$ rpki-client -vvf repo-rpki.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/535C0FE8EE7BE7E1C8897B031858C36344038072.mft File: 535C0FE8EE7BE7E1C8897B031858C36344038072.mft (raw, json) Hash identifier: NZgFdY72v0WC8otMgTH+YoALJmu71dMdxXUcgGsdErc= Subject key identifier: 2A:B8:87:C3:61:DF:B3:DB:BE:86:F7:F3:AE:3E:06:D0:FF:87:60:F8 Authority key identifier: 53:5C:0F:E8:EE:7B:E7:E1:C8:89:7B:03:18:58:C3:63:44:03:80:72 Certificate issuer: /CN=535C0FE8EE7BE7E1C8897B031858C36344038072 Certificate serial: 41B855ACECADDA17195ED2E08636503AF4297BDB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/535C0FE8EE7BE7E1C8897B031858C36344038072.cer Subject info access: rsync://repo-rpki.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/535C0FE8EE7BE7E1C8897B031858C36344038072.mft Manifest number: 5A Signing time: Thu 24 Apr 2025 08:30:51 +0000 Manifest this update: Thu 24 Apr 2025 08:25:51 +0000 Manifest next update: Sun 27 Apr 2025 13:21:51 +0000 Files and hashes: 1: 3130332e3137392e31332e302f32342d3234203d3e20313439333339.roa (hash: RrMbT80FUemGe695AxppDWAP2LkCS0fiZaNilGLH1lg=) 2: 535C0FE8EE7BE7E1C8897B031858C36344038072.crl (hash: 6BIYSp7HcLypaQgrO+D5onVtjKNxuqhiCLpVeTcvt+4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/535C0FE8EE7BE7E1C8897B031858C36344038072.crl rsync://repo-rpki.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/535C0FE8EE7BE7E1C8897B031858C36344038072.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/535C0FE8EE7BE7E1C8897B031858C36344038072.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 10:42:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:b8:55:ac:ec:ad:da:17:19:5e:d2:e0:86:36:50:3a:f4:29:7b:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=535C0FE8EE7BE7E1C8897B031858C36344038072 Validity Not Before: Apr 24 08:25:51 2025 GMT Not After : Apr 27 13:21:51 2025 GMT Subject: CN=2AB887C361DFB3DBBE86F7F3AE3E06D0FF8760F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:41:98:ac:a1:56:08:f9:04:7d:10:9f:c4:c4: 84:31:75:c0:01:67:48:61:85:1a:75:1b:5e:d5:07: 24:1b:6e:60:19:ba:16:1d:47:86:85:9a:31:cf:7c: f1:e6:78:32:fd:a3:be:1c:e0:de:28:16:30:46:2e: 1c:02:0a:04:e7:13:c1:9a:85:c3:35:20:19:bc:84: 81:a7:1b:6b:ab:c0:af:0a:44:1f:88:81:f1:43:0d: 37:6a:68:e7:a3:df:2d:54:70:da:43:7f:36:ee:26: 63:0a:5c:4a:c9:f9:2a:41:c2:cb:78:99:10:ea:08: 4e:95:db:d3:1a:4c:fe:1c:4c:d7:1c:f4:53:b2:2a: 2c:76:a7:7e:37:73:49:1e:c4:61:19:98:f2:e8:39: 00:66:3e:ed:7c:9d:d8:e4:43:d3:c7:00:21:7d:a5: 03:51:54:75:88:ad:ec:49:e9:06:11:62:eb:4d:14: 9e:0c:a0:5a:73:e8:4b:a9:8b:c4:5a:07:f9:a7:ef: 0f:d1:2e:e0:a5:56:8c:b8:58:fc:2e:71:42:a8:07: 14:45:42:5c:f6:00:71:d3:22:c6:05:ae:fa:8d:bd: ce:5c:97:10:84:c4:10:a4:6b:49:bb:e4:e6:b4:5b: 0a:1a:64:57:b9:31:4b:52:13:6e:bb:70:62:77:a2: ef:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:B8:87:C3:61:DF:B3:DB:BE:86:F7:F3:AE:3E:06:D0:FF:87:60:F8 X509v3 Authority Key Identifier: keyid:53:5C:0F:E8:EE:7B:E7:E1:C8:89:7B:03:18:58:C3:63:44:03:80:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/535C0FE8EE7BE7E1C8897B031858C36344038072.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/535C0FE8EE7BE7E1C8897B031858C36344038072.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/535C0FE8EE7BE7E1C8897B031858C36344038072.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:93:da:63:bc:20:cf:1a:06:c6:f7:f3:3a:87:11:01:b7:3b: db:1a:6a:c0:e3:9c:5d:4d:51:42:8d:1b:0d:55:b2:d3:71:21: 53:6e:05:60:e0:6c:8e:43:6b:81:7e:e2:fa:c9:4f:c5:b1:5b: 1d:b7:9d:07:55:54:24:a2:36:4a:fc:7a:a9:9e:d6:d0:e4:4a: 9c:27:a1:1d:35:3b:3e:84:cb:c2:0d:7e:6b:68:9f:4a:b2:a8: 19:8a:96:d3:7e:bf:9b:8e:aa:d1:fb:2e:43:ff:1f:4a:c4:a8: 29:25:b9:5d:93:75:3d:8c:df:08:42:b2:40:44:64:fc:9f:46: af:80:8b:c5:da:a5:6b:83:45:e2:c3:f7:37:fb:7d:80:78:05: 13:f5:9d:b0:47:65:0d:c2:db:9e:8f:ac:f2:ed:a9:a5:3b:95: 2c:a6:0c:3b:d1:1a:bb:bc:73:84:80:a6:cd:6a:e4:41:05:9a: 3a:ac:18:3d:7e:17:4f:48:da:5e:1b:66:8a:81:a1:10:1b:2c: fd:59:06:35:61:39:f0:cd:6d:29:32:e8:43:78:1c:7b:da:34: 5d:2b:40:36:a5:ed:23:5d:ca:a1:a4:27:37:64:ce:61:fe:da: 9d:2c:14:09:00:67:d1:6d:7e:27:60:be:1e:85:49:1f:51:4e: 58:ba:be:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQbhVrOyt2hcZXtLghjZQOvQpe9swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTM1QzBGRThFRTdCRTdFMUM4ODk3QjAzMTg1OEMzNjM0 NDAzODA3MjAeFw0yNTA0MjQwODI1NTFaFw0yNTA0MjcxMzIxNTFaMDMxMTAvBgNV BAMTKDJBQjg4N0MzNjFERkIzREJCRTg2RjdGM0FFM0UwNkQwRkY4NzYwRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfQZisoVYI+QR9EJ/ExIQxdcAB Z0hhhRp1G17VByQbbmAZuhYdR4aFmjHPfPHmeDL9o74c4N4oFjBGLhwCCgTnE8Ga hcM1IBm8hIGnG2urwK8KRB+IgfFDDTdqaOej3y1UcNpDfzbuJmMKXErJ+SpBwst4 mRDqCE6V29MaTP4cTNcc9FOyKix2p343c0kexGEZmPLoOQBmPu18ndjkQ9PHACF9 pQNRVHWIrexJ6QYRYutNFJ4MoFpz6Eupi8RaB/mn7w/RLuClVoy4WPwucUKoBxRF Qlz2AHHTIsYFrvqNvc5clxCExBCka0m75Oa0WwoaZFe5MUtSE267cGJ3ou+LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKriHw2Hfs9u+hvfzrj4G0P+HYPgwHwYDVR0j BBgwFoAUU1wP6O575+HIiXsDGFjDY0QDgHIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MzQ1NGQwYi0xYWQ3LTQxZWQtOGU0MC1jY2I2NjY0M2FjZjAvMC81MzVDMEZFOEVF N0JFN0UxQzg4OTdCMDMxODU4QzM2MzQ0MDM4MDcyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTM1QzBGRThFRTdCRTdFMUM4ODk3QjAzMTg1OEMzNjM0NDAz ODA3Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTM0NTRkMGItMWFkNy00MWVkLThl NDAtY2NiNjY2NDNhY2YwLzAvNTM1QzBGRThFRTdCRTdFMUM4ODk3QjAzMTg1OEMz NjM0NDAzODA3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABmT2mO8IM8aBsb38zqHEQG3O9saasDjnF1N UUKNGw1VstNxIVNuBWDgbI5Da4F+4vrJT8WxWx23nQdVVCSiNkr8eqme1tDkSpwn oR01Oz6Ey8INfmton0qyqBmKltN+v5uOqtH7LkP/H0rEqCkluV2TdT2M3whCskBE ZPyfRq+Ai8XapWuDReLD9zf7fYB4BRP1nbBHZQ3C256PrPLtqaU7lSymDDvRGru8 c4SAps1q5EEFmjqsGD1+F09I2l4bZoqBoRAbLP1ZBjVhOfDNbSky6EN4HHvaNF0r QDal7SNdyqGkJzdkzmH+2p0sFAkAZ9Ftfidgvh6FSR9RTli6vtk= -----END CERTIFICATE-----Generated at Thu Apr 24 11:25:12 2025 by rpki-client on console.sobornost.net