$ rpki-client -vvf repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.mft File: 52F21143C125B54D950A82C78B375D1FEFC27145.mft (raw, json) Hash identifier: GTbD0PzGX4kk8C/dQOM+Fk6sfhsbGk8AAw/7LaNN3E8= Subject key identifier: C3:DC:06:89:C9:D2:74:A5:0A:64:EA:63:BD:D0:F6:42:99:BE:8A:F8 Authority key identifier: 52:F2:11:43:C1:25:B5:4D:95:0A:82:C7:8B:37:5D:1F:EF:C2:71:45 Certificate issuer: /CN=52F21143C125B54D950A82C78B375D1FEFC27145 Certificate serial: 4A342A2E9C59CE5D425C61D002D25EA390328D16 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52F21143C125B54D950A82C78B375D1FEFC27145.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.mft Manifest number: 0128 Signing time: Fri 25 Apr 2025 01:02:14 +0000 Manifest this update: Fri 25 Apr 2025 00:57:14 +0000 Manifest next update: Mon 28 Apr 2025 04:44:14 +0000 Files and hashes: 1: 3130332e3231372e3232342e302f32342d3234203d3e20313531303036.roa (hash: hXkfYf+nz9ZnfdREym/fTXbtiX2Nu0w5Ce/fSSjfGRo=) 2: 52F21143C125B54D950A82C78B375D1FEFC27145.crl (hash: Z7lvlBPBx1G0l5FZBB20d1pm/CHA4c1x+0tijOrFT+o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.crl rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52F21143C125B54D950A82C78B375D1FEFC27145.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:34:2a:2e:9c:59:ce:5d:42:5c:61:d0:02:d2:5e:a3:90:32:8d:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52F21143C125B54D950A82C78B375D1FEFC27145 Validity Not Before: Apr 25 00:57:14 2025 GMT Not After : Apr 28 04:44:14 2025 GMT Subject: CN=C3DC0689C9D274A50A64EA63BDD0F64299BE8AF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:54:61:75:16:de:ab:f1:0e:a4:03:29:1a:32: da:2d:39:ab:95:96:4e:66:b1:53:f7:c3:59:42:f9: 88:69:d1:2c:67:31:d0:bc:79:0b:56:49:df:18:89: a7:ee:c1:2c:95:79:ff:d4:98:60:fc:f8:76:78:ce: d4:a4:52:05:77:bc:dd:3b:43:a1:ef:e9:d5:69:18: cf:aa:ff:e7:65:55:01:da:07:86:86:3d:42:69:56: 25:e9:d9:7c:9e:47:02:65:2e:f9:48:98:7a:22:85: 22:4d:cd:6c:74:0b:cc:45:59:5c:ce:40:be:ac:50: e4:4e:a6:0b:2a:9f:db:a1:7b:e3:b8:2b:5d:58:b7: 2a:96:25:40:f9:d4:dc:9d:2e:dd:a3:7c:6d:4b:55: e8:f1:d3:ef:8f:bb:0a:dc:34:b1:29:c1:5b:08:d0: 0b:d0:cf:1a:56:c7:94:38:c1:5c:19:ea:6f:bf:c7: 0a:28:bf:3a:d2:19:99:c3:3e:18:2c:da:00:4a:f4: 63:ca:74:22:13:d3:9a:c2:ff:69:e1:c7:8e:0e:7f: 2e:cc:bc:b3:0b:53:48:fc:90:f0:43:b6:4c:4f:28: 4a:83:40:10:a7:c6:03:05:76:f7:44:f8:1c:53:64: cc:09:1f:89:6c:3b:94:57:93:66:db:a4:90:de:49: 22:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:DC:06:89:C9:D2:74:A5:0A:64:EA:63:BD:D0:F6:42:99:BE:8A:F8 X509v3 Authority Key Identifier: keyid:52:F2:11:43:C1:25:B5:4D:95:0A:82:C7:8B:37:5D:1F:EF:C2:71:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52F21143C125B54D950A82C78B375D1FEFC27145.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:ee:b9:6c:23:25:eb:0b:db:dc:03:7a:02:3f:cf:15:87:8c: 4c:d3:17:b1:b9:d3:d0:8b:3f:32:d9:9a:3b:11:be:6f:01:9d: 85:13:14:71:8b:98:9f:fc:6c:15:db:dc:64:bb:1a:17:48:b5: f1:6f:0c:a8:80:5a:e1:87:f1:99:c7:7d:f1:58:05:7b:0d:05: 1a:0e:55:3f:20:92:25:09:ea:40:92:59:f1:c7:ab:8e:02:a2: 4b:c7:3e:f5:db:26:d2:ad:e9:cc:13:6d:88:29:ef:0f:9c:fc: a1:eb:b8:33:7a:12:15:a6:2d:7f:6d:45:b4:b4:5b:83:62:2c: 66:4f:f1:12:18:44:03:2e:52:fb:71:0e:8a:93:4f:1b:3b:76: 51:dd:ea:24:9f:f4:07:44:84:91:77:d7:17:81:94:12:f2:0b: 52:0d:56:41:93:0d:56:7e:23:75:6e:a8:54:27:9b:e3:8f:e4: 13:92:6d:ca:bb:4a:0f:02:06:96:67:78:7f:6f:83:b1:e4:7b: e1:98:b3:4e:99:dc:69:9c:4e:98:58:32:02:59:43:22:5a:1b: d4:41:b3:4f:94:d9:28:e5:42:e7:3a:36:eb:67:0b:83:29:a3: cd:00:59:c0:f8:d6:80:4b:0e:b0:de:a6:27:10:91:05:39:a5: 91:6b:14:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSjQqLpxZzl1CXGHQAtJeo5AyjRYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJGMjExNDNDMTI1QjU0RDk1MEE4MkM3OEIzNzVEMUZF RkMyNzE0NTAeFw0yNTA0MjUwMDU3MTRaFw0yNTA0MjgwNDQ0MTRaMDMxMTAvBgNV BAMTKEMzREMwNjg5QzlEMjc0QTUwQTY0RUE2M0JERDBGNjQyOTlCRThBRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6VGF1Ft6r8Q6kAykaMtotOauV lk5msVP3w1lC+Yhp0SxnMdC8eQtWSd8YiafuwSyVef/UmGD8+HZ4ztSkUgV3vN07 Q6Hv6dVpGM+q/+dlVQHaB4aGPUJpViXp2XyeRwJlLvlImHoihSJNzWx0C8xFWVzO QL6sUOROpgsqn9uhe+O4K11YtyqWJUD51NydLt2jfG1LVejx0++PuwrcNLEpwVsI 0AvQzxpWx5Q4wVwZ6m+/xwoovzrSGZnDPhgs2gBK9GPKdCIT05rC/2nhx44Ofy7M vLMLU0j8kPBDtkxPKEqDQBCnxgMFdvdE+BxTZMwJH4lsO5RXk2bbpJDeSSJNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw9wGicnSdKUKZOpjvdD2Qpm+ivgwHwYDVR0j BBgwFoAUUvIRQ8EltU2VCoLHizddH+/CcUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZWM1NTNiNi05ZTU3LTQwYmQtOGQ5Ni1hOWZkYWRhZGQ3YmUvMC81MkYyMTE0M0Mx MjVCNTREOTUwQTgyQzc4QjM3NUQxRkVGQzI3MTQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTJGMjExNDNDMTI1QjU0RDk1MEE4MkM3OEIzNzVEMUZFRkMy NzE0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmVjNTUzYjYtOWU1Ny00MGJkLThk OTYtYTlmZGFkYWRkN2JlLzAvNTJGMjExNDNDMTI1QjU0RDk1MEE4MkM3OEIzNzVE MUZFRkMyNzE0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACruuWwjJesL29wDegI/zxWHjEzTF7G509CL PzLZmjsRvm8BnYUTFHGLmJ/8bBXb3GS7GhdItfFvDKiAWuGH8ZnHffFYBXsNBRoO VT8gkiUJ6kCSWfHHq44CokvHPvXbJtKt6cwTbYgp7w+c/KHruDN6EhWmLX9tRbS0 W4NiLGZP8RIYRAMuUvtxDoqTTxs7dlHd6iSf9AdEhJF31xeBlBLyC1INVkGTDVZ+ I3VuqFQnm+OP5BOSbcq7Sg8CBpZneH9vg7Hke+GYs06Z3GmcTphYMgJZQyJaG9RB s0+U2SjlQuc6NutnC4Mpo80AWcD41oBLDrDepicQkQU5pZFrFB8= -----END CERTIFICATE-----Generated at Fri Apr 25 06:02:23 2025 by rpki-client on console.sobornost.net