$ rpki-client -vvf repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft File: 3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft (raw, json) Hash identifier: r4bdJ7xYrxuAeUg1+21qrK5m3iki8gE0/UWGHdUOyyg= Subject key identifier: 28:E9:79:3D:28:7C:87:22:EE:BB:50:80:EF:34:EF:4C:EB:73:6E:42 Authority key identifier: 3F:BF:E9:2D:5B:22:0E:9B:36:B3:7B:CD:30:91:D7:54:EA:81:56:D3 Certificate issuer: /CN=3FBFE92D5B220E9B36B37BCD3091D754EA8156D3 Certificate serial: 2DB9EEA351B37F443F08D7AA5CB6AC1A16BF3518 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft Manifest number: 0180 Signing time: Thu 24 Apr 2025 17:11:48 +0000 Manifest this update: Thu 24 Apr 2025 17:06:48 +0000 Manifest next update: Sun 27 Apr 2025 21:58:48 +0000 Files and hashes: 1: 3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.crl (hash: rSkGjZRSK3+bQUVx22Yw7Sbh9MfwlKzPaAN4KoKf854=) 2: 3130332e342e37362e302f32332d3234203d3e20313530323136.roa (hash: Lhfroe+AEXgEhrFY/RT18gnNwb8H7lxWYtwkaKpg5XA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.crl rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:b9:ee:a3:51:b3:7f:44:3f:08:d7:aa:5c:b6:ac:1a:16:bf:35:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FBFE92D5B220E9B36B37BCD3091D754EA8156D3 Validity Not Before: Apr 24 17:06:48 2025 GMT Not After : Apr 27 21:58:48 2025 GMT Subject: CN=28E9793D287C8722EEBB5080EF34EF4CEB736E42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:5b:9e:4a:c9:79:41:77:7b:e3:cb:b7:17:94: f7:1d:81:ed:cb:09:59:69:a0:58:64:d5:bf:34:d8: a7:bb:1a:19:d1:17:b8:41:2a:dd:91:4b:38:dc:32: a8:21:29:67:5b:0b:e3:f2:1e:ed:55:a9:b0:2a:5b: 0e:32:c0:30:f9:e9:0d:d0:05:c5:11:a5:21:e7:b4: 0e:b9:9b:fd:40:a1:ef:2a:9d:27:ad:fd:20:52:64: 8e:04:24:df:9d:92:64:55:26:b7:a6:24:74:32:04: 54:a2:ed:8d:38:33:3a:b4:0a:71:2e:4a:f5:9d:f3: be:c6:f8:8f:e2:9a:3c:50:d2:e8:7f:7b:a0:95:a6: 9a:1b:92:79:55:87:bc:dc:34:f1:cc:67:e2:c2:62: f5:3f:cb:b6:0c:29:21:b5:77:43:1c:90:c8:54:a7: c7:3a:dc:e3:e0:4c:4f:5e:b6:7a:ce:ff:12:29:b9: fd:12:bb:5a:a5:b6:67:5d:72:a0:df:6b:ad:91:d7: 6e:74:9e:d6:76:43:7e:03:60:51:da:b3:a2:bb:a4: 52:73:51:99:c6:88:be:d1:10:81:d9:ef:3e:ed:95: 6b:49:6f:4e:b0:50:c5:dd:04:97:e8:05:a6:47:e6: 1e:90:0e:b3:f8:bc:cb:83:10:19:60:16:2e:87:4e: 18:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:E9:79:3D:28:7C:87:22:EE:BB:50:80:EF:34:EF:4C:EB:73:6E:42 X509v3 Authority Key Identifier: keyid:3F:BF:E9:2D:5B:22:0E:9B:36:B3:7B:CD:30:91:D7:54:EA:81:56:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:bb:98:3f:eb:8d:76:7f:57:92:69:46:f3:27:07:dc:2e:5b: e7:63:8f:f8:17:21:08:e7:51:6e:04:ab:82:f0:a8:14:36:2c: ed:8a:7e:06:39:e5:87:85:a6:61:93:57:b3:94:46:be:43:30: 22:23:59:b6:5f:7a:6c:a2:eb:b6:b5:59:66:c7:61:5a:91:a7: a8:e3:9c:92:74:a4:56:f6:70:2d:b0:8a:25:41:52:dd:a5:f0: 5e:87:6e:b9:47:86:05:74:4e:28:2a:d8:fc:e3:72:5f:77:7d: f2:69:ba:31:01:97:c5:f5:be:a2:ef:ba:74:93:83:c6:34:66: 49:38:67:18:a9:bc:19:12:90:ce:34:28:00:66:d5:66:d0:6b: 91:62:b4:54:29:4f:db:a8:06:fb:43:cf:e1:73:a0:15:4d:41: 45:be:22:1a:f0:8d:0b:26:2b:44:c9:4e:e0:0b:e4:fe:58:f1: 7c:46:1d:e5:70:97:88:ee:9f:0a:93:52:ea:4e:2c:f5:80:60: 0f:46:5d:cd:8b:fe:60:b2:78:b9:a6:a4:05:f1:ad:78:58:61: df:2f:9d:db:1e:fb:12:d4:ff:8a:e6:7e:35:78:96:b9:87:11: 75:ef:89:c3:7f:93:1b:dc:6b:af:66:76:8a:6f:b9:b4:e2:3a: 48:10:7e:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULbnuo1Gzf0Q/CNeqXLasGha/NRgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZCRkU5MkQ1QjIyMEU5QjM2QjM3QkNEMzA5MUQ3NTRF QTgxNTZEMzAeFw0yNTA0MjQxNzA2NDhaFw0yNTA0MjcyMTU4NDhaMDMxMTAvBgNV BAMTKDI4RTk3OTNEMjg3Qzg3MjJFRUJCNTA4MEVGMzRFRjRDRUI3MzZFNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnW55KyXlBd3vjy7cXlPcdge3L CVlpoFhk1b802Ke7GhnRF7hBKt2RSzjcMqghKWdbC+PyHu1VqbAqWw4ywDD56Q3Q BcURpSHntA65m/1Aoe8qnSet/SBSZI4EJN+dkmRVJremJHQyBFSi7Y04Mzq0CnEu SvWd877G+I/imjxQ0uh/e6CVppobknlVh7zcNPHMZ+LCYvU/y7YMKSG1d0MckMhU p8c63OPgTE9etnrO/xIpuf0Su1qltmddcqDfa62R1250ntZ2Q34DYFHas6K7pFJz UZnGiL7REIHZ7z7tlWtJb06wUMXdBJfoBaZH5h6QDrP4vMuDEBlgFi6HThjPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKOl5PSh8hyLuu1CA7zTvTOtzbkIwHwYDVR0j BBgwFoAUP7/pLVsiDps2s3vNMJHXVOqBVtMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Mjk0MDFkMC0yNmE3LTQ3ODctYjY4YS0xODJiMTUyYTk1MTMvMC8zRkJGRTkyRDVC MjIwRTlCMzZCMzdCQ0QzMDkxRDc1NEVBODE1NkQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZCRkU5MkQ1QjIyMEU5QjM2QjM3QkNEMzA5MUQ3NTRFQTgx NTZEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzI5NDAxZDAtMjZhNy00Nzg3LWI2 OGEtMTgyYjE1MmE5NTEzLzAvM0ZCRkU5MkQ1QjIyMEU5QjM2QjM3QkNEMzA5MUQ3 NTRFQTgxNTZEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM+7mD/rjXZ/V5JpRvMnB9wuW+djj/gXIQjn UW4Eq4LwqBQ2LO2KfgY55YeFpmGTV7OURr5DMCIjWbZfemyi67a1WWbHYVqRp6jj nJJ0pFb2cC2wiiVBUt2l8F6HbrlHhgV0Tigq2Pzjcl93ffJpujEBl8X1vqLvunST g8Y0Zkk4ZxipvBkSkM40KABm1WbQa5FitFQpT9uoBvtDz+FzoBVNQUW+IhrwjQsm K0TJTuAL5P5Y8XxGHeVwl4junwqTUupOLPWAYA9GXc2L/mCyeLmmpAXxrXhYYd8v ndse+xLU/4rmfjV4lrmHEXXvicN/kxvca69mdopvubTiOkgQftc= -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:11 2025 by rpki-client on console.sobornost.net