$ rpki-client -vvf repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft File: 23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft (raw, json) Hash identifier: BAAaCUxYAgCy+qhifHDkcKeiRSqsMfbYhQHW4Qzkn/M= Subject key identifier: B6:92:1C:39:96:B2:C5:CA:43:E0:BE:07:7F:37:F4:63:9D:27:3D:28 Authority key identifier: 23:47:5A:86:BB:5C:51:5D:DD:77:53:B6:55:5E:26:7A:3F:5C:28:F4 Certificate issuer: /CN=23475A86BB5C515DDD7753B6555E267A3F5C28F4 Certificate serial: 3DCB5A44F0209FA3F364925B133649A9C2DCAEB7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23475A86BB5C515DDD7753B6555E267A3F5C28F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft Manifest number: 5A Signing time: Mon 28 Apr 2025 06:50:35 +0000 Manifest this update: Mon 28 Apr 2025 06:45:35 +0000 Manifest next update: Thu 01 May 2025 08:23:35 +0000 Files and hashes: 1: 23475A86BB5C515DDD7753B6555E267A3F5C28F4.crl (hash: TROYfaSDoyH2tv/6Bm01YqRVSjmD+ysuduP/BcIBr3c=) 2: 3136302e32322e33312e302f32342d3234203d3e20313532373938.roa (hash: VEUp2w3yPHnRqBLCf0zsUoh5RoZ8ZNdZE7XgU6xqQTk=) 3: 3136302e32322e33302e302f32342d3234203d3e20313532373938.roa (hash: 1gjKyDW4KHd430zjH8eS6Hf0gzUPhwcmOJ+5ePkv/wI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.crl rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23475A86BB5C515DDD7753B6555E267A3F5C28F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 17:48:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:cb:5a:44:f0:20:9f:a3:f3:64:92:5b:13:36:49:a9:c2:dc:ae:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23475A86BB5C515DDD7753B6555E267A3F5C28F4 Validity Not Before: Apr 28 06:45:35 2025 GMT Not After : May 1 08:23:35 2025 GMT Subject: CN=B6921C3996B2C5CA43E0BE077F37F4639D273D28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:8f:d6:c6:48:e3:72:7a:c3:12:8a:70:95:83: fa:39:6b:36:ac:89:56:c8:e1:04:a2:4a:a4:97:a5: ff:74:b1:41:a2:22:27:6f:34:44:ce:ff:fb:22:ad: 01:74:99:c9:b8:a4:d9:ac:4c:03:f0:b2:e5:c2:e2: 66:5e:ef:a0:0d:e1:d6:73:e6:1d:24:bc:8a:5a:87: ed:8b:fa:20:6f:f1:24:16:e2:9a:d7:18:a8:2b:61: 34:4a:70:0f:91:23:82:9e:a9:69:4d:34:1d:f6:72: 58:62:fd:86:ae:e9:3b:6a:bc:ae:b1:0f:a2:33:f8: 9b:6e:76:08:fb:7a:f5:b8:d4:c6:39:a5:4d:23:c8: cf:1b:a8:87:0b:67:cc:e1:ea:6d:72:d9:da:db:4b: 40:f3:9b:d7:ff:4e:10:6e:21:48:ac:dc:b5:c8:ca: a2:43:61:98:5b:08:be:dd:38:da:fa:4b:f3:cf:01: 07:5c:98:9d:54:61:f7:f4:f2:09:b6:f6:b0:29:9a: ea:36:b7:3b:54:a5:a7:0f:b3:2d:07:83:3b:b9:e2: 2a:17:65:8f:9b:13:84:8a:43:c2:25:38:f6:09:ca: eb:8c:7a:90:43:bd:cd:17:3d:bc:f9:cb:9e:4f:70: c7:bd:34:77:0d:5c:37:5b:d6:65:bf:11:15:a8:b4: 49:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:92:1C:39:96:B2:C5:CA:43:E0:BE:07:7F:37:F4:63:9D:27:3D:28 X509v3 Authority Key Identifier: keyid:23:47:5A:86:BB:5C:51:5D:DD:77:53:B6:55:5E:26:7A:3F:5C:28:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23475A86BB5C515DDD7753B6555E267A3F5C28F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:03:29:82:b3:05:bc:ec:eb:31:19:62:f3:5b:ef:1c:33:d4: 72:6d:1f:f4:6a:54:8e:3d:40:03:96:e9:96:e6:d0:87:29:4e: 6a:f8:32:ea:08:9c:bf:9c:a7:ab:13:92:2a:34:8d:74:9f:2b: 93:91:04:c5:44:8f:d3:95:c5:5e:5d:39:06:4f:03:61:a3:19: 1b:b9:37:94:7b:69:8e:2b:33:4f:61:78:99:33:b9:51:3c:fe: 7f:54:70:01:a7:e1:33:60:ce:4b:45:d4:5e:56:8b:26:fe:d9: f3:df:87:a7:44:44:5d:9d:54:50:18:a3:08:91:57:1c:d1:89: a5:d4:e3:22:73:3b:a0:f8:24:9b:4c:a8:d1:e1:51:e8:49:44: 40:c8:48:54:47:ee:5e:e6:d5:4b:e5:df:c8:16:5c:0b:90:4d: 7d:c0:75:25:0c:50:07:b9:80:b8:07:19:03:b5:e5:95:b4:f6: cf:13:2f:bd:a7:44:6d:c9:7b:f4:be:c1:0f:98:af:86:e5:f2: f6:1e:7f:02:59:09:1e:50:60:82:2f:2b:cd:85:64:28:a4:72: aa:d3:42:d9:56:3e:fb:c2:a3:e2:d0:f1:28:97:dd:5e:78:a6: cb:07:1e:a0:0a:f7:91:5b:22:ad:61:4a:35:36:a0:c7:13:0d: c5:2f:87:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPctaRPAgn6PzZJJbEzZJqcLcrrcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM0NzVBODZCQjVDNTE1RERENzc1M0I2NTU1RTI2N0Ez RjVDMjhGNDAeFw0yNTA0MjgwNjQ1MzVaFw0yNTA1MDEwODIzMzVaMDMxMTAvBgNV BAMTKEI2OTIxQzM5OTZCMkM1Q0E0M0UwQkUwNzdGMzdGNDYzOUQyNzNEMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZj9bGSONyesMSinCVg/o5azas iVbI4QSiSqSXpf90sUGiIidvNETO//sirQF0mcm4pNmsTAPwsuXC4mZe76AN4dZz 5h0kvIpah+2L+iBv8SQW4prXGKgrYTRKcA+RI4KeqWlNNB32clhi/Yau6TtqvK6x D6Iz+Jtudgj7evW41MY5pU0jyM8bqIcLZ8zh6m1y2drbS0Dzm9f/ThBuIUis3LXI yqJDYZhbCL7dONr6S/PPAQdcmJ1UYff08gm29rApmuo2tztUpacPsy0Hgzu54ioX ZY+bE4SKQ8IlOPYJyuuMepBDvc0XPbz5y55PcMe9NHcNXDdb1mW/ERWotEkbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtpIcOZayxcpD4L4Hfzf0Y50nPSgwHwYDVR0j BBgwFoAUI0dahrtcUV3dd1O2VV4mej9cKPQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NWVmYzQxMy0yNzA5LTQ4M2UtYTMxNC1jNWQwNjYzZGY5MzIvMC8yMzQ3NUE4NkJC NUM1MTVEREQ3NzUzQjY1NTVFMjY3QTNGNUMyOEY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjM0NzVBODZCQjVDNTE1RERENzc1M0I2NTU1RTI2N0EzRjVD MjhGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjVlZmM0MTMtMjcwOS00ODNlLWEz MTQtYzVkMDY2M2RmOTMyLzAvMjM0NzVBODZCQjVDNTE1RERENzc1M0I2NTU1RTI2 N0EzRjVDMjhGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADsDKYKzBbzs6zEZYvNb7xwz1HJtH/RqVI49 QAOW6Zbm0IcpTmr4MuoInL+cp6sTkio0jXSfK5ORBMVEj9OVxV5dOQZPA2GjGRu5 N5R7aY4rM09heJkzuVE8/n9UcAGn4TNgzktF1F5Wiyb+2fPfh6dERF2dVFAYowiR VxzRiaXU4yJzO6D4JJtMqNHhUehJREDISFRH7l7m1Uvl38gWXAuQTX3AdSUMUAe5 gLgHGQO15ZW09s8TL72nRG3Je/S+wQ+Yr4bl8vYefwJZCR5QYIIvK82FZCikcqrT QtlWPvvCo+LQ8SiX3V54pssHHqAK95FbIq1hSjU2oMcTDcUvhzU= -----END CERTIFICATE-----Generated at Mon Apr 28 10:49:11 2025 by rpki-client on console.sobornost.net