$ rpki-client -vvf repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.mft File: 3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.mft (raw, json) Hash identifier: SNLsQUpyrXKFdEHfgkVP7h9akpGgIornS6ZRtMK21sc= Subject key identifier: 27:8B:4F:3E:57:17:AF:C6:C6:A0:C1:10:CA:C7:D5:F8:98:33:59:5F Authority key identifier: 3E:66:62:8C:03:CA:B8:C6:D6:FC:DE:DB:E0:70:05:57:A3:5B:02:51 Certificate issuer: /CN=3E66628C03CAB8C6D6FCDEDBE0700557A35B0251 Certificate serial: 0D3DD83C4BDADFE374D1643A1F9B16350A5BF029 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.cer Subject info access: rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.mft Manifest number: 01E8 Signing time: Fri 25 Apr 2025 16:02:00 +0000 Manifest this update: Fri 25 Apr 2025 15:57:00 +0000 Manifest next update: Mon 28 Apr 2025 18:22:00 +0000 Files and hashes: 1: 3132302e32392e3232362e302f32342d3234203d3e203338373634.roa (hash: mysGAJlaNM3q0YL8uE3Xz1GWVqbaXG+zqdMdDsNe4Gc=) 2: 3132302e32392e3233302e302f32342d3234203d3e203338373634.roa (hash: 8F55uNQoN3zi97DtY0Vq2ak+DmYZUOFPxOyq8OUlCl0=) 3: 3132302e32392e3232392e302f32342d3234203d3e203338373634.roa (hash: qDCFFlpgV3kLnT4aXYTKC6LV3pb8e9ELxOyK+x211n0=) 4: 3132302e32392e3232372e302f32342d3234203d3e203338373634.roa (hash: kizpm5pMXSzgoWrppvdtyhcaCD0lO2EdJCuHJxptLZU=) 5: 3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.crl (hash: hiGTpmgDQ+wrRbPNGW5UOSbUavF3++2nMUw+KnUjvM8=) 6: 3132302e32392e3232352e302f32342d3234203d3e203338373634.roa (hash: iVloZrBIKi8lO+ez3IilhigHeiC4/XBak2SIy/5eYbE=) 7: 3132302e32392e3233312e302f32342d3234203d3e203338373634.roa (hash: 3zNl9QPxwFV4edQhVMCJxnLjianzmdRSes5SZUBTIJM=) 8: 3132302e32392e3232382e302f32342d3234203d3e203338373634.roa (hash: RPYaZow5ZwQZRWzcXVmYwaCDDEvxoHSoWyb9lPO3JzQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.crl rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 18:22:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:3d:d8:3c:4b:da:df:e3:74:d1:64:3a:1f:9b:16:35:0a:5b:f0:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E66628C03CAB8C6D6FCDEDBE0700557A35B0251 Validity Not Before: Apr 25 15:57:00 2025 GMT Not After : Apr 28 18:22:00 2025 GMT Subject: CN=278B4F3E5717AFC6C6A0C110CAC7D5F89833595F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:04:fe:7e:ce:ea:b4:88:a0:81:3b:66:95:f6: 39:20:d7:cc:10:13:f2:57:b9:62:cb:5f:55:37:ef: d3:6a:46:d9:d9:d1:79:0e:79:ff:8f:d8:6b:a3:27: 78:98:52:35:07:ab:19:4e:90:02:25:bf:96:5f:f2: 9f:0c:d4:bb:7e:fd:3a:65:a4:68:bc:b9:9a:51:8f: 73:85:83:b9:14:45:ac:9e:5a:28:fe:e8:ab:7b:80: d2:2e:ba:36:17:1d:a9:8e:ed:ea:67:ef:d1:fd:3f: b1:e0:aa:95:19:37:1f:7e:8e:87:a4:c6:8e:20:fc: 52:a8:0c:2c:69:1b:50:6f:84:17:1f:d0:0f:a3:0a: 6b:2a:69:a9:97:10:0c:7e:18:13:f8:3b:6a:0a:b4: 5d:09:eb:54:93:54:82:3f:b6:4c:2a:38:c6:35:41: df:35:12:e6:53:44:8c:19:44:a9:1f:22:1b:3c:76: 67:9a:5f:2e:80:d0:f8:f3:ae:c3:e3:17:32:56:35: f4:52:4b:74:50:d4:f2:6c:ee:91:37:34:1f:97:19: 90:98:eb:60:af:fb:7c:11:0c:17:b0:a7:41:5e:4d: 2a:5b:dc:43:a6:81:63:c3:8a:d2:44:74:57:f4:24: fc:60:d4:54:b0:0e:71:06:5a:d6:35:5d:0f:e3:81: 69:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:8B:4F:3E:57:17:AF:C6:C6:A0:C1:10:CA:C7:D5:F8:98:33:59:5F X509v3 Authority Key Identifier: keyid:3E:66:62:8C:03:CA:B8:C6:D6:FC:DE:DB:E0:70:05:57:A3:5B:02:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:19:1d:3d:9e:05:e1:82:ac:d9:f3:a1:60:ba:16:5f:af:6f: fc:a9:af:ac:33:e1:6a:da:04:d4:e0:20:42:ad:6b:74:ef:23: 85:8b:5d:44:0f:43:0d:58:ec:a1:33:c6:31:86:ca:83:cb:36: 44:a8:c8:a8:38:d9:5f:11:46:3f:1d:f4:1d:08:88:a6:31:33: c4:a9:2a:7c:f2:d3:c7:a9:ef:18:f3:27:35:fb:13:3e:2b:d2: 4e:d7:27:f8:f7:d2:3f:db:66:44:48:50:18:37:e8:ec:e5:de: af:4c:cb:43:3a:c3:f3:69:ae:83:5e:00:58:ea:c6:8c:fe:7a: 5b:77:28:69:38:2a:bd:02:60:c7:d8:17:4e:39:ac:a6:ed:49: e8:59:4b:d2:80:07:48:6b:03:6b:3e:ef:a4:75:e4:ea:11:aa: c1:97:7f:94:49:2b:c1:9f:4c:a8:b3:03:80:67:51:75:ee:bd: 22:21:ee:d2:c4:82:1f:c1:79:1c:f8:11:ed:a7:65:32:e7:b2: ad:6a:68:8a:57:2e:69:cd:64:9f:30:8e:ba:b2:d8:b5:31:ee: f3:c3:24:45:8b:bb:27:88:ad:c8:10:ba:42:32:5f:cb:f4:89: d7:c2:3a:20:f4:1c:47:ba:49:54:94:ee:20:51:88:84:4a:de: ec:c5:75:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDT3YPEva3+N00WQ6H5sWNQpb8CkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U2NjYyOEMwM0NBQjhDNkQ2RkNERURCRTA3MDA1NTdB MzVCMDI1MTAeFw0yNTA0MjUxNTU3MDBaFw0yNTA0MjgxODIyMDBaMDMxMTAvBgNV BAMTKDI3OEI0RjNFNTcxN0FGQzZDNkEwQzExMENBQzdENUY4OTgzMzU5NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpBP5+zuq0iKCBO2aV9jkg18wQ E/JXuWLLX1U379NqRtnZ0XkOef+P2GujJ3iYUjUHqxlOkAIlv5Zf8p8M1Lt+/Tpl pGi8uZpRj3OFg7kURayeWij+6Kt7gNIuujYXHamO7epn79H9P7HgqpUZNx9+joek xo4g/FKoDCxpG1BvhBcf0A+jCmsqaamXEAx+GBP4O2oKtF0J61STVII/tkwqOMY1 Qd81EuZTRIwZRKkfIhs8dmeaXy6A0PjzrsPjFzJWNfRSS3RQ1PJs7pE3NB+XGZCY 62Cv+3wRDBewp0FeTSpb3EOmgWPDitJEdFf0JPxg1FSwDnEGWtY1XQ/jgWkrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ4tPPlcXr8bGoMEQysfV+JgzWV8wHwYDVR0j BBgwFoAUPmZijAPKuMbW/N7b4HAFV6NbAlEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MjFjOWNhZC1jM2I5LTQ1YTAtYmViNi1iY2U0OGUyYjIyNzIvMC8zRTY2NjI4QzAz Q0FCOEM2RDZGQ0RFREJFMDcwMDU1N0EzNUIwMjUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U2NjYyOEMwM0NBQjhDNkQ2RkNERURCRTA3MDA1NTdBMzVC MDI1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjIxYzljYWQtYzNiOS00NWEwLWJl YjYtYmNlNDhlMmIyMjcyLzAvM0U2NjYyOEMwM0NBQjhDNkQ2RkNERURCRTA3MDA1 NTdBMzVCMDI1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGsZHT2eBeGCrNnzoWC6Fl+vb/ypr6wz4Wra BNTgIEKta3TvI4WLXUQPQw1Y7KEzxjGGyoPLNkSoyKg42V8RRj8d9B0IiKYxM8Sp Knzy08ep7xjzJzX7Ez4r0k7XJ/j30j/bZkRIUBg36Ozl3q9My0M6w/NproNeAFjq xoz+elt3KGk4Kr0CYMfYF045rKbtSehZS9KAB0hrA2s+76R15OoRqsGXf5RJK8Gf TKizA4BnUXXuvSIh7tLEgh/BeRz4Ee2nZTLnsq1qaIpXLmnNZJ8wjrqy2LUx7vPD JEWLuyeIrcgQukIyX8v0idfCOiD0HEe6SVSU7iBRiIRK3uzFdRY= -----END CERTIFICATE-----Generated at Fri Apr 25 19:23:49 2025 by rpki-client on console.sobornost.net