$ rpki-client -vvf repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft File: 3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft (raw, json) Hash identifier: 2MajM+GS4KpDoUs4NE2lw5ME5fjc07128YsmiQz1Qks= Subject key identifier: E0:AF:D8:17:BC:5A:97:E4:51:BA:ED:B5:9D:67:F7:9C:14:49:DF:54 Authority key identifier: 3D:95:B7:29:FF:92:3C:D2:44:25:49:B7:70:2A:6D:7C:2F:78:DE:85 Certificate issuer: /CN=3D95B729FF923CD2442549B7702A6D7C2F78DE85 Certificate serial: 0569688128006088F2EE77A04C62828DEC09A644 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D95B729FF923CD2442549B7702A6D7C2F78DE85.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft Manifest number: D8 Signing time: Sun 27 Apr 2025 20:01:07 +0000 Manifest this update: Sun 27 Apr 2025 19:56:07 +0000 Manifest next update: Thu 01 May 2025 06:49:07 +0000 Files and hashes: 1: 3D95B729FF923CD2442549B7702A6D7C2F78DE85.crl (hash: cevV9w4X4oOAgxAOnSWpOiM7Py46tNKBzEp8MJlfd+c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.crl rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D95B729FF923CD2442549B7702A6D7C2F78DE85.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 06:49:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:69:68:81:28:00:60:88:f2:ee:77:a0:4c:62:82:8d:ec:09:a6:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D95B729FF923CD2442549B7702A6D7C2F78DE85 Validity Not Before: Apr 27 19:56:07 2025 GMT Not After : May 1 06:49:07 2025 GMT Subject: CN=E0AFD817BC5A97E451BAEDB59D67F79C1449DF54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:35:68:1a:d5:91:8e:02:e8:f6:bc:8e:75:f2: d8:5f:cf:fb:68:42:ed:52:b5:2c:e7:a6:94:2c:49: c7:3d:b1:d3:48:2c:90:58:aa:4a:d2:c8:16:09:a0: 9c:41:e9:11:f0:0e:34:ef:d4:76:d5:d6:69:15:6f: 56:df:bf:42:56:51:94:69:ef:7b:51:1f:10:f1:25: 04:f7:ab:1b:25:ba:38:18:51:a2:cc:4f:c4:ae:63: 6d:74:6a:91:01:8e:7d:b3:47:e3:a8:0e:00:99:44: cc:8c:3e:2f:74:34:bd:5b:e9:78:2a:a7:5a:2c:0b: 14:a6:55:01:3b:38:66:f5:7d:e0:bf:1d:c2:38:13: 8b:39:34:83:bc:34:4e:d4:e5:9d:3f:04:81:7a:38: 6c:42:38:b2:b4:41:e8:f6:79:13:10:a0:44:19:9d: 51:d0:9c:00:c6:c7:c9:0f:d6:29:6e:2e:76:16:0e: 59:c7:09:8c:7d:cd:82:74:bf:c1:f0:29:fc:ca:3f: ec:02:0f:b9:59:3d:87:b3:c2:79:36:4f:7c:56:07: 3a:9d:e3:3b:50:d4:5f:49:bd:ea:92:4c:75:1e:5e: 76:0a:67:4f:c1:70:d9:13:b8:a2:8b:9b:f4:6b:88: 4d:9f:2f:cc:01:25:a6:8b:5c:c2:67:f6:ff:84:f4: 43:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:AF:D8:17:BC:5A:97:E4:51:BA:ED:B5:9D:67:F7:9C:14:49:DF:54 X509v3 Authority Key Identifier: keyid:3D:95:B7:29:FF:92:3C:D2:44:25:49:B7:70:2A:6D:7C:2F:78:DE:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D95B729FF923CD2442549B7702A6D7C2F78DE85.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:fc:84:e3:21:e3:f2:0f:54:95:78:5f:f9:70:ad:af:92:1b: a3:43:14:f6:0b:b3:f6:11:3f:e7:10:0d:58:3b:5a:40:dc:bf: 2c:93:7b:a4:5a:cc:77:fb:97:21:0c:52:de:94:69:8f:5b:f2: 72:44:9c:01:91:af:5f:76:0b:d1:a3:07:24:31:76:38:12:20: 72:44:71:f4:06:9a:8b:53:4d:d1:fe:f4:6d:a8:16:f4:e5:f9: ef:30:89:83:3d:bd:d7:a2:1e:45:0d:9a:79:93:75:d9:b2:2b: 36:3e:88:fc:90:50:e6:d1:e1:ce:be:05:3e:4a:f9:ba:13:e8: 1c:c4:bf:0d:31:36:9f:44:2c:32:d5:d6:68:8b:e0:2c:93:1a: b0:0c:02:c0:49:99:19:35:29:f9:7e:c5:c2:4a:1a:02:e4:8d: 2e:96:c0:66:bf:75:ea:27:f4:8f:5c:44:a9:1b:aa:f6:c5:c9: f5:ea:ca:ed:da:da:3a:7a:0a:eb:61:8f:48:ee:1a:33:d3:4c: 2c:f6:3f:4b:0e:24:33:0b:0e:f4:31:98:37:6a:e6:a0:52:56: 34:64:56:92:f5:18:5e:47:b6:17:25:ea:8f:7c:c5:8c:08:f5: 7c:fc:81:6b:b0:03:e9:b8:82:69:a4:b0:18:b2:f6:86:b4:66: da:10:b6:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBWlogSgAYIjy7negTGKCjewJpkQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q5NUI3MjlGRjkyM0NEMjQ0MjU0OUI3NzAyQTZEN0My Rjc4REU4NTAeFw0yNTA0MjcxOTU2MDdaFw0yNTA1MDEwNjQ5MDdaMDMxMTAvBgNV BAMTKEUwQUZEODE3QkM1QTk3RTQ1MUJBRURCNTlENjdGNzlDMTQ0OURGNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrNWga1ZGOAuj2vI518thfz/to Qu1StSznppQsScc9sdNILJBYqkrSyBYJoJxB6RHwDjTv1HbV1mkVb1bfv0JWUZRp 73tRHxDxJQT3qxslujgYUaLMT8SuY210apEBjn2zR+OoDgCZRMyMPi90NL1b6Xgq p1osCxSmVQE7OGb1feC/HcI4E4s5NIO8NE7U5Z0/BIF6OGxCOLK0Qej2eRMQoEQZ nVHQnADGx8kP1iluLnYWDlnHCYx9zYJ0v8HwKfzKP+wCD7lZPYezwnk2T3xWBzqd 4ztQ1F9JveqSTHUeXnYKZ0/BcNkTuKKLm/RriE2fL8wBJaaLXMJn9v+E9EMLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4K/YF7xal+RRuu21nWf3nBRJ31QwHwYDVR0j BBgwFoAUPZW3Kf+SPNJEJUm3cCptfC943oUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YzhjNDZmYi1iNmMxLTRhNjktODNmYi05MGU3ZDVjMzI2ZGUvMC8zRDk1QjcyOUZG OTIzQ0QyNDQyNTQ5Qjc3MDJBNkQ3QzJGNzhERTg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q5NUI3MjlGRjkyM0NEMjQ0MjU0OUI3NzAyQTZEN0MyRjc4 REU4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2M4YzQ2ZmItYjZjMS00YTY5LTgz ZmItOTBlN2Q1YzMyNmRlLzAvM0Q5NUI3MjlGRjkyM0NEMjQ0MjU0OUI3NzAyQTZE N0MyRjc4REU4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABH8hOMh4/IPVJV4X/lwra+SG6NDFPYLs/YR P+cQDVg7WkDcvyyTe6RazHf7lyEMUt6UaY9b8nJEnAGRr192C9GjByQxdjgSIHJE cfQGmotTTdH+9G2oFvTl+e8wiYM9vdeiHkUNmnmTddmyKzY+iPyQUObR4c6+BT5K +boT6BzEvw0xNp9ELDLV1miL4CyTGrAMAsBJmRk1Kfl+xcJKGgLkjS6WwGa/deon 9I9cRKkbqvbFyfXqyu3a2jp6Cuthj0juGjPTTCz2P0sOJDMLDvQxmDdq5qBSVjRk VpL1GF5Hthcl6o98xYwI9Xz8gWuwA+m4gmmksBiy9oa0ZtoQtu0= -----END CERTIFICATE-----Generated at Mon Apr 28 05:58:48 2025 by rpki-client on console.sobornost.net