$ rpki-client -vvf repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.mft File: 52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.mft (raw, json) Hash identifier: AR2z99/QRTUxLKnYAY3RUpcfpsZzHPrgB2N8Gba9xyY= Subject key identifier: 5D:1A:57:79:BE:A6:67:24:67:B8:64:03:BE:9B:1B:CA:80:B3:89:D0 Authority key identifier: 52:B9:C1:E5:F0:BA:F3:45:C4:0F:2E:79:66:9C:63:CB:39:E5:CF:3A Certificate issuer: /CN=52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A Certificate serial: 392C677D97496BE771B731CBE02A2160869C1451 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.mft Manifest number: 57 Signing time: Wed 23 Apr 2025 10:50:46 +0000 Manifest this update: Wed 23 Apr 2025 10:45:46 +0000 Manifest next update: Sat 26 Apr 2025 11:29:46 +0000 Files and hashes: 1: 3135372e31302e3138342e302f32342d3234203d3e20313532333438.roa (hash: 55sjufMqiAUVQEWT+QA1EUsxab9EOoQxItI4+DBt3EA=) 2: 52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.crl (hash: h25OxoSLADIq645PiSpbbNSfJg9gFM+8sS6+iDnwIks=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.crl rsync://repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 11:29:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:2c:67:7d:97:49:6b:e7:71:b7:31:cb:e0:2a:21:60:86:9c:14:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A Validity Not Before: Apr 23 10:45:46 2025 GMT Not After : Apr 26 11:29:46 2025 GMT Subject: CN=5D1A5779BEA6672467B86403BE9B1BCA80B389D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1a:cb:b5:f0:8a:4f:b0:e3:9e:91:08:88:1a: 2c:fc:48:9f:88:bc:46:c6:c3:0e:ed:46:fc:1e:67: 85:8e:c1:ad:a9:67:76:18:99:ee:03:dd:3f:54:16: d6:8e:41:e5:40:ed:ca:32:64:cb:0e:f6:16:d4:90: b7:8b:48:b8:7c:7a:c9:dc:99:88:ef:b1:71:f6:43: da:bd:c3:e0:a7:ef:7b:b0:2c:89:4b:17:e5:a5:75: f5:95:6f:0a:d7:80:c6:22:6d:b3:b0:98:94:df:6c: 40:75:80:ef:77:b3:7b:92:31:9e:25:9a:a6:dd:00: 74:de:91:9c:05:5b:7a:17:b1:2b:d8:e0:2c:28:ef: 9a:3a:b1:35:24:04:1f:96:2e:92:36:93:6a:22:63: 1e:c4:92:83:f0:95:5e:b6:2b:be:cc:36:f9:5b:54: b9:ad:21:c0:ed:f7:47:2a:65:b3:23:fb:87:57:ce: 04:ae:b7:34:fc:27:ee:57:b0:ee:18:cf:0f:b3:ad: 16:db:28:bd:f7:74:04:94:b0:86:52:8f:57:47:8e: c8:01:cd:5b:b4:70:80:29:e3:fc:d6:82:a4:64:5f: 8c:bd:04:54:75:00:01:36:a6:fb:ed:37:eb:6c:fd: 23:e0:9d:8c:ad:20:b2:ed:69:ca:92:ab:e6:08:d3: 6f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:1A:57:79:BE:A6:67:24:67:B8:64:03:BE:9B:1B:CA:80:B3:89:D0 X509v3 Authority Key Identifier: keyid:52:B9:C1:E5:F0:BA:F3:45:C4:0F:2E:79:66:9C:63:CB:39:E5:CF:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:0e:57:0d:21:8e:d9:24:8d:2e:4b:19:cb:b4:fb:aa:3c:a6: af:73:91:21:be:15:92:08:45:7c:d2:61:10:2c:11:01:27:d3: 23:6a:d7:45:d5:2b:f3:96:0b:32:06:bb:ba:0d:93:88:94:5f: 63:e2:b6:8a:57:24:2b:44:6c:0e:58:f8:04:cd:ba:13:85:35: 8a:9b:22:e8:55:ff:f1:06:33:f0:0a:6b:78:d6:c6:87:cb:27: 08:18:10:ec:bb:75:d1:12:f4:ef:f0:89:46:ff:e9:76:90:9a: 14:9d:aa:fe:06:3b:6c:ff:e5:97:05:b9:a8:9b:b7:69:c3:cd: cd:64:ea:9e:36:a3:cc:b7:6d:8c:59:48:ef:8b:38:9a:49:e4: 7b:66:66:7f:20:b9:a6:86:4d:00:bf:e2:79:a0:3a:cc:c6:1d: 0a:89:b0:3a:d1:a3:71:4d:b9:bb:6f:0a:9c:10:d1:c1:23:03: cc:61:58:e3:e6:44:4d:52:38:08:ce:61:7f:1f:ec:55:b4:36: e9:fe:3b:bd:e6:f5:14:49:52:88:a0:3e:d8:73:c7:02:e2:8b: f4:50:c2:46:28:7c:16:98:e9:7b:0a:38:8a:68:7c:2a:bb:d6: 2b:03:2b:fe:fa:36:08:c2:aa:91:aa:65:02:a9:16:29:fe:d7: 22:18:2e:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOSxnfZdJa+dxtzHL4CohYIacFFEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJCOUMxRTVGMEJBRjM0NUM0MEYyRTc5NjY5QzYzQ0Iz OUU1Q0YzQTAeFw0yNTA0MjMxMDQ1NDZaFw0yNTA0MjYxMTI5NDZaMDMxMTAvBgNV BAMTKDVEMUE1Nzc5QkVBNjY3MjQ2N0I4NjQwM0JFOUIxQkNBODBCMzg5RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJGsu18IpPsOOekQiIGiz8SJ+I vEbGww7tRvweZ4WOwa2pZ3YYme4D3T9UFtaOQeVA7coyZMsO9hbUkLeLSLh8esnc mYjvsXH2Q9q9w+Cn73uwLIlLF+WldfWVbwrXgMYibbOwmJTfbEB1gO93s3uSMZ4l mqbdAHTekZwFW3oXsSvY4Cwo75o6sTUkBB+WLpI2k2oiYx7EkoPwlV62K77MNvlb VLmtIcDt90cqZbMj+4dXzgSutzT8J+5XsO4Yzw+zrRbbKL33dASUsIZSj1dHjsgB zVu0cIAp4/zWgqRkX4y9BFR1AAE2pvvtN+ts/SPgnYytILLtacqSq+YI0291AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXRpXeb6mZyRnuGQDvpsbyoCzidAwHwYDVR0j BBgwFoAUUrnB5fC680XEDy55ZpxjyznlzzowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MGE4NTkwZS1lNGRjLTQ0MTYtYTZmYS1mYjc4ZDZkZDEyZDcvMC81MkI5QzFFNUYw QkFGMzQ1QzQwRjJFNzk2NjlDNjNDQjM5RTVDRjNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTJCOUMxRTVGMEJBRjM0NUM0MEYyRTc5NjY5QzYzQ0IzOUU1 Q0YzQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTBhODU5MGUtZTRkYy00NDE2LWE2 ZmEtZmI3OGQ2ZGQxMmQ3LzAvNTJCOUMxRTVGMEJBRjM0NUM0MEYyRTc5NjY5QzYz Q0IzOUU1Q0YzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEMOVw0hjtkkjS5LGcu0+6o8pq9zkSG+FZII RXzSYRAsEQEn0yNq10XVK/OWCzIGu7oNk4iUX2PitopXJCtEbA5Y+ATNuhOFNYqb IuhV//EGM/AKa3jWxofLJwgYEOy7ddES9O/wiUb/6XaQmhSdqv4GO2z/5ZcFuaib t2nDzc1k6p42o8y3bYxZSO+LOJpJ5HtmZn8guaaGTQC/4nmgOszGHQqJsDrRo3FN ubtvCpwQ0cEjA8xhWOPmRE1SOAjOYX8f7FW0Nun+O73m9RRJUoigPthzxwLii/RQ wkYofBaY6XsKOIpofCq71isDK/76NgjCqpGqZQKpFin+1yIYLsM= -----END CERTIFICATE-----Generated at Wed Apr 23 13:25:32 2025 by rpki-client on console.sobornost.net