$ rpki-client -vvf repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.mft File: 5AE57F3F97F40888F93913350A218863E705CD34.mft (raw, json) Hash identifier: cJvu2kagkMweS/NVtQ1VHb1q56HQs0OPX26FJ+nSp/0= Subject key identifier: E3:83:1B:FA:21:77:AE:24:E7:F6:CE:87:FA:8D:3B:23:4D:B0:54:D8 Authority key identifier: 5A:E5:7F:3F:97:F4:08:88:F9:39:13:35:0A:21:88:63:E7:05:CD:34 Certificate issuer: /CN=5AE57F3F97F40888F93913350A218863E705CD34 Certificate serial: 08BAA9FFCF4EA5EFF60FF1C09A012F02D2C776D8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE57F3F97F40888F93913350A218863E705CD34.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.mft Manifest number: 0202 Signing time: Thu 24 Apr 2025 05:21:26 +0000 Manifest this update: Thu 24 Apr 2025 05:16:26 +0000 Manifest next update: Sun 27 Apr 2025 10:38:26 +0000 Files and hashes: 1: 3130332e3138332e31312e302f32342d3234203d3e20313339393637.roa (hash: NfTWOpBX5TEsx2AN4GNz4kZXIBLNbd1V2CGYNCmRu/U=) 2: 3130332e3138332e31302e302f32342d3234203d3e20313339393637.roa (hash: lDreBV2a5k+F2nOzqdVDXyLmxgTFmhT5IbglBwCmDnU=) 3: 5AE57F3F97F40888F93913350A218863E705CD34.crl (hash: RVYo+mk9hMCtEhofKiBv0Z7cFtcex9CtYs01MLO8PFs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.crl rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE57F3F97F40888F93913350A218863E705CD34.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 08:44:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:ba:a9:ff:cf:4e:a5:ef:f6:0f:f1:c0:9a:01:2f:02:d2:c7:76:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AE57F3F97F40888F93913350A218863E705CD34 Validity Not Before: Apr 24 05:16:26 2025 GMT Not After : Apr 27 10:38:26 2025 GMT Subject: CN=E3831BFA2177AE24E7F6CE87FA8D3B234DB054D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:31:21:d5:e4:c3:ed:f1:19:95:69:0d:5d:40: 53:5d:12:6b:77:45:b2:c8:1a:95:e7:10:25:04:88: b4:cb:1e:06:8c:d2:7e:a9:0c:8a:44:38:84:e3:4d: d8:f2:22:06:58:e0:4c:39:5b:ee:48:b0:20:65:37: 9f:98:13:70:00:ed:35:78:2c:a5:b5:4e:d2:66:5e: 10:e5:4f:6b:ed:94:49:e2:cf:33:64:15:c8:c8:ab: 42:94:ed:f6:44:20:69:06:0d:e5:56:e6:33:de:52: 1e:7f:c3:c6:b3:9b:ab:0b:6a:00:d6:fe:18:64:bf: 39:57:50:50:db:74:51:eb:a9:37:78:2f:81:46:2a: 30:26:2e:f4:ae:d7:67:4b:be:23:5d:2b:f9:a9:c6: e3:b7:1d:8a:35:93:2f:34:ac:59:5f:b4:5d:24:d2: ae:15:0f:96:87:ee:99:db:4c:0b:a2:4c:47:fc:dd: 42:77:9a:3d:86:03:03:18:72:53:1d:c8:66:49:8b: f0:f5:7c:9e:81:3f:af:83:cb:0a:e6:61:e5:4e:fd: de:98:24:24:0c:29:8f:3c:98:c7:68:9e:1f:e8:19: 83:ea:27:58:bc:8e:04:39:f3:7b:57:85:66:5d:41: 60:69:8e:db:a9:ab:74:f8:38:08:69:be:05:71:07: ee:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:83:1B:FA:21:77:AE:24:E7:F6:CE:87:FA:8D:3B:23:4D:B0:54:D8 X509v3 Authority Key Identifier: keyid:5A:E5:7F:3F:97:F4:08:88:F9:39:13:35:0A:21:88:63:E7:05:CD:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE57F3F97F40888F93913350A218863E705CD34.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:2a:bb:3f:0c:c8:79:a9:25:17:98:d9:d9:fb:55:b2:02:1b: 7d:ea:54:32:e3:9b:a4:95:35:af:a0:43:ff:24:9d:1a:b9:c3: 1d:be:0d:e6:8b:2a:de:e0:ab:84:1f:3d:48:24:36:48:ff:bc: 87:bc:b1:5d:24:57:33:42:18:96:74:96:ab:00:55:b7:9a:e2: 0b:c6:78:35:6e:5b:e5:ac:02:10:9e:8b:dd:56:30:30:d4:53: c0:c8:99:4a:17:56:b0:0b:ce:4c:5c:4a:e2:10:50:51:44:7c: 52:a6:2f:5d:05:ff:1e:14:a5:ba:6b:2b:0d:40:d4:58:ad:79: d4:44:11:93:66:f0:e1:05:26:26:74:0c:0c:15:71:e8:63:43: 09:c4:c2:40:b3:1d:c2:7e:8a:d6:78:92:e0:35:df:dc:65:f2: 16:46:1d:ab:08:d4:95:9c:62:9f:4f:3d:71:2b:11:58:42:7e: 3d:6d:51:ab:75:bf:00:cd:f1:a3:32:87:7c:e0:a7:16:ff:16: d4:4f:fe:b1:4d:12:ae:21:c9:8a:f3:c8:0f:af:f6:e6:07:55: 45:41:b1:d1:0c:ee:59:25:f1:0f:2e:c5:b6:74:b4:91:74:a8: a9:b3:db:24:34:3e:55:45:4e:af:08:45:d5:6a:e6:6c:41:2f: 0a:db:80:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCLqp/89Ope/2D/HAmgEvAtLHdtgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFFNTdGM0Y5N0Y0MDg4OEY5MzkxMzM1MEEyMTg4NjNF NzA1Q0QzNDAeFw0yNTA0MjQwNTE2MjZaFw0yNTA0MjcxMDM4MjZaMDMxMTAvBgNV BAMTKEUzODMxQkZBMjE3N0FFMjRFN0Y2Q0U4N0ZBOEQzQjIzNERCMDU0RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrMSHV5MPt8RmVaQ1dQFNdEmt3 RbLIGpXnECUEiLTLHgaM0n6pDIpEOITjTdjyIgZY4Ew5W+5IsCBlN5+YE3AA7TV4 LKW1TtJmXhDlT2vtlEnizzNkFcjIq0KU7fZEIGkGDeVW5jPeUh5/w8azm6sLagDW /hhkvzlXUFDbdFHrqTd4L4FGKjAmLvSu12dLviNdK/mpxuO3HYo1ky80rFlftF0k 0q4VD5aH7pnbTAuiTEf83UJ3mj2GAwMYclMdyGZJi/D1fJ6BP6+DywrmYeVO/d6Y JCQMKY88mMdonh/oGYPqJ1i8jgQ583tXhWZdQWBpjtupq3T4OAhpvgVxB+7HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU44Mb+iF3riTn9s6H+o07I02wVNgwHwYDVR0j BBgwFoAUWuV/P5f0CIj5ORM1CiGIY+cFzTQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDhjZGY1YS1iOWE3LTQ0NjktYTY1My1jOWZmMmEwMDM3NzMvMC81QUU1N0YzRjk3 RjQwODg4RjkzOTEzMzUwQTIxODg2M0U3MDVDRDM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUFFNTdGM0Y5N0Y0MDg4OEY5MzkxMzM1MEEyMTg4NjNFNzA1 Q0QzNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ4Y2RmNWEtYjlhNy00NDY5LWE2 NTMtYzlmZjJhMDAzNzczLzAvNUFFNTdGM0Y5N0Y0MDg4OEY5MzkxMzM1MEEyMTg4 NjNFNzA1Q0QzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADoquz8MyHmpJReY2dn7VbICG33qVDLjm6SV Na+gQ/8knRq5wx2+DeaLKt7gq4QfPUgkNkj/vIe8sV0kVzNCGJZ0lqsAVbea4gvG eDVuW+WsAhCei91WMDDUU8DImUoXVrALzkxcSuIQUFFEfFKmL10F/x4UpbprKw1A 1FitedREEZNm8OEFJiZ0DAwVcehjQwnEwkCzHcJ+itZ4kuA139xl8hZGHasI1JWc Yp9PPXErEVhCfj1tUat1vwDN8aMyh3zgpxb/FtRP/rFNEq4hyYrzyA+v9uYHVUVB sdEM7lkl8Q8uxbZ0tJF0qKmz2yQ0PlVFTq8IRdVq5mxBLwrbgHA= -----END CERTIFICATE-----Generated at Thu Apr 24 09:03:03 2025 by rpki-client on console.sobornost.net