$ rpki-client -vvf repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft File: 52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft (raw, json) Hash identifier: EuU+pwfgaIxhhua42bdU0u5rfnXITxFX+P/gWiFf1Os= Subject key identifier: B2:EF:DC:76:0C:55:18:F8:8D:CD:7D:30:44:98:3C:25:D3:21:A2:0D Authority key identifier: 52:DC:14:12:C6:70:8A:DA:13:DE:89:F1:50:FA:8C:5B:EF:20:5D:CB Certificate issuer: /CN=52DC1412C6708ADA13DE89F150FA8C5BEF205DCB Certificate serial: 0D036F809E16052A661EC1F1DB7694DB8D405445 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft Manifest number: 03A6 Signing time: Thu 24 Apr 2025 12:11:45 +0000 Manifest this update: Thu 24 Apr 2025 12:06:45 +0000 Manifest next update: Sun 27 Apr 2025 22:25:45 +0000 Files and hashes: 1: 52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.crl (hash: VeHlWU8TWCgEyBkcwM3kUkdRYChcu3b3ZZau1tegkzw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.crl rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 17:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:03:6f:80:9e:16:05:2a:66:1e:c1:f1:db:76:94:db:8d:40:54:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52DC1412C6708ADA13DE89F150FA8C5BEF205DCB Validity Not Before: Apr 24 12:06:45 2025 GMT Not After : Apr 27 22:25:45 2025 GMT Subject: CN=B2EFDC760C5518F88DCD7D3044983C25D321A20D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1c:21:63:ac:0d:4c:b2:fd:c7:d5:af:ae:d7: 48:4b:32:a9:3e:03:16:95:c5:e0:3c:64:f8:ee:d5: b7:aa:06:d3:31:85:a1:cb:31:1b:0f:b9:89:30:f5: b7:0d:95:3b:c5:19:13:d2:33:c2:89:67:a0:1b:af: a2:ed:b5:7e:18:9d:96:f2:2a:3f:46:c9:f6:84:1f: 23:76:dc:3e:9f:cd:b3:43:e9:14:d5:b6:ca:97:fb: 9b:77:c2:7c:7a:e8:93:39:de:6d:1d:ce:ea:7f:93: 5f:ab:61:d3:b5:58:60:b9:60:a6:26:ac:0b:52:45: bd:d6:f8:df:c4:c2:88:fc:74:49:75:57:f8:ef:e3: 9f:f0:21:73:d5:aa:36:c2:8c:3f:6d:4a:92:4c:01: ea:37:9b:8f:14:1d:4a:30:7d:53:75:d6:10:54:42: 36:c7:eb:d9:c6:e5:97:be:e8:f2:38:16:39:fc:7d: 4f:b6:64:9d:bc:6a:55:0c:ea:b2:4a:82:df:47:09: 6d:8f:d4:46:fe:35:8f:9a:e5:70:dc:6b:04:d7:83: 8d:0f:d2:5a:41:a8:15:98:31:4c:33:8f:87:76:64: 0d:83:cf:6b:f9:6a:8a:8d:fb:01:82:ef:1c:5d:af: 79:c2:8f:6e:5e:7d:2a:3f:a1:7e:9f:91:84:6c:e5: 7c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:EF:DC:76:0C:55:18:F8:8D:CD:7D:30:44:98:3C:25:D3:21:A2:0D X509v3 Authority Key Identifier: keyid:52:DC:14:12:C6:70:8A:DA:13:DE:89:F1:50:FA:8C:5B:EF:20:5D:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:53:46:28:1a:1a:b5:94:35:61:9a:7f:2e:3f:a1:d5:0e:80: 4f:e3:b7:8f:92:0b:3c:d5:3b:4f:7f:fb:4f:1e:a6:d4:4b:d9: 5c:59:31:22:3b:d7:b2:3a:39:17:bf:e9:cb:99:34:63:e4:27: 1b:21:4f:3f:c2:5e:eb:2c:df:d2:03:a7:8a:0b:9f:28:fb:e7: 9d:d8:e0:69:52:b2:9d:8b:b6:16:a7:ca:a8:34:9e:cc:1c:e9: 17:b8:c4:ad:b1:9d:8f:1a:60:a1:aa:2b:6a:d7:18:97:b4:78: c1:59:de:64:c9:65:7a:0a:d3:9b:18:75:8e:a4:5b:48:62:49: 8c:bb:51:fe:66:cc:c9:61:0a:ae:1f:9c:f3:47:23:7f:d8:bd: cc:93:95:58:22:8c:b9:c5:2b:99:69:45:d0:c9:72:3f:31:2b: 77:98:29:06:a3:24:58:2a:e1:23:77:05:b3:29:9c:33:51:91: 8a:e0:05:1a:cb:ca:76:98:c8:bf:6a:ab:cc:fc:02:35:cb:20: 30:9e:dd:32:ea:48:b9:56:60:49:1e:0e:0c:e6:9f:7d:a3:29: de:d4:69:3f:f5:bf:df:84:7a:08:e4:2f:10:20:e9:36:52:c0: 58:ad:98:aa:7e:d1:0a:6b:a8:8d:16:4b:59:99:7e:37:76:b5: 14:7a:67:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDQNvgJ4WBSpmHsHx23aU241AVEUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJEQzE0MTJDNjcwOEFEQTEzREU4OUYxNTBGQThDNUJF RjIwNURDQjAeFw0yNTA0MjQxMjA2NDVaFw0yNTA0MjcyMjI1NDVaMDMxMTAvBgNV BAMTKEIyRUZEQzc2MEM1NTE4Rjg4RENEN0QzMDQ0OTgzQzI1RDMyMUEyMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0HCFjrA1Msv3H1a+u10hLMqk+ AxaVxeA8ZPju1beqBtMxhaHLMRsPuYkw9bcNlTvFGRPSM8KJZ6Abr6LttX4YnZby Kj9GyfaEHyN23D6fzbND6RTVtsqX+5t3wnx66JM53m0dzup/k1+rYdO1WGC5YKYm rAtSRb3W+N/Ewoj8dEl1V/jv45/wIXPVqjbCjD9tSpJMAeo3m48UHUowfVN11hBU QjbH69nG5Ze+6PI4Fjn8fU+2ZJ28alUM6rJKgt9HCW2P1Eb+NY+a5XDcawTXg40P 0lpBqBWYMUwzj4d2ZA2Dz2v5aoqN+wGC7xxdr3nCj25efSo/oX6fkYRs5XxJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsu/cdgxVGPiNzX0wRJg8JdMhog0wHwYDVR0j BBgwFoAUUtwUEsZwitoT3onxUPqMW+8gXcswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MGZlMTYzYy0xNGQ1LTRlMzEtYWMyMC1jMDRlM2U0NGMzNGYvMC81MkRDMTQxMkM2 NzA4QURBMTNERTg5RjE1MEZBOEM1QkVGMjA1RENCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTJEQzE0MTJDNjcwOEFEQTEzREU4OUYxNTBGQThDNUJFRjIw NURDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTBmZTE2M2MtMTRkNS00ZTMxLWFj MjAtYzA0ZTNlNDRjMzRmLzAvNTJEQzE0MTJDNjcwOEFEQTEzREU4OUYxNTBGQThD NUJFRjIwNURDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFRTRigaGrWUNWGafy4/odUOgE/jt4+SCzzV O09/+08eptRL2VxZMSI717I6ORe/6cuZNGPkJxshTz/CXuss39IDp4oLnyj7553Y 4GlSsp2Lthanyqg0nswc6Re4xK2xnY8aYKGqK2rXGJe0eMFZ3mTJZXoK05sYdY6k W0hiSYy7Uf5mzMlhCq4fnPNHI3/YvcyTlVgijLnFK5lpRdDJcj8xK3eYKQajJFgq 4SN3BbMpnDNRkYrgBRrLynaYyL9qq8z8AjXLIDCe3TLqSLlWYEkeDgzmn32jKd7U aT/1v9+EegjkLxAg6TZSwFitmKp+0QprqI0WS1mZfjd2tRR6Z90= -----END CERTIFICATE-----Generated at Thu Apr 24 15:50:15 2025 by rpki-client on console.sobornost.net