$ rpki-client -vvf repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft File: 35526D55C5F4431129EA7CE9304705CE395693D9.mft (raw, json) Hash identifier: XxXO0453KbG6iDF46V6Fr06l2zXTDVvafPFGxrV2AXI= Subject key identifier: 7B:C5:DD:E3:05:D6:40:5E:63:9B:11:F1:CE:59:BE:F0:87:00:0B:3B Authority key identifier: 35:52:6D:55:C5:F4:43:11:29:EA:7C:E9:30:47:05:CE:39:56:93:D9 Certificate issuer: /CN=35526D55C5F4431129EA7CE9304705CE395693D9 Certificate serial: 157C21297E6CC48505C6546DE2C5EE42A4215225 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35526D55C5F4431129EA7CE9304705CE395693D9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft Manifest number: 01ED Signing time: Thu 24 Apr 2025 11:41:09 +0000 Manifest this update: Thu 24 Apr 2025 11:36:09 +0000 Manifest next update: Sun 27 Apr 2025 18:20:09 +0000 Files and hashes: 1: 3130332e34302e3132302e302f32322d3234203d3e203633353038.roa (hash: j7pQ9lvXsLKpYkzsKBOIaH3NYQ4OEgdxdRlywIQ3mqE=) 2: 35526D55C5F4431129EA7CE9304705CE395693D9.crl (hash: vOsvxS361jeiVYR+5C6smEsbh7T8Fpn7E8254ZFgWm0=) 3: 323430333a636238303a3a2f33322d3438203d3e203633353038.roa (hash: IasrF8V4s0d2B0vH274O5WAbANIOwdyhR553jezvbtg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.crl rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35526D55C5F4431129EA7CE9304705CE395693D9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 17:17:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:7c:21:29:7e:6c:c4:85:05:c6:54:6d:e2:c5:ee:42:a4:21:52:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35526D55C5F4431129EA7CE9304705CE395693D9 Validity Not Before: Apr 24 11:36:09 2025 GMT Not After : Apr 27 18:20:09 2025 GMT Subject: CN=7BC5DDE305D6405E639B11F1CE59BEF087000B3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:05:fa:d0:e4:91:bc:1b:2a:e8:39:1f:3b:1c: b9:db:38:13:07:31:79:f3:99:ce:5f:20:ea:87:3b: 35:84:de:b8:8f:96:dc:36:9a:fe:c1:dc:c1:cc:e8: 6f:c6:91:ae:53:60:dd:aa:f9:23:a6:a8:7e:07:ff: ee:22:6e:92:34:21:f4:3f:0e:c6:6c:93:8f:db:54: 91:93:1d:78:bb:3a:52:88:69:8f:22:c7:f5:ec:e0: 98:35:f4:55:98:fa:32:80:7c:86:b0:16:54:f8:d1: 06:5b:cf:00:a2:f3:7a:11:cf:a4:58:3c:9a:4b:5e: 40:a4:cc:ba:96:2e:b3:1e:1f:ac:82:de:e1:41:02: 77:fc:ec:8c:38:95:03:1d:ae:d8:c6:6a:af:16:0e: 98:47:2f:e6:52:00:1e:5c:c3:91:41:3d:e1:a5:f8: f4:fa:c1:50:1d:50:fb:e8:f4:d9:cd:46:1c:f3:6c: f7:1c:8c:92:6e:70:09:d4:45:cf:35:8d:46:80:4b: 2c:3f:85:a0:54:03:81:50:67:39:d1:6d:f4:fd:36: ea:43:7a:31:03:5e:15:92:e3:11:ad:21:b3:c6:ca: 76:a8:5d:c0:21:cf:61:07:42:4c:65:1b:ba:9f:2b: 03:63:e0:f1:49:0e:85:2d:99:57:62:c4:13:a6:c0: 72:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:C5:DD:E3:05:D6:40:5E:63:9B:11:F1:CE:59:BE:F0:87:00:0B:3B X509v3 Authority Key Identifier: keyid:35:52:6D:55:C5:F4:43:11:29:EA:7C:E9:30:47:05:CE:39:56:93:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35526D55C5F4431129EA7CE9304705CE395693D9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:a2:7b:ce:ff:03:c2:db:f4:44:05:1d:0a:08:2c:aa:c4:18: 4c:4f:86:7a:fa:0d:f1:8b:14:ee:6d:ba:67:a4:dd:18:08:91: a2:31:2e:9a:27:47:2d:9a:24:d0:a6:5a:22:b3:cd:92:45:2f: 63:87:af:29:18:29:5b:ae:97:2f:11:48:88:d0:04:23:75:f0: 71:ce:79:3a:c7:4b:e9:99:70:a2:59:e5:0a:ea:ba:36:d2:e0: 85:33:e2:4b:3a:ad:1d:2c:02:9f:43:d8:63:a7:1d:1c:d4:52: 1a:a4:3e:28:d8:ba:eb:ca:52:c0:26:46:69:d0:ad:7e:ea:69: 9c:6b:89:c7:68:8b:fc:f3:11:f5:7e:84:38:4e:09:8d:94:e7: 71:55:f7:82:c3:a7:ba:5a:2b:1d:2e:cd:f8:16:67:12:ef:36: 12:60:6e:31:e4:12:5c:33:b0:26:4e:d8:df:b2:b0:5f:c0:fe: 4e:19:6f:3b:9c:54:20:6d:f8:77:d4:4c:28:09:a7:2b:8c:5b: b2:29:9e:43:25:5a:55:28:2c:75:4f:27:ed:b5:e1:fa:a4:59: 5e:c3:29:e5:ca:dc:56:cc:f0:a1:fa:a4:40:a8:f1:e2:07:d0: 42:a8:bd:b1:29:b6:87:d4:76:2c:f0:5c:15:9e:08:55:5a:0a: f8:0a:8b:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFXwhKX5sxIUFxlRt4sXuQqQhUiUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU1MjZENTVDNUY0NDMxMTI5RUE3Q0U5MzA0NzA1Q0Uz OTU2OTNEOTAeFw0yNTA0MjQxMTM2MDlaFw0yNTA0MjcxODIwMDlaMDMxMTAvBgNV BAMTKDdCQzVEREUzMDVENjQwNUU2MzlCMTFGMUNFNTlCRUYwODcwMDBCM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBBfrQ5JG8GyroOR87HLnbOBMH MXnzmc5fIOqHOzWE3riPltw2mv7B3MHM6G/Gka5TYN2q+SOmqH4H/+4ibpI0IfQ/ DsZsk4/bVJGTHXi7OlKIaY8ix/Xs4Jg19FWY+jKAfIawFlT40QZbzwCi83oRz6RY PJpLXkCkzLqWLrMeH6yC3uFBAnf87Iw4lQMdrtjGaq8WDphHL+ZSAB5cw5FBPeGl +PT6wVAdUPvo9NnNRhzzbPccjJJucAnURc81jUaASyw/haBUA4FQZznRbfT9NupD ejEDXhWS4xGtIbPGynaoXcAhz2EHQkxlG7qfKwNj4PFJDoUtmVdixBOmwHLdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe8Xd4wXWQF5jmxHxzlm+8IcACzswHwYDVR0j BBgwFoAUNVJtVcX0QxEp6nzpMEcFzjlWk9kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NGIwYmY1Yi00NTZkLTRlNjItOWY0OC02MTkyMTQ5ZDUyYzIvMC8zNTUyNkQ1NUM1 RjQ0MzExMjlFQTdDRTkzMDQ3MDVDRTM5NTY5M0Q5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU1MjZENTVDNUY0NDMxMTI5RUE3Q0U5MzA0NzA1Q0UzOTU2 OTNEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjRiMGJmNWItNDU2ZC00ZTYyLTlm NDgtNjE5MjE0OWQ1MmMyLzAvMzU1MjZENTVDNUY0NDMxMTI5RUE3Q0U5MzA0NzA1 Q0UzOTU2OTNEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABSie87/A8Lb9EQFHQoILKrEGExPhnr6DfGL FO5tumek3RgIkaIxLponRy2aJNCmWiKzzZJFL2OHrykYKVuuly8RSIjQBCN18HHO eTrHS+mZcKJZ5QrqujbS4IUz4ks6rR0sAp9D2GOnHRzUUhqkPijYuuvKUsAmRmnQ rX7qaZxricdoi/zzEfV+hDhOCY2U53FV94LDp7paKx0uzfgWZxLvNhJgbjHkElwz sCZO2N+ysF/A/k4ZbzucVCBt+HfUTCgJpyuMW7IpnkMlWlUoLHVPJ+214fqkWV7D KeXK3FbM8KH6pECo8eIH0EKovbEptofUdizwXBWeCFVaCvgKi/E= -----END CERTIFICATE-----Generated at Thu Apr 24 13:39:00 2025 by rpki-client on console.sobornost.net