$ rpki-client -vvf repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.mft File: 4E52504397B6835784BD4E67D8048C0D1CE3B242.mft (raw, json) Hash identifier: tN4iMR+1Lqe6pWIHp2UkkVos5dx0/yflPz+/ICLO3+w= Subject key identifier: 5C:C5:D3:48:DC:6B:D5:43:16:F5:4F:24:EC:17:C1:BE:B7:49:73:85 Authority key identifier: 4E:52:50:43:97:B6:83:57:84:BD:4E:67:D8:04:8C:0D:1C:E3:B2:42 Certificate issuer: /CN=4E52504397B6835784BD4E67D8048C0D1CE3B242 Certificate serial: 3A0E7DF86C707096540A018AE00CC82D433E0250 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E52504397B6835784BD4E67D8048C0D1CE3B242.cer Subject info access: rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.mft Manifest number: 04CB Signing time: Sat 26 Apr 2025 01:15:42 +0000 Manifest this update: Sat 26 Apr 2025 01:10:42 +0000 Manifest next update: Tue 29 Apr 2025 10:01:42 +0000 Files and hashes: 1: 4E52504397B6835784BD4E67D8048C0D1CE3B242.crl (hash: /Q7PHDKohmT3Cp2HCXBtnS/vhCRpREHCHusA3AJS3bU=) 2: 323430333a653630303a6630303a3a2f34302d3430203d3e203538333736.roa (hash: 28/7yzYFPU2INXX42MopSeFSOK24RIpHwZvJY6Bghl8=) 3: 323430333a653630303a3a2f33322d3332203d3e203538333736.roa (hash: j7YamreoNvDtpRRCa1576yblhtpzYGNi0GVQwvs+/uU=) 4: 3130332e32392e3134382e302f32322d3234203d3e203538333736.roa (hash: BdJaFao8B+TjAWAlyv2cIwAqEFZulu5t7ZhP4Qtv2fY=) 5: 34332e3234352e3138382e302f32322d3234203d3e203538333736.roa (hash: XNyUIRQtKNQg0scHLvGfTd1iQ5fTzdzUb2EnWutkjlI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.crl rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E52504397B6835784BD4E67D8048C0D1CE3B242.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 09:52:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:0e:7d:f8:6c:70:70:96:54:0a:01:8a:e0:0c:c8:2d:43:3e:02:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E52504397B6835784BD4E67D8048C0D1CE3B242 Validity Not Before: Apr 26 01:10:42 2025 GMT Not After : Apr 29 10:01:42 2025 GMT Subject: CN=5CC5D348DC6BD54316F54F24EC17C1BEB7497385 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:47:c5:60:7f:2a:53:40:fd:55:f2:31:2b:cf: d6:c8:ae:19:d7:67:e2:d1:87:8c:fe:db:de:76:ef: 7c:79:a4:3d:b9:be:89:bd:df:77:ec:49:3c:ea:a1: 3b:42:7d:1a:31:97:15:c8:a2:41:69:d1:18:77:cf: d3:79:ce:8d:03:5c:90:9f:d2:28:fd:dc:e1:19:f6: 97:6e:22:9c:b1:fa:12:e7:09:c9:7d:e3:00:4a:52: c0:c6:e5:ab:31:81:ca:f4:be:88:f7:30:0a:2a:e8: 74:43:cb:61:37:5d:27:83:cb:b4:21:16:fc:6b:5d: 8a:c0:8d:df:e8:8a:50:52:9f:e3:c6:07:ae:a0:72: 15:13:49:8e:23:76:85:12:c6:d1:5b:19:f1:f0:d4: f4:5b:b0:08:f7:34:ce:4e:a3:c4:99:7f:5b:de:30: b5:a4:a6:55:16:13:ec:ed:d7:26:2a:cc:5a:a2:99: 65:ae:1f:78:1c:be:93:3d:61:3b:9a:0e:01:94:f5: e2:f3:4b:92:bc:ec:81:af:eb:cd:9c:db:7b:e5:c3: 32:d6:e8:20:d8:5d:6d:4f:0c:f4:13:51:ab:a1:3c: 45:4a:e5:b9:ca:29:c9:78:4d:69:75:5e:7f:02:0f: e6:24:32:43:9e:03:e7:48:5a:4d:2a:2f:05:80:9c: 3f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:C5:D3:48:DC:6B:D5:43:16:F5:4F:24:EC:17:C1:BE:B7:49:73:85 X509v3 Authority Key Identifier: keyid:4E:52:50:43:97:B6:83:57:84:BD:4E:67:D8:04:8C:0D:1C:E3:B2:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E52504397B6835784BD4E67D8048C0D1CE3B242.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:27:be:f0:8e:fd:50:6c:a6:99:53:33:c1:88:82:ad:df:c8: 23:ab:ac:71:e5:d3:59:1d:a4:a1:69:bc:3b:88:a3:39:c0:bb: 8d:a8:a3:58:05:98:d6:eb:bf:cb:fb:c4:bd:d6:24:0c:44:5c: 59:0a:65:04:0f:8c:a8:d9:0f:b8:43:f0:37:78:d1:fb:6f:f8: e1:27:db:cc:73:ac:ba:20:8c:87:6b:00:14:26:52:bd:c9:0b: 08:79:83:e3:3c:05:01:69:81:7c:12:6e:2c:cf:8e:d8:c3:ff: 0b:54:0c:a6:d4:9c:cd:cd:70:56:30:4a:19:51:95:09:51:19: 12:a3:e9:42:cb:de:13:d9:d3:88:84:75:91:3b:0b:fd:82:83: 99:4d:f4:a9:ad:ee:79:4f:20:62:f5:0d:6e:d6:34:09:55:4a: ca:a9:c6:cd:1e:c9:a1:8f:20:a3:86:92:51:d6:3b:2a:5b:34: f5:84:51:96:fa:0a:46:2e:93:31:0b:20:27:fc:cf:38:61:13: b7:0a:92:ea:4b:60:cc:95:8a:e9:98:bf:8e:1d:5a:cf:0a:6e: 27:45:70:c8:00:25:c2:1e:13:b0:40:ab:09:00:89:19:f7:fb: 4f:7b:c9:35:cd:af:c9:de:63:d0:ea:2d:38:0d:2f:1e:9b:d9: 64:cd:66:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOg59+GxwcJZUCgGK4AzILUM+AlAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEU1MjUwNDM5N0I2ODM1Nzg0QkQ0RTY3RDgwNDhDMEQx Q0UzQjI0MjAeFw0yNTA0MjYwMTEwNDJaFw0yNTA0MjkxMDAxNDJaMDMxMTAvBgNV BAMTKDVDQzVEMzQ4REM2QkQ1NDMxNkY1NEYyNEVDMTdDMUJFQjc0OTczODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqR8VgfypTQP1V8jErz9bIrhnX Z+LRh4z+295273x5pD25vom933fsSTzqoTtCfRoxlxXIokFp0Rh3z9N5zo0DXJCf 0ij93OEZ9pduIpyx+hLnCcl94wBKUsDG5asxgcr0voj3MAoq6HRDy2E3XSeDy7Qh FvxrXYrAjd/oilBSn+PGB66gchUTSY4jdoUSxtFbGfHw1PRbsAj3NM5Oo8SZf1ve MLWkplUWE+zt1yYqzFqimWWuH3gcvpM9YTuaDgGU9eLzS5K87IGv682c23vlwzLW 6CDYXW1PDPQTUauhPEVK5bnKKcl4TWl1Xn8CD+YkMkOeA+dIWk0qLwWAnD8pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXMXTSNxr1UMW9U8k7BfBvrdJc4UwHwYDVR0j BBgwFoAUTlJQQ5e2g1eEvU5n2ASMDRzjskIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OTFkM2MzMC05NWRjLTRiNzItYWUxYi1hZDFlOThiMGUxNzkvMC80RTUyNTA0Mzk3 QjY4MzU3ODRCRDRFNjdEODA0OEMwRDFDRTNCMjQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEU1MjUwNDM5N0I2ODM1Nzg0QkQ0RTY3RDgwNDhDMEQxQ0Uz QjI0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODkxZDNjMzAtOTVkYy00YjcyLWFl MWItYWQxZTk4YjBlMTc5LzAvNEU1MjUwNDM5N0I2ODM1Nzg0QkQ0RTY3RDgwNDhD MEQxQ0UzQjI0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIwnvvCO/VBspplTM8GIgq3fyCOrrHHl01kd pKFpvDuIoznAu42oo1gFmNbrv8v7xL3WJAxEXFkKZQQPjKjZD7hD8Dd40ftv+OEn 28xzrLogjIdrABQmUr3JCwh5g+M8BQFpgXwSbizPjtjD/wtUDKbUnM3NcFYwShlR lQlRGRKj6ULL3hPZ04iEdZE7C/2Cg5lN9Kmt7nlPIGL1DW7WNAlVSsqpxs0eyaGP IKOGklHWOypbNPWEUZb6CkYukzELICf8zzhhE7cKkupLYMyViumYv44dWs8KbidF cMgAJcIeE7BAqwkAiRn3+097yTXNr8neY9DqLTgNLx6b2WTNZlk= -----END CERTIFICATE-----Generated at Sat Apr 26 06:13:32 2025 by rpki-client on console.sobornost.net