$ rpki-client -vvf repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft File: A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft (raw, json) Hash identifier: dNBBZXfkUrrJ/HdOUTFTxQB0n/mGq/U4XFRgDnJT7NA= Subject key identifier: 00:86:B4:54:97:18:6A:6A:30:65:22:AD:33:D3:C6:64:04:B0:4E:25 Authority key identifier: A5:1E:37:52:3B:05:B1:66:B7:DE:97:7C:F4:AC:65:96:FD:D9:7B:98 Certificate issuer: /CN=A51E37523B05B166B7DE977CF4AC6596FDD97B98 Certificate serial: 55629C97A9708C65BBDD7EB81698110291BBD4EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51E37523B05B166B7DE977CF4AC6596FDD97B98.cer Subject info access: rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft Manifest number: 04C7 Signing time: Fri 25 Apr 2025 14:21:13 +0000 Manifest this update: Fri 25 Apr 2025 14:16:13 +0000 Manifest next update: Mon 28 Apr 2025 22:28:13 +0000 Files and hashes: 1: A51E37523B05B166B7DE977CF4AC6596FDD97B98.crl (hash: Ikscg4ESODlXlF8YXAzYwVvb8TbIwjtOc+fi+855zqU=) 2: 3130332e32332e3233332e302f32342d3234203d3e203538343735.roa (hash: txolTLSTXE7ODx/u5tuDDDCNUIZtYjDew9/efServ68=) 3: 3130332e38312e3130302e302f32342d3234203d3e203538343735.roa (hash: EGpM1j1rOJjD5lYy5Wchuv/jogF+E++xxQSb4XFGRlo=) 4: 323430353a316534303a3a2f34382d3438203d3e203538343735.roa (hash: m1XWyT0e9T5E7FtX9EWKRd4erO5NAGL0dJ8kV06SJiQ=) 5: 323430353a316534303a313a3a2f34382d3438203d3e203538343735.roa (hash: Ob3pXqV5fT3Qb/wUwMvuoxur/OUYsZ0HgXFBn0KdRIs=) 6: 3130332e38312e3130312e302f32342d3234203d3e203538343735.roa (hash: itCBvlenhfkmaHmcUDy/3wulfqyiEA7xaF9EOQF9bE4=) 7: 3130332e32332e3233322e302f32342d3234203d3e203538343735.roa (hash: U43WoSNbXdcBa1UWb8d2YU9Hoj0ZL679eSTM/whmqA4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.crl rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51E37523B05B166B7DE977CF4AC6596FDD97B98.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:28:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:62:9c:97:a9:70:8c:65:bb:dd:7e:b8:16:98:11:02:91:bb:d4:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A51E37523B05B166B7DE977CF4AC6596FDD97B98 Validity Not Before: Apr 25 14:16:13 2025 GMT Not After : Apr 28 22:28:13 2025 GMT Subject: CN=0086B45497186A6A306522AD33D3C66404B04E25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ff:b6:d2:e4:3b:9d:ac:41:5b:56:c4:97:a8: ff:3e:15:5a:7e:5f:71:b4:6d:4b:84:dc:0c:d4:6c: 57:7a:f3:36:ae:ae:aa:49:a3:46:2d:0d:46:92:ef: bb:5e:9e:ff:24:4e:cb:7c:89:69:d1:68:46:76:db: 9a:fa:57:7e:e8:cd:97:33:0b:bb:66:17:3a:bb:75: 3f:5a:b4:48:59:0c:d7:52:72:84:72:dc:2e:9b:f0: e8:1c:7d:bc:73:50:be:7f:c1:aa:14:dc:00:f8:c5: ca:ac:7a:01:ee:59:cf:c2:83:10:f4:2d:ca:d4:68: 30:a7:1a:1c:8d:ce:1d:f6:5e:cf:97:3e:84:9a:4b: 04:52:4f:5b:ca:cb:06:95:90:80:42:de:e7:ee:61: 34:f6:fb:bd:0d:9b:55:7f:8f:10:30:93:b0:6e:29: bb:a4:86:e1:54:93:fc:ad:14:a0:e3:cd:64:27:0e: f6:62:04:4f:7a:6d:01:02:4f:c5:19:3b:2c:aa:0e: 7a:f2:6e:83:a2:02:f4:48:86:77:67:5b:ed:5e:16: 74:a3:30:20:be:55:a6:99:8e:0f:9e:31:35:83:c0: 74:11:4a:69:d5:d8:7f:c9:e2:4d:1d:dc:e8:15:ef: 20:12:04:da:c6:1f:d2:99:10:f3:4f:f1:92:49:52: 47:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:86:B4:54:97:18:6A:6A:30:65:22:AD:33:D3:C6:64:04:B0:4E:25 X509v3 Authority Key Identifier: keyid:A5:1E:37:52:3B:05:B1:66:B7:DE:97:7C:F4:AC:65:96:FD:D9:7B:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51E37523B05B166B7DE977CF4AC6596FDD97B98.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:95:54:58:c3:e8:1c:4d:d8:8a:aa:6a:99:dc:0b:4f:0c:c5: a5:61:39:d6:1a:85:94:6a:c5:a7:6d:1d:10:d6:72:84:8e:83: 64:18:5c:61:ad:7b:fc:38:1e:4b:b3:8a:f9:a7:6a:96:c6:dc: a1:7c:5a:cf:00:19:60:ee:24:4b:4f:96:9e:f8:20:ef:bd:a0: e5:97:b2:71:4e:8c:04:9e:b0:f9:ac:78:93:16:6b:25:23:a5: c6:59:14:54:3c:5c:3e:d1:80:66:ea:ac:d4:58:38:a7:3a:86: 33:84:6a:e5:1a:c9:ba:74:f7:43:04:a6:c5:3f:3a:cf:a7:c4: 62:92:6a:cf:19:d2:b7:10:d4:73:88:91:fc:cc:8c:af:9c:c0: 66:3e:4a:25:eb:a4:c3:1e:cd:de:d2:2e:3a:52:18:a3:3e:e3: 75:70:ed:e2:bb:9c:a0:84:8c:c6:ae:e0:61:42:29:3c:91:38: 80:0b:66:49:2d:ac:45:7e:6a:b2:b0:0e:17:2b:97:a7:4b:00: 30:37:4a:5e:7c:f4:2b:f9:f9:fc:ae:87:d1:ab:54:60:a3:b0: e8:d6:f9:17:88:b0:a2:46:27:72:f9:f4:e3:29:12:38:08:72: d9:cd:86:34:d1:6e:63:42:75:cb:eb:f3:57:e0:02:54:a4:77: 5c:29:67:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVWKcl6lwjGW73X64FpgRApG71OwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUxRTM3NTIzQjA1QjE2NkI3REU5NzdDRjRBQzY1OTZG REQ5N0I5ODAeFw0yNTA0MjUxNDE2MTNaFw0yNTA0MjgyMjI4MTNaMDMxMTAvBgNV BAMTKDAwODZCNDU0OTcxODZBNkEzMDY1MjJBRDMzRDNDNjY0MDRCMDRFMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX/7bS5DudrEFbVsSXqP8+FVp+ X3G0bUuE3AzUbFd68zaurqpJo0YtDUaS77tenv8kTst8iWnRaEZ225r6V37ozZcz C7tmFzq7dT9atEhZDNdScoRy3C6b8OgcfbxzUL5/waoU3AD4xcqsegHuWc/CgxD0 LcrUaDCnGhyNzh32Xs+XPoSaSwRST1vKywaVkIBC3ufuYTT2+70Nm1V/jxAwk7Bu KbukhuFUk/ytFKDjzWQnDvZiBE96bQECT8UZOyyqDnryboOiAvRIhndnW+1eFnSj MCC+VaaZjg+eMTWDwHQRSmnV2H/J4k0d3OgV7yASBNrGH9KZEPNP8ZJJUkexAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAIa0VJcYamowZSKtM9PGZASwTiUwHwYDVR0j BBgwFoAUpR43UjsFsWa33pd89Kxllv3Ze5gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OGYzOWJkNC1jZGFjLTQxY2YtODg1OC1kNzQxMGY2NGQxNTUvMC9BNTFFMzc1MjNC MDVCMTY2QjdERTk3N0NGNEFDNjU5NkZERDk3Qjk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTUxRTM3NTIzQjA1QjE2NkI3REU5NzdDRjRBQzY1OTZGREQ5 N0I5OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDhmMzliZDQtY2RhYy00MWNmLTg4 NTgtZDc0MTBmNjRkMTU1LzAvQTUxRTM3NTIzQjA1QjE2NkI3REU5NzdDRjRBQzY1 OTZGREQ5N0I5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMCVVFjD6BxN2IqqapncC08MxaVhOdYahZRq xadtHRDWcoSOg2QYXGGte/w4HkuzivmnapbG3KF8Ws8AGWDuJEtPlp74IO+9oOWX snFOjASesPmseJMWayUjpcZZFFQ8XD7RgGbqrNRYOKc6hjOEauUaybp090MEpsU/ Os+nxGKSas8Z0rcQ1HOIkfzMjK+cwGY+SiXrpMMezd7SLjpSGKM+43Vw7eK7nKCE jMau4GFCKTyROIALZkktrEV+arKwDhcrl6dLADA3Sl589Cv5+fyuh9GrVGCjsOjW +ReIsKJGJ3L59OMpEjgIctnNhjTRbmNCdcvr81fgAlSkd1wpZ+k= -----END CERTIFICATE-----Generated at Fri Apr 25 17:11:50 2025 by rpki-client on console.sobornost.net