$ rpki-client -vvf repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft File: 350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft (raw, json) Hash identifier: deKB7MgzTq47HROyWzlI7XQ87pn9Zs5ZwLgd/zs/JjY= Subject key identifier: 8C:E0:64:2B:C9:CB:DD:32:94:7E:A3:5A:61:AD:E6:C5:9F:EE:45:C3 Authority key identifier: 35:0B:AE:86:CA:7B:54:F1:B9:E5:3A:C6:0E:E2:BA:A5:15:63:F6:7B Certificate issuer: /CN=350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B Certificate serial: 672C4A7571C1C57D01BFCFAECF8FADC1522F245D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft Manifest number: C2 Signing time: Fri 25 Apr 2025 03:21:45 +0000 Manifest this update: Fri 25 Apr 2025 03:16:45 +0000 Manifest next update: Mon 28 Apr 2025 04:57:45 +0000 Files and hashes: 1: 3135372e31352e36362e302f32342d3234203d3e20313532333737.roa (hash: DomC3RN9f0bSEeiB1cMyB/L6HAba822ShjW1q2FYGNE=) 2: 3135372e31352e36362e302f32332d3233203d3e20313532333737.roa (hash: wEAVk17qBqspOEGxIZUXVHQNaYtQzVxj0+6pyct72Xw=) 3: 350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.crl (hash: BHG02zdHGuFUmCEbqyw7NJWn7BT8Ul+jKix1/KiIK2A=) 4: 3135372e31352e36372e302f32342d3234203d3e20313532333737.roa (hash: Leol/vvbfwxKpb46l3UhXlQW8pqQFc1dEKod2elwRZQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.crl rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 19:57:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:2c:4a:75:71:c1:c5:7d:01:bf:cf:ae:cf:8f:ad:c1:52:2f:24:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B Validity Not Before: Apr 25 03:16:45 2025 GMT Not After : Apr 28 04:57:45 2025 GMT Subject: CN=8CE0642BC9CBDD32947EA35A61ADE6C59FEE45C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8c:49:3d:75:b6:93:fe:ac:aa:ba:0f:4e:d1: 1e:cb:12:f3:49:f8:5b:1a:79:91:09:67:cb:4c:f7: cd:2a:4e:b7:cf:10:09:d4:0f:ce:05:9d:84:30:61: df:4a:4e:a4:57:ad:3f:7d:a7:0c:e2:ec:f3:97:f5: 96:bd:c7:89:05:33:b7:a9:e1:be:05:9d:1e:fa:2d: 36:d7:6d:04:8f:b2:6a:72:f0:18:68:9c:39:d0:12: e8:42:23:c2:d7:b2:50:83:10:47:7a:75:30:3d:8c: 18:1c:d0:6e:e3:be:22:de:8a:09:47:08:88:93:0d: 3f:41:3d:ba:a5:aa:48:fb:fd:f7:6d:73:36:bb:cf: 68:0d:18:9d:5a:c5:9a:5e:4c:12:43:23:45:49:59: d1:d7:9c:7f:33:ab:58:c2:59:ca:7c:e4:31:30:59: 31:e8:f7:f6:56:53:90:e8:a1:dc:c7:d0:4e:d0:d4: c1:2d:fb:37:67:d1:85:19:7b:13:5b:4a:d2:c5:b7: 28:d7:90:5f:cd:02:61:8d:6f:32:70:07:da:77:3e: 87:72:ac:6b:12:37:f5:3b:7f:f5:af:bc:2c:a6:6c: 44:2c:e8:c2:54:f0:e8:52:86:d5:08:b9:b5:67:45: 66:7b:90:f6:15:26:eb:87:97:3e:e7:04:97:e6:c0: f9:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:E0:64:2B:C9:CB:DD:32:94:7E:A3:5A:61:AD:E6:C5:9F:EE:45:C3 X509v3 Authority Key Identifier: keyid:35:0B:AE:86:CA:7B:54:F1:B9:E5:3A:C6:0E:E2:BA:A5:15:63:F6:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:d9:45:7d:9e:17:13:70:b0:10:65:08:a0:52:47:30:5c:e8: 90:59:88:0b:7f:37:75:75:a6:35:07:3e:5d:0a:36:eb:89:21: a0:0c:21:91:2e:05:58:4b:7e:ef:9c:16:a3:98:06:84:9a:91: 16:21:27:57:80:88:31:b1:29:12:ed:69:5d:06:78:15:d6:1b: ae:2d:6c:d8:7b:10:1d:e6:15:1b:24:26:b9:10:f2:c9:fe:07: 9c:10:38:55:39:00:6d:46:5c:3f:32:00:98:91:bb:27:47:0f: 11:7e:3b:80:bc:18:71:a3:06:16:1a:94:1a:c2:a8:26:21:a0: 27:84:4f:e1:38:1e:23:c9:43:12:d9:9c:84:3c:6a:36:31:90: b0:28:a1:00:dc:34:74:2f:1c:3b:db:dd:d3:ab:0f:95:71:8c: 6e:3a:39:a2:98:62:59:e5:e7:2f:06:18:0e:af:dc:da:76:38: bb:98:54:1d:e0:9b:a6:15:e6:6d:84:50:7e:89:b0:1a:5b:ab: 2b:47:86:4b:4a:62:b6:c0:a2:95:5f:15:ac:20:cf:42:4e:95: 06:16:4e:ce:e9:fd:87:70:fa:4a:11:73:16:d4:e1:99:03:6f: 46:1e:57:16:62:4c:6f:ce:2e:e9:c1:00:ed:68:62:98:a0:64: ba:72:f4:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZyxKdXHBxX0Bv8+uz4+twVIvJF0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUwQkFFODZDQTdCNTRGMUI5RTUzQUM2MEVFMkJBQTUx NTYzRjY3QjAeFw0yNTA0MjUwMzE2NDVaFw0yNTA0MjgwNDU3NDVaMDMxMTAvBgNV BAMTKDhDRTA2NDJCQzlDQkREMzI5NDdFQTM1QTYxQURFNkM1OUZFRTQ1QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGjEk9dbaT/qyqug9O0R7LEvNJ +FsaeZEJZ8tM980qTrfPEAnUD84FnYQwYd9KTqRXrT99pwzi7POX9Za9x4kFM7ep 4b4FnR76LTbXbQSPsmpy8BhonDnQEuhCI8LXslCDEEd6dTA9jBgc0G7jviLeiglH CIiTDT9BPbqlqkj7/fdtcza7z2gNGJ1axZpeTBJDI0VJWdHXnH8zq1jCWcp85DEw WTHo9/ZWU5DoodzH0E7Q1MEt+zdn0YUZexNbStLFtyjXkF/NAmGNbzJwB9p3Pody rGsSN/U7f/WvvCymbEQs6MJU8OhShtUIubVnRWZ7kPYVJuuHlz7nBJfmwPkzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjOBkK8nL3TKUfqNaYa3mxZ/uRcMwHwYDVR0j BBgwFoAUNQuuhsp7VPG55TrGDuK6pRVj9nswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ODRlODc5Zi0zYTU2LTRkOGQtODNlOC0wZTljYzY1NzcwZWEvMC8zNTBCQUU4NkNB N0I1NEYxQjlFNTNBQzYwRUUyQkFBNTE1NjNGNjdCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzUwQkFFODZDQTdCNTRGMUI5RTUzQUM2MEVFMkJBQTUxNTYz RjY3Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDg0ZTg3OWYtM2E1Ni00ZDhkLTgz ZTgtMGU5Y2M2NTc3MGVhLzAvMzUwQkFFODZDQTdCNTRGMUI5RTUzQUM2MEVFMkJB QTUxNTYzRjY3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABLZRX2eFxNwsBBlCKBSRzBc6JBZiAt/N3V1 pjUHPl0KNuuJIaAMIZEuBVhLfu+cFqOYBoSakRYhJ1eAiDGxKRLtaV0GeBXWG64t bNh7EB3mFRskJrkQ8sn+B5wQOFU5AG1GXD8yAJiRuydHDxF+O4C8GHGjBhYalBrC qCYhoCeET+E4HiPJQxLZnIQ8ajYxkLAooQDcNHQvHDvb3dOrD5VxjG46OaKYYlnl 5y8GGA6v3Np2OLuYVB3gm6YV5m2EUH6JsBpbqytHhktKYrbAopVfFawgz0JOlQYW Ts7p/Ydw+koRcxbU4ZkDb0YeVxZiTG/OLunBAO1oYpigZLpy9GI= -----END CERTIFICATE-----Generated at Fri Apr 25 06:02:22 2025 by rpki-client on console.sobornost.net