$ rpki-client -vvf repo-rpki.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/5715F968646EAE08576ECCEF3FABAC250A40A47B.mft File: 5715F968646EAE08576ECCEF3FABAC250A40A47B.mft (raw, json) Hash identifier: sC272eyYvU89+zxgp7sIu+z5LIeNmF7uYL5kZLLlizA= Subject key identifier: 4B:D9:56:B3:E6:76:CD:15:45:08:78:F5:DD:1C:1A:5D:01:C0:A2:C8 Authority key identifier: 57:15:F9:68:64:6E:AE:08:57:6E:CC:EF:3F:AB:AC:25:0A:40:A4:7B Certificate issuer: /CN=5715F968646EAE08576ECCEF3FABAC250A40A47B Certificate serial: 31B6AF0943CE91A881C45751D2892DDDAA9339CD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5715F968646EAE08576ECCEF3FABAC250A40A47B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/5715F968646EAE08576ECCEF3FABAC250A40A47B.mft Manifest number: 04C5 Signing time: Thu 24 Apr 2025 10:50:43 +0000 Manifest this update: Thu 24 Apr 2025 10:45:43 +0000 Manifest next update: Sun 27 Apr 2025 20:49:43 +0000 Files and hashes: 1: 3130332e31372e3139322e302f32342d3234203d3e20313331373836.roa (hash: 2DCQXNiL7phLKBT6bybfo5zFbfax4N+vxkP7mfhOoTY=) 2: 5715F968646EAE08576ECCEF3FABAC250A40A47B.crl (hash: FLT/fmP0TL+EL2QHiPDmtK55Nz6QSdPlLV1kACEVRdg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/5715F968646EAE08576ECCEF3FABAC250A40A47B.crl rsync://repo-rpki.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/5715F968646EAE08576ECCEF3FABAC250A40A47B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5715F968646EAE08576ECCEF3FABAC250A40A47B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 17:17:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:b6:af:09:43:ce:91:a8:81:c4:57:51:d2:89:2d:dd:aa:93:39:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5715F968646EAE08576ECCEF3FABAC250A40A47B Validity Not Before: Apr 24 10:45:43 2025 GMT Not After : Apr 27 20:49:43 2025 GMT Subject: CN=4BD956B3E676CD15450878F5DD1C1A5D01C0A2C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f1:e2:e2:72:a8:c8:06:c3:25:df:6e:e7:8e: 6f:0b:11:41:5e:d4:de:37:1a:d7:4f:47:2a:cf:5f: 68:47:6e:a4:1d:67:1b:bd:d1:86:ab:f0:01:01:12: 08:6e:58:ea:47:6f:91:9d:8f:bc:bb:c4:97:88:ae: 63:9a:f8:b2:c2:70:26:ba:bd:e1:86:25:05:73:b0: f7:24:06:75:7e:de:0e:55:5a:60:a8:c3:48:e9:a2: 58:11:5c:dc:a4:f7:d9:d9:84:48:37:6e:d8:c7:bb: 0a:dc:f8:31:22:e6:16:db:03:d2:8f:b2:da:ba:78: c5:d9:f0:2b:05:3b:04:89:f3:05:3b:8f:63:fe:5f: e1:94:6c:12:a7:26:8b:53:64:7c:94:84:22:03:d0: 18:a2:bc:27:2e:e2:07:f3:aa:e7:c8:c0:c1:37:35: 73:0a:53:c5:6e:3d:ac:24:fe:12:ec:8a:c2:ff:c3: 06:25:94:6a:a3:8e:d5:f7:22:b1:77:e0:18:51:1a: 1e:b5:3e:d2:6b:c0:c2:72:2e:80:81:57:b0:56:e7: 0d:48:32:4c:49:c7:3f:27:34:ff:af:b4:e8:22:ed: 50:37:87:2b:51:4c:52:b0:89:c6:4e:5d:b7:9f:8e: ad:3f:89:2d:2f:a5:31:86:8d:ed:51:cb:f1:93:24: 0f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:D9:56:B3:E6:76:CD:15:45:08:78:F5:DD:1C:1A:5D:01:C0:A2:C8 X509v3 Authority Key Identifier: keyid:57:15:F9:68:64:6E:AE:08:57:6E:CC:EF:3F:AB:AC:25:0A:40:A4:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/5715F968646EAE08576ECCEF3FABAC250A40A47B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5715F968646EAE08576ECCEF3FABAC250A40A47B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/5715F968646EAE08576ECCEF3FABAC250A40A47B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:63:77:c2:ef:de:0b:c0:4d:ec:60:bc:e8:ae:0b:03:ff:d5: 34:55:cb:fa:00:fc:59:d1:47:bc:11:a5:68:4f:15:1c:9e:b7: 00:d3:05:7d:6e:93:ff:38:4f:15:ee:92:4d:9d:68:c7:79:29: 80:37:73:ca:52:19:99:7c:2b:9a:a4:1f:82:bd:76:4d:ff:95: 87:63:0f:1c:14:dc:cb:c7:c5:d8:1f:90:ea:8d:26:3b:84:f9: 12:0e:4d:7d:e2:0d:a7:a3:cf:3f:1b:0e:68:ba:ea:b4:9a:18: 0a:0e:52:9e:ff:03:98:4b:7f:e5:4f:0e:1f:11:21:83:28:27: d2:25:70:c7:4b:72:78:63:43:3d:6c:be:12:a9:a2:00:21:11: b7:98:62:7b:95:cf:34:46:b2:2d:8b:70:66:9a:73:e8:80:2d: c3:71:17:d5:73:ab:94:c3:05:44:21:b8:49:bd:22:f7:4b:76: 56:d0:94:a8:b9:76:83:be:e2:f3:10:fe:56:c9:30:9c:20:38: e9:88:d6:9d:1a:d3:e2:80:be:c2:d8:12:5c:45:55:ad:ce:1d: d7:5d:7d:6d:6b:c1:56:2e:8e:c0:ad:63:82:24:75:77:e4:9e: 4e:1b:ba:f5:60:84:df:92:89:5b:be:1f:49:60:96:2c:35:e7: 79:18:45:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMbavCUPOkaiBxFdR0okt3aqTOc0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTcxNUY5Njg2NDZFQUUwODU3NkVDQ0VGM0ZBQkFDMjUw QTQwQTQ3QjAeFw0yNTA0MjQxMDQ1NDNaFw0yNTA0MjcyMDQ5NDNaMDMxMTAvBgNV BAMTKDRCRDk1NkIzRTY3NkNEMTU0NTA4NzhGNUREMUMxQTVEMDFDMEEyQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC18eLicqjIBsMl327njm8LEUFe 1N43GtdPRyrPX2hHbqQdZxu90Yar8AEBEghuWOpHb5Gdj7y7xJeIrmOa+LLCcCa6 veGGJQVzsPckBnV+3g5VWmCow0jpolgRXNyk99nZhEg3btjHuwrc+DEi5hbbA9KP stq6eMXZ8CsFOwSJ8wU7j2P+X+GUbBKnJotTZHyUhCID0BiivCcu4gfzqufIwME3 NXMKU8VuPawk/hLsisL/wwYllGqjjtX3IrF34BhRGh61PtJrwMJyLoCBV7BW5w1I MkxJxz8nNP+vtOgi7VA3hytRTFKwicZOXbefjq0/iS0vpTGGje1Ry/GTJA/9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS9lWs+Z2zRVFCHj13RwaXQHAosgwHwYDVR0j BBgwFoAUVxX5aGRurghXbszvP6usJQpApHswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTUxNGQ2MS05OWZmLTQyYTktYmE5YS01OTYxZGQ2OGRiNjUvMC81NzE1Rjk2ODY0 NkVBRTA4NTc2RUNDRUYzRkFCQUMyNTBBNDBBNDdCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTcxNUY5Njg2NDZFQUUwODU3NkVDQ0VGM0ZBQkFDMjUwQTQw QTQ3Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTE1MTRkNjEtOTlmZi00MmE5LWJh OWEtNTk2MWRkNjhkYjY1LzAvNTcxNUY5Njg2NDZFQUUwODU3NkVDQ0VGM0ZBQkFD MjUwQTQwQTQ3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIljd8Lv3gvATexgvOiuCwP/1TRVy/oA/FnR R7wRpWhPFRyetwDTBX1uk/84TxXukk2daMd5KYA3c8pSGZl8K5qkH4K9dk3/lYdj DxwU3MvHxdgfkOqNJjuE+RIOTX3iDaejzz8bDmi66rSaGAoOUp7/A5hLf+VPDh8R IYMoJ9IlcMdLcnhjQz1svhKpogAhEbeYYnuVzzRGsi2LcGaac+iALcNxF9Vzq5TD BUQhuEm9IvdLdlbQlKi5doO+4vMQ/lbJMJwgOOmI1p0a0+KAvsLYElxFVa3OHddd fW1rwVYujsCtY4IkdXfknk4buvVghN+SiVu+H0lgliw153kYRYU= -----END CERTIFICATE-----Generated at Thu Apr 24 13:39:00 2025 by rpki-client on console.sobornost.net