$ rpki-client -vvf repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft File: DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft (raw, json) Hash identifier: 8NpUKeMlnP3BpjY4jRAev+uAM4YkyrsJ5Yf9c00A7ds= Subject key identifier: 34:66:2F:EA:C7:77:C0:B7:CD:38:59:CC:E1:F9:2F:98:E8:FA:76:55 Authority key identifier: DB:37:05:DE:AC:1C:B7:21:23:93:B7:02:1A:B6:71:BD:86:99:FE:9B Certificate issuer: /CN=DB3705DEAC1CB7212393B7021AB671BD8699FE9B Certificate serial: 60CBA8F3A051139A7AA4B168291D428CD5595CD5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft Manifest number: 8E Signing time: Sat 26 Apr 2025 19:51:53 +0000 Manifest this update: Sat 26 Apr 2025 19:46:53 +0000 Manifest next update: Tue 29 Apr 2025 21:22:53 +0000 Files and hashes: 1: DB3705DEAC1CB7212393B7021AB671BD8699FE9B.crl (hash: lfapZIpHsDoqax2M/qOfLcNRPEVGEe9Nz64pe1szDhM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.crl rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 20:11:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:cb:a8:f3:a0:51:13:9a:7a:a4:b1:68:29:1d:42:8c:d5:59:5c:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB3705DEAC1CB7212393B7021AB671BD8699FE9B Validity Not Before: Apr 26 19:46:53 2025 GMT Not After : Apr 29 21:22:53 2025 GMT Subject: CN=34662FEAC777C0B7CD3859CCE1F92F98E8FA7655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f4:cb:be:56:99:6a:e7:e8:2a:fc:52:17:b9: 69:b7:2b:a2:b6:ed:69:09:97:75:c9:40:b3:17:60: 50:1f:28:e5:6c:02:ff:f2:ef:35:71:27:19:6c:4b: ef:2d:00:4a:d2:8d:47:60:f7:28:7d:58:e1:a8:3c: 49:f9:9c:c8:2e:be:4e:5f:80:71:92:c3:b6:93:eb: 67:ad:22:a5:bc:4c:a4:95:3c:fa:e6:89:f4:a5:61: 05:1e:cd:73:c9:b6:61:73:ac:8d:3e:cd:b9:47:34: 38:92:eb:de:23:de:57:8c:49:5d:1d:04:d5:ec:ae: c0:7c:45:f5:ad:92:2e:51:fc:b6:15:d7:02:a3:31: 41:c5:a6:f8:b5:61:7f:eb:ef:33:5b:f4:cd:a8:1e: 3b:4f:99:71:f6:b0:b8:41:88:5d:dd:3f:59:16:81: 67:14:84:cb:92:d9:c8:4f:0c:96:9d:ef:6d:2e:b8: 76:b3:e0:a1:21:4a:4e:c9:aa:50:4f:8b:4f:bb:48: 6e:19:91:10:55:69:03:f4:b1:81:96:87:47:2c:c1: bf:be:3c:c6:c3:d4:5d:b6:a4:05:f9:75:79:40:b1: a3:20:30:98:48:85:9d:0a:0d:cc:81:62:8a:e9:06: d9:d5:63:d5:67:11:d3:ee:ed:be:2d:d1:60:86:cc: 9c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:66:2F:EA:C7:77:C0:B7:CD:38:59:CC:E1:F9:2F:98:E8:FA:76:55 X509v3 Authority Key Identifier: keyid:DB:37:05:DE:AC:1C:B7:21:23:93:B7:02:1A:B6:71:BD:86:99:FE:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:3c:b5:ab:6d:3d:11:05:07:e8:0a:30:bd:e2:b2:6b:f9:55: 98:e9:fe:e2:b3:d6:16:51:36:a3:b8:55:87:ec:08:7b:cd:d7: a8:dc:7f:b5:b6:69:33:6b:e0:6a:ad:4f:d0:25:e9:25:f5:0b: 13:e3:e7:bf:e5:20:11:71:80:f2:ee:a4:45:b7:a3:44:dd:71: 29:94:35:ab:bb:bf:fb:8f:45:42:42:83:6e:1d:95:5c:ab:20: d3:1c:9e:e5:21:d4:26:f4:f7:56:3b:30:67:c8:be:db:54:e9: ec:30:1d:23:5a:d6:5d:88:b8:23:3e:c6:0b:7a:1f:62:73:7b: 2f:d1:68:3c:45:8a:c0:6f:7b:8d:bf:6c:a9:8c:67:f9:f7:11: a4:42:a9:74:35:48:ee:77:48:2e:a1:b5:38:8b:a6:b5:91:d8: fd:55:25:47:53:14:56:9e:19:f9:68:4d:65:af:f2:c0:91:fe: 7c:7e:df:d9:26:52:0b:f4:b2:52:cc:27:3d:9e:a6:bd:b8:3b: 64:b4:6d:32:60:e6:57:b7:2b:46:8a:b8:55:af:43:bd:82:ac: 60:c6:9c:0c:6c:a6:40:87:ce:10:f0:e3:90:94:a0:03:96:a8: ca:25:e4:ea:2e:15:98:e4:cf:44:41:12:35:d9:e8:c5:37:53: d0:88:5c:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYMuo86BRE5p6pLFoKR1CjNVZXNUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREIzNzA1REVBQzFDQjcyMTIzOTNCNzAyMUFCNjcxQkQ4 Njk5RkU5QjAeFw0yNTA0MjYxOTQ2NTNaFw0yNTA0MjkyMTIyNTNaMDMxMTAvBgNV BAMTKDM0NjYyRkVBQzc3N0MwQjdDRDM4NTlDQ0UxRjkyRjk4RThGQTc2NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM9Mu+Vplq5+gq/FIXuWm3K6K2 7WkJl3XJQLMXYFAfKOVsAv/y7zVxJxlsS+8tAErSjUdg9yh9WOGoPEn5nMguvk5f gHGSw7aT62etIqW8TKSVPPrmifSlYQUezXPJtmFzrI0+zblHNDiS694j3leMSV0d BNXsrsB8RfWtki5R/LYV1wKjMUHFpvi1YX/r7zNb9M2oHjtPmXH2sLhBiF3dP1kW gWcUhMuS2chPDJad720uuHaz4KEhSk7JqlBPi0+7SG4ZkRBVaQP0sYGWh0cswb++ PMbD1F22pAX5dXlAsaMgMJhIhZ0KDcyBYorpBtnVY9VnEdPu7b4t0WCGzJwfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNGYv6sd3wLfNOFnM4fkvmOj6dlUwHwYDVR0j BBgwFoAU2zcF3qwctyEjk7cCGrZxvYaZ/pswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YzViNzg1ZC04MzAzLTQ1YzUtOWE1OC1lYzEyODg3NDA4NjYvMC9EQjM3MDVERUFD MUNCNzIxMjM5M0I3MDIxQUI2NzFCRDg2OTlGRTlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREIzNzA1REVBQzFDQjcyMTIzOTNCNzAyMUFCNjcxQkQ4Njk5 RkU5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M1Yjc4NWQtODMwMy00NWM1LTlh NTgtZWMxMjg4NzQwODY2LzAvREIzNzA1REVBQzFDQjcyMTIzOTNCNzAyMUFCNjcx QkQ4Njk5RkU5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEc8tattPREFB+gKML3ismv5VZjp/uKz1hZR NqO4VYfsCHvN16jcf7W2aTNr4GqtT9Al6SX1CxPj57/lIBFxgPLupEW3o0TdcSmU Nau7v/uPRUJCg24dlVyrINMcnuUh1Cb091Y7MGfIvttU6ewwHSNa1l2IuCM+xgt6 H2Jzey/RaDxFisBve42/bKmMZ/n3EaRCqXQ1SO53SC6htTiLprWR2P1VJUdTFFae GfloTWWv8sCR/nx+39kmUgv0slLMJz2epr24O2S0bTJg5le3K0aKuFWvQ72CrGDG nAxspkCHzhDw45CUoAOWqMol5OouFZjkz0RBEjXZ6MU3U9CIXOA= -----END CERTIFICATE-----Generated at Sun Apr 27 00:13:02 2025 by rpki-client on console.sobornost.net