$ rpki-client -vvf repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/5A33E6B82000487B204D2E284BCA10AF293CB41E.mft File: 5A33E6B82000487B204D2E284BCA10AF293CB41E.mft (raw, json) Hash identifier: 2syN2C5s+pPa6U5JRF+clGT5qHgVimLGjH+56j+PRbw= Subject key identifier: FF:47:DC:6B:A7:A9:F2:6B:35:6E:21:AD:D2:EE:12:46:EF:77:09:20 Authority key identifier: 5A:33:E6:B8:20:00:48:7B:20:4D:2E:28:4B:CA:10:AF:29:3C:B4:1E Certificate issuer: /CN=5A33E6B82000487B204D2E284BCA10AF293CB41E Certificate serial: 03B914C90E42A400060482F4C3D4DC991C7BF3A9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A33E6B82000487B204D2E284BCA10AF293CB41E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/5A33E6B82000487B204D2E284BCA10AF293CB41E.mft Manifest number: 01C7 Signing time: Thu 24 Apr 2025 12:21:11 +0000 Manifest this update: Thu 24 Apr 2025 12:16:11 +0000 Manifest next update: Sun 27 Apr 2025 21:55:11 +0000 Files and hashes: 1: 3130332e3134322e3234312e302f32342d3234203d3e20313339333832.roa (hash: w3BBO2ojOIjj9AtoUjhdja4WPaFGOgpmIufFTP6+DqI=) 2: 3130332e3134322e3234302e302f32342d3234203d3e20313339333832.roa (hash: 1DOr2e/kf4/EN1V5niFiCSQ4eIv5NPl/rOgqgpH4ZuI=) 3: 5A33E6B82000487B204D2E284BCA10AF293CB41E.crl (hash: 1zVzAKvmhTaJIIL33mzbHHiiCFW6DpE/6rHYBIdUXGI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/5A33E6B82000487B204D2E284BCA10AF293CB41E.crl rsync://repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/5A33E6B82000487B204D2E284BCA10AF293CB41E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A33E6B82000487B204D2E284BCA10AF293CB41E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 17:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:b9:14:c9:0e:42:a4:00:06:04:82:f4:c3:d4:dc:99:1c:7b:f3:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A33E6B82000487B204D2E284BCA10AF293CB41E Validity Not Before: Apr 24 12:16:11 2025 GMT Not After : Apr 27 21:55:11 2025 GMT Subject: CN=FF47DC6BA7A9F26B356E21ADD2EE1246EF770920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:6e:6a:a7:b9:f7:22:20:e5:fb:67:7d:3f:b8: f2:14:a3:60:19:ce:dc:df:31:a1:05:61:a4:0f:29: 89:34:ff:ef:49:d9:ab:c8:0e:59:c8:41:5e:bc:6b: b5:42:02:56:c0:e1:61:59:8a:42:ff:8d:bb:b5:85: 41:87:78:a1:01:29:0b:3a:b1:87:99:1b:b2:eb:7e: 56:da:0b:11:ee:bd:7b:df:fb:90:0e:93:34:ad:e7: 93:0a:5b:c0:34:17:63:47:53:75:95:b7:7f:da:c7: ee:47:fe:6d:41:78:c2:bd:23:ef:38:9b:73:87:f5: 69:6f:99:ed:66:23:c1:2c:34:05:b4:ff:c3:c0:e9: fa:03:3b:29:6d:f8:3f:53:3f:08:70:29:ae:77:b8: fb:f6:29:85:81:ab:91:26:9a:14:ab:36:90:a6:a0: 46:e3:74:a2:40:12:39:05:f8:8b:2f:df:11:78:2c: 3a:4f:b6:c6:a4:a8:6c:15:d1:17:d1:5f:40:a4:97: 35:97:5f:fa:81:88:70:f6:f4:e2:89:91:69:c9:7a: cd:9f:29:0f:93:d9:0d:0e:6e:9f:80:62:04:a2:8a: e5:d6:6e:37:e2:61:1d:2e:0b:16:e2:ee:0d:9b:72: 10:7b:8c:77:19:02:d9:d6:7f:f8:d8:e9:e8:06:17: 8c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:47:DC:6B:A7:A9:F2:6B:35:6E:21:AD:D2:EE:12:46:EF:77:09:20 X509v3 Authority Key Identifier: keyid:5A:33:E6:B8:20:00:48:7B:20:4D:2E:28:4B:CA:10:AF:29:3C:B4:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/5A33E6B82000487B204D2E284BCA10AF293CB41E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A33E6B82000487B204D2E284BCA10AF293CB41E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/5A33E6B82000487B204D2E284BCA10AF293CB41E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:0d:e1:f9:8a:be:e8:95:31:44:1a:c5:29:9e:0c:90:80:b1: 50:23:41:b4:5f:5a:45:c5:fc:b3:9c:9d:ab:cd:05:41:a1:48: 63:9f:06:4f:80:60:86:ae:17:1c:6a:ec:37:c9:04:6e:b7:21: f5:bc:99:80:2a:e8:75:da:89:ab:5a:ed:cf:29:64:6a:91:7d: 1e:cc:30:75:59:8a:76:6a:84:e7:4c:e6:27:85:6d:d8:98:ef: 9f:ad:11:5f:35:cc:75:8a:02:7b:95:53:fa:4c:6a:d0:0c:f3: 6a:4d:98:25:33:eb:fc:fc:54:d7:d2:a6:56:fc:1b:75:4c:3d: 09:33:c1:12:52:ca:68:a8:a2:fb:95:96:35:56:67:27:2e:ee: 10:37:dc:3b:72:9c:d3:b1:ac:93:6e:1d:7b:a8:61:00:25:3c: 0a:cb:dc:4b:a4:c7:d9:d0:e7:c9:52:a1:59:a3:be:cd:da:b4: 13:80:9a:a0:ba:6c:f2:13:b9:b0:e8:39:1f:84:b7:71:71:30: b0:d9:ba:8f:4f:73:10:32:6b:b2:5c:eb:1d:ee:fc:5d:19:fc: 60:ee:1c:56:bb:ef:8d:df:69:f3:c9:87:0e:e4:dd:11:ee:7f: 18:b9:22:79:dd:45:79:cd:a1:9b:96:74:a8:73:ce:88:16:52: cf:8f:5e:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA7kUyQ5CpAAGBIL0w9TcmRx786kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUEzM0U2QjgyMDAwNDg3QjIwNEQyRTI4NEJDQTEwQUYy OTNDQjQxRTAeFw0yNTA0MjQxMjE2MTFaFw0yNTA0MjcyMTU1MTFaMDMxMTAvBgNV BAMTKEZGNDdEQzZCQTdBOUYyNkIzNTZFMjFBREQyRUUxMjQ2RUY3NzA5MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdbmqnufciIOX7Z30/uPIUo2AZ ztzfMaEFYaQPKYk0/+9J2avIDlnIQV68a7VCAlbA4WFZikL/jbu1hUGHeKEBKQs6 sYeZG7LrflbaCxHuvXvf+5AOkzSt55MKW8A0F2NHU3WVt3/ax+5H/m1BeMK9I+84 m3OH9Wlvme1mI8EsNAW0/8PA6foDOylt+D9TPwhwKa53uPv2KYWBq5EmmhSrNpCm oEbjdKJAEjkF+Isv3xF4LDpPtsakqGwV0RfRX0CklzWXX/qBiHD29OKJkWnJes2f KQ+T2Q0Obp+AYgSiiuXWbjfiYR0uCxbi7g2bchB7jHcZAtnWf/jY6egGF4xBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/0fca6ep8ms1biGt0u4SRu93CSAwHwYDVR0j BBgwFoAUWjPmuCAASHsgTS4oS8oQryk8tB4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZTQxYmE3ZS02YzQyLTRjMjItYjEzYy01NDhmYzcyNzJhM2QvMC81QTMzRTZCODIw MDA0ODdCMjA0RDJFMjg0QkNBMTBBRjI5M0NCNDFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUEzM0U2QjgyMDAwNDg3QjIwNEQyRTI4NEJDQTEwQUYyOTND QjQxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWU0MWJhN2UtNmM0Mi00YzIyLWIx M2MtNTQ4ZmM3MjcyYTNkLzAvNUEzM0U2QjgyMDAwNDg3QjIwNEQyRTI4NEJDQTEw QUYyOTNDQjQxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALAN4fmKvuiVMUQaxSmeDJCAsVAjQbRfWkXF /LOcnavNBUGhSGOfBk+AYIauFxxq7DfJBG63IfW8mYAq6HXaiata7c8pZGqRfR7M MHVZinZqhOdM5ieFbdiY75+tEV81zHWKAnuVU/pMatAM82pNmCUz6/z8VNfSplb8 G3VMPQkzwRJSymioovuVljVWZycu7hA33DtynNOxrJNuHXuoYQAlPArL3Eukx9nQ 58lSoVmjvs3atBOAmqC6bPITubDoOR+Et3FxMLDZuo9PcxAya7Jc6x3u/F0Z/GDu HFa7743fafPJhw7k3RHufxi5InndRXnNoZuWdKhzzogWUs+PXvQ= -----END CERTIFICATE-----Generated at Thu Apr 24 15:50:03 2025 by rpki-client on console.sobornost.net