$ rpki-client -vvf repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft File: 3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft (raw, json) Hash identifier: usD6XNl/NxY+gOZ9v5Qr2JDKzK6OdKlwmihBcimxZuk= Subject key identifier: 96:85:6C:31:27:5B:52:4F:20:AC:C8:E2:67:95:B0:FF:B1:69:C6:16 Authority key identifier: 3F:FD:C5:02:E9:0A:F8:E6:6F:DD:CD:0A:6D:F3:1D:16:8F:38:BA:A6 Certificate issuer: /CN=3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6 Certificate serial: 15CB7212CDBEB86A3AFE5F1C6CA9D64AF31C01A7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft Manifest number: 88 Signing time: Thu 24 Apr 2025 18:12:15 +0000 Manifest this update: Thu 24 Apr 2025 18:07:15 +0000 Manifest next update: Sun 27 Apr 2025 19:17:15 +0000 Files and hashes: 1: 323030313a6466333a646663303a3a2f34382d3438203d3e20313532383030.roa (hash: 49HTMVxx05wPdArfdbkc8ZuyfBJmlfmMETsXKqg+H4o=) 2: 3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.crl (hash: wbqF/i+Y6tSeA4YQtMEfZj/uG84ybSGbYYAra0xzykE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.crl rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 19:17:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:cb:72:12:cd:be:b8:6a:3a:fe:5f:1c:6c:a9:d6:4a:f3:1c:01:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6 Validity Not Before: Apr 24 18:07:15 2025 GMT Not After : Apr 27 19:17:15 2025 GMT Subject: CN=96856C31275B524F20ACC8E26795B0FFB169C616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:10:c3:9d:3b:3f:96:34:fd:50:e9:ad:c0:ae: 5b:95:ea:38:9f:16:4f:75:eb:d7:20:b3:02:23:5e: 20:c4:31:c1:b7:2f:ce:12:ec:4a:99:32:d4:b6:db: 06:81:23:20:f0:8c:53:98:20:ce:bd:c6:94:d1:ae: 93:2e:4c:1d:d0:a1:35:dd:8e:12:06:5b:74:43:15: 3f:e7:26:ae:1a:c8:df:54:21:b9:b6:9a:74:f2:27: cf:ec:8f:be:cc:59:08:e8:0e:89:ff:e6:2a:58:6d: 79:d9:81:66:9f:6b:2d:d9:96:20:fd:e5:7f:2f:22: b9:cc:cf:2d:3d:01:4b:f7:ee:ce:dd:7a:0d:f0:18: 32:28:15:40:28:39:e7:56:9a:88:fb:f4:cd:ba:a3: 6a:39:c2:16:6f:bb:0f:52:2d:8a:eb:65:33:d2:1b: 37:f0:a8:5e:e0:f6:f1:ab:61:74:4b:b3:2b:98:7f: aa:dd:0c:a1:7d:c3:ff:2f:eb:0e:fa:f4:62:6c:c7: 02:2d:60:5d:7d:57:19:a8:0f:50:40:1f:67:3c:1c: f2:a0:2d:03:97:08:7f:48:09:5c:e3:85:ac:3b:5f: a5:df:ae:63:5c:76:b2:6e:9b:09:80:7e:a4:cf:de: 12:d7:a4:d3:2f:c9:b6:27:fd:35:83:b9:82:a7:d2: 56:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:85:6C:31:27:5B:52:4F:20:AC:C8:E2:67:95:B0:FF:B1:69:C6:16 X509v3 Authority Key Identifier: keyid:3F:FD:C5:02:E9:0A:F8:E6:6F:DD:CD:0A:6D:F3:1D:16:8F:38:BA:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:1f:c5:22:48:2c:0c:e4:c7:61:b6:b2:38:78:ff:cf:3c:29: 2f:b6:a7:32:57:32:a1:91:7d:85:6d:7d:9f:49:2a:93:0f:b2: 80:a8:45:ad:9a:53:77:9d:73:04:e6:14:12:c1:59:e7:f1:89: 10:fc:09:41:1e:02:00:ee:66:5d:18:1f:ae:49:f1:6e:cb:58: a9:1f:12:2d:61:27:dd:cd:bd:31:6e:53:60:7e:78:8b:26:e7: 88:73:25:31:eb:37:36:ab:7d:67:5f:1c:3b:9e:94:0f:60:f9: 51:bd:19:d7:ef:d0:4a:aa:98:42:6a:69:25:16:41:13:27:a4: e4:47:87:16:ab:ad:f2:70:ee:e7:e3:36:82:09:c9:b3:ab:22: ef:b4:66:17:01:3f:7d:f7:78:93:d8:db:61:46:57:81:31:60: 68:c2:6b:d3:b2:5b:24:cd:a9:b0:83:7f:10:ec:fb:6c:b1:11: a1:31:8e:ec:7b:00:ba:07:a9:f4:78:27:e4:c0:48:23:80:08: c8:22:79:17:3e:17:92:11:b7:87:0c:7b:9a:50:87:9d:75:e3: 2a:35:73:e3:c9:05:0d:44:03:8c:2b:58:3b:ca:24:aa:bf:f6: 01:08:fd:22:d0:7c:88:b5:ee:21:d1:40:16:90:23:5a:e1:b3: 1b:4b:c1:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFctyEs2+uGo6/l8cbKnWSvMcAacwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZGREM1MDJFOTBBRjhFNjZGRERDRDBBNkRGMzFEMTY4 RjM4QkFBNjAeFw0yNTA0MjQxODA3MTVaFw0yNTA0MjcxOTE3MTVaMDMxMTAvBgNV BAMTKDk2ODU2QzMxMjc1QjUyNEYyMEFDQzhFMjY3OTVCMEZGQjE2OUM2MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMEMOdOz+WNP1Q6a3ArluV6jif Fk9169cgswIjXiDEMcG3L84S7EqZMtS22waBIyDwjFOYIM69xpTRrpMuTB3QoTXd jhIGW3RDFT/nJq4ayN9UIbm2mnTyJ8/sj77MWQjoDon/5ipYbXnZgWafay3ZliD9 5X8vIrnMzy09AUv37s7deg3wGDIoFUAoOedWmoj79M26o2o5whZvuw9SLYrrZTPS GzfwqF7g9vGrYXRLsyuYf6rdDKF9w/8v6w769GJsxwItYF19VxmoD1BAH2c8HPKg LQOXCH9ICVzjhaw7X6XfrmNcdrJumwmAfqTP3hLXpNMvybYn/TWDuYKn0lahAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUloVsMSdbUk8grMjiZ5Ww/7FpxhYwHwYDVR0j BBgwFoAUP/3FAukK+OZv3c0KbfMdFo84uqYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NmRhMGU4Mi0wNzY0LTQ1ZDMtYWVkOS1mZDI1OGU3MmI2ZTIvMS8zRkZEQzUwMkU5 MEFGOEU2NkZERENEMEE2REYzMUQxNjhGMzhCQUE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZGREM1MDJFOTBBRjhFNjZGRERDRDBBNkRGMzFEMTY4RjM4 QkFBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTZkYTBlODItMDc2NC00NWQzLWFl ZDktZmQyNThlNzJiNmUyLzEvM0ZGREM1MDJFOTBBRjhFNjZGRERDRDBBNkRGMzFE MTY4RjM4QkFBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFAfxSJILAzkx2G2sjh4/888KS+2pzJXMqGR fYVtfZ9JKpMPsoCoRa2aU3edcwTmFBLBWefxiRD8CUEeAgDuZl0YH65J8W7LWKkf Ei1hJ93NvTFuU2B+eIsm54hzJTHrNzarfWdfHDuelA9g+VG9Gdfv0EqqmEJqaSUW QRMnpORHhxarrfJw7ufjNoIJybOrIu+0ZhcBP333eJPY22FGV4ExYGjCa9OyWyTN qbCDfxDs+2yxEaExjux7ALoHqfR4J+TASCOACMgieRc+F5IRt4cMe5pQh5114yo1 c+PJBQ1EA4wrWDvKJKq/9gEI/SLQfIi17iHRQBaQI1rhsxtLwfQ= -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:10 2025 by rpki-client on console.sobornost.net