$ rpki-client -vvf repo-rpki.idnic.net/repo/1a9520fd-8de5-4a69-85f1-c44897ae6121/0/523EE387D3C00A87B7E355ABF1EE524AADF74148.mft File: 523EE387D3C00A87B7E355ABF1EE524AADF74148.mft (raw, json) Hash identifier: Nv7EB3WkzG/KRojCRHElcZQLPE95oczGUt0JH7FPZ5A= Subject key identifier: 7E:7F:07:66:69:2C:46:7C:57:50:C9:3A:B0:B4:10:D7:53:E3:4D:46 Authority key identifier: 52:3E:E3:87:D3:C0:0A:87:B7:E3:55:AB:F1:EE:52:4A:AD:F7:41:48 Certificate issuer: /CN=523EE387D3C00A87B7E355ABF1EE524AADF74148 Certificate serial: 081CC64AFAB93490ED403745ACE82E505F7211F2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/523EE387D3C00A87B7E355ABF1EE524AADF74148.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1a9520fd-8de5-4a69-85f1-c44897ae6121/0/523EE387D3C00A87B7E355ABF1EE524AADF74148.mft Manifest number: 04C8 Signing time: Fri 25 Apr 2025 02:20:54 +0000 Manifest this update: Fri 25 Apr 2025 02:15:54 +0000 Manifest next update: Mon 28 Apr 2025 13:33:54 +0000 Files and hashes: 1: 523EE387D3C00A87B7E355ABF1EE524AADF74148.crl (hash: 0ytFrpJMDA8HcAc1PXMaaadf4V0j0iwNthB+RWdTUjM=) 2: 323030313a6466343a333638303a3a2f34382d3438203d3e20313430343536.roa (hash: UWqkjfovjwl/QKGqzpJlq4xcCareXuzDyb/5yleHEFU=) 3: 3130332e3135332e36302e302f32342d3234203d3e20313430343536.roa (hash: cZVBXXGJKiJCT/zUIwExIpoODQYqK0TgIQSfYHzcYPg=) 4: 3130332e3135332e36312e302f32342d3234203d3e20313430343536.roa (hash: QEq8jNx2qgo9wFvMjpQwwTDlq5Z+M7FLAg6t2ZLkWJY=) 5: 3130332e3135332e36302e302f32332d3233203d3e20313430343536.roa (hash: S+MMrSxkm+20Gx180EdlH1YNBkEDPrj8PEBtJ4+Q9J4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1a9520fd-8de5-4a69-85f1-c44897ae6121/0/523EE387D3C00A87B7E355ABF1EE524AADF74148.crl rsync://repo-rpki.idnic.net/repo/1a9520fd-8de5-4a69-85f1-c44897ae6121/0/523EE387D3C00A87B7E355ABF1EE524AADF74148.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/523EE387D3C00A87B7E355ABF1EE524AADF74148.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:1c:c6:4a:fa:b9:34:90:ed:40:37:45:ac:e8:2e:50:5f:72:11:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=523EE387D3C00A87B7E355ABF1EE524AADF74148 Validity Not Before: Apr 25 02:15:54 2025 GMT Not After : Apr 28 13:33:54 2025 GMT Subject: CN=7E7F0766692C467C5750C93AB0B410D753E34D46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7b:9c:7c:4b:85:62:31:76:70:23:d9:d6:13: b3:42:e0:71:ce:86:bf:77:8f:cc:9e:3d:9c:15:ef: bb:b4:a5:cc:da:2e:15:1f:4b:a7:f6:cf:b0:05:86: 4a:03:d7:bd:5e:5c:0d:42:8f:c1:b7:b2:e0:e6:9d: fe:61:45:54:65:f0:8a:3e:da:3a:85:62:2f:6a:fe: 7c:b3:26:51:86:68:5b:c4:3a:06:25:1d:ff:95:07: e5:dd:c1:5b:2f:47:3a:4e:4e:9c:9a:b8:3d:4c:36: f1:c4:02:1a:08:8a:b3:8b:47:98:cc:0a:8c:b1:c7: 3d:b6:0e:32:1d:b2:ae:8b:2e:4b:84:a1:f8:b7:c1: 34:a1:49:c0:78:ef:d0:03:bc:ef:96:19:89:e9:65: 6b:8c:ee:08:38:ea:85:6f:78:51:54:c2:e0:de:c2: 0d:bc:23:97:93:71:15:57:2b:11:05:f6:40:2b:f3: 3c:6d:03:cf:40:87:a7:fd:24:35:ca:86:f3:8d:4f: 70:c1:9f:c4:79:99:fc:47:17:4a:55:dd:86:b6:e4: 11:08:7b:77:a7:a9:63:42:eb:b7:92:74:6c:40:90: 58:a2:c6:01:bb:5c:3b:fb:d6:ac:ff:34:83:60:cc: d7:30:b7:2c:97:d3:7a:2f:63:fe:c8:6b:73:eb:05: c4:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:7F:07:66:69:2C:46:7C:57:50:C9:3A:B0:B4:10:D7:53:E3:4D:46 X509v3 Authority Key Identifier: keyid:52:3E:E3:87:D3:C0:0A:87:B7:E3:55:AB:F1:EE:52:4A:AD:F7:41:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1a9520fd-8de5-4a69-85f1-c44897ae6121/0/523EE387D3C00A87B7E355ABF1EE524AADF74148.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/523EE387D3C00A87B7E355ABF1EE524AADF74148.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1a9520fd-8de5-4a69-85f1-c44897ae6121/0/523EE387D3C00A87B7E355ABF1EE524AADF74148.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:c5:aa:d7:aa:01:cd:5d:b0:26:fa:b8:bc:d0:3a:8e:bf:ec: 09:fb:42:44:34:c7:95:27:bc:5e:d7:ca:25:61:b1:0c:4d:35: db:ae:01:9a:c3:2e:64:65:06:77:12:61:01:67:a7:55:e9:f6: 7d:7b:e7:2c:0e:29:66:ee:88:11:f2:90:a3:9f:86:02:34:78: e6:2f:40:3b:39:6b:0d:7b:bc:f0:c7:1d:00:e7:42:b6:6a:81: c0:91:45:be:44:b5:e6:d6:8a:fe:6d:80:07:9c:8b:0d:21:f5: fc:ce:d6:2b:5f:13:5b:af:cd:68:db:f4:c3:4e:54:2b:f7:ce: d0:77:90:6f:a2:46:d0:7a:92:f0:02:93:ae:c3:72:b2:9b:ba: e1:0c:3f:ce:5a:67:e2:9c:41:64:37:48:c7:67:7b:a9:4c:2e: eb:ce:2a:73:43:76:2b:69:4f:8a:a9:65:4b:11:75:bb:41:c1: 07:d7:af:63:61:cc:3a:1f:30:6a:d6:ea:48:97:47:14:3e:9d: f9:68:62:ba:2a:ce:eb:b4:e8:5b:e1:89:9c:89:df:8a:e9:7a: 9d:26:f6:15:64:a0:66:89:12:28:72:90:58:40:f1:47:22:51: 18:4f:79:91:5f:74:0a:c4:f1:6b:0d:e7:55:9d:1a:7d:2c:70: 6b:64:f8:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCBzGSvq5NJDtQDdFrOguUF9yEfIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIzRUUzODdEM0MwMEE4N0I3RTM1NUFCRjFFRTUyNEFB REY3NDE0ODAeFw0yNTA0MjUwMjE1NTRaFw0yNTA0MjgxMzMzNTRaMDMxMTAvBgNV BAMTKDdFN0YwNzY2NjkyQzQ2N0M1NzUwQzkzQUIwQjQxMEQ3NTNFMzRENDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDe5x8S4ViMXZwI9nWE7NC4HHO hr93j8yePZwV77u0pczaLhUfS6f2z7AFhkoD171eXA1Cj8G3suDmnf5hRVRl8Io+ 2jqFYi9q/nyzJlGGaFvEOgYlHf+VB+XdwVsvRzpOTpyauD1MNvHEAhoIirOLR5jM Coyxxz22DjIdsq6LLkuEofi3wTShScB479ADvO+WGYnpZWuM7gg46oVveFFUwuDe wg28I5eTcRVXKxEF9kAr8zxtA89Ah6f9JDXKhvONT3DBn8R5mfxHF0pV3Ya25BEI e3enqWNC67eSdGxAkFiixgG7XDv71qz/NINgzNcwtyyX03ovY/7Ia3PrBcSvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfn8HZmksRnxXUMk6sLQQ11PjTUYwHwYDVR0j BBgwFoAUUj7jh9PACoe341Wr8e5SSq33QUgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YTk1MjBmZC04ZGU1LTRhNjktODVmMS1jNDQ4OTdhZTYxMjEvMC81MjNFRTM4N0Qz QzAwQTg3QjdFMzU1QUJGMUVFNTI0QUFERjc0MTQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTIzRUUzODdEM0MwMEE4N0I3RTM1NUFCRjFFRTUyNEFBREY3 NDE0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWE5NTIwZmQtOGRlNS00YTY5LTg1 ZjEtYzQ0ODk3YWU2MTIxLzAvNTIzRUUzODdEM0MwMEE4N0I3RTM1NUFCRjFFRTUy NEFBREY3NDE0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAbFqteqAc1dsCb6uLzQOo6/7An7QkQ0x5Un vF7XyiVhsQxNNduuAZrDLmRlBncSYQFnp1Xp9n175ywOKWbuiBHykKOfhgI0eOYv QDs5aw17vPDHHQDnQrZqgcCRRb5EtebWiv5tgAeciw0h9fzO1itfE1uvzWjb9MNO VCv3ztB3kG+iRtB6kvACk67DcrKbuuEMP85aZ+KcQWQ3SMdne6lMLuvOKnNDditp T4qpZUsRdbtBwQfXr2NhzDofMGrW6kiXRxQ+nfloYroqzuu06FvhiZyJ34rpep0m 9hVkoGaJEihykFhA8UciURhPeZFfdArE8WsN51WdGn0scGtk+EA= -----END CERTIFICATE-----Generated at Fri Apr 25 06:02:21 2025 by rpki-client on console.sobornost.net