: 1: 4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.crl (hash: KcaS+ikn9ejUavVWPh6/QqzXSfNEFX6oXHq3LCw2wME=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.crl rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 19:04:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:d2:96:12:c9:25:51:48:71:76:e6:ad:fe:4f:c8:0f:c9:e9:1f:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B6AF7335EC07FE746BC2A368302436EF6B1B9EB Validity Not Before: Apr 24 16:36:25 2025 GMT Not After : Apr 27 19:04:25 2025 GMT Subject: CN=5C22B653C148E1C216749C9E2A021E24762B4851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0e:df:95:14:18:1f:0a:83:e4:ce:2b:3d:97: af:e8:40:6d:16:51:f2:a1:5c:d1:38:36:57:f2:d9: 72:44:e3:10:4b:ec:eb:de:75:25:7f:ed:42:ad:f1: 89:ef:55:ea:6f:10:9c:ce:67:f4:2d:23:a1:3d:2a: 55:00:b4:cd:66:96:77:53:6c:7c:f2:75:c7:a9:17: 73:43:c5:30:62:18:21:30:4e:72:67:f5:12:d4:81: 05:1e:4e:64:44:43:c3:38:c4:da:87:0a:85:89:86: 93:dc:46:2f:c7:ed:6f:28:2b:e4:ea:8c:d8:5c:27: e7:17:77:e3:4f:aa:33:3c:05:23:dd:d1:e1:c5:4d: bb:8e:91:63:11:c7:51:de:35:7a:fa:18:fa:8e:22: 6a:b1:6c:40:0e:d4:86:df:b7:92:31:76:fb:93:3a: fd:b1:ae:5a:72:89:ff:fa:32:33:c2:d2:5b:15:a6: 72:c4:44:0d:ea:15:c6:3b:6d:b3:6d:db:4a:be:d1: 8e:6b:ab:2c:bd:15:8e:24:e5:7e:50:c8:27:d3:80: b3:83:29:91:8d:0c:01:e5:66:74:0d:c3:67:62:b6: 98:31:b8:40:f9:e4:de:55:51:a2:9c:db:fc:c2:4a: 93:9e:5e:f4:42:8e:df:7e:59:72:46:e5:df:2a:61: 2a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:22:B6:53:C1:48:E1:C2:16:74:9C:9E:2A:02:1E:24:76:2B:48:51 X509v3 Authority Key Identifier: keyid:4B:6A:F7:33:5E:C0:7F:E7:46:BC:2A:36:83:02:43:6E:F6:B1:B9:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:af:d0:a5:69:ae:e4:75:26:19:2b:25:46:71:a1:76:3c:12: 3a:9e:e6:a8:d4:b0:11:db:af:17:86:a1:fb:80:8e:a3:39:a6: a1:4e:a2:57:7a:df:73:ed:ff:54:a6:65:3c:8b:a0:f7:40:90: 03:b2:14:0f:b1:2c:8b:cb:3d:00:82:17:e8:4b:8c:f5:09:c9: d5:f2:01:1b:51:18:71:91:3d:67:9b:2a:3f:1b:cc:37:e0:d9: d1:11:14:4c:7b:cc:f3:3d:9d:e4:4e:fe:7b:fc:80:60:42:d5: a8:83:79:da:af:e0:67:b3:dd:08:77:6f:1a:d1:94:14:07:63: 29:3e:b4:c5:ab:59:14:67:fb:8d:c3:c6:cf:9f:07:7a:62:7a: 30:fa:f1:e4:9b:89:d0:fe:b3:34:dd:72:bd:d7:89:fe:04:40: 5a:d2:52:fa:3e:eb:06:1a:f1:fd:75:8d:42:f8:03:cc:9a:bf: 65:de:ad:52:78:35:67:d7:dc:01:b8:71:60:d8:dc:d3:65:b3: 62:35:fe:73:d6:d4:9f:0b:41:a1:f7:12:74:70:35:64:3f:2e: 80:4f:44:71:72:f9:7e:4e:15:5e:7b:fd:e3:0a:26:1e:5b:22: 94:b6:11:6a:19:98:07:33:82:70:70:a4:0e:22:00:2c:29:41: 3b:ba:ac:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP9KWEsklUUhxduat/k/ID8npHw4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEI2QUY3MzM1RUMwN0ZFNzQ2QkMyQTM2ODMwMjQzNkVG NkIxQjlFQjAeFw0yNTA0MjQxNjM2MjVaFw0yNTA0MjcxOTA0MjVaMDMxMTAvBgNV BAMTKDVDMjJCNjUzQzE0OEUxQzIxNjc0OUM5RTJBMDIxRTI0NzYyQjQ4NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Dt+VFBgfCoPkzis9l6/oQG0W UfKhXNE4Nlfy2XJE4xBL7OvedSV/7UKt8YnvVepvEJzOZ/QtI6E9KlUAtM1mlndT bHzydcepF3NDxTBiGCEwTnJn9RLUgQUeTmREQ8M4xNqHCoWJhpPcRi/H7W8oK+Tq jNhcJ+cXd+NPqjM8BSPd0eHFTbuOkWMRx1HeNXr6GPqOImqxbEAO1Ibft5IxdvuT Ov2xrlpyif/6MjPC0lsVpnLERA3qFcY7bbNt20q+0Y5rqyy9FY4k5X5QyCfTgLOD KZGNDAHlZnQNw2ditpgxuED55N5VUaKc2/zCSpOeXvRCjt9+WXJG5d8qYSoHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXCK2U8FI4cIWdJyeKgIeJHYrSFEwHwYDVR0j BBgwFoAUS2r3M17Af+dGvCo2gwJDbvaxueswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDdjZjIwMi1mNWVjLTQxMDEtODA4NS1jZWI4NmVhNjViM2UvMC80QjZBRjczMzVF QzA3RkU3NDZCQzJBMzY4MzAyNDM2RUY2QjFCOUVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEI2QUY3MzM1RUMwN0ZFNzQ2QkMyQTM2ODMwMjQzNkVGNkIx QjlFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA3Y2YyMDItZjVlYy00MTAxLTgw ODUtY2ViODZlYTY1YjNlLzAvNEI2QUY3MzM1RUMwN0ZFNzQ2QkMyQTM2ODMwMjQz NkVGNkIxQjlFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADWv0KVpruR1JhkrJUZxoXY8Ejqe5qjUsBHb rxeGofuAjqM5pqFOold633Pt/1SmZTyLoPdAkAOyFA+xLIvLPQCCF+hLjPUJydXy ARtRGHGRPWebKj8bzDfg2dERFEx7zPM9neRO/nv8gGBC1aiDedqv4Gez3Qh3bxrR lBQHYyk+tMWrWRRn+43Dxs+fB3piejD68eSbidD+szTdcr3Xif4EQFrSUvo+6wYa 8f11jUL4A8yav2XerVJ4NWfX3AG4cWDY3NNls2I1/nPW1J8LQaH3EnRwNWQ/LoBP RHFy+X5OFV57/eMKJh5bIpS2EWoZmAczgnBwpA4iACwpQTu6rKQ= -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:24 2025 by rpki-client on console.sobornost.net