$ rpki-client -vvf repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft File: C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft (raw, json) Hash identifier: HS+Ik04JU29W3kTqWpYpEDeqUOQ+JPqJK1t5uIxundM= Subject key identifier: A9:D5:72:11:55:A4:9D:82:41:0E:D7:17:42:B1:85:C5:15:C3:41:32 Authority key identifier: C8:B7:60:5A:76:DB:DD:11:CC:D3:1F:65:7A:0D:E4:54:C9:79:D9:39 Certificate issuer: /CN=C8B7605A76DBDD11CCD31F657A0DE454C979D939 Certificate serial: 02B82BD4E2CC23E9157676226D9B286EA5ACFE2D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8B7605A76DBDD11CCD31F657A0DE454C979D939.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft Manifest number: 045F Signing time: Thu 24 Apr 2025 18:11:29 +0000 Manifest this update: Thu 24 Apr 2025 18:06:29 +0000 Manifest next update: Mon 28 Apr 2025 04:07:29 +0000 Files and hashes: 1: C8B7605A76DBDD11CCD31F657A0DE454C979D939.crl (hash: 0udQ8yf1RJ9LldHQR+HxHbkQJDMx7+8UCB5docy07aw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.crl rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8B7605A76DBDD11CCD31F657A0DE454C979D939.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:b8:2b:d4:e2:cc:23:e9:15:76:76:22:6d:9b:28:6e:a5:ac:fe:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8B7605A76DBDD11CCD31F657A0DE454C979D939 Validity Not Before: Apr 24 18:06:29 2025 GMT Not After : Apr 28 04:07:29 2025 GMT Subject: CN=A9D5721155A49D82410ED71742B185C515C34132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a1:95:87:08:29:db:f7:fd:4b:2b:a4:ca:30: 2b:26:1c:7c:b6:0f:e0:1f:e5:06:15:f4:85:1d:d3: 0e:b8:ba:f6:81:27:1e:21:09:c4:32:39:95:45:e7: 58:db:dc:f3:cc:9e:ab:ea:9d:f7:aa:48:c9:d3:64: 88:11:4d:dc:2b:4a:75:6b:ba:73:6b:0f:98:34:85: db:e1:b6:b2:8e:66:72:49:f1:8f:e2:a2:f1:79:2f: 69:31:0b:01:89:be:1c:05:3f:96:2b:9d:e7:a2:2c: b2:91:73:c1:60:ad:ef:ae:aa:27:7b:e8:5b:54:81: d3:40:6c:25:5a:92:43:f5:f7:3b:9e:e8:17:8f:09: fd:ec:99:d4:d4:0c:4d:ba:55:b4:8e:bf:3c:18:e5: 46:f6:dc:a7:84:ae:27:3a:58:d7:02:fd:06:42:93: ac:55:c9:b8:9c:9d:a6:03:61:67:62:99:ba:60:f7: d4:75:5e:66:60:4d:13:1c:97:16:74:f7:20:fb:f2: 56:2c:35:4d:36:59:1a:9b:19:a0:eb:22:b0:19:74: f9:4c:70:8c:ca:bb:e9:a2:b5:66:55:a7:bc:9c:08: c3:24:49:6c:bc:cc:d2:d5:3b:54:47:f9:6f:e1:d1: 72:96:ae:7d:23:af:7a:68:83:09:57:42:d7:3d:3f: 09:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:D5:72:11:55:A4:9D:82:41:0E:D7:17:42:B1:85:C5:15:C3:41:32 X509v3 Authority Key Identifier: keyid:C8:B7:60:5A:76:DB:DD:11:CC:D3:1F:65:7A:0D:E4:54:C9:79:D9:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8B7605A76DBDD11CCD31F657A0DE454C979D939.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:8a:b5:69:13:41:2e:56:70:2c:bd:bd:4e:23:3c:25:3f:22: fb:3e:b9:fd:70:37:83:b0:8c:ae:4c:a0:5c:b4:ac:b3:8f:9a: ec:27:9a:a7:4f:1d:5c:c1:09:d6:ad:74:d1:b0:2f:f3:3c:19: a2:ef:ca:c7:b4:61:3f:a4:95:3f:d9:c2:6a:bb:2f:c5:45:b2: 06:77:79:6c:dc:c0:2d:9e:fc:59:7c:f3:66:9a:5c:21:2c:b5: 4b:d1:a9:1d:6f:6b:cb:a1:fe:92:94:be:d8:63:dc:91:45:05: 33:ff:f3:ea:fb:75:e0:8b:38:3c:8a:20:a0:d3:8b:4e:d7:a9: 4d:38:32:21:ca:87:07:1f:a6:01:62:2c:95:34:d1:52:11:fc: 0a:37:fc:79:cf:64:fe:27:db:c5:9d:6f:a0:59:8b:d4:ca:e0: 9f:79:01:69:75:c5:64:75:2d:bf:43:f8:e6:85:83:6d:c5:a7: 87:b1:e1:c4:33:c8:41:a6:e4:fe:db:ac:7d:a0:2d:ce:c7:c6: f6:ae:df:99:dd:21:06:92:d6:90:32:a9:3b:d9:26:81:34:1b: 46:24:a1:f2:36:1b:d1:2a:21:53:4b:31:45:a8:e3:3a:02:cf: 89:b6:3a:6d:d3:7e:d2:a5:17:62:37:ca:73:35:b6:25:c1:72: 15:05:7f:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUArgr1OLMI+kVdnYibZsobqWs/i0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhCNzYwNUE3NkRCREQxMUNDRDMxRjY1N0EwREU0NTRD OTc5RDkzOTAeFw0yNTA0MjQxODA2MjlaFw0yNTA0MjgwNDA3MjlaMDMxMTAvBgNV BAMTKEE5RDU3MjExNTVBNDlEODI0MTBFRDcxNzQyQjE4NUM1MTVDMzQxMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpoZWHCCnb9/1LK6TKMCsmHHy2 D+Af5QYV9IUd0w64uvaBJx4hCcQyOZVF51jb3PPMnqvqnfeqSMnTZIgRTdwrSnVr unNrD5g0hdvhtrKOZnJJ8Y/iovF5L2kxCwGJvhwFP5YrneeiLLKRc8Fgre+uqid7 6FtUgdNAbCVakkP19zue6BePCf3smdTUDE26VbSOvzwY5Ub23KeEric6WNcC/QZC k6xVybicnaYDYWdimbpg99R1XmZgTRMclxZ09yD78lYsNU02WRqbGaDrIrAZdPlM cIzKu+mitWZVp7ycCMMkSWy8zNLVO1RH+W/h0XKWrn0jr3pogwlXQtc9Pwm/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqdVyEVWknYJBDtcXQrGFxRXDQTIwHwYDVR0j BBgwFoAUyLdgWnbb3RHM0x9leg3kVMl52TkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ODM0OWNkNC1jMDc5LTQxZmYtYWE5ZS0zNmYzZDQ0ODI2NDUvMC9DOEI3NjA1QTc2 REJERDExQ0NEMzFGNjU3QTBERTQ1NEM5NzlEOTM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhCNzYwNUE3NkRCREQxMUNDRDMxRjY1N0EwREU0NTRDOTc5 RDkzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDgzNDljZDQtYzA3OS00MWZmLWFh OWUtMzZmM2Q0NDgyNjQ1LzAvQzhCNzYwNUE3NkRCREQxMUNDRDMxRjY1N0EwREU0 NTRDOTc5RDkzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJmKtWkTQS5WcCy9vU4jPCU/Ivs+uf1wN4Ow jK5MoFy0rLOPmuwnmqdPHVzBCdatdNGwL/M8GaLvyse0YT+klT/Zwmq7L8VFsgZ3 eWzcwC2e/Fl882aaXCEstUvRqR1va8uh/pKUvthj3JFFBTP/8+r7deCLODyKIKDT i07XqU04MiHKhwcfpgFiLJU00VIR/Ao3/HnPZP4n28Wdb6BZi9TK4J95AWl1xWR1 Lb9D+OaFg23Fp4ex4cQzyEGm5P7brH2gLc7Hxvau35ndIQaS1pAyqTvZJoE0G0Yk ofI2G9EqIVNLMUWo4zoCz4m2Om3TftKlF2I3ynM1tiXBchUFf2A= -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:24 2025 by rpki-client on console.sobornost.net