$ rpki-client -vvf repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft File: 5EC928AFD73AFC70F10C468E21482031920DF521.mft (raw, json) Hash identifier: X6UV5Jf/9KwizpFshqclnmEsZJcw5FclhL1HeC37Y3g= Subject key identifier: 3A:82:77:2C:40:0B:A0:D6:DA:48:47:EA:AE:F4:59:03:B3:18:B1:70 Authority key identifier: 5E:C9:28:AF:D7:3A:FC:70:F1:0C:46:8E:21:48:20:31:92:0D:F5:21 Certificate issuer: /CN=5EC928AFD73AFC70F10C468E21482031920DF521 Certificate serial: 4C8328E514A1AAEF7328F3A2B1454E08D01C2ABC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5EC928AFD73AFC70F10C468E21482031920DF521.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft Manifest number: DE Signing time: Thu 24 Apr 2025 13:50:35 +0000 Manifest this update: Thu 24 Apr 2025 13:45:35 +0000 Manifest next update: Sun 27 Apr 2025 15:19:35 +0000 Files and hashes: 1: 5EC928AFD73AFC70F10C468E21482031920DF521.crl (hash: aZlN4pTmFlSsEAZ9wryPoTTM8nnGIBMdfv1FMI9yZIs=) 2: 3135372e31302e39302e302f32332d3233203d3e20313532303836.roa (hash: sqhh6fhWizwXoH9l3XVTNUts+MHffcu11O/8GZa+UZk=) 3: 3135372e31302e39312e302f32342d3234203d3e20313532303836.roa (hash: aoRUG5CQtzRZGdloOpfTrb2fX3fCFwbxN1OMSRI1BYY=) 4: 3135372e31302e39302e302f32342d3234203d3e20313532303836.roa (hash: G+zk6B4j6LBv4VXf/ZrduIBLIatUxzNWyMHjZfotW/M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.crl rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5EC928AFD73AFC70F10C468E21482031920DF521.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 10:32:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:83:28:e5:14:a1:aa:ef:73:28:f3:a2:b1:45:4e:08:d0:1c:2a:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EC928AFD73AFC70F10C468E21482031920DF521 Validity Not Before: Apr 24 13:45:35 2025 GMT Not After : Apr 27 15:19:35 2025 GMT Subject: CN=3A82772C400BA0D6DA4847EAAEF45903B318B170 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:27:98:5f:d4:58:9d:3e:49:01:1f:2e:25:3c: 70:df:11:83:c3:6c:62:01:3b:04:94:2b:d8:88:85: 53:f0:47:eb:16:69:4c:b0:57:8d:01:f8:3b:e8:cc: c5:3a:0f:4f:37:9e:08:3a:8e:b3:a6:12:cf:e2:66: a5:32:bb:80:78:c2:06:fc:ec:be:cd:e8:52:fb:6c: 7f:d6:84:3a:9a:20:47:c6:a0:95:d7:36:c3:dd:aa: 09:6c:cf:85:5d:c1:0b:20:c7:1b:7e:ec:cb:1f:2a: c6:18:db:63:c5:f2:15:89:8d:f6:15:4d:db:fd:87: b2:16:97:f2:26:2b:67:f9:50:0b:60:b8:85:17:ce: 2c:18:da:a5:8a:03:13:3e:e9:7a:5e:7e:2a:46:ef: 65:ba:ac:32:70:14:cb:3e:58:c3:2a:b7:94:3b:95: f1:7e:a1:34:05:ee:59:32:87:f5:9e:8c:b8:62:bb: ed:73:43:df:cf:a9:6f:35:aa:53:8b:c5:f2:bf:49: 1c:15:5a:32:80:50:a4:24:69:94:7f:1f:6b:2f:59: 5d:53:21:78:cc:2b:72:b4:05:23:1f:cf:6a:da:5b: 2b:53:50:6f:fe:f1:65:a3:70:02:c4:b6:7a:2a:aa: 54:d5:ee:97:03:f5:ff:37:e7:f4:ab:3e:76:34:71: 32:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:82:77:2C:40:0B:A0:D6:DA:48:47:EA:AE:F4:59:03:B3:18:B1:70 X509v3 Authority Key Identifier: keyid:5E:C9:28:AF:D7:3A:FC:70:F1:0C:46:8E:21:48:20:31:92:0D:F5:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5EC928AFD73AFC70F10C468E21482031920DF521.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:09:f7:9c:b6:1f:8c:e8:5a:8c:99:ce:35:7e:37:c1:f3:15: 91:75:e6:6c:6f:98:5c:a8:dc:c4:77:4e:e7:80:79:72:0d:97: 51:6c:0b:ab:11:46:89:b9:2e:af:c6:83:d9:a0:77:1a:77:fa: 91:7c:ac:02:33:90:81:5c:5c:2f:ea:5d:3b:ca:45:77:0c:13: f7:ea:15:42:5d:ea:48:ad:17:ec:b6:b6:41:0f:f3:91:31:06: ec:b8:b5:ee:17:6f:fc:c5:72:70:c4:e9:65:25:2a:6a:a0:07: 76:1b:42:af:fd:7b:ce:86:1a:87:54:e1:57:a0:73:6d:53:a1: c4:b7:44:95:91:fd:d9:15:ba:af:64:e9:54:0e:6f:62:8b:7a: 7c:af:b1:d8:b4:4f:ea:d6:dc:1b:89:ef:99:78:d8:11:86:97: 37:36:eb:b1:62:eb:43:e0:f2:f7:44:ba:27:47:33:31:09:4c: 95:dd:38:85:a9:e6:34:90:85:52:8a:90:b1:58:a4:54:f1:38: f4:33:c2:33:b2:6c:27:b7:17:29:2d:2c:53:f3:43:2e:29:27: f3:82:36:8d:fc:e0:dd:56:d2:cd:59:b2:b6:45:5a:37:1a:82: 00:30:fe:82:08:1c:95:66:dc:f2:73:84:db:29:73:40:14:68: c9:0b:8c:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTIMo5RShqu9zKPOisUVOCNAcKrwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVDOTI4QUZENzNBRkM3MEYxMEM0NjhFMjE0ODIwMzE5 MjBERjUyMTAeFw0yNTA0MjQxMzQ1MzVaFw0yNTA0MjcxNTE5MzVaMDMxMTAvBgNV BAMTKDNBODI3NzJDNDAwQkEwRDZEQTQ4NDdFQUFFRjQ1OTAzQjMxOEIxNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWJ5hf1FidPkkBHy4lPHDfEYPD bGIBOwSUK9iIhVPwR+sWaUywV40B+DvozMU6D083ngg6jrOmEs/iZqUyu4B4wgb8 7L7N6FL7bH/WhDqaIEfGoJXXNsPdqglsz4VdwQsgxxt+7MsfKsYY22PF8hWJjfYV Tdv9h7IWl/ImK2f5UAtguIUXziwY2qWKAxM+6XpefipG72W6rDJwFMs+WMMqt5Q7 lfF+oTQF7lkyh/WejLhiu+1zQ9/PqW81qlOLxfK/SRwVWjKAUKQkaZR/H2svWV1T IXjMK3K0BSMfz2raWytTUG/+8WWjcALEtnoqqlTV7pcD9f835/SrPnY0cTJXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOoJ3LEALoNbaSEfqrvRZA7MYsXAwHwYDVR0j BBgwFoAUXskor9c6/HDxDEaOIUggMZIN9SEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Y2YzZjhjOC0wNDA2LTRiMzgtYTdhOC1kY2IxNWU0MWYyYjcvMC81RUM5MjhBRkQ3 M0FGQzcwRjEwQzQ2OEUyMTQ4MjAzMTkyMERGNTIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUVDOTI4QUZENzNBRkM3MEYxMEM0NjhFMjE0ODIwMzE5MjBE RjUyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWNmM2Y4YzgtMDQwNi00YjM4LWE3 YTgtZGNiMTVlNDFmMmI3LzAvNUVDOTI4QUZENzNBRkM3MEYxMEM0NjhFMjE0ODIw MzE5MjBERjUyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACIJ95y2H4zoWoyZzjV+N8HzFZF15mxvmFyo 3MR3TueAeXINl1FsC6sRRom5Lq/Gg9mgdxp3+pF8rAIzkIFcXC/qXTvKRXcME/fq FUJd6kitF+y2tkEP85ExBuy4te4Xb/zFcnDE6WUlKmqgB3YbQq/9e86GGodU4Veg c21TocS3RJWR/dkVuq9k6VQOb2KLenyvsdi0T+rW3BuJ75l42BGGlzc267Fi60Pg 8vdEuidHMzEJTJXdOIWp5jSQhVKKkLFYpFTxOPQzwjOybCe3FyktLFPzQy4pJ/OC No384N1W0s1ZsrZFWjcaggAw/oIIHJVm3PJzhNspc0AUaMkLjOM= -----END CERTIFICATE-----Generated at Thu Apr 24 15:50:16 2025 by rpki-client on console.sobornost.net