$ rpki-client -vvf repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft File: CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft (raw, json) Hash identifier: woqvBaKm+ga2HNb6dy9MQK5e4e809QoMsCs9G5mQWnk= Subject key identifier: DB:75:96:DF:C3:1B:D7:FC:F3:7D:9D:8C:09:EC:18:56:E3:3D:53:2A Authority key identifier: CD:32:81:FC:87:5A:8D:D9:67:E7:E8:3C:D4:0F:10:6A:D5:B2:3A:74 Certificate issuer: /CN=CD3281FC875A8DD967E7E83CD40F106AD5B23A74 Certificate serial: 017175EFF93E0DED5054F5A689F8B910088E5BBA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.cer Subject info access: rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft Manifest number: 01B9 Signing time: Thu 24 Apr 2025 09:52:09 +0000 Manifest this update: Thu 24 Apr 2025 09:47:09 +0000 Manifest next update: Sun 27 Apr 2025 17:41:09 +0000 Files and hashes: 1: 3130332e3134372e3131342e302f32332d3234203d3e20313439393732.roa (hash: rgFJ98/EqnKQuT7uOMG6CZkoBkNIU5ZfYz7pmO03ZPE=) 2: 3130332e3134372e3131352e302f32342d3234203d3e203438343635.roa (hash: w2tRSLiLgHJy1W/6XsyVINn6a4HucZp7ol94fDbTiO8=) 3: CD3281FC875A8DD967E7E83CD40F106AD5B23A74.crl (hash: QP3PSUMFR5Md8fCre01BfZqghkbyra/yLROain1v68E=) 4: 3130332e3134372e3131342e302f32342d3234203d3e203438343635.roa (hash: 9CXlJMGB7RbCSbz4yAVHg0gxAoOKIuDCGk9V2ZNRStQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.crl rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 17:17:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:71:75:ef:f9:3e:0d:ed:50:54:f5:a6:89:f8:b9:10:08:8e:5b:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD3281FC875A8DD967E7E83CD40F106AD5B23A74 Validity Not Before: Apr 24 09:47:09 2025 GMT Not After : Apr 27 17:41:09 2025 GMT Subject: CN=DB7596DFC31BD7FCF37D9D8C09EC1856E33D532A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ce:fd:90:86:b0:3e:19:91:0c:0c:91:ae:fb: 94:fc:97:51:a8:f8:6c:98:55:9a:72:05:81:21:5a: a3:b2:07:7d:bb:dd:b4:7d:e3:93:c8:30:09:f3:b1: d8:06:21:e0:33:cc:d6:40:d7:59:8e:89:92:b9:c0: 08:31:bb:a5:ca:e5:b3:f2:04:3c:dd:6c:e5:58:0c: 78:0c:43:b9:b5:35:a1:17:70:d1:ad:f4:4c:d8:f3: 12:b8:3d:a5:2e:0f:55:f5:53:58:2e:f7:ee:99:9b: 88:e2:10:46:b8:da:9a:35:b7:87:9b:b6:20:33:7c: a7:3b:43:41:50:ac:55:10:74:ea:59:ec:92:12:16: ac:0d:18:18:56:25:f1:34:20:c4:cb:e1:8a:39:9f: ea:47:1d:f5:61:2f:d1:b0:92:a6:74:1d:93:4a:88: 88:ee:6f:07:28:0f:46:6b:e7:44:be:f6:d2:30:ef: ec:ad:b1:40:e4:cf:bc:38:76:0d:ca:36:9e:2c:a2: 4b:9d:c9:6d:6a:15:c6:fd:a2:73:17:3e:45:03:2b: b5:09:fb:8a:96:7e:ca:dd:73:d6:98:e4:7c:11:2d: c6:52:94:32:26:5e:8a:d6:84:6b:71:ce:4f:49:fb: a8:b2:d3:1c:32:ed:ca:10:26:89:65:ad:bd:a9:fa: ca:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:75:96:DF:C3:1B:D7:FC:F3:7D:9D:8C:09:EC:18:56:E3:3D:53:2A X509v3 Authority Key Identifier: keyid:CD:32:81:FC:87:5A:8D:D9:67:E7:E8:3C:D4:0F:10:6A:D5:B2:3A:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:8f:d8:07:a9:26:2b:0c:8b:d3:0a:d0:35:b9:88:c7:01:45: f7:51:de:b3:40:83:7f:7e:a9:27:ec:c2:98:37:8a:a5:c9:54: d2:82:f9:43:d7:cf:74:bc:65:ab:b5:a1:a0:82:06:40:c7:19: a5:d8:48:13:e1:a4:21:a2:65:9b:f6:9a:f1:de:2d:4d:c0:b3: 3e:fc:8c:9c:42:aa:f1:0d:5e:a1:4a:af:2a:2f:de:d6:26:75: f9:c5:81:3b:07:31:7e:9e:69:21:78:88:4d:d0:33:84:e4:ff: ad:86:97:0c:77:8d:58:eb:04:ae:a8:9b:71:93:f9:58:a9:4f: 00:ea:c5:ed:c0:5c:29:a0:d3:35:e4:c4:75:6c:99:b1:69:5e: 37:0d:06:b5:a1:23:cc:3f:2f:d1:19:53:5c:e7:de:7a:39:6d: 95:3e:c9:dc:42:57:95:55:ec:bd:f7:74:30:b2:04:c5:21:07: f5:c2:25:98:b9:25:9b:30:ca:8d:4f:ad:98:c6:96:be:10:b8: 53:5d:b4:e3:83:2c:8d:ea:3e:25:2e:ec:94:5c:0a:d7:dd:84: 5a:0f:0b:a6:24:e9:d9:9a:23:fc:a7:79:65:be:5f:d7:64:aa: d9:4c:13:53:a0:c2:77:54:d1:b5:58:58:14:dc:f1:86:f3:83: ca:6b:08:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAXF17/k+De1QVPWmifi5EAiOW7owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0QzMjgxRkM4NzVBOEREOTY3RTdFODNDRDQwRjEwNkFE NUIyM0E3NDAeFw0yNTA0MjQwOTQ3MDlaFw0yNTA0MjcxNzQxMDlaMDMxMTAvBgNV BAMTKERCNzU5NkRGQzMxQkQ3RkNGMzdEOUQ4QzA5RUMxODU2RTMzRDUzMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCezv2QhrA+GZEMDJGu+5T8l1Go +GyYVZpyBYEhWqOyB3273bR945PIMAnzsdgGIeAzzNZA11mOiZK5wAgxu6XK5bPy BDzdbOVYDHgMQ7m1NaEXcNGt9EzY8xK4PaUuD1X1U1gu9+6Zm4jiEEa42po1t4eb tiAzfKc7Q0FQrFUQdOpZ7JISFqwNGBhWJfE0IMTL4Yo5n+pHHfVhL9GwkqZ0HZNK iIjubwcoD0Zr50S+9tIw7+ytsUDkz7w4dg3KNp4sokudyW1qFcb9onMXPkUDK7UJ +4qWfsrdc9aY5HwRLcZSlDImXorWhGtxzk9J+6iy0xwy7coQJollrb2p+sqRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU23WW38Mb1/zzfZ2MCewYVuM9UyowHwYDVR0j BBgwFoAUzTKB/Idajdln5+g81A8QatWyOnQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjhjYzA1OS01ZTZjLTQ1MDEtYjg5NC0xNGE4MmQxOGQyMWUvMC9DRDMyODFGQzg3 NUE4REQ5NjdFN0U4M0NENDBGMTA2QUQ1QjIzQTc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0QzMjgxRkM4NzVBOEREOTY3RTdFODNDRDQwRjEwNkFENUIy M0E3NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTY4Y2MwNTktNWU2Yy00NTAxLWI4 OTQtMTRhODJkMThkMjFlLzAvQ0QzMjgxRkM4NzVBOEREOTY3RTdFODNDRDQwRjEw NkFENUIyM0E3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGeP2AepJisMi9MK0DW5iMcBRfdR3rNAg39+ qSfswpg3iqXJVNKC+UPXz3S8Zau1oaCCBkDHGaXYSBPhpCGiZZv2mvHeLU3Asz78 jJxCqvENXqFKryov3tYmdfnFgTsHMX6eaSF4iE3QM4Tk/62Glwx3jVjrBK6om3GT +VipTwDqxe3AXCmg0zXkxHVsmbFpXjcNBrWhI8w/L9EZU1zn3no5bZU+ydxCV5VV 7L33dDCyBMUhB/XCJZi5JZswyo1PrZjGlr4QuFNdtOODLI3qPiUu7JRcCtfdhFoP C6Yk6dmaI/yneWW+X9dkqtlME1OgwndU0bVYWBTc8Ybzg8prCIU= -----END CERTIFICATE-----Generated at Thu Apr 24 13:38:48 2025 by rpki-client on console.sobornost.net