$ rpki-client -vvf repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft File: E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft (raw, json) Hash identifier: in4lRzmOd0n8wc/Q6FskQFbJxh7FUgbi52b6DfIXWTo= Subject key identifier: 1A:66:E3:96:E3:62:F7:7D:1D:F8:47:AC:73:C2:A8:D7:83:75:4A:1D Authority key identifier: E1:7A:5E:B9:41:56:DE:23:FC:DC:8F:29:B2:10:FC:DE:DC:F0:8F:52 Certificate issuer: /CN=E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52 Certificate serial: 73C250BF20DA80B3A990F13C8E55BD3F652961C4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer Subject info access: rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft Manifest number: 04C5 Signing time: Wed 23 Apr 2025 08:12:05 +0000 Manifest this update: Wed 23 Apr 2025 08:07:05 +0000 Manifest next update: Sat 26 Apr 2025 15:56:05 +0000 Files and hashes: 1: E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.crl (hash: X5I6jKVZ1QwCY489+MQZmlCSaIrRzutOtiDa4BH6HzM=) 2: 3130332e3133302e36322e302f32342d3234203d3e20313338303739.roa (hash: hMJmJ4dw/81IwDHXcdYCEbx1mMe88CEi44Qr1Pj1eBk=) 3: 3130332e3133302e36312e302f32342d3234203d3e20313338303739.roa (hash: 4L2FKCQFOJ6ZvWKgXal0nfrZkHMJOZOY4pyCilWNqJg=) 4: 3130332e3133302e36302e302f32332d3233203d3e20313338303739.roa (hash: dghjU1zZ9kGjcMRT5/T9O0//sXRfgHxldxyPdO36eG8=) 5: 3130332e3133302e36302e302f32322d3232203d3e20313338303739.roa (hash: C1HlnOYNkbj9dYN+GVNsy5Ocwp8L1tuS754SnYYyHlE=) 6: 3130332e3133302e36332e302f32342d3234203d3e20313338303739.roa (hash: UPqZTtFOgF+jDRv2CvFxqECXCbrw1aEaPzgtFmgsijs=) 7: 3130332e3133302e36302e302f32342d3234203d3e20313338303739.roa (hash: KEI56K2u3NEnRDvHwfwup/lXLtIuuqQa4o+pfORoJU4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.crl rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 09:26:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:c2:50:bf:20:da:80:b3:a9:90:f1:3c:8e:55:bd:3f:65:29:61:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52 Validity Not Before: Apr 23 08:07:05 2025 GMT Not After : Apr 26 15:56:05 2025 GMT Subject: CN=1A66E396E362F77D1DF847AC73C2A8D783754A1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ef:eb:0d:27:41:ae:00:25:0a:00:10:53:f6: 10:96:de:2b:f9:38:dc:c2:92:f9:3b:90:f4:f4:1c: bb:dd:74:3d:61:12:51:3a:bc:ac:73:e6:ad:41:c5: 6a:c6:eb:b8:86:ee:d4:2c:50:8b:63:42:b2:d2:38: 36:9d:93:9d:52:4a:f4:ff:c8:fc:38:a7:50:1a:ca: b0:c9:2a:d2:1f:c4:94:27:3e:9e:d4:ac:a2:bb:68: 3c:58:da:73:e3:1e:b1:5f:9d:c9:25:be:1f:4d:9b: bf:50:eb:40:6a:3d:d8:e9:55:b0:af:41:26:b9:62: 71:76:f0:00:9a:14:26:44:3b:33:35:83:9f:c0:59: 2b:ff:ec:d0:d2:9d:46:3e:69:b9:d4:26:b3:10:fa: ae:d0:fe:09:f7:5a:a4:5f:56:04:d1:b3:e2:be:96: b0:07:f6:db:f6:47:50:cf:4b:4b:db:8a:ac:85:a5: 10:63:c5:ae:ba:5c:ee:82:0f:18:ab:7b:fa:b6:87: 38:ae:46:b2:2d:a5:ce:62:8d:f8:49:6f:f2:de:a9: cf:ce:a7:6a:e8:0b:c4:b4:68:34:97:83:d2:84:b6: 4f:a8:42:40:6f:d1:30:7e:a6:2a:f7:d1:d7:b7:8b: cc:dd:ea:02:e9:82:7c:a3:23:77:a4:2d:9d:36:c3: 42:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:66:E3:96:E3:62:F7:7D:1D:F8:47:AC:73:C2:A8:D7:83:75:4A:1D X509v3 Authority Key Identifier: keyid:E1:7A:5E:B9:41:56:DE:23:FC:DC:8F:29:B2:10:FC:DE:DC:F0:8F:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:e7:d5:cb:cc:a2:58:d4:10:23:c4:ce:9a:03:f2:48:53:20: a5:07:c0:94:1f:32:a1:ee:a2:fa:72:d8:00:3d:a7:a2:8b:08: bd:02:89:b6:3a:1c:3e:6d:86:73:7e:0d:bb:f0:0e:1f:f6:45: 57:92:23:35:e7:6d:64:90:08:dc:4a:2b:37:fd:a1:5c:9e:e4: 7d:1d:6c:9e:4e:de:f0:51:54:39:75:fb:d4:72:e2:f7:61:c2: 8e:4b:43:df:bd:a3:49:e2:a4:d7:d7:4d:fe:d9:1c:e7:7b:5d: 64:df:93:fa:4b:ee:6d:35:0c:74:7e:5b:93:99:18:f4:af:af: 18:10:1e:de:4b:7b:db:67:4f:60:08:bb:d7:45:e7:b7:a7:c5: e0:59:64:6f:88:33:65:ed:05:d3:d7:57:f8:d8:5e:1d:e2:da: 4c:f5:2d:56:9f:9e:23:d5:07:b6:cc:09:9d:8d:60:1f:41:09: 01:30:5f:96:89:8c:e0:43:9b:23:6d:25:8c:00:13:2b:e5:bc: 92:16:39:22:c3:2a:d6:a4:a7:50:8a:c9:4d:ca:78:f0:da:ad: 66:0e:e5:d0:ae:45:9e:42:d6:9f:c9:fd:d4:e7:80:07:0e:8e: a1:22:ba:76:1e:29:08:f4:f5:34:c2:19:7d:38:2a:ed:88:12: d2:64:e0:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc8JQvyDagLOpkPE8jlW9P2UpYcQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTE3QTVFQjk0MTU2REUyM0ZDREM4RjI5QjIxMEZDREVE Q0YwOEY1MjAeFw0yNTA0MjMwODA3MDVaFw0yNTA0MjYxNTU2MDVaMDMxMTAvBgNV BAMTKDFBNjZFMzk2RTM2MkY3N0QxREY4NDdBQzczQzJBOEQ3ODM3NTRBMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd7+sNJ0GuACUKABBT9hCW3iv5 ONzCkvk7kPT0HLvddD1hElE6vKxz5q1BxWrG67iG7tQsUItjQrLSODadk51SSvT/ yPw4p1AayrDJKtIfxJQnPp7UrKK7aDxY2nPjHrFfncklvh9Nm79Q60BqPdjpVbCv QSa5YnF28ACaFCZEOzM1g5/AWSv/7NDSnUY+abnUJrMQ+q7Q/gn3WqRfVgTRs+K+ lrAH9tv2R1DPS0vbiqyFpRBjxa66XO6CDxire/q2hziuRrItpc5ijfhJb/Leqc/O p2roC8S0aDSXg9KEtk+oQkBv0TB+pir30de3i8zd6gLpgnyjI3ekLZ02w0JRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGmbjluNi930d+Eesc8Ko14N1Sh0wHwYDVR0j BBgwFoAU4XpeuUFW3iP83I8pshD83tzwj1IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MTJhM2YyOC04MjczLTRkZDUtODdmYy0xZWYwMGFjYWM5YjYvMC9FMTdBNUVCOTQx NTZERTIzRkNEQzhGMjlCMjEwRkNERURDRjA4RjUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTE3QTVFQjk0MTU2REUyM0ZDREM4RjI5QjIxMEZDREVEQ0Yw OEY1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTEyYTNmMjgtODI3My00ZGQ1LTg3 ZmMtMWVmMDBhY2FjOWI2LzAvRTE3QTVFQjk0MTU2REUyM0ZDREM4RjI5QjIxMEZD REVEQ0YwOEY1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFXn1cvMoljUECPEzpoD8khTIKUHwJQfMqHu ovpy2AA9p6KLCL0CibY6HD5thnN+DbvwDh/2RVeSIzXnbWSQCNxKKzf9oVye5H0d bJ5O3vBRVDl1+9Ry4vdhwo5LQ9+9o0nipNfXTf7ZHOd7XWTfk/pL7m01DHR+W5OZ GPSvrxgQHt5Le9tnT2AIu9dF57enxeBZZG+IM2XtBdPXV/jYXh3i2kz1LVafniPV B7bMCZ2NYB9BCQEwX5aJjOBDmyNtJYwAEyvlvJIWOSLDKtakp1CKyU3KePDarWYO 5dCuRZ5C1p/J/dTngAcOjqEiunYeKQj09TTCGX04Ku2IEtJk4IU= -----END CERTIFICATE-----Generated at Wed Apr 23 11:12:12 2025 by rpki-client on console.sobornost.net