$ rpki-client -vvf repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft File: 5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft (raw, json) Hash identifier: Y6Q51qeAUB3CW0SdMg1A0I2C0GHSPuuGSDHQvK5IaDE= Subject key identifier: 21:01:9F:8D:6E:97:D3:B3:BD:5C:B8:C2:96:65:C0:D3:68:EE:A9:56 Authority key identifier: 5A:40:FD:19:E2:DD:53:80:CB:6E:50:2F:16:DB:22:2F:90:89:55:2B Certificate issuer: /CN=5A40FD19E2DD5380CB6E502F16DB222F9089552B Certificate serial: 3336EEDEE906B42C52050E5712CDC9B571A26A43 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A40FD19E2DD5380CB6E502F16DB222F9089552B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft Manifest number: 01F4 Signing time: Thu 24 Apr 2025 10:42:17 +0000 Manifest this update: Thu 24 Apr 2025 10:37:17 +0000 Manifest next update: Sun 27 Apr 2025 17:47:17 +0000 Files and hashes: 1: 3130332e3138342e31382e302f32342d3234203d3e203438343635.roa (hash: kfMJp93aHLtwVeCUrmYfQM5gVAHXLSAuJM9cgnbx5Nc=) 2: 3130332e3138342e31392e302f32342d3234203d3e20313439363735.roa (hash: i4XCxm32VCNZ/zacmmSjbAzxATWwcS43fZzejb3pvRo=) 3: 5A40FD19E2DD5380CB6E502F16DB222F9089552B.crl (hash: v+8xXa8BMqCbperMJYriMfi01qAa9d69gkQUJR3c57o=) 4: 3130332e3138342e31382e302f32332d3233203d3e20313439363735.roa (hash: 8hPXkuW34xkK66/r5oL+jYYUmOueTjKMrZh36goENDw=) 5: 3130332e3138342e31392e302f32342d3234203d3e203438343635.roa (hash: oRDI+y7+2vAjOMCym2uKEk4t0/jm1uVrqQN7OiYXy0E=) 6: 3130332e3138342e31382e302f32342d3234203d3e20313439363735.roa (hash: 4BUtx10alv/ZZ9FJolZJ3I8WhlB5v1F5iKW6alQrr7c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.crl rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A40FD19E2DD5380CB6E502F16DB222F9089552B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 17:17:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:36:ee:de:e9:06:b4:2c:52:05:0e:57:12:cd:c9:b5:71:a2:6a:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A40FD19E2DD5380CB6E502F16DB222F9089552B Validity Not Before: Apr 24 10:37:17 2025 GMT Not After : Apr 27 17:47:17 2025 GMT Subject: CN=21019F8D6E97D3B3BD5CB8C29665C0D368EEA956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1a:21:f6:dc:f8:17:fc:ed:26:5e:59:df:dd: 37:47:04:de:cd:5e:f5:d0:5a:4f:68:0e:9e:51:22: 95:f2:06:0c:56:b9:46:31:2d:d0:78:fc:81:8d:9a: 65:e0:0c:42:53:ce:03:d3:67:fb:24:2b:83:24:c8: 98:b3:1e:6b:ce:eb:54:a0:47:59:51:b0:8a:81:0a: 50:7c:88:97:a1:78:01:2a:9c:06:60:22:b7:6b:f5: 50:b4:d4:68:4e:fa:c1:f7:f5:bd:eb:7b:b6:3c:8f: 80:76:eb:99:26:f3:11:c7:79:79:26:b3:04:72:17: 9b:f9:b7:ee:ec:48:98:ab:24:2f:13:6f:e6:d4:8b: eb:a1:d0:59:c6:c4:03:f0:74:9a:c4:f5:40:be:50: 13:ec:83:3a:40:f7:8e:42:89:04:7f:de:c4:41:3c: b1:d1:f8:ae:3b:ff:b5:a4:d7:73:49:52:70:41:92: 97:d7:96:31:dc:34:72:a9:be:7f:9b:0e:66:7d:48: f7:28:77:19:26:91:c1:43:57:db:36:d3:0e:a7:d8: 8b:76:01:e2:85:52:8f:31:b3:92:c0:d1:6b:36:bc: ed:ec:61:f3:80:bc:87:97:60:d3:cc:dd:9a:55:32: 90:f0:ae:ad:52:15:0c:67:ba:47:d8:bc:ec:a6:e3: ef:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:01:9F:8D:6E:97:D3:B3:BD:5C:B8:C2:96:65:C0:D3:68:EE:A9:56 X509v3 Authority Key Identifier: keyid:5A:40:FD:19:E2:DD:53:80:CB:6E:50:2F:16:DB:22:2F:90:89:55:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A40FD19E2DD5380CB6E502F16DB222F9089552B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:84:a1:ee:fb:a8:0b:0a:6a:33:5e:8e:2d:3b:21:54:c4:03: a6:5d:fb:f2:26:31:71:e7:89:11:55:bc:49:aa:39:1e:60:a2: 2b:e0:63:b3:f2:95:b5:dc:0d:4e:49:02:74:f7:7c:35:a5:17: f5:80:4f:f1:b9:0d:49:01:02:ee:19:db:ba:02:6c:7f:04:51: ba:f9:39:f8:89:e1:b0:12:46:8c:fa:6c:5a:67:f7:c6:e9:55: 58:10:96:95:e6:e4:6a:1a:4f:4c:3f:c8:2e:31:4b:e2:09:00: 97:ec:07:6c:ee:14:f9:c2:32:f1:b6:95:74:05:75:e9:91:a5: 18:7c:50:3c:bf:d5:3b:b7:61:7a:18:33:43:c9:8f:6a:b5:26: 08:b3:c0:08:12:a9:1a:a7:43:01:c6:76:89:9c:9a:c4:e4:7c: 69:69:f7:57:bb:69:5a:06:81:8c:58:c6:7c:22:75:cc:c8:dd: 67:5b:40:95:48:08:fd:b5:87:14:4d:c1:ec:2f:86:08:46:6e: ff:ea:16:09:9a:c8:28:fa:b1:49:c4:44:d7:04:23:a2:c5:1c: 02:d0:4f:8b:6f:fb:27:b3:ce:d2:2e:b0:cb:30:5e:fc:22:00: 7c:54:4a:a7:7f:f3:5b:d6:54:f0:89:16:ef:e3:16:c8:06:52: 1f:7c:45:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMzbu3ukGtCxSBQ5XEs3JtXGiakMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUE0MEZEMTlFMkRENTM4MENCNkU1MDJGMTZEQjIyMkY5 MDg5NTUyQjAeFw0yNTA0MjQxMDM3MTdaFw0yNTA0MjcxNzQ3MTdaMDMxMTAvBgNV BAMTKDIxMDE5RjhENkU5N0QzQjNCRDVDQjhDMjk2NjVDMEQzNjhFRUE5NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJGiH23PgX/O0mXlnf3TdHBN7N XvXQWk9oDp5RIpXyBgxWuUYxLdB4/IGNmmXgDEJTzgPTZ/skK4MkyJizHmvO61Sg R1lRsIqBClB8iJeheAEqnAZgIrdr9VC01GhO+sH39b3re7Y8j4B265km8xHHeXkm swRyF5v5t+7sSJirJC8Tb+bUi+uh0FnGxAPwdJrE9UC+UBPsgzpA945CiQR/3sRB PLHR+K47/7Wk13NJUnBBkpfXljHcNHKpvn+bDmZ9SPcodxkmkcFDV9s20w6n2It2 AeKFUo8xs5LA0Ws2vO3sYfOAvIeXYNPM3ZpVMpDwrq1SFQxnukfYvOym4+9XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIQGfjW6X07O9XLjClmXA02juqVYwHwYDVR0j BBgwFoAUWkD9GeLdU4DLblAvFtsiL5CJVSswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MGQ5MTRlZi0wYjFmLTQ5MGItODA4ZC1hMjdiODNmZjlhM2UvMC81QTQwRkQxOUUy REQ1MzgwQ0I2RTUwMkYxNkRCMjIyRjkwODk1NTJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUE0MEZEMTlFMkRENTM4MENCNkU1MDJGMTZEQjIyMkY5MDg5 NTUyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjBkOTE0ZWYtMGIxZi00OTBiLTgw OGQtYTI3YjgzZmY5YTNlLzAvNUE0MEZEMTlFMkRENTM4MENCNkU1MDJGMTZEQjIy MkY5MDg5NTUyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHmEoe77qAsKajNeji07IVTEA6Zd+/ImMXHn iRFVvEmqOR5goivgY7PylbXcDU5JAnT3fDWlF/WAT/G5DUkBAu4Z27oCbH8EUbr5 OfiJ4bASRoz6bFpn98bpVVgQlpXm5GoaT0w/yC4xS+IJAJfsB2zuFPnCMvG2lXQF demRpRh8UDy/1Tu3YXoYM0PJj2q1JgizwAgSqRqnQwHGdomcmsTkfGlp91e7aVoG gYxYxnwidczI3WdbQJVICP21hxRNwewvhghGbv/qFgmayCj6sUnERNcEI6LFHALQ T4tv+yezztIusMswXvwiAHxUSqd/81vWVPCJFu/jFsgGUh98Re8= -----END CERTIFICATE-----Generated at Thu Apr 24 13:39:00 2025 by rpki-client on console.sobornost.net