$ rpki-client -vvf repo-rpki.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.mft File: 4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.mft (raw, json) Hash identifier: alBtceCMXcSIU17FD36vbwvCs7Tk46WTJQXXA+Z3Mog= Subject key identifier: 89:18:FF:0E:F0:AE:35:03:3E:91:5F:69:25:EA:4F:86:D8:C0:DF:FF Authority key identifier: 43:37:E9:FF:91:A0:CB:65:CE:1E:B8:FA:EB:61:08:F5:E3:7B:B6:57 Certificate issuer: /CN=4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657 Certificate serial: 3418AD44DAA1BFC0D66BE2F486D8BD59CCBF7F3E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.mft Manifest number: 029C Signing time: Wed 23 Apr 2025 07:11:09 +0000 Manifest this update: Wed 23 Apr 2025 07:06:09 +0000 Manifest next update: Sat 26 Apr 2025 16:46:09 +0000 Files and hashes: 1: 4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.crl (hash: DIMaqZDb9ELRJQOTN+qtsVwAjr6bwNrJl5CkDCIchE4=) 2: 3130332e3137362e39362e302f32342d3234203d3e20313437313331.roa (hash: omt0on/osncWzWrbGIk75aVtn8fXGKFlF84iedQ76S8=) 3: 3130332e3137362e39372e302f32342d3234203d3e20313437313331.roa (hash: gcQbwwcsgWLto/MeqdtpULkQCdJ/hBMpFsyWHdzWTU8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.crl rsync://repo-rpki.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 12:50:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:18:ad:44:da:a1:bf:c0:d6:6b:e2:f4:86:d8:bd:59:cc:bf:7f:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657 Validity Not Before: Apr 23 07:06:09 2025 GMT Not After : Apr 26 16:46:09 2025 GMT Subject: CN=8918FF0EF0AE35033E915F6925EA4F86D8C0DFFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f2:30:9e:ed:fa:46:c8:39:75:96:3e:49:7e: 55:f8:e3:29:2d:80:97:5a:d1:63:23:b7:09:25:fb: f7:18:b0:71:18:d9:58:2a:38:97:3d:b5:22:04:81: cf:8b:5e:6c:04:82:0d:de:c4:2e:d9:a0:00:e9:9b: 7d:d5:90:b3:17:d6:ad:31:da:8f:d9:79:23:41:79: b6:1c:51:c6:4b:df:f5:7b:76:33:1c:48:68:e7:1f: b0:01:83:b2:f6:9c:72:5d:6b:3f:a0:cb:dc:e6:56: 13:4e:4f:d4:6b:80:37:b5:92:72:cd:fb:93:3c:7e: fe:aa:20:66:90:04:99:4c:42:cf:b4:8d:27:3f:fa: d9:7d:31:b4:5e:04:17:9f:90:95:81:f6:7b:1f:be: d6:bc:05:f6:25:56:20:6f:7c:ec:1c:45:2e:64:74: b3:9e:42:da:5c:f2:53:c5:30:dd:e8:86:49:cb:6f: 8e:5b:8e:70:59:31:bf:68:38:5a:a2:04:a4:05:c4: db:18:c9:64:5c:3e:f4:23:37:be:ff:de:a5:dd:3c: a4:a1:4c:a4:07:a6:33:df:51:59:aa:62:ae:f1:48: ae:46:9f:05:e6:ae:96:e8:99:9c:33:40:d1:76:c6: d6:76:a7:b5:30:70:a6:9b:24:60:5e:6c:b1:f3:6b: b4:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:18:FF:0E:F0:AE:35:03:3E:91:5F:69:25:EA:4F:86:D8:C0:DF:FF X509v3 Authority Key Identifier: keyid:43:37:E9:FF:91:A0:CB:65:CE:1E:B8:FA:EB:61:08:F5:E3:7B:B6:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:fb:b1:4d:dc:e3:99:16:b5:a5:b5:ab:7a:dc:07:bc:e0:9f: c6:77:a5:e6:93:19:46:54:c7:97:98:12:f5:ea:e1:d2:7f:29: ab:0d:f3:de:78:d5:f4:33:3e:b1:d6:ac:e7:ea:de:a4:74:6a: 22:39:43:6e:17:77:85:bc:83:49:26:18:b5:39:0e:e4:a5:04: bd:a8:71:87:a3:eb:83:29:c6:30:81:a0:7e:ea:95:e2:4c:75: d3:b6:ed:a1:fd:3c:d5:88:35:71:14:e8:bf:af:5f:75:96:c7: 4a:af:0d:0f:31:f1:de:22:f8:96:d0:f5:21:6d:0a:7d:c7:98: c3:49:45:ea:20:f0:79:6c:33:62:39:fb:67:21:c9:a6:28:08: f8:60:3e:90:12:95:36:80:3b:3a:75:03:11:f3:47:57:d3:f4: 42:ba:8a:fa:68:34:54:a3:5a:a6:ad:21:f6:46:b2:84:29:ca: 9d:0b:39:50:05:a2:7b:61:38:af:87:c7:cf:71:66:83:92:26: 45:89:18:05:a4:62:ae:86:bd:13:24:8c:81:fc:6c:ec:d9:a3: 5a:42:14:7e:b0:62:ef:ab:83:51:53:94:a7:0d:1e:7b:dc:df: ca:a5:8e:bc:2c:42:f7:e8:a9:2c:b6:58:6f:bc:89:13:f8:99: 87:c5:94:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNBitRNqhv8DWa+L0hti9Wcy/fz4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDMzN0U5RkY5MUEwQ0I2NUNFMUVCOEZBRUI2MTA4RjVF MzdCQjY1NzAeFw0yNTA0MjMwNzA2MDlaFw0yNTA0MjYxNjQ2MDlaMDMxMTAvBgNV BAMTKDg5MThGRjBFRjBBRTM1MDMzRTkxNUY2OTI1RUE0Rjg2RDhDMERGRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH8jCe7fpGyDl1lj5JflX44ykt gJda0WMjtwkl+/cYsHEY2VgqOJc9tSIEgc+LXmwEgg3exC7ZoADpm33VkLMX1q0x 2o/ZeSNBebYcUcZL3/V7djMcSGjnH7ABg7L2nHJdaz+gy9zmVhNOT9RrgDe1knLN +5M8fv6qIGaQBJlMQs+0jSc/+tl9MbReBBefkJWB9nsfvta8BfYlViBvfOwcRS5k dLOeQtpc8lPFMN3ohknLb45bjnBZMb9oOFqiBKQFxNsYyWRcPvQjN77/3qXdPKSh TKQHpjPfUVmqYq7xSK5GnwXmrpbomZwzQNF2xtZ2p7UwcKabJGBebLHza7SlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiRj/DvCuNQM+kV9pJepPhtjA3/8wHwYDVR0j BBgwFoAUQzfp/5Ggy2XOHrj662EI9eN7tlcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YzM0ZGMzZi0zMDhmLTRkZTEtYTM2NS03MDFiZDljZjEwMDQvMC80MzM3RTlGRjkx QTBDQjY1Q0UxRUI4RkFFQjYxMDhGNUUzN0JCNjU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDMzN0U5RkY5MUEwQ0I2NUNFMUVCOEZBRUI2MTA4RjVFMzdC QjY1Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWMzNGRjM2YtMzA4Zi00ZGUxLWEz NjUtNzAxYmQ5Y2YxMDA0LzAvNDMzN0U5RkY5MUEwQ0I2NUNFMUVCOEZBRUI2MTA4 RjVFMzdCQjY1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAb7sU3c45kWtaW1q3rcB7zgn8Z3peaTGUZU x5eYEvXq4dJ/KasN89541fQzPrHWrOfq3qR0aiI5Q24Xd4W8g0kmGLU5DuSlBL2o cYej64MpxjCBoH7qleJMddO27aH9PNWINXEU6L+vX3WWx0qvDQ8x8d4i+JbQ9SFt Cn3HmMNJReog8HlsM2I5+2chyaYoCPhgPpASlTaAOzp1AxHzR1fT9EK6ivpoNFSj WqatIfZGsoQpyp0LOVAFonthOK+Hx89xZoOSJkWJGAWkYq6GvRMkjIH8bOzZo1pC FH6wYu+rg1FTlKcNHnvc38qljrwsQvfoqSy2WG+8iRP4mYfFlD0= -----END CERTIFICATE-----Generated at Wed Apr 23 08:55:51 2025 by rpki-client on console.sobornost.net