$ rpki-client -vvf repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft File: 340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft (raw, json) Hash identifier: kMNLm3d1sPYEOAapDByftDtYfp/ukfOVves2n1NO1Os= Subject key identifier: 30:75:AD:FD:90:89:DB:14:07:52:24:91:96:42:7B:51:29:C2:E1:1D Authority key identifier: 34:0A:98:C1:E9:6A:39:09:CE:B0:BE:B5:88:C4:0C:FB:DD:3C:A2:95 Certificate issuer: /CN=340A98C1E96A3909CEB0BEB588C40CFBDD3CA295 Certificate serial: 1A9B7A97B4D2A4A6556D617D770A20A1AC6C945D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft Manifest number: 9C Signing time: Sun 27 Apr 2025 03:22:14 +0000 Manifest this update: Sun 27 Apr 2025 03:17:14 +0000 Manifest next update: Wed 30 Apr 2025 09:40:14 +0000 Files and hashes: 1: 340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.crl (hash: qNH8WNode6NXGU5pvHqynEKvd8CILhXJWiEhjYeWO2Q=) 2: 3136302e31392e38362e302f32342d3234203d3e20313431363030.roa (hash: xAoPpGiqJPKLajKP9A6xSCK7J0LB9rX24Vj8odXUlPU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.crl rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 03:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:9b:7a:97:b4:d2:a4:a6:55:6d:61:7d:77:0a:20:a1:ac:6c:94:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=340A98C1E96A3909CEB0BEB588C40CFBDD3CA295 Validity Not Before: Apr 27 03:17:14 2025 GMT Not After : Apr 30 09:40:14 2025 GMT Subject: CN=3075ADFD9089DB140752249196427B5129C2E11D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:75:44:8a:67:83:32:a9:ed:3b:71:84:b7:d9: 00:22:d6:76:4e:37:bf:41:de:0a:7c:b0:23:d8:60: d1:ac:93:c9:21:80:4c:2e:7d:4a:d1:de:28:9f:b8: 0d:c2:c5:4d:bf:24:a9:2b:56:04:13:b5:40:0d:11: f0:73:bd:54:7b:c5:54:51:b7:44:35:cc:2e:28:13: 27:00:bd:5c:7a:ef:2a:3a:18:b7:c3:96:42:d5:ae: 21:79:3b:00:6f:bb:21:22:95:a6:00:78:94:30:be: b7:92:fe:b8:d1:8e:0c:33:f2:e9:5f:9f:73:7f:28: 94:d1:d1:55:34:ef:40:50:f0:0b:cd:ba:f7:fe:b7: a1:01:56:ad:99:b8:26:5a:cd:b5:53:3c:67:9b:6f: c6:79:c3:13:46:f9:ac:5d:09:1e:3a:13:41:d2:d3: c4:0b:eb:44:37:f4:12:2a:ac:54:76:50:47:9b:89: 88:c4:72:48:cb:67:1d:74:5b:e4:33:f0:87:f9:a2: 0f:8e:01:9a:c9:e8:af:98:d0:96:d6:ec:b7:d1:3c: 97:77:fa:f7:5d:47:b1:6f:71:17:ba:44:70:0f:c6: cb:76:42:5c:60:a8:98:12:11:84:44:74:49:63:21: fa:6d:5c:7d:aa:5b:02:9c:68:18:a1:b9:d9:2e:ed: 97:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:75:AD:FD:90:89:DB:14:07:52:24:91:96:42:7B:51:29:C2:E1:1D X509v3 Authority Key Identifier: keyid:34:0A:98:C1:E9:6A:39:09:CE:B0:BE:B5:88:C4:0C:FB:DD:3C:A2:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:74:6c:95:a2:ee:f8:19:b1:31:65:1d:23:59:2f:64:c7:d3: 93:9e:54:84:18:4e:08:48:39:2b:81:5d:8b:46:de:17:44:f9: c3:ac:de:c0:f8:bc:87:41:e3:0c:f3:6b:f2:a6:ad:88:aa:a5: 18:c5:df:ae:b9:e9:96:b2:a9:a0:b0:6f:fe:00:9f:a1:e5:07: d3:d2:0b:b2:38:92:a4:e0:79:96:f0:c8:c0:c9:b3:a3:5f:4a: a9:b5:ec:a4:5a:2d:fe:7b:b7:73:58:80:1d:78:30:51:4e:fa: 5f:a4:93:74:88:4d:91:ad:39:ce:d6:af:26:bc:7a:df:6d:b2: 06:47:7f:88:35:7d:56:89:f6:1e:5b:7a:c9:a4:25:c4:47:1e: 5d:af:5a:ea:80:26:92:ca:e7:9b:98:04:03:b5:b2:4f:5e:a9: d9:75:2a:10:4f:62:40:96:27:a7:d3:67:d1:b1:28:57:f1:fb: 7f:e6:99:1f:21:d8:75:e2:09:c1:0d:4a:14:a5:54:ab:c9:df: fb:25:b8:05:fb:6d:eb:c6:a2:89:ec:38:07:3d:74:14:b8:42: d6:14:1f:f0:8c:af:d0:2e:1e:f3:49:5a:e7:38:5c:e1:31:9c: 64:22:f5:46:ea:56:85:bf:b7:47:3e:9a:e3:44:36:3b:8f:a8: 2b:48:df:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGpt6l7TSpKZVbWF9dwogoaxslF0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQwQTk4QzFFOTZBMzkwOUNFQjBCRUI1ODhDNDBDRkJE RDNDQTI5NTAeFw0yNTA0MjcwMzE3MTRaFw0yNTA0MzAwOTQwMTRaMDMxMTAvBgNV BAMTKDMwNzVBREZEOTA4OURCMTQwNzUyMjQ5MTk2NDI3QjUxMjlDMkUxMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9dUSKZ4Myqe07cYS32QAi1nZO N79B3gp8sCPYYNGsk8khgEwufUrR3iifuA3CxU2/JKkrVgQTtUANEfBzvVR7xVRR t0Q1zC4oEycAvVx67yo6GLfDlkLVriF5OwBvuyEilaYAeJQwvreS/rjRjgwz8ulf n3N/KJTR0VU070BQ8AvNuvf+t6EBVq2ZuCZazbVTPGebb8Z5wxNG+axdCR46E0HS 08QL60Q39BIqrFR2UEebiYjEckjLZx10W+Qz8If5og+OAZrJ6K+Y0JbW7LfRPJd3 +vddR7FvcRe6RHAPxst2QlxgqJgSEYREdEljIfptXH2qWwKcaBihudku7ZfLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMHWt/ZCJ2xQHUiSRlkJ7USnC4R0wHwYDVR0j BBgwFoAUNAqYwelqOQnOsL61iMQM+908opUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MTQ0ZDk3YS1lM2ZiLTRmZmMtYjdmNy1mN2I4YjY2NTlhYzQvMC8zNDBBOThDMUU5 NkEzOTA5Q0VCMEJFQjU4OEM0MENGQkREM0NBMjk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzQwQTk4QzFFOTZBMzkwOUNFQjBCRUI1ODhDNDBDRkJERDND QTI5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzE0NGQ5N2EtZTNmYi00ZmZjLWI3 ZjctZjdiOGI2NjU5YWM0LzAvMzQwQTk4QzFFOTZBMzkwOUNFQjBCRUI1ODhDNDBD RkJERDNDQTI5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGJ0bJWi7vgZsTFlHSNZL2TH05OeVIQYTghI OSuBXYtG3hdE+cOs3sD4vIdB4wzza/KmrYiqpRjF36656ZayqaCwb/4An6HlB9PS C7I4kqTgeZbwyMDJs6NfSqm17KRaLf57t3NYgB14MFFO+l+kk3SITZGtOc7Wrya8 et9tsgZHf4g1fVaJ9h5besmkJcRHHl2vWuqAJpLK55uYBAO1sk9eqdl1KhBPYkCW J6fTZ9GxKFfx+3/mmR8h2HXiCcENShSlVKvJ3/sluAX7bevGoonsOAc9dBS4QtYU H/CMr9AuHvNJWuc4XOExnGQi9UbqVoW/t0c+muNENjuPqCtI30A= -----END CERTIFICATE-----Generated at Sun Apr 27 05:32:54 2025 by rpki-client on console.sobornost.net