$ rpki-client -vvf repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.mft File: AA97B959271291FBE142491B81063AD5B04487FA.mft (raw, json) Hash identifier: SdFoCVxASEEXxja8+Nho/eT1f1GvGMNZ7hGCKNEKohg= Subject key identifier: D4:84:02:CF:23:89:45:51:78:40:6C:C9:5E:C0:86:06:EE:78:C6:98 Authority key identifier: AA:97:B9:59:27:12:91:FB:E1:42:49:1B:81:06:3A:D5:B0:44:87:FA Certificate issuer: /CN=AA97B959271291FBE142491B81063AD5B04487FA Certificate serial: 114A4DECEF4507CD45CFC6B0E14DF2084A150B24 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA97B959271291FBE142491B81063AD5B04487FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.mft Manifest number: AB Signing time: Wed 23 Apr 2025 17:10:36 +0000 Manifest this update: Wed 23 Apr 2025 17:05:36 +0000 Manifest next update: Sat 26 Apr 2025 17:27:36 +0000 Files and hashes: 1: AA97B959271291FBE142491B81063AD5B04487FA.crl (hash: 3nl9bzQ5i8p6vv9ir2fXUnDvt6+H/gF9VRu92vxZUcA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.crl rsync://repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA97B959271291FBE142491B81063AD5B04487FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 17:27:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:4a:4d:ec:ef:45:07:cd:45:cf:c6:b0:e1:4d:f2:08:4a:15:0b:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA97B959271291FBE142491B81063AD5B04487FA Validity Not Before: Apr 23 17:05:36 2025 GMT Not After : Apr 26 17:27:36 2025 GMT Subject: CN=D48402CF2389455178406CC95EC08606EE78C698 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c6:a9:db:66:cc:bd:36:70:d4:79:99:e3:2e: fd:e1:29:bf:c7:72:fb:ea:2d:91:8b:31:00:0d:94: fe:f3:ab:e6:de:ae:81:ff:b8:19:3d:5f:97:ec:36: 5a:c6:cd:d3:e9:8b:a7:d8:cd:ce:14:2f:2d:51:49: b7:e3:fa:15:e4:80:17:4e:0f:12:b3:eb:b6:40:0b: 6b:2e:45:c4:a2:ed:57:c7:a3:4f:5f:66:4a:a6:b9: b4:3d:c9:7c:bd:15:d8:b4:f7:04:2b:38:71:b7:34: c3:6b:60:56:00:a2:3c:08:2e:7e:c2:fe:38:09:bf: 28:fc:d4:a5:7d:90:fb:88:04:c3:76:bb:3f:9b:31: 89:0d:9b:e4:88:77:94:14:26:ff:e5:59:ab:d5:67: ea:10:0c:ad:f2:b0:ef:ec:0f:54:4d:2b:60:8a:6c: fa:7c:f6:4b:ae:5a:56:cb:df:94:e7:e8:90:2e:66: f4:0c:3b:d9:e0:b3:76:87:30:d2:08:70:91:15:73: 28:b1:9f:37:2e:6c:24:96:72:13:47:d2:67:7c:85: d3:d0:af:a1:b4:9b:2c:49:f8:4f:2a:18:1e:03:90: 3b:ac:79:77:63:e9:32:27:b9:ef:58:b4:1b:a0:bf: 69:58:9b:28:f1:d4:e4:e1:e3:52:96:f2:4c:37:2b: 4a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:84:02:CF:23:89:45:51:78:40:6C:C9:5E:C0:86:06:EE:78:C6:98 X509v3 Authority Key Identifier: keyid:AA:97:B9:59:27:12:91:FB:E1:42:49:1B:81:06:3A:D5:B0:44:87:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA97B959271291FBE142491B81063AD5B04487FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:5d:50:3a:cf:db:8c:fb:9b:0f:b3:7c:ed:d7:69:4b:91:97: a0:71:d5:a4:0e:3e:8d:0b:ce:2a:ff:ec:8c:5e:c2:df:be:50: 0f:f5:95:a0:7f:7f:a5:45:88:77:53:22:8e:e5:60:3c:2e:92: 37:28:0e:5c:e4:75:fd:ce:9b:d0:dc:2a:c5:9a:0f:3d:46:2a: 05:a3:7b:60:bf:38:af:ba:6d:2c:d7:55:1a:27:3a:4e:32:12: 8a:5b:a6:af:f0:bb:99:9d:f9:56:50:7c:11:c4:13:bb:4a:ac: 2e:2d:c5:3e:7d:b4:31:d6:dd:f8:f4:f0:d5:29:3a:56:ee:82: 62:65:7a:52:7f:33:41:b6:7d:ab:4e:73:4b:d3:6f:89:25:e8: bd:62:d2:f5:5d:65:02:67:2c:b1:94:d2:8a:9a:56:30:3a:29: 17:08:01:1d:c6:b9:6d:e3:ee:cd:86:58:5f:f1:98:df:6b:dd: ef:c2:06:bd:23:58:bd:0e:8a:c2:2e:2a:ac:16:2c:72:73:9b: 36:3b:2d:ee:da:35:17:fd:79:eb:e6:45:9b:05:08:fe:c0:3b: 8a:63:ca:e3:59:3a:b9:de:4f:b9:ff:19:7b:91:6c:cd:56:46: 21:de:bd:bf:b9:48:cc:a8:29:3b:df:f5:2c:17:b7:d5:f5:62: 35:4f:4f:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEUpN7O9FB81Fz8aw4U3yCEoVCyQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE5N0I5NTkyNzEyOTFGQkUxNDI0OTFCODEwNjNBRDVC MDQ0ODdGQTAeFw0yNTA0MjMxNzA1MzZaFw0yNTA0MjYxNzI3MzZaMDMxMTAvBgNV BAMTKEQ0ODQwMkNGMjM4OTQ1NTE3ODQwNkNDOTVFQzA4NjA2RUU3OEM2OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJxqnbZsy9NnDUeZnjLv3hKb/H cvvqLZGLMQANlP7zq+beroH/uBk9X5fsNlrGzdPpi6fYzc4ULy1RSbfj+hXkgBdO DxKz67ZAC2suRcSi7VfHo09fZkqmubQ9yXy9Fdi09wQrOHG3NMNrYFYAojwILn7C /jgJvyj81KV9kPuIBMN2uz+bMYkNm+SId5QUJv/lWavVZ+oQDK3ysO/sD1RNK2CK bPp89kuuWlbL35Tn6JAuZvQMO9ngs3aHMNIIcJEVcyixnzcubCSWchNH0md8hdPQ r6G0myxJ+E8qGB4DkDuseXdj6TInue9YtBugv2lYmyjx1OTh41KW8kw3K0p/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1IQCzyOJRVF4QGzJXsCGBu54xpgwHwYDVR0j BBgwFoAUqpe5WScSkfvhQkkbgQY61bBEh/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZGU4Y2NiOS0wYTYzLTQ5YTktYWE4YS1lZDAxNmVlMzUxZjAvMC9BQTk3Qjk1OTI3 MTI5MUZCRTE0MjQ5MUI4MTA2M0FENUIwNDQ4N0ZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUE5N0I5NTkyNzEyOTFGQkUxNDI0OTFCODEwNjNBRDVCMDQ0 ODdGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWRlOGNjYjktMGE2My00OWE5LWFh OGEtZWQwMTZlZTM1MWYwLzAvQUE5N0I5NTkyNzEyOTFGQkUxNDI0OTFCODEwNjNB RDVCMDQ0ODdGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC1dUDrP24z7mw+zfO3XaUuRl6Bx1aQOPo0L zir/7Ixewt++UA/1laB/f6VFiHdTIo7lYDwukjcoDlzkdf3Om9DcKsWaDz1GKgWj e2C/OK+6bSzXVRonOk4yEopbpq/wu5md+VZQfBHEE7tKrC4txT59tDHW3fj08NUp OlbugmJlelJ/M0G2fatOc0vTb4kl6L1i0vVdZQJnLLGU0oqaVjA6KRcIAR3GuW3j 7s2GWF/xmN9r3e/CBr0jWL0OisIuKqwWLHJzmzY7Le7aNRf9eevmRZsFCP7AO4pj yuNZOrneT7n/GXuRbM1WRiHevb+5SMyoKTvf9SwXt9X1YjVPT2g= -----END CERTIFICATE-----Generated at Wed Apr 23 19:50:54 2025 by rpki-client on console.sobornost.net