$ rpki-client -vvf repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.mft File: 53576544C2D7C29DEC5245A4A81C19686D1160AA.mft (raw, json) Hash identifier: XYaGUtF9F28jaDl22rD/TsptRKkUZjXNEHJ23ZUM3ps= Subject key identifier: 94:F3:84:89:D2:65:CC:02:32:59:4A:A3:3B:37:A1:F7:57:10:B8:84 Authority key identifier: 53:57:65:44:C2:D7:C2:9D:EC:52:45:A4:A8:1C:19:68:6D:11:60:AA Certificate issuer: /CN=53576544C2D7C29DEC5245A4A81C19686D1160AA Certificate serial: 4984F80F33FF2748183A7BE59019CDE29C29423B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53576544C2D7C29DEC5245A4A81C19686D1160AA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.mft Manifest number: 0108 Signing time: Fri 25 Apr 2025 14:40:36 +0000 Manifest this update: Fri 25 Apr 2025 14:35:36 +0000 Manifest next update: Tue 29 Apr 2025 01:32:36 +0000 Files and hashes: 1: 53576544C2D7C29DEC5245A4A81C19686D1160AA.crl (hash: dUgdL6J/OIE/Go5+lEI0tDXNp2WVCNb5zmJXzj2EP1M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.crl rsync://repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53576544C2D7C29DEC5245A4A81C19686D1160AA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 00:35:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:84:f8:0f:33:ff:27:48:18:3a:7b:e5:90:19:cd:e2:9c:29:42:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53576544C2D7C29DEC5245A4A81C19686D1160AA Validity Not Before: Apr 25 14:35:36 2025 GMT Not After : Apr 29 01:32:36 2025 GMT Subject: CN=94F38489D265CC0232594AA33B37A1F75710B884 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ff:20:90:0a:f8:c3:a2:5e:a0:9d:00:d5:cb: 1b:0c:3b:e3:7d:a7:11:9f:d1:29:2c:dc:1e:5f:55: ce:13:f1:58:1d:c1:2a:98:cc:64:7e:14:40:9b:30: c4:53:cd:db:19:d5:4d:34:16:d9:96:c6:aa:f3:03: 49:be:e4:43:73:70:77:0c:2d:60:e6:9a:d3:9d:dc: 35:45:ab:6e:52:c2:29:dd:ed:a6:80:2b:54:80:3f: 2a:70:01:ef:71:51:98:b2:01:9b:ea:03:9e:47:d9: 2f:51:11:c4:21:f8:f6:40:fd:fd:d0:fa:eb:a2:d4: bd:97:92:19:ac:00:b3:db:00:9e:ea:a5:89:ca:f5: 47:08:eb:94:a4:30:ea:d0:89:fb:1b:fe:d2:e6:7c: e6:4e:51:86:a9:f9:10:64:a1:39:ee:ad:f3:9e:54: 0d:9a:9f:f2:b4:de:3c:30:a0:1d:26:92:bd:5d:1f: 56:2d:d8:d4:ff:c2:87:9f:97:07:1b:4e:07:93:75: 88:1a:bf:ea:ab:06:ba:2b:7e:e7:d3:ff:e4:5b:4a: 76:88:5a:c5:e4:8f:5c:a6:bf:e8:6f:95:ee:54:b9: db:c5:25:43:05:6d:d9:90:ba:c4:bd:44:fe:09:f5: 58:0d:cc:23:5c:f4:a0:53:c9:46:cc:4f:71:c6:b7: 06:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:F3:84:89:D2:65:CC:02:32:59:4A:A3:3B:37:A1:F7:57:10:B8:84 X509v3 Authority Key Identifier: keyid:53:57:65:44:C2:D7:C2:9D:EC:52:45:A4:A8:1C:19:68:6D:11:60:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53576544C2D7C29DEC5245A4A81C19686D1160AA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:fa:f8:dd:09:d6:6e:cc:42:32:4d:5c:fa:34:d4:17:8b:b2: 8b:76:50:b1:c0:77:36:9c:33:18:57:51:b9:25:56:95:fb:31: f8:fc:c8:3f:1f:19:ac:b0:07:0e:3f:79:bc:4e:01:44:b9:7f: eb:bb:b8:cc:d6:11:af:1b:86:35:02:f5:5d:65:f2:5c:76:df: 9d:62:52:13:c7:e5:bc:76:2f:5e:62:38:03:a3:c3:7c:2e:1b: 0d:c0:27:e7:f6:02:b2:23:98:41:12:37:bc:0b:a5:a8:1c:8b: 91:12:1b:00:68:17:0b:40:85:2f:ef:21:d9:3f:6e:f5:eb:6f: d4:2d:d3:c1:8b:54:65:07:f0:05:04:27:b2:38:23:f8:5f:45: 63:93:a7:27:17:2b:17:96:46:39:54:69:e1:91:f0:14:fb:fa: da:4e:5e:2a:8b:29:10:bb:77:9b:c1:48:b9:07:08:b8:71:e6: fa:4e:d0:b7:f2:79:fe:0f:bd:25:05:0e:14:18:5a:7d:34:c2: f3:5a:a7:5d:61:7d:39:0d:ae:46:83:76:e2:48:d5:60:02:30: d8:7e:73:e1:66:89:17:8c:71:a8:5b:de:f1:ca:59:f9:d1:30: fc:d1:78:e5:1f:86:eb:81:af:3a:7e:f2:b2:d0:ab:df:4a:04: df:9a:38:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSYT4DzP/J0gYOnvlkBnN4pwpQjswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTM1NzY1NDRDMkQ3QzI5REVDNTI0NUE0QTgxQzE5Njg2 RDExNjBBQTAeFw0yNTA0MjUxNDM1MzZaFw0yNTA0MjkwMTMyMzZaMDMxMTAvBgNV BAMTKDk0RjM4NDg5RDI2NUNDMDIzMjU5NEFBMzNCMzdBMUY3NTcxMEI4ODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC//yCQCvjDol6gnQDVyxsMO+N9 pxGf0Sks3B5fVc4T8VgdwSqYzGR+FECbMMRTzdsZ1U00FtmWxqrzA0m+5ENzcHcM LWDmmtOd3DVFq25Swind7aaAK1SAPypwAe9xUZiyAZvqA55H2S9REcQh+PZA/f3Q +uui1L2XkhmsALPbAJ7qpYnK9UcI65SkMOrQifsb/tLmfOZOUYap+RBkoTnurfOe VA2an/K03jwwoB0mkr1dH1Yt2NT/woeflwcbTgeTdYgav+qrBrorfufT/+RbSnaI WsXkj1ymv+hvle5UudvFJUMFbdmQusS9RP4J9VgNzCNc9KBTyUbMT3HGtwYdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlPOEidJlzAIyWUqjOzeh91cQuIQwHwYDVR0j BBgwFoAUU1dlRMLXwp3sUkWkqBwZaG0RYKowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTdlYTBlNi00M2VhLTQzMWUtYTAxMy0wYjIwMWIyYzBkOWUvMC81MzU3NjU0NEMy RDdDMjlERUM1MjQ1QTRBODFDMTk2ODZEMTE2MEFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTM1NzY1NDRDMkQ3QzI5REVDNTI0NUE0QTgxQzE5Njg2RDEx NjBBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTE3ZWEwZTYtNDNlYS00MzFlLWEw MTMtMGIyMDFiMmMwZDllLzAvNTM1NzY1NDRDMkQ3QzI5REVDNTI0NUE0QTgxQzE5 Njg2RDExNjBBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGj6+N0J1m7MQjJNXPo01BeLsot2ULHAdzac MxhXUbklVpX7Mfj8yD8fGaywBw4/ebxOAUS5f+u7uMzWEa8bhjUC9V1l8lx2351i UhPH5bx2L15iOAOjw3wuGw3AJ+f2ArIjmEESN7wLpagci5ESGwBoFwtAhS/vIdk/ bvXrb9Qt08GLVGUH8AUEJ7I4I/hfRWOTpycXKxeWRjlUaeGR8BT7+tpOXiqLKRC7 d5vBSLkHCLhx5vpO0Lfyef4PvSUFDhQYWn00wvNap11hfTkNrkaDduJI1WACMNh+ c+FmiReMcahb3vHKWfnRMPzReOUfhuuBrzp+8rLQq99KBN+aOO0= -----END CERTIFICATE-----Generated at Fri Apr 25 17:11:50 2025 by rpki-client on console.sobornost.net