$ rpki-client -vvf repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft File: CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft (raw, json) Hash identifier: 437EiAoHlxg/V7Uass0fgAB/IaBrHGXMt3qbhVX+NgM= Subject key identifier: D1:73:FD:41:40:C8:CA:D1:8F:E3:94:E0:0E:62:22:4E:3B:20:26:E3 Authority key identifier: CA:3C:35:A9:3B:14:C0:DF:6C:BB:C2:46:81:F5:BF:97:BE:8C:79:0D Certificate issuer: /CN=CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D Certificate serial: 720512C1CF148405315CEFF01425B20371542259 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft Manifest number: 0276 Signing time: Thu 24 Apr 2025 12:41:16 +0000 Manifest this update: Thu 24 Apr 2025 12:36:16 +0000 Manifest next update: Sun 27 Apr 2025 17:52:16 +0000 Files and hashes: 1: CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.crl (hash: UddreTY5oN2V1GGpsP5GsuMtKgzGV2jAk2zRMaHfnEo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.crl rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 17:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:05:12:c1:cf:14:84:05:31:5c:ef:f0:14:25:b2:03:71:54:22:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D Validity Not Before: Apr 24 12:36:16 2025 GMT Not After : Apr 27 17:52:16 2025 GMT Subject: CN=D173FD4140C8CAD18FE394E00E62224E3B2026E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a0:1b:7c:12:79:2d:d0:20:15:47:a2:7e:b5: d2:ba:67:4c:a6:25:4a:25:90:fe:2c:a7:21:4b:0b: 54:fb:87:69:d2:2f:d7:12:3a:47:d8:b2:78:22:e0: 4c:90:a2:4e:32:a0:74:00:38:5f:b5:a8:32:f1:e7: e2:97:75:41:ba:39:cb:30:e4:3d:36:76:17:5c:92: 3e:fe:24:1e:68:4d:e7:d7:2b:88:cf:75:bf:bf:6c: f3:43:82:35:ed:5a:fe:74:f3:48:aa:72:db:95:70: 96:dc:6f:96:a3:61:26:b8:22:ac:49:bc:8c:75:92: 9c:d0:51:cd:8f:7c:8b:f2:41:40:5b:ce:d9:4f:ba: b0:9f:cd:a4:a6:5a:24:08:c8:c4:80:c3:bc:4f:f7: 1e:5e:e7:24:dd:fa:36:9b:bb:09:87:a1:7c:9d:74: 06:48:fc:03:82:b5:57:65:68:9d:34:98:5e:85:08: 80:a7:e6:9f:7f:e7:30:be:e1:ce:cd:e0:4c:ed:18: 67:28:4f:e2:fa:b9:f5:59:2c:6d:01:24:af:6b:a5: 43:37:dc:6c:b1:c3:06:dc:8a:02:da:0d:6a:1e:3d: 1b:32:22:87:d0:d6:7e:8b:80:b7:d7:8d:dd:65:f8: 62:a4:81:eb:36:81:10:0d:c4:7f:a5:4f:53:73:43: dd:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:73:FD:41:40:C8:CA:D1:8F:E3:94:E0:0E:62:22:4E:3B:20:26:E3 X509v3 Authority Key Identifier: keyid:CA:3C:35:A9:3B:14:C0:DF:6C:BB:C2:46:81:F5:BF:97:BE:8C:79:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:8c:21:0d:d2:16:ef:92:9f:fa:ce:13:28:83:e3:2c:e5:6c: 00:d4:bd:f3:f0:dc:30:f3:77:13:c2:9e:06:65:ba:1c:a8:dd: 72:38:dd:6f:0f:16:73:be:02:9f:3e:4f:cf:59:9e:68:8c:21: 47:fd:cf:35:12:e6:70:f1:f4:4c:37:5a:c3:ff:9e:c1:29:1f: 16:ca:3e:95:9e:7c:9b:ed:f7:e6:1c:36:80:34:2c:ef:49:38: 4b:1a:c1:7c:b0:a9:14:4b:86:05:8c:99:34:75:f6:b3:11:ed: 5c:22:1a:89:07:6f:03:45:22:cb:3c:7a:b8:5e:53:be:8e:7c: 3f:11:5f:29:91:c0:10:a3:b4:02:f8:46:71:15:0c:66:12:5d: bb:a6:c4:a9:7b:d1:22:28:ea:b3:bc:5b:1a:ee:ef:45:63:6b: 7b:a7:4f:35:6a:f2:94:35:6e:5f:da:f5:90:4f:4a:4b:62:1e: b4:48:9a:b6:e3:de:3a:e8:66:85:49:0a:ec:72:24:ac:1d:7f: 24:c4:25:e7:3e:b9:18:ad:a0:cf:6a:81:82:48:ff:35:5a:bd: 7e:8b:fe:60:5b:bc:25:69:44:4a:0b:fa:1d:8d:75:76:dd:c6: 99:a1:04:9b:b7:63:87:fb:ed:03:0b:38:4d:0e:30:82:fd:45: 37:2f:c0:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcgUSwc8UhAUxXO/wFCWyA3FUIlkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EzQzM1QTkzQjE0QzBERjZDQkJDMjQ2ODFGNUJGOTdC RThDNzkwRDAeFw0yNTA0MjQxMjM2MTZaFw0yNTA0MjcxNzUyMTZaMDMxMTAvBgNV BAMTKEQxNzNGRDQxNDBDOENBRDE4RkUzOTRFMDBFNjIyMjRFM0IyMDI2RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7oBt8Enkt0CAVR6J+tdK6Z0ym JUolkP4spyFLC1T7h2nSL9cSOkfYsngi4EyQok4yoHQAOF+1qDLx5+KXdUG6Ocsw 5D02dhdckj7+JB5oTefXK4jPdb+/bPNDgjXtWv5080iqctuVcJbcb5ajYSa4IqxJ vIx1kpzQUc2PfIvyQUBbztlPurCfzaSmWiQIyMSAw7xP9x5e5yTd+jabuwmHoXyd dAZI/AOCtVdlaJ00mF6FCICn5p9/5zC+4c7N4EztGGcoT+L6ufVZLG0BJK9rpUM3 3GyxwwbcigLaDWoePRsyIofQ1n6LgLfXjd1l+GKkges2gRANxH+lT1NzQ931AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0XP9QUDIytGP45TgDmIiTjsgJuMwHwYDVR0j BBgwFoAUyjw1qTsUwN9su8JGgfW/l76MeQ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NGMyODI5My1iNmZiLTRmZjQtOWNlMi0wNjY2M2NiZTY4MTkvMC9DQTNDMzVBOTNC MTRDMERGNkNCQkMyNDY4MUY1QkY5N0JFOEM3OTBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0EzQzM1QTkzQjE0QzBERjZDQkJDMjQ2ODFGNUJGOTdCRThD NzkwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjRjMjgyOTMtYjZmYi00ZmY0LTlj ZTItMDY2NjNjYmU2ODE5LzAvQ0EzQzM1QTkzQjE0QzBERjZDQkJDMjQ2ODFGNUJG OTdCRThDNzkwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFOMIQ3SFu+Sn/rOEyiD4yzlbADUvfPw3DDz dxPCngZluhyo3XI43W8PFnO+Ap8+T89ZnmiMIUf9zzUS5nDx9Ew3WsP/nsEpHxbK PpWefJvt9+YcNoA0LO9JOEsawXywqRRLhgWMmTR19rMR7VwiGokHbwNFIss8erhe U76OfD8RXymRwBCjtAL4RnEVDGYSXbumxKl70SIo6rO8Wxru70Vja3unTzVq8pQ1 bl/a9ZBPSktiHrRImrbj3jroZoVJCuxyJKwdfyTEJec+uRitoM9qgYJI/zVavX6L /mBbvCVpREoL+h2NdXbdxpmhBJu3Y4f77QMLOE0OMIL9RTcvwLk= -----END CERTIFICATE-----Generated at Thu Apr 24 15:50:03 2025 by rpki-client on console.sobornost.net