$ rpki-client -vvf repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.mft File: E3928623409C1C10E292F838F8308E11636E6C03.mft (raw, json) Hash identifier: jwLg8pzyO7FgPfr+C+d/rNZAG3eZbNDYSQ2eXoQB60A= Subject key identifier: 4B:E4:2C:CB:F5:9E:FF:F9:E2:76:4F:16:17:6B:1A:6F:A0:FB:78:89 Authority key identifier: E3:92:86:23:40:9C:1C:10:E2:92:F8:38:F8:30:8E:11:63:6E:6C:03 Certificate issuer: /CN=E3928623409C1C10E292F838F8308E11636E6C03 Certificate serial: 3C294ACFAA14A800C4528FB7DF0B68D528AC4EB2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E3928623409C1C10E292F838F8308E11636E6C03.cer Subject info access: rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.mft Manifest number: 7E Signing time: Thu 24 Apr 2025 09:42:08 +0000 Manifest this update: Thu 24 Apr 2025 09:37:08 +0000 Manifest next update: Sun 27 Apr 2025 12:38:08 +0000 Files and hashes: 1: 323030313a6466343a6334303a3a2f34382d3438203d3e20313533303639.roa (hash: fpi4CO6dz+MooFZgF3fJxoijLeT4dgpZBighVWAxUxY=) 2: E3928623409C1C10E292F838F8308E11636E6C03.crl (hash: DP2yU2Wl3IodfZr50zd0arpOdJRAIR5otZTNqQtA6tY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.crl rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E3928623409C1C10E292F838F8308E11636E6C03.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 10:42:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:29:4a:cf:aa:14:a8:00:c4:52:8f:b7:df:0b:68:d5:28:ac:4e:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E3928623409C1C10E292F838F8308E11636E6C03 Validity Not Before: Apr 24 09:37:08 2025 GMT Not After : Apr 27 12:38:08 2025 GMT Subject: CN=4BE42CCBF59EFFF9E2764F16176B1A6FA0FB7889 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f3:45:03:88:df:a1:7e:3f:b2:31:f9:2f:7a: d0:d3:ac:6b:6a:5a:41:7b:da:37:ca:08:34:91:2e: 28:73:5d:97:fe:ec:00:34:3f:3d:03:9a:b3:2e:b1: a8:50:b8:6b:b8:e6:43:85:59:36:02:2f:ec:17:c4: f4:ca:85:27:54:18:cc:01:0c:0b:c1:96:46:03:25: 55:00:9b:0a:62:e5:8c:31:16:04:3e:b9:84:fe:c0: 04:d2:69:6b:31:be:a0:96:1a:42:63:62:c6:e9:fb: e5:6e:b7:82:91:ee:47:6c:f8:94:50:67:e4:84:2a: e1:68:a9:3b:58:ec:eb:f0:9d:11:fb:ab:b7:2d:a7: a8:4f:b1:a9:f9:ed:86:9c:aa:3c:a7:f7:6f:ba:02: 17:3f:19:2e:0e:fe:78:c9:99:b2:64:c6:fc:e6:0f: e0:61:57:59:69:c0:87:f8:bc:ef:78:d7:c7:af:73: b4:cb:74:0d:a8:28:12:24:d0:d0:2d:60:30:ee:16: f6:e9:fc:ae:ba:8f:88:2c:e4:ce:f4:ce:1e:9b:dc: a9:21:0d:80:47:6d:49:5a:8d:2e:ad:94:fc:b5:9e: a8:20:54:9f:b9:35:9f:5c:d6:5f:56:4b:c7:20:6d: 27:81:21:ff:db:13:4d:8d:b5:45:92:ec:01:c0:a7: 14:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:E4:2C:CB:F5:9E:FF:F9:E2:76:4F:16:17:6B:1A:6F:A0:FB:78:89 X509v3 Authority Key Identifier: keyid:E3:92:86:23:40:9C:1C:10:E2:92:F8:38:F8:30:8E:11:63:6E:6C:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E3928623409C1C10E292F838F8308E11636E6C03.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:db:c1:34:4d:01:57:77:0b:9a:63:b4:1b:00:79:d2:48:c1: 4a:91:99:f0:74:78:c4:f5:f9:5e:23:1e:8e:dd:1e:55:09:4f: 6d:8e:b8:87:58:cd:f3:74:63:79:3f:25:20:87:b8:ca:2e:20: 0f:6d:6b:9d:1d:26:ae:4e:c3:2c:06:ba:cf:0a:db:5f:bf:28: da:5c:1a:5e:82:09:0c:10:53:f6:93:c7:ac:b9:9c:5a:a9:48: b9:f3:86:af:59:92:25:8e:d9:8e:7b:af:61:c2:ac:5e:56:be: 5b:b5:b6:e3:fa:3a:a5:c9:27:98:f8:ea:b4:18:10:dd:81:2f: 41:f9:83:6a:ca:5a:eb:d5:5f:a9:56:93:0c:7a:87:2f:9c:61: bd:f4:6d:61:b3:5d:c4:2f:c1:61:cf:86:04:33:99:1a:bd:5c: 5c:a3:48:bd:7a:f1:84:31:8f:59:df:1b:d7:e9:ae:e1:f2:b1: 32:cd:a8:d0:09:0c:da:37:72:67:af:24:61:3f:66:88:81:d5: f5:b4:c8:92:db:e5:2a:a1:3b:87:51:e8:25:e1:e1:bb:01:84: 92:dd:b7:0e:e1:39:46:e8:b1:fd:92:29:11:9e:1f:e1:e9:7b: d0:e3:f5:92:5f:4a:33:bc:ce:76:59:24:6f:6d:d4:90:89:52: 39:fd:59:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPClKz6oUqADEUo+33wto1SisTrIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTM5Mjg2MjM0MDlDMUMxMEUyOTJGODM4RjgzMDhFMTE2 MzZFNkMwMzAeFw0yNTA0MjQwOTM3MDhaFw0yNTA0MjcxMjM4MDhaMDMxMTAvBgNV BAMTKDRCRTQyQ0NCRjU5RUZGRjlFMjc2NEYxNjE3NkIxQTZGQTBGQjc4ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ80UDiN+hfj+yMfkvetDTrGtq WkF72jfKCDSRLihzXZf+7AA0Pz0DmrMusahQuGu45kOFWTYCL+wXxPTKhSdUGMwB DAvBlkYDJVUAmwpi5YwxFgQ+uYT+wATSaWsxvqCWGkJjYsbp++Vut4KR7kds+JRQ Z+SEKuFoqTtY7OvwnRH7q7ctp6hPsan57Yacqjyn92+6Ahc/GS4O/njJmbJkxvzm D+BhV1lpwIf4vO9418evc7TLdA2oKBIk0NAtYDDuFvbp/K66j4gs5M70zh6b3Kkh DYBHbUlajS6tlPy1nqggVJ+5NZ9c1l9WS8cgbSeBIf/bE02NtUWS7AHApxTtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS+Qsy/We//nidk8WF2sab6D7eIkwHwYDVR0j BBgwFoAU45KGI0CcHBDikvg4+DCOEWNubAMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MzY1NjFkNC0yM2M4LTRjOWItODkwZS00ZjI2MzJlNTJjOTcvMS9FMzkyODYyMzQw OUMxQzEwRTI5MkY4MzhGODMwOEUxMTYzNkU2QzAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTM5Mjg2MjM0MDlDMUMxMEUyOTJGODM4RjgzMDhFMTE2MzZF NkMwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjM2NTYxZDQtMjNjOC00YzliLTg5 MGUtNGYyNjMyZTUyYzk3LzEvRTM5Mjg2MjM0MDlDMUMxMEUyOTJGODM4RjgzMDhF MTE2MzZFNkMwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB/bwTRNAVd3C5pjtBsAedJIwUqRmfB0eMT1 +V4jHo7dHlUJT22OuIdYzfN0Y3k/JSCHuMouIA9ta50dJq5OwywGus8K21+/KNpc Gl6CCQwQU/aTx6y5nFqpSLnzhq9ZkiWO2Y57r2HCrF5Wvlu1tuP6OqXJJ5j46rQY EN2BL0H5g2rKWuvVX6lWkwx6hy+cYb30bWGzXcQvwWHPhgQzmRq9XFyjSL168YQx j1nfG9fpruHysTLNqNAJDNo3cmevJGE/ZoiB1fW0yJLb5SqhO4dR6CXh4bsBhJLd tw7hOUbosf2SKRGeH+Hpe9Dj9ZJfSjO8znZZJG9t1JCJUjn9Wc0= -----END CERTIFICATE-----Generated at Thu Apr 24 11:25:12 2025 by rpki-client on console.sobornost.net