$ rpki-client -vvf repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft File: 038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft (raw, json) Hash identifier: YYkIEQLvaUNmanB2BF+1xNIm73nssDEWEOd++iS2Sz0= Subject key identifier: 21:CA:65:6C:35:CA:9A:49:F5:DB:45:23:95:99:00:B1:2B:E5:16:E2 Authority key identifier: 03:8F:C8:DB:9F:4F:38:1D:61:4C:3C:DA:94:4E:DB:CE:2C:EB:B6:F4 Certificate issuer: /CN=038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4 Certificate serial: 2C5C16E957155CFDA16B1A0FFF1E36FAC7128D5E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft Manifest number: 012C Signing time: Wed 23 Apr 2025 12:40:52 +0000 Manifest this update: Wed 23 Apr 2025 12:35:52 +0000 Manifest next update: Sat 26 Apr 2025 19:50:52 +0000 Files and hashes: 1: 038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.crl (hash: NWZ9YlurGiT2CjwN65bflk6uavo/pHemI5zsnktoSyU=) 2: 3130332e32302e35302e302f32342d3234203d3e20313530323138.roa (hash: tNa2iWz1Y62lu1NCdufrg6k1iWefHX4gFLjt/Rd+OAc=) 3: 3130332e3231382e3130342e302f32342d3234203d3e20313530323138.roa (hash: Z06476NaHt115mn6/pag0qCNS8otsV8hkdLcQH3kosY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.crl rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 12:29:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:5c:16:e9:57:15:5c:fd:a1:6b:1a:0f:ff:1e:36:fa:c7:12:8d:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4 Validity Not Before: Apr 23 12:35:52 2025 GMT Not After : Apr 26 19:50:52 2025 GMT Subject: CN=21CA656C35CA9A49F5DB4523959900B12BE516E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e3:b0:e5:56:f9:51:c1:f4:64:1e:22:b1:da: 44:4f:cd:71:0a:59:ab:01:a6:c3:9a:f9:dc:e5:61: 7b:3b:77:f3:dc:66:53:6e:98:05:d3:23:2c:b7:dc: 87:1f:4d:0e:2e:b3:f7:e1:0f:ef:96:7f:6c:f0:25: 6f:ee:cd:f9:57:e5:6f:5e:2e:3b:9f:d3:41:3a:a2: fd:60:3c:c4:e3:f7:21:c4:2f:01:75:d5:47:ab:84: 12:0f:9e:b9:d8:ea:75:79:96:9d:ff:e3:2c:9e:68: f5:20:a3:48:5e:53:e9:4c:8d:ef:b3:5c:db:38:0a: cc:ad:a8:b7:22:cc:5f:33:9f:4d:d7:b5:73:69:82: 74:20:7f:65:63:16:00:e2:ed:11:a6:33:17:7b:5d: d6:6b:2e:c6:8b:ad:51:6b:3d:d3:84:61:b8:e1:c5: 5a:91:52:38:ca:ed:88:98:22:90:49:2c:69:15:6e: a2:a4:b9:b2:bb:11:e1:e8:af:25:c0:e3:fa:91:a5: bb:04:c7:d2:dc:29:3a:71:42:f7:d8:db:7d:49:c9: 8f:1c:08:cb:03:40:3e:b3:35:be:1e:fb:d8:b9:45: c3:25:4e:3f:5d:56:5d:4b:72:c1:97:4f:74:5a:2e: 87:c4:8f:09:47:78:3c:e7:8c:78:87:d9:c3:6a:98: 9e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:CA:65:6C:35:CA:9A:49:F5:DB:45:23:95:99:00:B1:2B:E5:16:E2 X509v3 Authority Key Identifier: keyid:03:8F:C8:DB:9F:4F:38:1D:61:4C:3C:DA:94:4E:DB:CE:2C:EB:B6:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:bb:04:4a:f1:89:94:97:73:bb:58:f9:d1:df:5a:1e:dd:15: 9e:4f:96:91:34:3e:2d:df:c4:91:e2:57:d9:71:8f:8b:a5:4c: 49:98:c6:fe:9d:d1:a3:71:a8:e8:7a:c6:6b:3a:36:f2:43:5a: 41:1f:6c:a4:2c:69:25:12:a7:66:b0:5f:a1:1a:b9:15:7b:34: 9d:bd:9b:e4:cf:91:f9:84:48:69:be:bf:3b:2e:32:ae:00:6e: 83:87:dc:67:44:17:a2:6d:0a:d4:50:68:74:19:fe:36:79:44: b9:f4:51:24:d0:f6:fb:86:63:81:cd:56:c4:fa:04:09:2d:04: 7d:65:5d:d1:00:76:03:b2:a4:99:92:f3:13:5d:20:a1:ee:bf: ca:52:40:8f:88:0b:31:f2:cc:79:64:82:cc:b2:13:e0:2d:c0: 47:e3:94:3b:db:5b:67:2a:17:24:99:46:75:cd:78:81:56:41: 68:02:2d:08:70:a1:3f:62:02:85:f1:f2:1f:73:1b:aa:8d:26: 87:55:67:f1:86:1f:60:92:1d:e0:c1:4f:8f:0c:fd:29:c4:33: c5:aa:c2:e4:17:01:41:ff:8a:91:9f:63:db:b4:d5:1e:64:c9: f1:4f:e3:11:f4:fc:cd:cf:68:44:a9:b9:fa:6f:5b:e2:aa:5f: cf:2f:a7:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULFwW6VcVXP2haxoP/x42+scSjV4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM4RkM4REI5RjRGMzgxRDYxNEMzQ0RBOTQ0RURCQ0Uy Q0VCQjZGNDAeFw0yNTA0MjMxMjM1NTJaFw0yNTA0MjYxOTUwNTJaMDMxMTAvBgNV BAMTKDIxQ0E2NTZDMzVDQTlBNDlGNURCNDUyMzk1OTkwMEIxMkJFNTE2RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh47DlVvlRwfRkHiKx2kRPzXEK WasBpsOa+dzlYXs7d/PcZlNumAXTIyy33IcfTQ4us/fhD++Wf2zwJW/uzflX5W9e Ljuf00E6ov1gPMTj9yHELwF11UerhBIPnrnY6nV5lp3/4yyeaPUgo0heU+lMje+z XNs4CsytqLcizF8zn03XtXNpgnQgf2VjFgDi7RGmMxd7XdZrLsaLrVFrPdOEYbjh xVqRUjjK7YiYIpBJLGkVbqKkubK7EeHoryXA4/qRpbsEx9LcKTpxQvfY231JyY8c CMsDQD6zNb4e+9i5RcMlTj9dVl1LcsGXT3RaLofEjwlHeDznjHiH2cNqmJ41AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIcplbDXKmkn120UjlZkAsSvlFuIwHwYDVR0j BBgwFoAUA4/I259POB1hTDzalE7bzizrtvQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MzQwZGYxMy1jNGU5LTQyMTgtYjExNC1kZWFkMTY0ODI4NWMvMC8wMzhGQzhEQjlG NEYzODFENjE0QzNDREE5NDRFREJDRTJDRUJCNkY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDM4RkM4REI5RjRGMzgxRDYxNEMzQ0RBOTQ0RURCQ0UyQ0VC QjZGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzM0MGRmMTMtYzRlOS00MjE4LWIx MTQtZGVhZDE2NDgyODVjLzAvMDM4RkM4REI5RjRGMzgxRDYxNEMzQ0RBOTQ0RURC Q0UyQ0VCQjZGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJK7BErxiZSXc7tY+dHfWh7dFZ5PlpE0Pi3f xJHiV9lxj4ulTEmYxv6d0aNxqOh6xms6NvJDWkEfbKQsaSUSp2awX6EauRV7NJ29 m+TPkfmESGm+vzsuMq4AboOH3GdEF6JtCtRQaHQZ/jZ5RLn0USTQ9vuGY4HNVsT6 BAktBH1lXdEAdgOypJmS8xNdIKHuv8pSQI+ICzHyzHlkgsyyE+AtwEfjlDvbW2cq FySZRnXNeIFWQWgCLQhwoT9iAoXx8h9zG6qNJodVZ/GGH2CSHeDBT48M/SnEM8Wq wuQXAUH/ipGfY9u01R5kyfFP4xH0/M3PaESpufpvW+KqX88vpxs= -----END CERTIFICATE-----Generated at Wed Apr 23 15:33:57 2025 by rpki-client on console.sobornost.net