$ rpki-client -vvf repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft File: F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft (raw, json) Hash identifier: UYIps0Em0UDrfEqhd8tvyW5btiWCyzEzxiBmThecwH4= Subject key identifier: 98:47:B7:4F:47:C8:29:6A:45:1D:CA:62:E4:97:64:20:FA:29:77:E8 Authority key identifier: F3:F9:AB:30:AC:2C:50:B3:ED:F7:C9:1C:45:31:CC:9A:EE:9C:9D:A3 Certificate issuer: /CN=F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3 Certificate serial: 1365813FB6081E6FDABF5C75541EFBA7ECA5BB2C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft Manifest number: 04CB Signing time: Thu 24 Apr 2025 19:21:01 +0000 Manifest this update: Thu 24 Apr 2025 19:16:01 +0000 Manifest next update: Mon 28 Apr 2025 01:58:01 +0000 Files and hashes: 1: 3130332e3130302e3138302e302f32342d3234203d3e20313336383430.roa (hash: nlKrd5AKR7h3FCJzv+3n5dJLAh4Gtx9yY/SstgPTAXs=) 2: F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.crl (hash: 9clihF7d+kgodViy+8LvXvinvRq5iRGEI7wboJvNnzc=) 3: 3130332e3130302e3138332e302f32342d3234203d3e20313336383430.roa (hash: dgINQ5MJ3Auvon1oiBib4P8uI+HksPXhV6zDgPNH+z4=) 4: 323430313a626663303a3a2f33322d3332203d3e20313336383430.roa (hash: 2vipDNHkAigu2uT5W7FDzRLLshb8CXIRnjNsD4RfK2A=) 5: 3130332e3130302e3138322e302f32342d3234203d3e20313336383430.roa (hash: Kzuit7flC/q/AhzsHbDOQA9CaWnNa9oDmVzmfgUvay8=) 6: 3130332e3130302e3138312e302f32342d3234203d3e20313336383430.roa (hash: j8OvebUImpIJJ2+WqOUtRsS/Lczxkx5d22kPjma9xr8=) 7: 3130332e3130302e3138302e302f32322d3232203d3e20313336383430.roa (hash: EEoe6rcJHCI5WYJCV/Syozu2zB8bUqSrlyAM5hNEakA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.crl rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:65:81:3f:b6:08:1e:6f:da:bf:5c:75:54:1e:fb:a7:ec:a5:bb:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3 Validity Not Before: Apr 24 19:16:01 2025 GMT Not After : Apr 28 01:58:01 2025 GMT Subject: CN=9847B74F47C8296A451DCA62E4976420FA2977E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a6:01:66:95:92:56:12:58:17:25:3b:5b:9f: 14:5d:08:2c:da:79:9a:e8:cc:2a:11:93:19:11:dc: 7f:c4:b7:7e:b1:47:cd:97:18:32:5f:50:59:6b:86: d4:7e:93:0d:ee:ef:d2:fd:83:75:a1:12:92:ae:21: 2c:1d:3d:de:a3:cb:0e:b7:50:11:81:94:d5:94:df: 8a:20:fe:69:6b:fa:d6:4c:9e:e9:78:63:0f:cd:fe: 88:03:81:43:29:24:b1:e9:9c:bc:a9:b1:03:14:4e: d1:ea:cf:7a:f0:e1:cb:6a:cd:40:9b:3c:19:13:1d: d1:c1:a7:1c:5e:b5:3e:ea:19:97:01:5c:5f:98:84: 1f:71:f2:fd:18:9a:38:27:1a:de:2f:98:0f:06:5f: 03:bb:a8:51:a5:61:d4:8b:c7:8e:08:d0:70:86:98: 50:0d:52:47:a4:94:2f:32:86:51:47:7d:de:e8:cd: 3f:b5:75:a5:70:d8:41:b1:db:a1:ad:d2:04:41:a3: aa:c3:14:55:9c:86:c1:3a:2e:8e:d2:ff:e6:3f:49: 0b:9b:99:dc:39:e3:ce:29:73:a5:95:fe:d5:71:e8: 46:39:d2:2e:dd:84:8b:0e:af:ca:19:13:7f:a1:32: 83:b4:e9:d0:4f:89:9d:c5:70:f5:ce:80:e1:6e:0f: f1:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:47:B7:4F:47:C8:29:6A:45:1D:CA:62:E4:97:64:20:FA:29:77:E8 X509v3 Authority Key Identifier: keyid:F3:F9:AB:30:AC:2C:50:B3:ED:F7:C9:1C:45:31:CC:9A:EE:9C:9D:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:c2:f5:7b:5b:08:31:98:1c:52:fb:f0:f4:ef:36:6c:ea:87: 01:02:86:06:39:be:ce:a2:f5:55:e5:d7:32:1d:e7:04:d7:4c: 48:2a:03:53:20:31:fe:72:fa:87:18:6f:91:1b:14:e8:7c:0f: 3f:68:d9:6f:61:2e:09:3d:12:ea:1d:26:81:c8:e4:19:62:00: d7:03:60:88:b8:c6:a9:55:d2:a0:79:1e:39:69:61:ca:3e:1f: f1:08:3e:6d:71:9e:27:aa:e8:d0:f5:ad:e2:ac:ef:08:45:4e: ff:56:15:07:e2:11:0a:57:00:00:e9:6d:74:8d:cf:e6:4a:c1: 19:bb:b3:b6:77:f8:51:c5:b8:86:e7:9f:a1:de:87:ec:29:b1: dc:ae:22:89:69:40:47:18:38:27:e9:62:1c:74:59:b9:7b:5d: 39:71:02:58:61:d4:ae:6c:52:8b:c7:da:c4:e2:59:8f:1f:e3: 5c:85:27:49:dc:ab:e1:9e:88:8c:6d:b4:bd:2c:27:eb:e5:8a: 5b:4b:43:3c:df:2d:00:0e:95:2c:72:cc:e6:d6:64:2e:93:ae: a8:b0:72:0e:65:76:a2:09:76:cd:62:d7:ec:a8:36:8d:b4:e8: 0a:6d:91:3b:e4:ef:40:79:76:23:62:df:9d:31:8c:e6:22:3f: cc:6f:fd:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE2WBP7YIHm/av1x1VB77p+yluywwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjNGOUFCMzBBQzJDNTBCM0VERjdDOTFDNDUzMUNDOUFF RTlDOURBMzAeFw0yNTA0MjQxOTE2MDFaFw0yNTA0MjgwMTU4MDFaMDMxMTAvBgNV BAMTKDk4NDdCNzRGNDdDODI5NkE0NTFEQ0E2MkU0OTc2NDIwRkEyOTc3RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEpgFmlZJWElgXJTtbnxRdCCza eZrozCoRkxkR3H/Et36xR82XGDJfUFlrhtR+kw3u79L9g3WhEpKuISwdPd6jyw63 UBGBlNWU34og/mlr+tZMnul4Yw/N/ogDgUMpJLHpnLypsQMUTtHqz3rw4ctqzUCb PBkTHdHBpxxetT7qGZcBXF+YhB9x8v0YmjgnGt4vmA8GXwO7qFGlYdSLx44I0HCG mFANUkeklC8yhlFHfd7ozT+1daVw2EGx26Gt0gRBo6rDFFWchsE6Lo7S/+Y/SQub mdw5484pc6WV/tVx6EY50i7dhIsOr8oZE3+hMoO06dBPiZ3FcPXOgOFuD/HzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmEe3T0fIKWpFHcpi5JdkIPopd+gwHwYDVR0j BBgwFoAU8/mrMKwsULPt98kcRTHMmu6cnaMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZWYwODkwMC1mMmM2LTRkMDctYjY5NC1kMTg4YmFhM2I4ZjIvMC9GM0Y5QUIzMEFD MkM1MEIzRURGN0M5MUM0NTMxQ0M5QUVFOUM5REEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjNGOUFCMzBBQzJDNTBCM0VERjdDOTFDNDUzMUNDOUFFRTlD OURBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWVmMDg5MDAtZjJjNi00ZDA3LWI2 OTQtZDE4OGJhYTNiOGYyLzAvRjNGOUFCMzBBQzJDNTBCM0VERjdDOTFDNDUzMUND OUFFRTlDOURBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACHC9XtbCDGYHFL78PTvNmzqhwEChgY5vs6i 9VXl1zId5wTXTEgqA1MgMf5y+ocYb5EbFOh8Dz9o2W9hLgk9EuodJoHI5BliANcD YIi4xqlV0qB5HjlpYco+H/EIPm1xnieq6ND1reKs7whFTv9WFQfiEQpXAADpbXSN z+ZKwRm7s7Z3+FHFuIbnn6Heh+wpsdyuIolpQEcYOCfpYhx0Wbl7XTlxAlhh1K5s UovH2sTiWY8f41yFJ0ncq+GeiIxttL0sJ+vliltLQzzfLQAOlSxyzObWZC6Trqiw cg5ldqIJds1i1+yoNo206AptkTvk70B5diNi350xjOYiP8xv/TQ= -----END CERTIFICATE-----Generated at Fri Apr 25 00:06:28 2025 by rpki-client on console.sobornost.net