$ rpki-client -vvf repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.mft File: AE20FE4D558717B21540D21662C30716B19723F3.mft (raw, json) Hash identifier: vleXxPtLRyN0JOkEHgH/9s+ThO3Ih8L7dU9kihsAgzs= Subject key identifier: FF:D0:BB:32:17:3A:0A:89:9C:A2:C2:22:ED:0A:02:E8:39:8C:E0:36 Authority key identifier: AE:20:FE:4D:55:87:17:B2:15:40:D2:16:62:C3:07:16:B1:97:23:F3 Certificate issuer: /CN=AE20FE4D558717B21540D21662C30716B19723F3 Certificate serial: 38383E915A167B5F880AF1A4DBAE2DCA0D9A11A6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE20FE4D558717B21540D21662C30716B19723F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.mft Manifest number: 0204 Signing time: Thu 24 Apr 2025 10:30:35 +0000 Manifest this update: Thu 24 Apr 2025 10:25:35 +0000 Manifest next update: Sun 27 Apr 2025 19:49:35 +0000 Files and hashes: 1: AE20FE4D558717B21540D21662C30716B19723F3.crl (hash: y/myXra/VgQtvZwKPni8V1t8h9PiqQeGLu9/V+fNI+k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.crl rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE20FE4D558717B21540D21662C30716B19723F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 17:17:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:38:3e:91:5a:16:7b:5f:88:0a:f1:a4:db:ae:2d:ca:0d:9a:11:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE20FE4D558717B21540D21662C30716B19723F3 Validity Not Before: Apr 24 10:25:35 2025 GMT Not After : Apr 27 19:49:35 2025 GMT Subject: CN=FFD0BB32173A0A899CA2C222ED0A02E8398CE036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:65:a4:eb:c0:9d:5c:3e:d6:93:95:55:9f:17: 5d:6b:3c:55:67:dc:a6:45:7d:72:09:94:52:33:d3: 8a:b0:db:93:8e:05:ea:73:9d:b7:aa:24:08:2c:90: ed:05:06:95:dd:7f:e3:41:5d:06:19:bf:0a:92:1f: 11:ee:ad:a3:5e:d5:50:87:ff:72:1a:b1:dd:42:90: 87:8b:e7:d4:74:84:4b:1f:6e:97:8e:f8:9e:3c:d4: d4:11:1a:10:0c:b3:ee:2f:aa:56:f4:17:cf:62:b6: 20:2c:92:91:64:01:9f:ee:46:85:3f:93:70:80:fc: a6:07:01:69:9f:5f:a1:35:d5:5d:57:ec:46:14:bd: 17:c1:55:e2:b6:97:01:a1:a6:e9:1c:74:e6:d0:74: 42:c1:d4:83:3c:8a:95:cb:c4:02:8c:28:46:75:43: 40:7d:8f:92:26:b8:05:e1:c9:69:5f:c0:20:84:2b: 79:16:ae:5a:99:eb:b0:ed:a7:79:46:3d:01:36:9b: bb:72:62:1c:a8:d3:3a:d2:38:5b:7f:ae:f1:73:70: 68:7e:d4:04:64:c1:72:4f:66:b3:ec:14:78:a5:2c: b1:6e:48:77:3d:8e:e9:28:a5:cb:4e:bc:f1:62:6d: 1d:2f:f4:9c:24:c0:75:ae:b0:c5:50:2a:a8:ab:cd: c8:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:D0:BB:32:17:3A:0A:89:9C:A2:C2:22:ED:0A:02:E8:39:8C:E0:36 X509v3 Authority Key Identifier: keyid:AE:20:FE:4D:55:87:17:B2:15:40:D2:16:62:C3:07:16:B1:97:23:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE20FE4D558717B21540D21662C30716B19723F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:ad:8e:1d:19:b7:d8:cc:f1:60:87:fc:4c:99:c4:62:cb:3c: db:1e:59:58:a3:02:9d:7d:07:91:18:cd:dd:ea:11:c7:b4:f5: a4:aa:dd:b8:5c:f8:0f:dd:e9:68:4d:15:11:de:fe:9c:1e:c8: 4a:97:b8:32:ca:53:a0:2d:a3:88:e8:c1:c8:85:29:2e:f9:2f: 7c:92:d3:e5:8e:3e:57:0f:f1:08:17:90:aa:c8:40:b0:0b:bf: b3:c1:f6:79:f8:c3:7c:49:79:38:89:4c:ab:db:48:6b:c4:7e: 72:de:8c:3e:06:78:36:c1:67:09:52:b7:26:42:87:27:bd:76: eb:37:4e:39:9a:21:05:fb:68:21:39:e6:f2:69:20:c0:5d:c0: b7:ba:7f:1a:5c:9a:9f:8e:e5:94:4f:a6:d4:4d:fc:cb:f8:91: a2:b8:7b:44:fd:d1:1d:ac:26:2c:c2:88:e2:40:1a:00:99:f3: d4:e5:52:6e:26:db:29:e0:27:5d:07:b0:60:08:7a:14:44:f3: b2:a6:1f:d7:c4:6b:73:ab:be:34:16:e7:91:49:78:f9:d9:51: 6d:cf:cd:44:93:5c:be:f2:17:e6:39:23:6d:2a:6b:a4:d0:c5: 34:ba:61:2c:bd:44:00:43:53:23:89:c2:10:42:78:df:f5:22: 7e:93:14:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUODg+kVoWe1+ICvGk264tyg2aEaYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUyMEZFNEQ1NTg3MTdCMjE1NDBEMjE2NjJDMzA3MTZC MTk3MjNGMzAeFw0yNTA0MjQxMDI1MzVaFw0yNTA0MjcxOTQ5MzVaMDMxMTAvBgNV BAMTKEZGRDBCQjMyMTczQTBBODk5Q0EyQzIyMkVEMEEwMkU4Mzk4Q0UwMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2ZaTrwJ1cPtaTlVWfF11rPFVn 3KZFfXIJlFIz04qw25OOBepznbeqJAgskO0FBpXdf+NBXQYZvwqSHxHuraNe1VCH /3Iasd1CkIeL59R0hEsfbpeO+J481NQRGhAMs+4vqlb0F89itiAskpFkAZ/uRoU/ k3CA/KYHAWmfX6E11V1X7EYUvRfBVeK2lwGhpukcdObQdELB1IM8ipXLxAKMKEZ1 Q0B9j5ImuAXhyWlfwCCEK3kWrlqZ67Dtp3lGPQE2m7tyYhyo0zrSOFt/rvFzcGh+ 1ARkwXJPZrPsFHilLLFuSHc9jukopctOvPFibR0v9JwkwHWusMVQKqirzchhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/9C7Mhc6ComcosIi7QoC6DmM4DYwHwYDVR0j BBgwFoAUriD+TVWHF7IVQNIWYsMHFrGXI/MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MjE2NDZiZS0zZDZhLTQyNTctYjc3Yy1iMzNjMTBmMzVkMzIvMC9BRTIwRkU0RDU1 ODcxN0IyMTU0MEQyMTY2MkMzMDcxNkIxOTcyM0YzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUUyMEZFNEQ1NTg3MTdCMjE1NDBEMjE2NjJDMzA3MTZCMTk3 MjNGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDIxNjQ2YmUtM2Q2YS00MjU3LWI3 N2MtYjMzYzEwZjM1ZDMyLzAvQUUyMEZFNEQ1NTg3MTdCMjE1NDBEMjE2NjJDMzA3 MTZCMTk3MjNGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ2tjh0Zt9jM8WCH/EyZxGLLPNseWVijAp19 B5EYzd3qEce09aSq3bhc+A/d6WhNFRHe/pweyEqXuDLKU6Ato4jowciFKS75L3yS 0+WOPlcP8QgXkKrIQLALv7PB9nn4w3xJeTiJTKvbSGvEfnLejD4GeDbBZwlStyZC hye9dus3TjmaIQX7aCE55vJpIMBdwLe6fxpcmp+O5ZRPptRN/Mv4kaK4e0T90R2s JizCiOJAGgCZ89TlUm4m2yngJ10HsGAIehRE87KmH9fEa3OrvjQW55FJePnZUW3P zUSTXL7yF+Y5I20qa6TQxTS6YSy9RABDUyOJwhBCeN/1In6TFHo= -----END CERTIFICATE-----Generated at Thu Apr 24 13:39:00 2025 by rpki-client on console.sobornost.net