$ rpki-client -vvf repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft File: 5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft (raw, json) Hash identifier: NT0BJ+320ClQBUZpoPhoE9QuU9XErNxivca3YXFoHf4= Subject key identifier: 98:29:1A:93:27:A5:94:AD:3A:74:0B:0F:E1:71:7B:4C:9E:B3:A9:A4 Authority key identifier: 5F:E2:D2:A6:AB:51:68:6B:C9:12:62:CC:80:15:2C:19:50:63:7A:EA Certificate issuer: /CN=5FE2D2A6AB51686BC91262CC80152C1950637AEA Certificate serial: 08E13A98E7327C39655B38A1D50FF0B377473274 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5FE2D2A6AB51686BC91262CC80152C1950637AEA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft Manifest number: 7B Signing time: Fri 25 Apr 2025 10:41:53 +0000 Manifest this update: Fri 25 Apr 2025 10:36:53 +0000 Manifest next update: Mon 28 Apr 2025 11:03:53 +0000 Files and hashes: 1: 5FE2D2A6AB51686BC91262CC80152C1950637AEA.crl (hash: +OU7H84bjfjp6V5U5KrHYaUcmJg07+mcaB0hwiFBM14=) 2: 3136302e32302e3133382e302f32332d3234203d3e20313532373832.roa (hash: IYlIkK9ZMSP7xUAGZ1Am2ZgHJrv4HQzXJImTEhZj1s8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.crl rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5FE2D2A6AB51686BC91262CC80152C1950637AEA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 19:57:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:e1:3a:98:e7:32:7c:39:65:5b:38:a1:d5:0f:f0:b3:77:47:32:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FE2D2A6AB51686BC91262CC80152C1950637AEA Validity Not Before: Apr 25 10:36:53 2025 GMT Not After : Apr 28 11:03:53 2025 GMT Subject: CN=98291A9327A594AD3A740B0FE1717B4C9EB3A9A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c7:b7:91:33:e9:a7:b5:ec:e8:93:09:ee:ae: aa:fd:37:33:af:e0:1b:c0:54:9b:41:6b:b0:30:e1: 28:a5:f6:11:fc:1c:c5:c2:eb:69:0e:e6:90:d3:c4: 43:17:f0:3e:1e:2a:7f:62:18:68:c0:e4:b3:10:5d: cf:a6:85:2c:97:74:e3:51:bf:fc:b8:e6:63:f2:e3: 12:ed:5e:88:cd:d4:0c:f9:d7:67:7c:db:94:18:5c: 53:42:4e:e6:8b:12:f0:99:1e:bf:fd:70:b7:92:22: c2:a3:fd:c4:cf:22:e5:87:ac:e8:12:95:85:66:5e: 87:10:33:8f:97:f3:5d:87:5d:70:b5:ec:15:ea:bd: 10:f4:05:2d:67:71:ec:61:63:a4:f5:17:0c:42:8a: 93:c5:36:fe:80:89:8c:f4:1e:eb:b1:5c:ac:db:0e: 94:82:c3:35:06:3f:4a:0b:ef:61:44:2c:3d:bf:14: c5:51:e1:9f:4e:68:77:b0:31:fd:33:0e:a1:b0:ef: 20:ab:e7:14:d4:c4:bd:89:37:fa:d6:88:dd:e3:bd: 4f:b1:b6:dd:0f:da:bb:c9:1c:45:08:60:c3:4d:fb: 7b:6b:0b:4d:3c:89:39:d3:c2:06:d5:7a:04:48:5f: 55:0d:63:da:92:c5:7a:0b:dd:59:49:13:ce:bf:99: bd:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:29:1A:93:27:A5:94:AD:3A:74:0B:0F:E1:71:7B:4C:9E:B3:A9:A4 X509v3 Authority Key Identifier: keyid:5F:E2:D2:A6:AB:51:68:6B:C9:12:62:CC:80:15:2C:19:50:63:7A:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5FE2D2A6AB51686BC91262CC80152C1950637AEA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:59:fb:0a:e4:7b:ac:2a:6a:d1:c7:84:9e:8f:4e:0c:c4:07: 0f:44:97:fd:7c:4a:c4:e7:59:4c:63:4e:c9:49:cd:a0:ce:d2: 73:2b:6c:cf:a6:42:dc:80:23:84:b4:d7:41:72:0b:64:10:75: f3:da:58:f5:0a:3a:e2:23:c8:ea:9f:4e:42:15:9b:66:53:a3: a7:3d:eb:d8:82:5c:78:22:48:d3:12:40:64:4b:6d:fe:ae:c8: 46:91:c5:55:71:44:d0:0b:c5:6f:90:36:b0:e1:45:3c:16:c6: b4:c8:e9:f4:57:40:4a:e5:6d:60:7d:66:27:ec:8b:34:0a:64: af:39:ae:a1:17:46:87:62:56:0a:c7:35:a4:1c:5c:01:59:dc: f8:b5:4e:eb:18:09:41:99:11:c7:50:ef:39:93:60:7f:0a:a6: ec:bc:84:1e:31:65:b1:15:7a:07:2e:c6:f9:b8:9c:c2:a7:8c: 7a:05:44:09:ed:2b:3a:5c:89:aa:a0:e7:d6:dd:9f:ed:d1:e9: 55:53:6a:43:fc:7c:80:76:1f:fe:42:e1:cb:1c:bb:bb:39:45: 0a:3f:eb:ef:79:23:5e:41:ed:50:65:a5:26:d0:50:ff:77:44: ea:4a:24:22:38:da:30:9d:18:c7:0c:f3:69:42:1b:0d:a9:34: 0e:2a:c6:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCOE6mOcyfDllWzih1Q/ws3dHMnQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZFMkQyQTZBQjUxNjg2QkM5MTI2MkNDODAxNTJDMTk1 MDYzN0FFQTAeFw0yNTA0MjUxMDM2NTNaFw0yNTA0MjgxMTAzNTNaMDMxMTAvBgNV BAMTKDk4MjkxQTkzMjdBNTk0QUQzQTc0MEIwRkUxNzE3QjRDOUVCM0E5QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmx7eRM+mntezokwnurqr9NzOv 4BvAVJtBa7Aw4Sil9hH8HMXC62kO5pDTxEMX8D4eKn9iGGjA5LMQXc+mhSyXdONR v/y45mPy4xLtXojN1Az512d825QYXFNCTuaLEvCZHr/9cLeSIsKj/cTPIuWHrOgS lYVmXocQM4+X812HXXC17BXqvRD0BS1ncexhY6T1FwxCipPFNv6AiYz0HuuxXKzb DpSCwzUGP0oL72FELD2/FMVR4Z9OaHewMf0zDqGw7yCr5xTUxL2JN/rWiN3jvU+x tt0P2rvJHEUIYMNN+3trC008iTnTwgbVegRIX1UNY9qSxXoL3VlJE86/mb1dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmCkakyellK06dAsP4XF7TJ6zqaQwHwYDVR0j BBgwFoAUX+LSpqtRaGvJEmLMgBUsGVBjeuowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjEwZWMwZi0wNDIwLTQwMmYtOTVmZS03YjMzZTUxMTJiYzMvMC81RkUyRDJBNkFC NTE2ODZCQzkxMjYyQ0M4MDE1MkMxOTUwNjM3QUVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUZFMkQyQTZBQjUxNjg2QkM5MTI2MkNDODAxNTJDMTk1MDYz N0FFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDIxMGVjMGYtMDQyMC00MDJmLTk1 ZmUtN2IzM2U1MTEyYmMzLzAvNUZFMkQyQTZBQjUxNjg2QkM5MTI2MkNDODAxNTJD MTk1MDYzN0FFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAChZ+wrke6wqatHHhJ6PTgzEBw9El/18SsTn WUxjTslJzaDO0nMrbM+mQtyAI4S010FyC2QQdfPaWPUKOuIjyOqfTkIVm2ZTo6c9 69iCXHgiSNMSQGRLbf6uyEaRxVVxRNALxW+QNrDhRTwWxrTI6fRXQErlbWB9Zifs izQKZK85rqEXRodiVgrHNaQcXAFZ3Pi1TusYCUGZEcdQ7zmTYH8Kpuy8hB4xZbEV egcuxvm4nMKnjHoFRAntKzpciaqg59bdn+3R6VVTakP8fIB2H/5C4cscu7s5RQo/ 6+95I15B7VBlpSbQUP93ROpKJCI42jCdGMcM82lCGw2pNA4qxu8= -----END CERTIFICATE-----Generated at Fri Apr 25 12:54:06 2025 by rpki-client on console.sobornost.net