$ rpki-client -vvf repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft File: 5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft (raw, json) Hash identifier: wnvqKVDvAdVHRB5lqqS6KWM0qoDFfEiTPBBMC/vxLGg= Subject key identifier: 37:23:A2:F4:B9:D8:13:8C:8E:2D:9A:5E:24:0E:DD:14:43:8F:49:EF Authority key identifier: 5F:1E:C0:37:8C:7B:3A:89:12:CA:32:E3:82:D2:C0:83:E1:73:E7:1C Certificate issuer: /CN=5F1EC0378C7B3A8912CA32E382D2C083E173E71C Certificate serial: 31882F6B3CCDBFFF8BB51ED11C3C479443AF1BF7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft Manifest number: 04CA Signing time: Fri 25 Apr 2025 07:31:09 +0000 Manifest this update: Fri 25 Apr 2025 07:26:09 +0000 Manifest next update: Mon 28 Apr 2025 14:45:09 +0000 Files and hashes: 1: 3130332e39302e3234382e302f32332d3234203d3e20313337323836.roa (hash: YKqncd0MGK9keSOjjaDcdWE6AgLtsTa/4D5MWz3HJUk=) 2: 3130332e39302e3235302e302f32332d3234203d3e20313336313032.roa (hash: 6ce+LBa3GICr1Mgt/xtux05v3qPiXp2ZYS6ViLVoXMc=) 3: 5F1EC0378C7B3A8912CA32E382D2C083E173E71C.crl (hash: r6tlymS9aj3VQLDC1a4SqjbUlofvkogyFFFB8pMPc6Q=) 4: 3130332e31302e3134382e302f32322d3234203d3e20313336313032.roa (hash: IG7iZEXbFHO4xLgOmo6o/7KH2TIUqm7sDNEwcVuQSOg=) 5: 34392e3132382e3138382e302f32322d3234203d3e20313337323836.roa (hash: Ydl3Ket/Eeuscy0B0YmxQqgt1TudedFNYlPQMUGcles=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.crl rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 14:02:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:88:2f:6b:3c:cd:bf:ff:8b:b5:1e:d1:1c:3c:47:94:43:af:1b:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F1EC0378C7B3A8912CA32E382D2C083E173E71C Validity Not Before: Apr 25 07:26:09 2025 GMT Not After : Apr 28 14:45:09 2025 GMT Subject: CN=3723A2F4B9D8138C8E2D9A5E240EDD14438F49EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:53:4c:05:fc:f9:77:01:37:62:96:66:5b:d1: 63:ca:e8:cf:b5:7f:61:fa:81:e3:01:18:f2:8b:16: f5:4e:a7:1d:61:2a:4d:21:24:d5:23:e9:80:5e:c1: 00:62:97:60:51:e3:0f:2b:e0:0b:ca:6d:2f:98:f7: cc:0e:56:96:63:32:4b:5c:3e:d7:20:b0:23:0d:a2: cd:60:d4:be:a4:0a:87:3f:dd:91:90:c5:5a:52:4e: 8b:bb:5e:5c:af:78:da:bc:75:ae:e4:1a:ed:5f:fc: bb:d4:11:09:f9:2f:ce:90:c7:7d:f0:27:c2:09:77: 46:55:2a:df:c1:d8:f1:27:94:67:a8:a5:db:01:4e: b3:04:b6:6d:a1:25:89:97:a1:73:86:96:d6:76:cd: 13:82:d4:08:e6:a5:c4:b1:1c:2a:0d:4a:4f:98:2e: cb:0d:78:d8:04:30:2e:e2:63:6f:ca:6a:41:76:a0: 55:c5:92:7e:2b:43:73:47:92:96:86:a0:07:5a:3e: 27:e4:84:5b:b8:ba:3e:0f:28:89:09:7a:16:25:39: 1b:0c:5f:a0:5d:60:25:9f:ba:8d:d8:64:e2:39:7f: 78:0c:0c:81:92:a5:cb:ce:60:bb:82:f7:8d:7b:5b: a7:ea:fb:a8:b9:33:83:8f:90:bb:c8:41:1c:a1:5c: 36:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:23:A2:F4:B9:D8:13:8C:8E:2D:9A:5E:24:0E:DD:14:43:8F:49:EF X509v3 Authority Key Identifier: keyid:5F:1E:C0:37:8C:7B:3A:89:12:CA:32:E3:82:D2:C0:83:E1:73:E7:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:9d:bd:7f:d4:fe:dc:9f:71:f7:5d:52:af:98:4d:a4:b3:3f: 4d:08:97:a9:e6:37:61:dd:a0:3c:7e:7e:75:47:72:2e:70:af: 44:59:52:6c:63:92:6c:7b:f0:2f:ef:b2:72:16:4d:81:5e:3f: 4a:d1:ac:b7:cf:0d:6f:53:83:bf:33:c8:4a:54:ee:07:e6:11: 33:83:a4:2c:9a:74:6a:38:88:82:fa:36:79:3d:77:88:d7:61: 56:91:06:1f:41:aa:9e:32:2b:92:6f:13:c3:7f:7a:f6:5e:a8: 06:1d:ca:0d:8c:a2:67:f0:1c:10:d5:26:07:c4:8d:8d:16:fc: 2f:36:80:7d:ef:2e:22:ab:73:ae:0d:0c:ae:0b:56:a1:9c:84: 27:2c:82:0c:a2:db:50:cd:d7:82:e2:ac:b5:8d:cd:bf:b6:53: 6b:a6:e6:3c:19:04:0d:66:a1:5c:74:78:b0:fe:ef:94:49:43: 31:21:a5:26:63:c5:b8:fd:1d:64:5f:bd:a0:67:ad:3c:d3:75: 3b:e2:d5:91:d9:3d:1e:46:4a:f6:59:9e:dc:ea:9b:03:4f:93: e4:7a:a4:3c:44:c5:6f:8d:8c:42:25:aa:db:23:7c:83:c3:fd: e0:82:97:e3:b3:fc:c0:11:f1:b0:d5:2c:d0:d0:d3:1b:42:d8: 36:42:3a:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMYgvazzNv/+LtR7RHDxHlEOvG/cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUYxRUMwMzc4QzdCM0E4OTEyQ0EzMkUzODJEMkMwODNF MTczRTcxQzAeFw0yNTA0MjUwNzI2MDlaFw0yNTA0MjgxNDQ1MDlaMDMxMTAvBgNV BAMTKDM3MjNBMkY0QjlEODEzOEM4RTJEOUE1RTI0MEVERDE0NDM4RjQ5RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8U0wF/Pl3ATdilmZb0WPK6M+1 f2H6geMBGPKLFvVOpx1hKk0hJNUj6YBewQBil2BR4w8r4AvKbS+Y98wOVpZjMktc PtcgsCMNos1g1L6kCoc/3ZGQxVpSTou7XlyveNq8da7kGu1f/LvUEQn5L86Qx33w J8IJd0ZVKt/B2PEnlGeopdsBTrMEtm2hJYmXoXOGltZ2zROC1AjmpcSxHCoNSk+Y LssNeNgEMC7iY2/KakF2oFXFkn4rQ3NHkpaGoAdaPifkhFu4uj4PKIkJehYlORsM X6BdYCWfuo3YZOI5f3gMDIGSpcvOYLuC9417W6fq+6i5M4OPkLvIQRyhXDbXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNyOi9LnYE4yOLZpeJA7dFEOPSe8wHwYDVR0j BBgwFoAUXx7AN4x7OokSyjLjgtLAg+Fz5xwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDAyZGFhNS1mYjBjLTRhMjQtOTg4OS0zM2JkNTBkYjRmZTAvMC81RjFFQzAzNzhD N0IzQTg5MTJDQTMyRTM4MkQyQzA4M0UxNzNFNzFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUYxRUMwMzc4QzdCM0E4OTEyQ0EzMkUzODJEMkMwODNFMTcz RTcxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQwMmRhYTUtZmIwYy00YTI0LTk4 ODktMzNiZDUwZGI0ZmUwLzAvNUYxRUMwMzc4QzdCM0E4OTEyQ0EzMkUzODJEMkMw ODNFMTczRTcxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFqdvX/U/tyfcfddUq+YTaSzP00Il6nmN2Hd oDx+fnVHci5wr0RZUmxjkmx78C/vsnIWTYFeP0rRrLfPDW9Tg78zyEpU7gfmETOD pCyadGo4iIL6Nnk9d4jXYVaRBh9Bqp4yK5JvE8N/evZeqAYdyg2MomfwHBDVJgfE jY0W/C82gH3vLiKrc64NDK4LVqGchCcsggyi21DN14LirLWNzb+2U2um5jwZBA1m oVx0eLD+75RJQzEhpSZjxbj9HWRfvaBnrTzTdTvi1ZHZPR5GSvZZntzqmwNPk+R6 pDxExW+NjEIlqtsjfIPD/eCCl+Oz/MAR8bDVLNDQ0xtC2DZCOm0= -----END CERTIFICATE-----Generated at Fri Apr 25 10:36:40 2025 by rpki-client on console.sobornost.net