$ rpki-client -vvf repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.mft File: 575614534DD1047EA1BA290176D96470FCBA1ECA.mft (raw, json) Hash identifier: X+6p1hsK/lLlga3GJPrJeg+wjBNBjzIT4ZzS8ISqzdc= Subject key identifier: E6:53:C1:EC:90:8C:5C:0A:64:D5:C9:F2:35:D9:2A:9C:E9:BE:B2:64 Authority key identifier: 57:56:14:53:4D:D1:04:7E:A1:BA:29:01:76:D9:64:70:FC:BA:1E:CA Certificate issuer: /CN=575614534DD1047EA1BA290176D96470FCBA1ECA Certificate serial: 427B184255A0A3AEDE7F8F1A0F91A5B771BF1E02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/575614534DD1047EA1BA290176D96470FCBA1ECA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.mft Manifest number: 89 Signing time: Thu 24 Apr 2025 20:00:44 +0000 Manifest this update: Thu 24 Apr 2025 19:55:44 +0000 Manifest next update: Mon 28 Apr 2025 05:17:44 +0000 Files and hashes: 1: 575614534DD1047EA1BA290176D96470FCBA1ECA.crl (hash: bFHfOxOFUJ4ufX3Kc6eJr5g3anSqx/0fFqaVk9OWGm4=) 2: 3136302e32322e39302e302f32342d3234203d3e20313532383135.roa (hash: 4rKF2GzzB6mvnfnOM/QC7MLbLSHw9267yWh1emU6ynI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.crl rsync://repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/575614534DD1047EA1BA290176D96470FCBA1ECA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 19:57:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:7b:18:42:55:a0:a3:ae:de:7f:8f:1a:0f:91:a5:b7:71:bf:1e:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=575614534DD1047EA1BA290176D96470FCBA1ECA Validity Not Before: Apr 24 19:55:44 2025 GMT Not After : Apr 28 05:17:44 2025 GMT Subject: CN=E653C1EC908C5C0A64D5C9F235D92A9CE9BEB264 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f0:9f:6b:1c:35:0a:a5:a3:11:b0:9b:98:c5: e1:c8:d2:20:ab:ff:85:7e:45:29:04:ff:37:bf:ff: 32:f0:3d:42:86:6d:86:26:f8:f4:dd:79:09:bd:a4: 02:e2:76:e7:da:e7:42:11:d4:a6:c8:70:b2:38:4c: 41:74:75:56:99:22:c8:ea:67:58:ac:7a:5b:c4:a4: a9:74:44:15:6f:e5:0f:e7:a9:30:ac:3e:b3:7e:8f: 23:14:15:29:a8:69:ca:9a:98:f1:86:44:b5:b5:d4: 21:7b:58:e8:c9:62:c7:04:3b:13:51:1a:b0:23:29: b8:3b:50:40:5c:71:05:27:e3:bd:de:75:2b:e9:95: 33:ba:85:5f:1f:17:db:a0:b6:e5:d0:b2:06:a6:70: 5f:f5:52:0b:34:8e:93:0a:00:cb:e5:58:12:97:ef: 7c:55:5c:68:1d:fa:f5:7d:61:fb:6e:14:36:fa:0d: 88:32:2f:0b:04:ec:ce:67:47:bc:21:fb:13:4b:04: 72:dd:c5:71:a8:6d:d4:23:2c:29:9c:8b:38:80:46: cc:74:e6:34:4c:8b:7a:ee:2e:8c:01:ac:c9:84:e6: 5a:f1:8f:24:54:94:e5:19:3d:cb:57:d8:7c:1d:47: a2:31:f1:27:1b:a3:ed:06:6f:e1:5c:81:6b:a6:89: 24:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:53:C1:EC:90:8C:5C:0A:64:D5:C9:F2:35:D9:2A:9C:E9:BE:B2:64 X509v3 Authority Key Identifier: keyid:57:56:14:53:4D:D1:04:7E:A1:BA:29:01:76:D9:64:70:FC:BA:1E:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/575614534DD1047EA1BA290176D96470FCBA1ECA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:86:81:00:e5:eb:60:97:24:e8:15:77:55:53:db:01:ea:6a: 25:da:16:b0:eb:4b:ac:6a:7a:9d:b7:9e:9a:a5:3e:3d:7f:91: fe:10:72:28:f0:58:a6:c4:62:6e:00:20:69:54:4a:a0:5f:f8: b8:60:b8:ab:88:f7:b3:d4:07:2b:4c:33:2c:bc:9d:48:ee:06: d5:61:f4:a2:15:cf:21:f4:32:46:99:85:46:b8:45:57:6d:e6: 56:10:47:23:d1:31:f9:d4:e5:e9:4c:1c:5d:f4:6b:31:3e:43: 3a:ee:82:00:e5:ac:72:6e:03:9f:3b:0c:8a:57:01:a3:70:ca: 4c:d9:0c:23:20:c0:89:09:b4:40:ce:5d:ab:15:71:b6:f5:d8: 7f:7a:10:83:84:84:57:83:cc:13:40:a3:66:3f:8c:69:e3:2c: 9e:cb:40:69:c9:11:4f:8a:b5:12:29:bd:59:12:18:58:2a:b6: 3e:8c:fc:26:81:f8:48:b2:47:94:2b:21:7a:65:75:c1:5c:32: d6:8b:45:ef:da:e9:9d:35:08:3a:44:d3:c8:b9:f6:a1:f1:e7: ee:4e:90:fd:7c:9b:87:76:d3:9f:48:c5:7e:e8:6d:a6:1f:52: 40:06:b3:76:1e:76:17:e8:ae:39:fd:ad:27:f6:aa:7a:50:75: f6:6c:45:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQnsYQlWgo67ef48aD5Glt3G/HgIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc1NjE0NTM0REQxMDQ3RUExQkEyOTAxNzZEOTY0NzBG Q0JBMUVDQTAeFw0yNTA0MjQxOTU1NDRaFw0yNTA0MjgwNTE3NDRaMDMxMTAvBgNV BAMTKEU2NTNDMUVDOTA4QzVDMEE2NEQ1QzlGMjM1RDkyQTlDRTlCRUIyNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe8J9rHDUKpaMRsJuYxeHI0iCr /4V+RSkE/ze//zLwPUKGbYYm+PTdeQm9pALidufa50IR1KbIcLI4TEF0dVaZIsjq Z1iselvEpKl0RBVv5Q/nqTCsPrN+jyMUFSmoacqamPGGRLW11CF7WOjJYscEOxNR GrAjKbg7UEBccQUn473edSvplTO6hV8fF9ugtuXQsgamcF/1Ugs0jpMKAMvlWBKX 73xVXGgd+vV9YftuFDb6DYgyLwsE7M5nR7wh+xNLBHLdxXGobdQjLCmciziARsx0 5jRMi3ruLowBrMmE5lrxjyRUlOUZPctX2HwdR6Ix8Scbo+0Gb+FcgWumiSTzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5lPB7JCMXApk1cnyNdkqnOm+smQwHwYDVR0j BBgwFoAUV1YUU03RBH6huikBdtlkcPy6HsowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MTdmNzliMC1iOWUzLTRjM2QtYTExMy1iNmM2YTE4YWY0ZDEvMC81NzU2MTQ1MzRE RDEwNDdFQTFCQTI5MDE3NkQ5NjQ3MEZDQkExRUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTc1NjE0NTM0REQxMDQ3RUExQkEyOTAxNzZEOTY0NzBGQ0JB MUVDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjE3Zjc5YjAtYjllMy00YzNkLWEx MTMtYjZjNmExOGFmNGQxLzAvNTc1NjE0NTM0REQxMDQ3RUExQkEyOTAxNzZEOTY0 NzBGQ0JBMUVDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACSGgQDl62CXJOgVd1VT2wHqaiXaFrDrS6xq ep23npqlPj1/kf4QcijwWKbEYm4AIGlUSqBf+LhguKuI97PUBytMMyy8nUjuBtVh 9KIVzyH0MkaZhUa4RVdt5lYQRyPRMfnU5elMHF30azE+QzruggDlrHJuA587DIpX AaNwykzZDCMgwIkJtEDOXasVcbb12H96EIOEhFeDzBNAo2Y/jGnjLJ7LQGnJEU+K tRIpvVkSGFgqtj6M/CaB+EiyR5QrIXpldcFcMtaLRe/a6Z01CDpE08i59qHx5+5O kP18m4d2059IxX7obaYfUkAGs3Yedhforjn9rSf2qnpQdfZsRQ4= -----END CERTIFICATE-----Generated at Fri Apr 25 00:06:29 2025 by rpki-client on console.sobornost.net