$ rpki-client -vvf repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.mft File: 5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.mft (raw, json) Hash identifier: cZTBOHC0nZlf+lcbkXqN4qjm2A3oS7OW6XhE43VC0K4= Subject key identifier: 45:06:54:B5:D1:56:D2:5B:44:29:04:A9:03:C8:A6:C8:BF:EE:B9:60 Authority key identifier: 57:87:AD:66:59:EA:8A:5E:40:18:87:6F:5F:9D:BD:9A:AA:F9:CA:1D Certificate issuer: /CN=5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D Certificate serial: 105D392CF2EEBC5AE08E5CD5298D2126423C799F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.mft Manifest number: 01A4 Signing time: Thu 24 Apr 2025 00:21:43 +0000 Manifest this update: Thu 24 Apr 2025 00:16:43 +0000 Manifest next update: Sun 27 Apr 2025 04:15:43 +0000 Files and hashes: 1: 323030313a6466323a663130303a3a2f34382d3438203d3e20313336383632.roa (hash: ECBhF+e4+If0A3tMP/p9517WUpUqU+SxVkyIhiuFLnc=) 2: 3130332e3130322e3235302e302f32342d3234203d3e20313336383632.roa (hash: SJWCctw3wDy04eyr8uGtaxTxeDcgqn25/ejSSAcBCus=) 3: 5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.crl (hash: oKLa1Bk+KsPgm5OVAc7ajtCjnxEalZJ6/vVJVIyd8zo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.crl rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 04:15:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:5d:39:2c:f2:ee:bc:5a:e0:8e:5c:d5:29:8d:21:26:42:3c:79:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D Validity Not Before: Apr 24 00:16:43 2025 GMT Not After : Apr 27 04:15:43 2025 GMT Subject: CN=450654B5D156D25B442904A903C8A6C8BFEEB960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:07:19:29:02:03:f4:7b:b6:1e:70:4f:7f:0d: 8d:e8:5a:83:7c:f1:fd:fe:c1:a4:3f:56:7f:6e:01: c9:1c:bc:74:93:23:ff:10:58:f8:7c:8f:d8:e6:24: 83:7e:dd:80:76:40:0c:62:b3:f8:59:6f:82:96:29: 47:66:32:bf:27:14:93:23:f0:e8:df:bf:b7:90:d6: 4a:dd:8c:b1:b6:d2:dc:a9:41:34:ba:5c:85:9b:b5: 7b:6f:f9:b7:a0:7b:e9:4a:e3:bb:12:0b:8b:ea:16: 1e:f2:15:30:ed:25:d7:20:ee:91:ff:a9:60:d9:d2: 0f:76:82:d6:5d:7f:ce:3c:c1:ce:dd:4d:82:a2:cc: 9a:65:f2:4e:64:9f:32:89:c2:07:af:cc:80:1a:06: 5e:41:29:d0:54:8f:be:87:4e:a9:53:b9:f5:53:31: 62:62:41:c9:95:f1:f2:81:2f:9b:5a:ba:99:3e:3a: b1:c3:6e:b0:84:36:70:9b:91:bc:38:a3:b4:93:f9: 06:d2:1c:ca:f9:63:32:66:32:c5:2a:47:6e:55:7d: 8b:66:f4:08:3d:95:d0:d7:d3:7e:3b:4d:5b:95:cf: 39:a0:64:32:5a:ef:0d:1b:fd:04:1b:a7:22:df:67: ca:3f:2b:3f:35:a0:94:ff:b8:c8:0b:0c:49:85:fe: 97:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:06:54:B5:D1:56:D2:5B:44:29:04:A9:03:C8:A6:C8:BF:EE:B9:60 X509v3 Authority Key Identifier: keyid:57:87:AD:66:59:EA:8A:5E:40:18:87:6F:5F:9D:BD:9A:AA:F9:CA:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:7d:93:f9:9d:0b:85:4a:61:df:8a:24:28:cc:c8:43:5f:c4: 8e:b3:b1:6b:ce:23:73:20:82:cf:51:ca:a9:18:24:21:c2:0d: 31:d5:d2:aa:e0:62:e9:9f:23:ea:6b:41:3e:ac:33:43:26:59: bd:2a:eb:8f:0f:d4:4a:64:f6:2f:36:b6:f3:59:dd:5d:eb:ef: b6:8e:0a:ff:27:13:6a:37:97:ae:97:28:04:bf:88:9f:6b:1a: 40:05:54:2b:28:91:2e:c7:9f:8c:e9:f2:8e:fc:9a:a7:7f:42: 1f:ab:c8:3f:19:93:5b:8a:2a:8a:66:65:37:cf:8a:b9:ca:e1: bc:7c:a5:77:fc:19:f7:00:6a:e7:01:35:45:68:6f:6b:0f:fb: a0:61:37:5a:5d:4b:b3:f7:8c:bb:c3:66:73:46:34:1a:88:6f: b0:32:92:05:95:54:93:ce:16:2d:b2:da:23:69:89:59:23:13: 48:a0:2e:0e:c1:4e:85:a2:87:b2:cb:85:eb:cc:20:b2:6e:3b: cb:ca:e8:9d:20:fc:6e:92:3b:9d:9f:c3:ef:0d:17:65:73:69: 82:db:b9:5a:eb:61:93:f1:24:40:c2:e8:5b:07:66:8a:5f:55: 4d:cd:62:a1:39:a2:03:be:ec:3f:cb:17:05:ea:73:03:6c:13: 10:c4:4a:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEF05LPLuvFrgjlzVKY0hJkI8eZ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc4N0FENjY1OUVBOEE1RTQwMTg4NzZGNUY5REJEOUFB QUY5Q0ExRDAeFw0yNTA0MjQwMDE2NDNaFw0yNTA0MjcwNDE1NDNaMDMxMTAvBgNV BAMTKDQ1MDY1NEI1RDE1NkQyNUI0NDI5MDRBOTAzQzhBNkM4QkZFRUI5NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNBxkpAgP0e7YecE9/DY3oWoN8 8f3+waQ/Vn9uAckcvHSTI/8QWPh8j9jmJIN+3YB2QAxis/hZb4KWKUdmMr8nFJMj 8Ojfv7eQ1krdjLG20typQTS6XIWbtXtv+bege+lK47sSC4vqFh7yFTDtJdcg7pH/ qWDZ0g92gtZdf848wc7dTYKizJpl8k5knzKJwgevzIAaBl5BKdBUj76HTqlTufVT MWJiQcmV8fKBL5taupk+OrHDbrCENnCbkbw4o7ST+QbSHMr5YzJmMsUqR25VfYtm 9Ag9ldDX0347TVuVzzmgZDJa7w0b/QQbpyLfZ8o/Kz81oJT/uMgLDEmF/pfzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURQZUtdFW0ltEKQSpA8imyL/uuWAwHwYDVR0j BBgwFoAUV4etZlnqil5AGIdvX529mqr5yh0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NWI4ZTc3NC0xNjgzLTQ1NmQtYmJjMC0zNDMyMjVmMTdmNGMvMC81Nzg3QUQ2NjU5 RUE4QTVFNDAxODg3NkY1RjlEQkQ5QUFBRjlDQTFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTc4N0FENjY1OUVBOEE1RTQwMTg4NzZGNUY5REJEOUFBQUY5 Q0ExRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTViOGU3NzQtMTY4My00NTZkLWJi YzAtMzQzMjI1ZjE3ZjRjLzAvNTc4N0FENjY1OUVBOEE1RTQwMTg4NzZGNUY5REJE OUFBQUY5Q0ExRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEJ9k/mdC4VKYd+KJCjMyENfxI6zsWvOI3Mg gs9RyqkYJCHCDTHV0qrgYumfI+prQT6sM0MmWb0q648P1Epk9i82tvNZ3V3r77aO Cv8nE2o3l66XKAS/iJ9rGkAFVCsokS7Hn4zp8o78mqd/Qh+ryD8Zk1uKKopmZTfP irnK4bx8pXf8GfcAaucBNUVob2sP+6BhN1pdS7P3jLvDZnNGNBqIb7AykgWVVJPO Fi2y2iNpiVkjE0igLg7BToWih7LLhevMILJuO8vK6J0g/G6SO52fw+8NF2VzaYLb uVrrYZPxJEDC6FsHZopfVU3NYqE5ogO+7D/LFwXqcwNsExDESoE= -----END CERTIFICATE-----Generated at Thu Apr 24 04:31:49 2025 by rpki-client on console.sobornost.net