$ rpki-client -vvf repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.mft File: 29692979765B670997413579D7BF5663C05BBD1A.mft (raw, json) Hash identifier: UXCejK8v1BCSzKHynV8qEv4Kg6DIP2ubC2XVZyixyMs= Subject key identifier: 39:BE:47:15:DF:FA:BE:79:87:6A:83:17:D9:31:F3:47:16:D4:F1:4D Authority key identifier: 29:69:29:79:76:5B:67:09:97:41:35:79:D7:BF:56:63:C0:5B:BD:1A Certificate issuer: /CN=29692979765B670997413579D7BF5663C05BBD1A Certificate serial: 3001C8BADAE5867A2FDFD46A4387408891E242BF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29692979765B670997413579D7BF5663C05BBD1A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.mft Manifest number: 01FF Signing time: Sat 26 Apr 2025 23:11:00 +0000 Manifest this update: Sat 26 Apr 2025 23:06:00 +0000 Manifest next update: Wed 30 Apr 2025 04:36:00 +0000 Files and hashes: 1: 29692979765B670997413579D7BF5663C05BBD1A.crl (hash: TQRmdJGL9TWtXwcuLZpoFDLzYtndNKRg8oexRg8kNig=) 2: 34352e3235312e37322e302f32322d3234203d3e20313331373131.roa (hash: Sc7V8HjoJlvlyPs0x8OcUDy/oyEPZU0ZY61rdBTppuU=) 3: 3130332e392e3132342e302f32322d3234203d3e20313331373131.roa (hash: OEcoBkoG7Ieje5kz6iCayAVIs4OuEBZdw+TGiUfzbw0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.crl rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29692979765B670997413579D7BF5663C05BBD1A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 04:36:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:01:c8:ba:da:e5:86:7a:2f:df:d4:6a:43:87:40:88:91:e2:42:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29692979765B670997413579D7BF5663C05BBD1A Validity Not Before: Apr 26 23:06:00 2025 GMT Not After : Apr 30 04:36:00 2025 GMT Subject: CN=39BE4715DFFABE79876A8317D931F34716D4F14D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:64:e3:00:c7:21:76:84:63:22:25:de:8e:21: 1c:d7:0a:2e:02:1b:82:52:bc:1a:4e:c9:cf:eb:25: 4f:b2:7d:09:26:f9:b6:55:d2:c8:09:f6:80:96:07: d3:02:22:67:4a:81:2b:17:b5:60:df:69:c0:f1:f9: 3b:3f:86:30:ed:6e:5c:16:19:1b:cd:e0:30:74:7b: f5:c3:fc:08:3d:fa:e4:fc:30:68:2c:e7:3c:31:df: f9:ac:10:7e:bd:e0:61:95:45:e2:30:25:c2:12:6b: aa:6b:26:9a:fd:44:48:0d:2e:e8:a0:35:bd:df:57: 97:67:63:91:1b:a0:71:92:d4:4a:ba:16:75:39:d1: 4e:6c:40:66:21:7d:71:96:ef:43:f5:03:88:c8:3b: 74:8e:4b:d3:54:28:48:75:48:b5:37:7a:0c:c6:0b: 25:4d:f2:f7:9f:a0:cb:d4:48:5e:ac:4b:25:ef:24: 5e:ca:0d:02:f1:19:e0:2d:1e:52:5a:fd:67:95:f9: 13:ef:ef:94:c7:8c:54:2f:51:74:6e:c1:0e:83:d3: d9:96:f9:f2:31:e0:8a:67:a0:f1:7c:4d:0b:f3:69: 36:cf:3d:a1:0c:39:a3:d2:8d:c6:f8:69:50:cf:06: 55:ea:d2:6e:bc:80:4d:0f:e5:aa:5e:53:60:8a:63: 52:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:BE:47:15:DF:FA:BE:79:87:6A:83:17:D9:31:F3:47:16:D4:F1:4D X509v3 Authority Key Identifier: keyid:29:69:29:79:76:5B:67:09:97:41:35:79:D7:BF:56:63:C0:5B:BD:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29692979765B670997413579D7BF5663C05BBD1A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:89:cf:5f:d5:0b:8f:7c:3b:f3:03:b0:89:33:36:5c:9a:42: 9e:80:2b:27:7e:19:fc:fc:f0:79:6e:85:43:de:08:09:0d:d5: bd:02:64:78:4c:74:07:e6:9d:ca:05:52:29:7b:30:3b:34:c9: 5a:b3:3a:26:4c:24:27:34:88:37:80:17:45:bf:c4:3c:eb:67: da:58:41:8a:b3:88:65:51:8e:65:f3:1e:be:ac:d4:a5:1f:dd: 32:f8:65:f1:d5:d3:48:22:1e:4d:53:cc:f1:8d:f8:70:98:eb: a1:ed:b2:21:bf:d0:02:06:37:56:65:cf:2f:96:4e:6c:25:13: 95:79:66:3f:59:4c:2f:af:0a:e0:9b:88:b4:95:25:c9:13:e5: bf:02:94:0a:14:9f:f2:80:e9:9d:6e:97:69:a3:6b:cd:6f:a8: a3:af:7a:9a:04:3b:fc:80:ed:73:7b:80:0f:28:45:87:eb:23: ec:38:87:e0:d0:50:c7:f9:6c:18:36:9e:c1:b3:14:e3:f0:76: 4b:1e:bb:47:d5:66:2b:8e:cd:b8:4c:b4:f9:93:95:50:25:d1: c0:44:89:b0:7d:ec:8c:48:bc:d5:17:a2:7b:5d:10:90:1d:c0: c5:9d:f2:91:17:c6:ad:06:dd:33:99:c9:e5:37:dd:a4:7b:87: 18:a2:8c:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMAHIutrlhnov39RqQ4dAiJHiQr8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk2OTI5Nzk3NjVCNjcwOTk3NDEzNTc5RDdCRjU2NjND MDVCQkQxQTAeFw0yNTA0MjYyMzA2MDBaFw0yNTA0MzAwNDM2MDBaMDMxMTAvBgNV BAMTKDM5QkU0NzE1REZGQUJFNzk4NzZBODMxN0Q5MzFGMzQ3MTZENEYxNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGZOMAxyF2hGMiJd6OIRzXCi4C G4JSvBpOyc/rJU+yfQkm+bZV0sgJ9oCWB9MCImdKgSsXtWDfacDx+Ts/hjDtblwW GRvN4DB0e/XD/Ag9+uT8MGgs5zwx3/msEH694GGVReIwJcISa6prJpr9REgNLuig Nb3fV5dnY5EboHGS1Eq6FnU50U5sQGYhfXGW70P1A4jIO3SOS9NUKEh1SLU3egzG CyVN8vefoMvUSF6sSyXvJF7KDQLxGeAtHlJa/WeV+RPv75THjFQvUXRuwQ6D09mW +fIx4IpnoPF8TQvzaTbPPaEMOaPSjcb4aVDPBlXq0m68gE0P5apeU2CKY1IrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOb5HFd/6vnmHaoMX2THzRxbU8U0wHwYDVR0j BBgwFoAUKWkpeXZbZwmXQTV5179WY8BbvRowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YjBhMTFiNS05NDQxLTRjYzktYTY3Mi1iZTk3OTliNjU1MjAvMC8yOTY5Mjk3OTc2 NUI2NzA5OTc0MTM1NzlEN0JGNTY2M0MwNUJCRDFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjk2OTI5Nzk3NjVCNjcwOTk3NDEzNTc5RDdCRjU2NjNDMDVC QkQxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2IwYTExYjUtOTQ0MS00Y2M5LWE2 NzItYmU5Nzk5YjY1NTIwLzAvMjk2OTI5Nzk3NjVCNjcwOTk3NDEzNTc5RDdCRjU2 NjNDMDVCQkQxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH6Jz1/VC498O/MDsIkzNlyaQp6AKyd+Gfz8 8HluhUPeCAkN1b0CZHhMdAfmncoFUil7MDs0yVqzOiZMJCc0iDeAF0W/xDzrZ9pY QYqziGVRjmXzHr6s1KUf3TL4ZfHV00giHk1TzPGN+HCY66HtsiG/0AIGN1Zlzy+W TmwlE5V5Zj9ZTC+vCuCbiLSVJckT5b8ClAoUn/KA6Z1ul2mja81vqKOvepoEO/yA 7XN7gA8oRYfrI+w4h+DQUMf5bBg2nsGzFOPwdkseu0fVZiuOzbhMtPmTlVAl0cBE ibB97IxIvNUXontdEJAdwMWd8pEXxq0G3TOZyeU33aR7hxiijCk= -----END CERTIFICATE-----Generated at Sun Apr 27 05:32:54 2025 by rpki-client on console.sobornost.net