$ rpki-client -vvf repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft File: 96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft (raw, json) Hash identifier: 4T5btvQ8z1p579XWtNROKKSIANsXzpVdOLRlaql3h90= Subject key identifier: 2F:87:7E:5B:42:68:B6:E3:5F:17:F5:B9:6D:73:9E:9E:A7:53:8D:5E Authority key identifier: 96:FB:31:74:E7:1D:4C:E9:BB:1C:57:29:5C:2F:55:E7:46:41:F8:EE Certificate issuer: /CN=96FB3174E71D4CE9BB1C57295C2F55E74641F8EE Certificate serial: 10F7633E0979F52D465BECEC7DDC8990D72E1064 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft Manifest number: 39 Signing time: Thu 24 Apr 2025 10:32:10 +0000 Manifest this update: Thu 24 Apr 2025 10:27:09 +0000 Manifest next update: Sun 27 Apr 2025 21:04:09 +0000 Files and hashes: 1: 96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.crl (hash: K/K/Myk0s1BfKq3FXEI7ADPbN4apVISNZKvsR5Yv2YA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.crl rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 10:32:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:f7:63:3e:09:79:f5:2d:46:5b:ec:ec:7d:dc:89:90:d7:2e:10:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96FB3174E71D4CE9BB1C57295C2F55E74641F8EE Validity Not Before: Apr 24 10:27:09 2025 GMT Not After : Apr 27 21:04:09 2025 GMT Subject: CN=2F877E5B4268B6E35F17F5B96D739E9EA7538D5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:92:4b:27:7f:a2:fa:e9:d2:8a:32:22:58:c0: c2:09:1e:48:74:e3:bb:34:db:20:6a:fd:bd:4f:97: 69:2c:38:f5:a4:58:54:72:8f:fc:46:6e:f8:88:33: 4f:e3:14:44:a7:4a:6d:1f:ea:da:e7:e8:24:8f:68: 4d:1c:b7:68:d4:f6:5c:bb:59:c5:9a:3a:fe:d8:79: 7e:bb:3b:3d:47:b4:97:a2:f1:12:da:5c:93:70:97: 3a:e2:c4:db:90:28:c3:e4:e2:c0:11:52:fc:c9:96: fe:cc:f0:f2:32:74:e8:a8:6e:92:9d:b8:fb:fc:6d: 40:2c:99:8f:d3:f5:7c:b8:b5:09:6d:86:61:92:d2: b7:07:d4:45:21:07:d2:39:42:5f:94:3e:36:e9:6b: 86:38:0a:ca:da:d5:d3:49:92:14:20:f7:92:90:a5: 5a:d2:68:52:84:f8:5c:08:a9:20:c4:07:73:c4:99: 91:78:09:87:54:37:0c:40:07:a6:f3:66:e9:80:87: dd:88:c0:ee:12:3a:03:46:e5:cf:f0:20:0f:28:13: 39:49:8c:bb:2c:02:87:9a:01:92:5b:8e:d0:a0:57: ea:65:98:bc:c8:00:1c:28:9b:18:eb:26:d7:6b:1c: 8d:2d:a8:34:14:1d:6d:3f:44:79:c9:33:b8:1c:1c: 06:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:87:7E:5B:42:68:B6:E3:5F:17:F5:B9:6D:73:9E:9E:A7:53:8D:5E X509v3 Authority Key Identifier: keyid:96:FB:31:74:E7:1D:4C:E9:BB:1C:57:29:5C:2F:55:E7:46:41:F8:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:23:b4:00:03:cc:74:9c:c6:02:9e:38:5b:f5:b2:a4:84:f1: 3d:f4:e3:c7:df:c5:8e:68:d9:b9:65:84:52:0e:10:4b:42:5b: 5f:e4:45:be:20:23:19:2d:9e:03:15:6a:94:07:69:3c:c9:a1: 61:a0:91:b8:02:fe:3a:09:f5:63:55:63:05:c8:ab:76:25:99: fe:28:17:ae:3a:54:ec:86:81:c2:c4:35:66:5c:38:7b:6d:dc: 42:16:e9:7d:40:3a:df:9c:b8:20:49:a9:89:88:2b:dc:f6:25: bb:6d:89:2d:40:92:48:a3:fa:56:ea:b1:d0:02:52:ad:3c:ab: 90:a8:93:40:8b:77:5d:00:c8:30:62:ba:14:77:42:e1:1b:f3: 9a:62:96:54:20:e3:a6:57:67:3e:b5:98:f3:e5:42:d9:d9:81: 4e:2d:52:97:92:fd:c2:9c:f4:44:91:b2:c6:09:08:4a:e8:17: f5:aa:fd:77:52:7e:ad:cc:1d:ab:fc:ba:5f:62:04:4d:64:a8: d7:df:67:21:19:b6:2c:bc:57:dc:1b:69:c9:1c:a8:05:cc:ad: 0e:e3:7a:9c:66:9c:55:e2:b6:27:7b:43:b9:3b:23:34:99:55: 71:12:ba:29:86:57:ed:77:61:01:05:41:1b:aa:05:02:1d:f0: 90:11:43:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEPdjPgl59S1GW+zsfdyJkNcuEGQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTZGQjMxNzRFNzFENENFOUJCMUM1NzI5NUMyRjU1RTc0 NjQxRjhFRTAeFw0yNTA0MjQxMDI3MDlaFw0yNTA0MjcyMTA0MDlaMDMxMTAvBgNV BAMTKDJGODc3RTVCNDI2OEI2RTM1RjE3RjVCOTZENzM5RTlFQTc1MzhENUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLkksnf6L66dKKMiJYwMIJHkh0 47s02yBq/b1Pl2ksOPWkWFRyj/xGbviIM0/jFESnSm0f6trn6CSPaE0ct2jU9ly7 WcWaOv7YeX67Oz1HtJei8RLaXJNwlzrixNuQKMPk4sARUvzJlv7M8PIydOiobpKd uPv8bUAsmY/T9Xy4tQlthmGS0rcH1EUhB9I5Ql+UPjbpa4Y4Csra1dNJkhQg95KQ pVrSaFKE+FwIqSDEB3PEmZF4CYdUNwxAB6bzZumAh92IwO4SOgNG5c/wIA8oEzlJ jLssAoeaAZJbjtCgV+plmLzIABwomxjrJtdrHI0tqDQUHW0/RHnJM7gcHAZhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL4d+W0JotuNfF/W5bXOenqdTjV4wHwYDVR0j BBgwFoAUlvsxdOcdTOm7HFcpXC9V50ZB+O4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MzhmOWI2Yi0wMjdhLTRiZTYtYWIwMi0yOGQ1NTFjMzk4MTkvMC85NkZCMzE3NEU3 MUQ0Q0U5QkIxQzU3Mjk1QzJGNTVFNzQ2NDFGOEVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTZGQjMxNzRFNzFENENFOUJCMUM1NzI5NUMyRjU1RTc0NjQx RjhFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTM4ZjliNmItMDI3YS00YmU2LWFi MDItMjhkNTUxYzM5ODE5LzAvOTZGQjMxNzRFNzFENENFOUJCMUM1NzI5NUMyRjU1 RTc0NjQxRjhFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGcjtAADzHScxgKeOFv1sqSE8T3048ffxY5o 2bllhFIOEEtCW1/kRb4gIxktngMVapQHaTzJoWGgkbgC/joJ9WNVYwXIq3Ylmf4o F646VOyGgcLENWZcOHtt3EIW6X1AOt+cuCBJqYmIK9z2JbttiS1Akkij+lbqsdAC Uq08q5Cok0CLd10AyDBiuhR3QuEb85pillQg46ZXZz61mPPlQtnZgU4tUpeS/cKc 9ESRssYJCEroF/Wq/XdSfq3MHav8ul9iBE1kqNffZyEZtiy8V9wbackcqAXMrQ7j epxmnFXitid7Q7k7IzSZVXESuimGV+13YQEFQRuqBQId8JARQ/M= -----END CERTIFICATE-----Generated at Thu Apr 24 13:39:01 2025 by rpki-client on console.sobornost.net