$ rpki-client -vvf repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.mft File: 97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.mft (raw, json) Hash identifier: vXqn8cOtsnPvT/IvowVEr3fkyCwpEaogvtYkU9h/tyE= Subject key identifier: 20:5F:71:BD:E7:22:CD:D6:4D:DB:1A:90:8D:25:36:2F:67:AE:E1:7C Authority key identifier: 97:A2:5D:3F:DD:AA:C4:37:1D:F4:BE:C7:7A:A5:89:D7:E1:71:45:DC Certificate issuer: /CN=97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC Certificate serial: 22F4AC55E9B18428E94C835C15BBFA940B645BD3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.mft Manifest number: 02A7 Signing time: Fri 25 Apr 2025 03:10:00 +0000 Manifest this update: Fri 25 Apr 2025 03:05:00 +0000 Manifest next update: Mon 28 Apr 2025 09:09:00 +0000 Files and hashes: 1: 97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.crl (hash: v8OgIMYChTqNhMlEj00ooqEYnr5ObG7WZ9BM+A9mbZQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.crl rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:f4:ac:55:e9:b1:84:28:e9:4c:83:5c:15:bb:fa:94:0b:64:5b:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC Validity Not Before: Apr 25 03:05:00 2025 GMT Not After : Apr 28 09:09:00 2025 GMT Subject: CN=205F71BDE722CDD64DDB1A908D25362F67AEE17C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:94:b9:54:0a:70:6b:fd:66:82:8e:41:19:cf: 12:be:19:69:44:04:a7:ed:ba:65:93:d7:e6:dc:e5: d0:4d:dc:7c:25:e7:82:75:cb:43:f4:c5:42:96:1a: d8:49:8f:c3:b4:a2:ce:e6:18:3d:93:e0:cb:5f:1e: c1:8c:54:51:5d:dd:bb:37:8f:9f:c4:a9:0b:4a:db: 55:61:11:b5:a3:e0:3e:e5:18:51:3e:52:45:03:9d: 9b:a2:f9:a6:5d:a9:eb:6e:75:3d:0c:47:8a:a8:03: 0f:de:88:46:ee:8e:2b:05:67:65:58:8a:98:42:9a: 19:98:92:06:f0:46:d3:31:c4:4b:55:b0:39:3d:e3: e1:c6:f9:ba:10:36:1a:ee:66:de:46:70:b1:8d:9e: 88:82:3c:b8:da:60:bc:f1:fb:84:45:7e:cc:6e:9b: 35:7c:29:5a:0a:65:df:d4:7e:b7:22:a5:d1:75:ad: 75:50:ed:ce:04:39:a9:29:55:a0:9e:dc:72:ee:e5: 50:9e:12:7b:ed:0e:8c:3b:60:7f:0f:32:f7:c7:93: 94:e6:27:a1:01:d6:bc:c3:da:3c:21:22:ad:a7:76: 37:a9:15:d8:e0:2d:13:a7:5e:92:bb:59:8c:36:df: 8f:52:6c:59:ca:d7:d4:e5:ab:e7:b6:d4:a0:fe:27: 4c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:5F:71:BD:E7:22:CD:D6:4D:DB:1A:90:8D:25:36:2F:67:AE:E1:7C X509v3 Authority Key Identifier: keyid:97:A2:5D:3F:DD:AA:C4:37:1D:F4:BE:C7:7A:A5:89:D7:E1:71:45:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:32:00:21:23:a0:b8:b8:39:f0:29:24:0e:88:a9:54:83:df: 60:ec:7a:2f:85:75:40:76:82:51:ce:71:bb:69:72:20:cf:04: 86:8c:43:cb:b3:1f:77:a6:18:46:2d:97:3b:81:9d:65:00:48: cc:2a:05:ba:dd:ae:01:02:f8:a2:55:49:08:d7:13:16:f5:7b: 1f:30:45:3b:a3:52:84:f6:3f:55:45:e4:00:5e:af:94:df:2e: ce:46:18:59:3d:f4:30:ed:e3:d9:55:4b:16:a8:d7:1e:e4:1a: 8f:b3:0b:5e:c3:c9:be:fe:8a:fa:87:f7:b1:20:01:f3:7d:ae: 64:35:dd:9d:9d:05:51:c8:f9:c8:45:18:1b:2c:3d:bc:db:0a: 6a:03:d3:80:03:2b:8d:47:95:8b:a9:2a:a5:ef:d1:f3:fe:ac: 65:db:f2:ba:76:9f:c2:c0:3c:17:e0:5a:99:ca:86:19:56:3e: da:c1:57:11:a0:9f:4f:24:d4:ef:43:05:24:d5:e6:f2:62:e7: 8c:c3:76:00:6f:1c:7b:66:ff:3d:e4:81:eb:c0:05:8a:12:2e: 68:46:c5:e0:67:66:fa:7b:f7:a6:54:ec:7e:29:f6:23:74:b8: 53:5e:04:65:22:36:3e:d2:04:3e:79:45:22:f0:1e:88:a6:c3: 62:6b:87:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIvSsVemxhCjpTINcFbv6lAtkW9MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTdBMjVEM0ZEREFBQzQzNzFERjRCRUM3N0FBNTg5RDdF MTcxNDVEQzAeFw0yNTA0MjUwMzA1MDBaFw0yNTA0MjgwOTA5MDBaMDMxMTAvBgNV BAMTKDIwNUY3MUJERTcyMkNERDY0RERCMUE5MDhEMjUzNjJGNjdBRUUxN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSlLlUCnBr/WaCjkEZzxK+GWlE BKftumWT1+bc5dBN3Hwl54J1y0P0xUKWGthJj8O0os7mGD2T4MtfHsGMVFFd3bs3 j5/EqQtK21VhEbWj4D7lGFE+UkUDnZui+aZdqetudT0MR4qoAw/eiEbujisFZ2VY iphCmhmYkgbwRtMxxEtVsDk94+HG+boQNhruZt5GcLGNnoiCPLjaYLzx+4RFfsxu mzV8KVoKZd/UfrcipdF1rXVQ7c4EOakpVaCe3HLu5VCeEnvtDow7YH8PMvfHk5Tm J6EB1rzD2jwhIq2ndjepFdjgLROnXpK7WYw2349SbFnK19Tlq+e21KD+J0wfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIF9xvecizdZN2xqQjSU2L2eu4XwwHwYDVR0j BBgwFoAUl6JdP92qxDcd9L7HeqWJ1+FxRdwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YmYxZGFmYy1iODI5LTQyY2ItYjE3Yy0wMTVmMGE5MGQ4M2QvMC85N0EyNUQzRkRE QUFDNDM3MURGNEJFQzc3QUE1ODlEN0UxNzE0NURDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTdBMjVEM0ZEREFBQzQzNzFERjRCRUM3N0FBNTg5RDdFMTcx NDVEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGJmMWRhZmMtYjgyOS00MmNiLWIx N2MtMDE1ZjBhOTBkODNkLzAvOTdBMjVEM0ZEREFBQzQzNzFERjRCRUM3N0FBNTg5 RDdFMTcxNDVEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD0yACEjoLi4OfApJA6IqVSD32Dsei+FdUB2 glHOcbtpciDPBIaMQ8uzH3emGEYtlzuBnWUASMwqBbrdrgEC+KJVSQjXExb1ex8w RTujUoT2P1VF5ABer5TfLs5GGFk99DDt49lVSxao1x7kGo+zC17Dyb7+ivqH97Eg AfN9rmQ13Z2dBVHI+chFGBssPbzbCmoD04ADK41HlYupKqXv0fP+rGXb8rp2n8LA PBfgWpnKhhlWPtrBVxGgn08k1O9DBSTV5vJi54zDdgBvHHtm/z3kgevABYoSLmhG xeBnZvp796ZU7H4p9iN0uFNeBGUiNj7SBD55RSLwHoimw2Jrhw4= -----END CERTIFICATE-----Generated at Fri Apr 25 06:02:24 2025 by rpki-client on console.sobornost.net