$ rpki-client -vvf repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft File: 3C3C868A5674B425FAE567426BCB238E23AE20AC.mft (raw, json) Hash identifier: Ojpz5WVP8pHytsjb3DgIZ6yfHO8RTzLdbdNwIxPZhps= Subject key identifier: 96:04:0A:B2:42:DC:F3:1C:B4:0F:E5:E8:30:06:78:A4:90:58:47:0E Authority key identifier: 3C:3C:86:8A:56:74:B4:25:FA:E5:67:42:6B:CB:23:8E:23:AE:20:AC Certificate issuer: /CN=3C3C868A5674B425FAE567426BCB238E23AE20AC Certificate serial: 0D70D52C414E72B31CA6591D01D2AB9081F9806C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C3C868A5674B425FAE567426BCB238E23AE20AC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft Manifest number: 01D1 Signing time: Fri 25 Apr 2025 09:01:50 +0000 Manifest this update: Fri 25 Apr 2025 08:56:50 +0000 Manifest next update: Mon 28 Apr 2025 16:09:50 +0000 Files and hashes: 1: 3130332e3133352e322e302f32342d3234203d3e203338333230.roa (hash: XWnh1VykZqMD04Gqe6UZfKtVzo0XPT3InbmErZuC12M=) 2: 3130332e3133352e302e302f32342d3234203d3e203338333230.roa (hash: 8y5JK94ZhR3xgyaECM453KUX1kpdfDuJgnhaIAM+DdY=) 3: 3130332e3133352e332e302f32342d3234203d3e20313338383237.roa (hash: R94Jhrt2peQ9VoyHvkm97VBfx7MWEw69Cox/hXCe3MY=) 4: 3C3C868A5674B425FAE567426BCB238E23AE20AC.crl (hash: qId7wBND0fI/mIjM+uQOzfEFgu5MWPxsWhguh1jtiwM=) 5: 3130332e3133352e312e302f32342d3234203d3e203338333230.roa (hash: j+xMG0Mja1vgbHDmB6Mk1vqe3c5PuIR+QXfVG/S4zas=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.crl rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C3C868A5674B425FAE567426BCB238E23AE20AC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 14:02:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:70:d5:2c:41:4e:72:b3:1c:a6:59:1d:01:d2:ab:90:81:f9:80:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C3C868A5674B425FAE567426BCB238E23AE20AC Validity Not Before: Apr 25 08:56:50 2025 GMT Not After : Apr 28 16:09:50 2025 GMT Subject: CN=96040AB242DCF31CB40FE5E8300678A49058470E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:36:ee:fd:79:f1:25:13:b1:ec:f2:6a:0a:8e: d3:31:bc:34:6f:fa:72:31:48:5e:e6:07:b7:64:dc: 7b:ef:54:76:17:20:ab:8d:20:38:05:d1:51:53:4d: 0f:78:75:90:df:1e:3d:37:71:24:d2:0e:dc:22:1b: 98:c2:8f:54:32:68:cb:9c:df:78:47:0c:e3:aa:7a: 8c:cf:45:0a:9f:c8:44:4a:3d:16:ab:8d:7a:32:22: bb:fc:9d:66:2d:f3:08:58:b5:3c:c4:82:a1:a3:b3: 75:88:c3:bb:3f:d3:e2:43:15:30:df:67:87:b5:e0: 4b:2e:8e:4a:3d:0f:f4:ec:79:98:5a:11:32:70:cf: a4:19:2f:45:ad:2f:ed:8e:83:b2:31:1d:15:c8:93: ee:b6:cf:fa:49:05:29:af:c9:29:4d:a8:84:f2:25: cd:2e:66:8a:04:49:dd:3e:40:80:f6:cf:e7:b6:08: a8:63:9e:61:be:d2:a6:69:09:52:e2:89:63:ce:c8: e9:ff:9a:45:a6:a2:94:07:7f:7c:aa:a7:e0:d5:33: 4a:cc:03:fa:7a:2a:90:03:4c:86:dc:04:57:92:0e: dc:15:b3:3f:d4:4d:84:80:c3:69:b7:d8:13:11:f3: 90:05:5e:c5:98:74:94:86:d2:8a:a4:2e:21:80:bd: 5b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:04:0A:B2:42:DC:F3:1C:B4:0F:E5:E8:30:06:78:A4:90:58:47:0E X509v3 Authority Key Identifier: keyid:3C:3C:86:8A:56:74:B4:25:FA:E5:67:42:6B:CB:23:8E:23:AE:20:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C3C868A5674B425FAE567426BCB238E23AE20AC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:32:e8:24:3a:bf:fd:4a:5a:62:2d:92:b9:b2:58:6f:eb:f2: 39:5e:3f:70:8b:1e:aa:ec:62:8e:03:01:52:dd:1d:73:a0:ca: 1f:a5:51:e8:41:e6:be:54:cc:81:61:5c:93:53:b7:46:31:14: ec:ab:73:f7:2f:37:5f:52:d1:2c:e7:60:01:5f:80:1a:c5:c8: 0a:89:c4:54:17:16:6a:4d:16:6f:bc:36:cb:dc:65:fb:78:5e: c0:d3:84:84:f8:31:d4:26:6c:3c:35:59:cb:fb:2d:50:5e:8b: 62:cb:31:42:ca:b1:b7:f2:2d:df:ac:58:bd:ea:de:48:8b:81: 45:3b:88:a4:32:f3:10:d6:10:e3:ca:34:d1:ca:70:3c:b2:88: d3:ad:50:ae:73:07:71:5d:cc:1a:14:51:c7:b2:f4:8c:cd:dd: 54:8c:a4:31:32:2d:ff:41:82:ab:ca:7e:3b:42:0e:c5:61:7d: 80:aa:6f:94:ef:51:96:de:a6:73:62:6f:73:fe:d5:63:45:68: 38:37:84:31:39:69:fa:d4:80:a9:92:02:e4:54:8d:0f:8c:3e: eb:5c:8e:6c:63:8d:e1:4b:7c:12:04:9e:e2:2f:91:c6:c4:98: c1:d8:94:6f:a9:58:c9:be:78:9a:53:95:9c:52:25:29:16:4f: dd:4f:fd:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDXDVLEFOcrMcplkdAdKrkIH5gGwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MzQzg2OEE1Njc0QjQyNUZBRTU2NzQyNkJDQjIzOEUy M0FFMjBBQzAeFw0yNTA0MjUwODU2NTBaFw0yNTA0MjgxNjA5NTBaMDMxMTAvBgNV BAMTKDk2MDQwQUIyNDJEQ0YzMUNCNDBGRTVFODMwMDY3OEE0OTA1ODQ3MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBNu79efElE7Hs8moKjtMxvDRv +nIxSF7mB7dk3HvvVHYXIKuNIDgF0VFTTQ94dZDfHj03cSTSDtwiG5jCj1QyaMuc 33hHDOOqeozPRQqfyERKPRarjXoyIrv8nWYt8whYtTzEgqGjs3WIw7s/0+JDFTDf Z4e14Esujko9D/TseZhaETJwz6QZL0WtL+2Og7IxHRXIk+62z/pJBSmvySlNqITy Jc0uZooESd0+QID2z+e2CKhjnmG+0qZpCVLiiWPOyOn/mkWmopQHf3yqp+DVM0rM A/p6KpADTIbcBFeSDtwVsz/UTYSAw2m32BMR85AFXsWYdJSG0oqkLiGAvVudAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlgQKskLc8xy0D+XoMAZ4pJBYRw4wHwYDVR0j BBgwFoAUPDyGilZ0tCX65WdCa8sjjiOuIKwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w Mjk5ZTZmMC1mMjNjLTQxZmYtYjY3Yy00MWFmMDUxMzM5ZDEvMC8zQzNDODY4QTU2 NzRCNDI1RkFFNTY3NDI2QkNCMjM4RTIzQUUyMEFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0MzQzg2OEE1Njc0QjQyNUZBRTU2NzQyNkJDQjIzOEUyM0FF MjBBQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDI5OWU2ZjAtZjIzYy00MWZmLWI2 N2MtNDFhZjA1MTMzOWQxLzAvM0MzQzg2OEE1Njc0QjQyNUZBRTU2NzQyNkJDQjIz OEUyM0FFMjBBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJEy6CQ6v/1KWmItkrmyWG/r8jleP3CLHqrs Yo4DAVLdHXOgyh+lUehB5r5UzIFhXJNTt0YxFOyrc/cvN19S0SznYAFfgBrFyAqJ xFQXFmpNFm+8NsvcZft4XsDThIT4MdQmbDw1Wcv7LVBei2LLMULKsbfyLd+sWL3q 3kiLgUU7iKQy8xDWEOPKNNHKcDyyiNOtUK5zB3FdzBoUUcey9IzN3VSMpDEyLf9B gqvKfjtCDsVhfYCqb5TvUZbepnNib3P+1WNFaDg3hDE5afrUgKmSAuRUjQ+MPutc jmxjjeFLfBIEnuIvkcbEmMHYlG+pWMm+eJpTlZxSJSkWT91P/bU= -----END CERTIFICATE-----Generated at Fri Apr 25 10:36:40 2025 by rpki-client on console.sobornost.net