$ rpki-client -vvf repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft File: C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft (raw, json) Hash identifier: CxjNpX0Ndzci97E0VnHxwhiKIjFX6emSC0YZf662k1k= Subject key identifier: 4E:BA:72:86:B3:14:BF:F9:FF:74:86:CF:C4:63:30:67:1D:3C:BB:6B Authority key identifier: C3:0A:37:71:EC:E5:F7:62:D6:FA:6D:87:28:F4:C0:C9:22:86:31:F7 Certificate issuer: /CN=C30A3771ECE5F762D6FA6D8728F4C0C9228631F7 Certificate serial: 0D6CE4211FCA0AA930B190F2EF9AF75B276AC436 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft Manifest number: 0316 Signing time: Thu 24 Apr 2025 05:52:10 +0000 Manifest this update: Thu 24 Apr 2025 05:47:10 +0000 Manifest next update: Sun 27 Apr 2025 16:54:10 +0000 Files and hashes: 1: C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.crl (hash: Qyn7Oho10pecIU6QinBxCenukwdVdn5R/gAyD84BqIo=) 2: 3130332e3136382e3134382e302f32342d3234203d3e20313432333530.roa (hash: tUeL2L2NZGxhk7lppCZ0ZmMoSziMiBP1aFhhhYxJa6g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.crl rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 08:44:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:6c:e4:21:1f:ca:0a:a9:30:b1:90:f2:ef:9a:f7:5b:27:6a:c4:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C30A3771ECE5F762D6FA6D8728F4C0C9228631F7 Validity Not Before: Apr 24 05:47:10 2025 GMT Not After : Apr 27 16:54:10 2025 GMT Subject: CN=4EBA7286B314BFF9FF7486CFC46330671D3CBB6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:85:89:dc:22:0e:86:64:b0:e7:1e:39:40:3d: f0:24:24:30:8f:1f:78:a9:b5:75:ee:52:6f:6f:63: ee:39:37:49:51:9f:ce:90:e5:12:ac:a7:82:35:ec: ab:89:d4:1e:b9:b2:5d:f6:df:a8:ea:88:96:d4:41: ff:c6:1c:ab:89:67:27:b5:c1:04:1c:ce:9d:49:78: c7:8b:8e:29:c3:d0:d8:05:2c:9e:34:60:85:2a:36: 4c:9d:db:86:f6:fb:23:ec:d7:c6:97:95:ea:ce:97: 56:d9:44:01:74:2c:45:d7:4e:06:69:2c:d4:03:e6: 8f:52:d8:87:29:df:ad:f0:0b:ff:ca:b0:57:7c:47: 3a:69:72:13:44:6f:c4:67:95:bd:29:1c:ac:a5:27: 82:a5:b7:82:4f:f2:1f:2e:b1:27:87:2f:b4:a3:d7: 12:96:f5:dc:79:a9:20:bb:a1:56:27:9f:da:e2:9c: 84:91:b9:90:91:e0:f3:f4:fb:d9:4a:59:0e:cb:fe: 00:d4:db:e7:d2:25:62:c5:cd:3d:43:2e:2c:f2:e8: 4b:f2:3f:d6:b3:75:8c:14:97:fd:03:32:77:c8:0b: c0:d0:e7:7f:f5:00:73:1c:15:d6:9e:2f:ea:23:59: 95:21:04:81:7a:0b:ae:2d:b0:04:e7:a5:6b:a5:c9: 41:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:BA:72:86:B3:14:BF:F9:FF:74:86:CF:C4:63:30:67:1D:3C:BB:6B X509v3 Authority Key Identifier: keyid:C3:0A:37:71:EC:E5:F7:62:D6:FA:6D:87:28:F4:C0:C9:22:86:31:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:9a:61:4a:7d:a6:9b:0f:58:b1:29:29:50:87:2a:46:0a:85: 12:d8:56:dd:30:a6:41:1e:d9:5c:24:2a:b7:1c:aa:bc:1a:76: 76:4d:0b:bc:4c:8d:11:67:2e:f6:0f:55:7f:eb:fa:c6:89:79: 2f:54:62:4b:22:83:8d:c1:11:7e:47:0d:a8:62:09:f2:dd:bf: 64:32:17:b1:d8:d5:94:f5:0e:3b:0e:3d:5c:58:d1:1e:2d:e9: 8c:9e:b9:01:e1:19:aa:84:29:36:54:6d:a4:f3:23:e5:60:90: 33:6d:46:16:2b:38:cc:28:5c:ae:54:79:02:94:92:23:26:f4: 2a:cc:8b:cf:de:47:ca:f8:a0:cc:69:00:1a:4e:a1:5e:fd:be: 77:93:8b:06:76:bc:52:70:00:9d:4e:67:c3:25:1b:4e:c3:c4: 8d:0a:27:b9:69:e2:58:b8:49:ca:37:8b:8b:1f:f7:1a:fd:b1: d8:50:ef:5b:b3:6f:fc:4a:93:2b:a8:08:b6:85:2d:3d:d1:62: 94:c2:dd:11:a9:e1:23:f0:9f:79:eb:b3:41:07:86:19:73:70: c5:0a:8a:9a:ab:4f:2f:24:5f:ee:93:c9:63:4b:ef:1c:df:2e: 19:b8:da:f9:f0:4b:1f:54:5e:fa:fe:63:a7:21:b3:10:b6:23: 22:ef:f6:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDWzkIR/KCqkwsZDy75r3WydqxDYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMwQTM3NzFFQ0U1Rjc2MkQ2RkE2RDg3MjhGNEMwQzky Mjg2MzFGNzAeFw0yNTA0MjQwNTQ3MTBaFw0yNTA0MjcxNjU0MTBaMDMxMTAvBgNV BAMTKDRFQkE3Mjg2QjMxNEJGRjlGRjc0ODZDRkM0NjMzMDY3MUQzQ0JCNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDhYncIg6GZLDnHjlAPfAkJDCP H3iptXXuUm9vY+45N0lRn86Q5RKsp4I17KuJ1B65sl3236jqiJbUQf/GHKuJZye1 wQQczp1JeMeLjinD0NgFLJ40YIUqNkyd24b2+yPs18aXlerOl1bZRAF0LEXXTgZp LNQD5o9S2Icp363wC//KsFd8RzppchNEb8Rnlb0pHKylJ4Klt4JP8h8usSeHL7Sj 1xKW9dx5qSC7oVYnn9rinISRuZCR4PP0+9lKWQ7L/gDU2+fSJWLFzT1DLizy6Evy P9azdYwUl/0DMnfIC8DQ53/1AHMcFdaeL+ojWZUhBIF6C64tsATnpWulyUETAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTrpyhrMUv/n/dIbPxGMwZx08u2swHwYDVR0j BBgwFoAUwwo3cezl92LW+m2HKPTAySKGMfcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTFmNjI5OS1iMTU1LTQyMTItYjVlMS05ZjU3MDNjZDA5ODkvMC9DMzBBMzc3MUVD RTVGNzYyRDZGQTZEODcyOEY0QzBDOTIyODYzMUY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzMwQTM3NzFFQ0U1Rjc2MkQ2RkE2RDg3MjhGNEMwQzkyMjg2 MzFGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2ExZjYyOTktYjE1NS00MjEyLWI1 ZTEtOWY1NzAzY2QwOTg5LzAvQzMwQTM3NzFFQ0U1Rjc2MkQ2RkE2RDg3MjhGNEMw QzkyMjg2MzFGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABiaYUp9ppsPWLEpKVCHKkYKhRLYVt0wpkEe 2VwkKrccqrwadnZNC7xMjRFnLvYPVX/r+saJeS9UYksig43BEX5HDahiCfLdv2Qy F7HY1ZT1DjsOPVxY0R4t6YyeuQHhGaqEKTZUbaTzI+VgkDNtRhYrOMwoXK5UeQKU kiMm9CrMi8/eR8r4oMxpABpOoV79vneTiwZ2vFJwAJ1OZ8MlG07DxI0KJ7lp4li4 Sco3i4sf9xr9sdhQ71uzb/xKkyuoCLaFLT3RYpTC3RGp4SPwn3nrs0EHhhlzcMUK ipqrTy8kX+6TyWNL7xzfLhm42vnwSx9UXvr+Y6chsxC2IyLv9q8= -----END CERTIFICATE-----Generated at Thu Apr 24 09:03:02 2025 by rpki-client on console.sobornost.net