$ rpki-client -vvf repo-rpki.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/58D7A2E054D4F6B835578031386896062B0B0CED.mft File: 58D7A2E054D4F6B835578031386896062B0B0CED.mft (raw, json) Hash identifier: e7KDFmSodCwlw7jPluSfD8CiuYllV6+DiTpl7dqW43Q= Subject key identifier: 2E:7D:DC:92:11:B2:ED:04:3C:1C:08:81:18:6C:A8:04:C8:38:F2:6E Authority key identifier: 58:D7:A2:E0:54:D4:F6:B8:35:57:80:31:38:68:96:06:2B:0B:0C:ED Certificate issuer: /CN=58D7A2E054D4F6B835578031386896062B0B0CED Certificate serial: 20868BBDA203D68512D11CC358008268FECE79C6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58D7A2E054D4F6B835578031386896062B0B0CED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/58D7A2E054D4F6B835578031386896062B0B0CED.mft Manifest number: 0496 Signing time: Thu 24 Apr 2025 20:11:54 +0000 Manifest this update: Thu 24 Apr 2025 20:06:54 +0000 Manifest next update: Sun 27 Apr 2025 21:31:54 +0000 Files and hashes: 1: 58D7A2E054D4F6B835578031386896062B0B0CED.crl (hash: T88lWOlm/vc0WgDIZH+JNBAxHHuCh/3GPdwZsrYEvsQ=) 2: 3130332e39382e3132312e302f32342d3234203d3e20313335363336.roa (hash: oYxCGMbqXgR8AQNdiL8ihq35M5ctD4QdRyR88XpWqWE=) 3: 3130332e3130332e3139332e302f32342d3234203d3e20313335363336.roa (hash: x34IAlvfKm1zsQMhasEfbeQYKKvCf7zpZUDVTJObTdM=) 4: 3130332e3130332e3137352e302f32342d3234203d3e20313335363336.roa (hash: bDH+RypaUq14jL90Jkyj76XN0FbcCOLQ3ffO661yNsQ=) 5: 3130332e3130332e3139322e302f32342d3234203d3e20313335363336.roa (hash: RuzRTqDSLUn9HBI13QCG52rsR1ACbmby5EEBQ9WXa9I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/58D7A2E054D4F6B835578031386896062B0B0CED.crl rsync://repo-rpki.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/58D7A2E054D4F6B835578031386896062B0B0CED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58D7A2E054D4F6B835578031386896062B0B0CED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:86:8b:bd:a2:03:d6:85:12:d1:1c:c3:58:00:82:68:fe:ce:79:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58D7A2E054D4F6B835578031386896062B0B0CED Validity Not Before: Apr 24 20:06:54 2025 GMT Not After : Apr 27 21:31:54 2025 GMT Subject: CN=2E7DDC9211B2ED043C1C0881186CA804C838F26E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:9e:02:6c:37:fb:3b:a4:c1:c5:61:86:4c:fb: 3c:8f:1d:82:36:85:35:a8:9f:02:9f:14:44:85:97: f6:a2:6c:bb:15:3b:4f:33:53:e2:4e:25:de:d1:af: 42:de:bf:6b:1c:89:37:81:1d:a1:f8:d3:d9:ba:a8: 8c:5f:90:ed:b4:01:a2:a3:a2:33:9c:5e:b6:e6:8a: 16:79:e1:8d:22:75:46:ca:e4:98:ac:d4:92:f1:4d: 7d:95:0f:2a:0f:94:a2:4e:c4:77:2d:f9:41:63:95: 0f:b0:2a:be:1c:93:22:49:6d:9c:7e:6d:ed:0a:db: b4:27:2f:c9:39:60:23:c5:2d:f3:fa:50:dd:c9:12: a0:06:52:ff:ae:f9:c4:50:7e:12:17:38:91:b5:b0: 4c:a8:52:b5:bb:e7:d6:5e:82:02:2c:e9:29:d8:21: 18:53:4f:6e:55:8c:0c:45:c6:b6:98:a0:89:45:8f: 5c:4b:3e:ef:87:5b:d5:ec:cf:cf:ed:54:92:3a:15: 78:eb:cc:17:73:f7:e1:c9:f1:b0:76:0e:6d:79:30: c2:4e:a7:82:84:56:b0:67:56:c1:98:5b:ed:bb:9e: 71:79:ad:98:fe:68:af:2c:71:41:a8:57:39:52:85: 7a:d5:69:f7:58:1f:ec:20:e1:cd:24:58:f7:fc:3c: 84:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:7D:DC:92:11:B2:ED:04:3C:1C:08:81:18:6C:A8:04:C8:38:F2:6E X509v3 Authority Key Identifier: keyid:58:D7:A2:E0:54:D4:F6:B8:35:57:80:31:38:68:96:06:2B:0B:0C:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/58D7A2E054D4F6B835578031386896062B0B0CED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58D7A2E054D4F6B835578031386896062B0B0CED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/58D7A2E054D4F6B835578031386896062B0B0CED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:12:80:45:f0:27:ad:c7:40:b3:65:f4:5e:d3:44:d8:7c:60: 1e:54:84:8a:25:00:8c:78:6a:2e:1a:18:4e:7a:15:67:48:ea: 53:34:a3:d8:90:33:99:63:db:26:f8:49:73:8a:3a:22:28:cf: 85:d6:fd:59:3f:f6:03:69:ba:51:97:9e:dd:e4:93:19:7c:bf: b7:81:c7:7e:43:3c:d0:d9:1e:76:fb:a5:d3:51:a7:9f:07:19: b7:19:ec:05:49:d7:27:b9:f3:91:63:10:de:53:ac:e1:2a:65: 14:90:25:a0:3e:08:83:56:28:d5:6b:26:1f:fe:36:f4:b5:af: 30:aa:9d:74:77:4a:52:c1:e5:46:01:d1:52:73:86:3a:0c:6b: 1b:31:1e:6e:99:e3:ef:79:9c:36:71:2a:5a:24:15:cb:38:14: 09:de:ec:f5:34:8b:5a:c7:05:02:49:01:59:7a:b6:f2:9e:2a: 85:4d:51:66:f1:16:01:c9:82:8b:5a:9c:d4:c6:44:b2:a7:a7: 97:ee:fa:d4:18:03:0c:db:f8:15:c3:ea:e0:4a:2f:21:a7:fe: e1:d0:9c:81:c0:d8:2a:7d:c7:25:54:21:fd:0b:ef:89:c6:a7: 35:8f:d1:fd:39:ee:fa:cb:32:bc:10:89:6f:b7:71:4d:a9:06: 2c:19:3f:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIIaLvaID1oUS0RzDWACCaP7OecYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNThEN0EyRTA1NEQ0RjZCODM1NTc4MDMxMzg2ODk2MDYy QjBCMENFRDAeFw0yNTA0MjQyMDA2NTRaFw0yNTA0MjcyMTMxNTRaMDMxMTAvBgNV BAMTKDJFN0REQzkyMTFCMkVEMDQzQzFDMDg4MTE4NkNBODA0QzgzOEYyNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfngJsN/s7pMHFYYZM+zyPHYI2 hTWonwKfFESFl/aibLsVO08zU+JOJd7Rr0Lev2sciTeBHaH409m6qIxfkO20AaKj ojOcXrbmihZ54Y0idUbK5Jis1JLxTX2VDyoPlKJOxHct+UFjlQ+wKr4ckyJJbZx+ be0K27QnL8k5YCPFLfP6UN3JEqAGUv+u+cRQfhIXOJG1sEyoUrW759ZeggIs6SnY IRhTT25VjAxFxraYoIlFj1xLPu+HW9Xsz8/tVJI6FXjrzBdz9+HJ8bB2Dm15MMJO p4KEVrBnVsGYW+27nnF5rZj+aK8scUGoVzlShXrVafdYH+wg4c0kWPf8PIQHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULn3ckhGy7QQ8HAiBGGyoBMg48m4wHwYDVR0j BBgwFoAUWNei4FTU9rg1V4AxOGiWBisLDO0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZWJiYWRiMy05YWM4LTQ2ZGYtYWI5MS1iZjM5ZGZlZTFiZDAvMC81OEQ3QTJFMDU0 RDRGNkI4MzU1NzgwMzEzODY4OTYwNjJCMEIwQ0VELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNThEN0EyRTA1NEQ0RjZCODM1NTc4MDMxMzg2ODk2MDYyQjBC MENFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWViYmFkYjMtOWFjOC00NmRmLWFi OTEtYmYzOWRmZWUxYmQwLzAvNThEN0EyRTA1NEQ0RjZCODM1NTc4MDMxMzg2ODk2 MDYyQjBCMENFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADUSgEXwJ63HQLNl9F7TRNh8YB5UhIolAIx4 ai4aGE56FWdI6lM0o9iQM5lj2yb4SXOKOiIoz4XW/Vk/9gNpulGXnt3kkxl8v7eB x35DPNDZHnb7pdNRp58HGbcZ7AVJ1ye585FjEN5TrOEqZRSQJaA+CINWKNVrJh/+ NvS1rzCqnXR3SlLB5UYB0VJzhjoMaxsxHm6Z4+95nDZxKlokFcs4FAne7PU0i1rH BQJJAVl6tvKeKoVNUWbxFgHJgotanNTGRLKnp5fu+tQYAwzb+BXD6uBKLyGn/uHQ nIHA2Cp9xyVUIf0L74nGpzWP0f057vrLMrwQiW+3cU2pBiwZP2o= -----END CERTIFICATE-----Generated at Fri Apr 25 00:06:28 2025 by rpki-client on console.sobornost.net