$ rpki-client -vvf repo-rpki.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E.mft File: 53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E.mft (raw, json) Hash identifier: Ip7nIxv5b8MP6qNuSW15Uf4BAqAKsKpZjKDlelr546o= Subject key identifier: 57:CF:49:0B:FC:77:23:5B:1C:AF:A7:09:8C:A1:40:A8:19:00:41:81 Authority key identifier: 53:B2:CA:30:02:DB:8D:FC:F5:48:2F:8E:09:A9:86:D2:9E:BF:B6:4E Certificate issuer: /CN=53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E Certificate serial: 190F89828ED53BB52636E5F74E82281BFD7B0167 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E.mft Manifest number: 018E Signing time: Fri 25 Apr 2025 13:11:12 +0000 Manifest this update: Fri 25 Apr 2025 13:06:12 +0000 Manifest next update: Mon 28 Apr 2025 21:28:12 +0000 Files and hashes: 1: 3130332e3137372e362e302f32332d3234203d3e20313437313430.roa (hash: zqT5YWjMd6XfOxSy/65IPLyls5xiXGFCXPoGdWCUauk=) 2: 53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E.crl (hash: OSQbGzWOSWeqyYRDl5lxMJVnXW+TMv37OfY6SGf71mo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E.crl rsync://repo-rpki.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 21:28:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:0f:89:82:8e:d5:3b:b5:26:36:e5:f7:4e:82:28:1b:fd:7b:01:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E Validity Not Before: Apr 25 13:06:12 2025 GMT Not After : Apr 28 21:28:12 2025 GMT Subject: CN=57CF490BFC77235B1CAFA7098CA140A819004181 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:27:d3:7c:fe:ed:81:4e:88:1b:4c:94:08:5c: 15:5e:f0:bd:c1:bd:41:65:63:35:d8:fe:04:bd:f1: 4c:b6:e9:88:ef:ff:4c:75:c8:d3:db:40:fb:56:85: cd:4a:52:9b:52:61:f3:c0:8e:5d:81:2c:56:7f:c5: 2e:cb:d7:03:f3:02:58:55:fc:af:f3:cd:ce:8b:97: 90:0e:fd:f0:31:79:eb:dc:15:96:e7:34:05:03:f7: fb:4a:05:13:0d:f9:b1:83:fd:c3:0e:ee:d9:58:8a: c1:e5:0a:a8:f6:dc:3e:6f:14:7a:ec:83:ec:70:42: 55:c6:bd:b3:f9:9c:2c:4e:9e:d1:ce:2a:20:a6:29: 28:4d:d0:63:e8:0d:26:c2:25:d8:af:e0:9b:09:79: f6:66:66:5e:16:78:64:92:0a:3e:b4:78:cf:dd:d2: f5:4d:95:94:36:15:55:bd:34:f8:0d:fe:09:1e:5b: ea:ce:ac:73:de:d8:04:5d:e4:2b:39:0e:86:1d:48: 4b:ad:39:c6:cd:18:3b:e7:11:e2:d8:41:63:87:ee: 5e:63:73:33:13:79:64:0b:e4:fd:48:a6:de:3b:b4: df:ca:a5:8d:c5:89:97:02:86:f1:ea:fa:4e:55:42: 3e:8b:8f:80:37:e7:cc:7e:9f:60:ea:6b:f5:6c:0d: 06:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:CF:49:0B:FC:77:23:5B:1C:AF:A7:09:8C:A1:40:A8:19:00:41:81 X509v3 Authority Key Identifier: keyid:53:B2:CA:30:02:DB:8D:FC:F5:48:2F:8E:09:A9:86:D2:9E:BF:B6:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:92:6c:5d:25:5e:e6:3b:fa:ba:97:3d:bb:13:01:de:34:71: eb:6a:a3:bc:03:33:1b:bf:c7:ab:00:93:02:6d:ef:cd:09:e3: 17:5b:04:a1:16:82:15:49:59:60:92:f0:03:c4:8c:db:07:bf: 26:9d:65:2b:7d:fe:94:2f:fc:8c:d2:ca:22:da:50:88:df:ef: 8b:0b:ec:27:9a:14:4b:e2:85:9b:e7:c0:ed:dc:0d:22:2b:4d: ac:25:08:6f:e9:c8:c4:64:c4:bd:b4:8a:5a:3c:2c:09:f6:39: b6:94:65:d8:e3:93:13:a4:57:79:9f:24:b1:98:2f:cc:84:1f: a0:73:e1:f0:d7:bc:85:0c:c1:7a:b5:70:55:ac:be:54:9c:9c: bc:31:74:b0:e9:6b:0a:7e:92:a5:5c:87:aa:d4:dc:83:24:79: ef:74:ae:19:20:8d:74:35:c0:4c:8e:4a:83:87:79:e7:0c:ce: 36:4f:e2:54:70:74:77:3b:d7:db:3e:41:2c:6f:86:17:31:8c: 18:8c:a8:e6:ae:e3:70:cf:98:06:51:4b:f2:e3:9c:dd:ac:b8: 5a:59:44:c5:8d:9e:e6:56:f8:6d:b2:06:08:98:3b:b7:22:1d: 3a:cc:f5:a7:fd:82:07:de:d2:0b:70:41:cc:5e:90:f8:57:06: 73:19:cc:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGQ+Jgo7VO7UmNuX3ToIoG/17AWcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTNCMkNBMzAwMkRCOERGQ0Y1NDgyRjhFMDlBOTg2RDI5 RUJGQjY0RTAeFw0yNTA0MjUxMzA2MTJaFw0yNTA0MjgyMTI4MTJaMDMxMTAvBgNV BAMTKDU3Q0Y0OTBCRkM3NzIzNUIxQ0FGQTcwOThDQTE0MEE4MTkwMDQxODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtJ9N8/u2BTogbTJQIXBVe8L3B vUFlYzXY/gS98Uy26Yjv/0x1yNPbQPtWhc1KUptSYfPAjl2BLFZ/xS7L1wPzAlhV /K/zzc6Ll5AO/fAxeevcFZbnNAUD9/tKBRMN+bGD/cMO7tlYisHlCqj23D5vFHrs g+xwQlXGvbP5nCxOntHOKiCmKShN0GPoDSbCJdiv4JsJefZmZl4WeGSSCj60eM/d 0vVNlZQ2FVW9NPgN/gkeW+rOrHPe2ARd5Cs5DoYdSEutOcbNGDvnEeLYQWOH7l5j czMTeWQL5P1Ipt47tN/KpY3FiZcChvHq+k5VQj6Lj4A358x+n2Dqa/VsDQZ1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV89JC/x3I1scr6cJjKFAqBkAQYEwHwYDVR0j BBgwFoAUU7LKMALbjfz1SC+OCamG0p6/tk4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjcxZmM2ZC1hYTNiLTRlZDctOGZlYy03NDI3YWEwNjFmOGUvMC81M0IyQ0EzMDAy REI4REZDRjU0ODJGOEUwOUE5ODZEMjlFQkZCNjRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTNCMkNBMzAwMkRCOERGQ0Y1NDgyRjhFMDlBOTg2RDI5RUJG QjY0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2I3MWZjNmQtYWEzYi00ZWQ3LThm ZWMtNzQyN2FhMDYxZjhlLzAvNTNCMkNBMzAwMkRCOERGQ0Y1NDgyRjhFMDlBOTg2 RDI5RUJGQjY0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFSSbF0lXuY7+rqXPbsTAd40cetqo7wDMxu/ x6sAkwJt780J4xdbBKEWghVJWWCS8APEjNsHvyadZSt9/pQv/IzSyiLaUIjf74sL 7CeaFEvihZvnwO3cDSIrTawlCG/pyMRkxL20ilo8LAn2ObaUZdjjkxOkV3mfJLGY L8yEH6Bz4fDXvIUMwXq1cFWsvlScnLwxdLDpawp+kqVch6rU3IMkee90rhkgjXQ1 wEyOSoOHeecMzjZP4lRwdHc719s+QSxvhhcxjBiMqOau43DPmAZRS/LjnN2suFpZ RMWNnuZW+G2yBgiYO7ciHTrM9af9ggfe0gtwQcxekPhXBnMZzBQ= -----END CERTIFICATE-----Generated at Fri Apr 25 17:11:51 2025 by rpki-client on console.sobornost.net