$ rpki-client -vvf repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.mft File: D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.mft (raw, json) Hash identifier: 1Yk6wvPdrOI7QzqDZlJAHavp+aYaKavURxTBJRhHmSg= Subject key identifier: 7A:69:8F:F7:5D:A1:9E:ED:94:49:D8:E8:F8:07:19:F1:18:7F:B5:AD Authority key identifier: D3:B0:DD:BB:8E:07:FC:D9:8A:39:9C:90:C5:B3:FC:32:B4:FA:28:F0 Certificate issuer: /CN=D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0 Certificate serial: 5DF7EBE9FBB80019218296D4468EE67ED5D45FA4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.mft Manifest number: 4A Signing time: Wed 23 Apr 2025 12:10:02 +0000 Manifest this update: Wed 23 Apr 2025 12:05:02 +0000 Manifest next update: Sat 26 Apr 2025 20:27:02 +0000 Files and hashes: 1: 3136302e32322e3138372e302f32342d3234203d3e20313532383233.roa (hash: cvyj6LKtTOVBTWTHZighgw+CFWQteArr8dC6m6wOVeI=) 2: D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.crl (hash: 7bPZm53n7EvVvN3cf8QRfmf4nugiP4cJkOieOFqSPrA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.crl rsync://repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 18:38:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:f7:eb:e9:fb:b8:00:19:21:82:96:d4:46:8e:e6:7e:d5:d4:5f:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0 Validity Not Before: Apr 23 12:05:02 2025 GMT Not After : Apr 26 20:27:02 2025 GMT Subject: CN=7A698FF75DA19EED9449D8E8F80719F1187FB5AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ac:09:a2:36:c2:7e:73:8d:a0:c7:4b:87:c3: 29:5d:75:6f:aa:b3:83:9d:3c:71:0b:00:98:55:ea: ef:83:b1:cf:47:73:1f:ee:2a:69:0a:e3:be:05:f8: 07:42:6a:b8:55:d5:96:0c:02:75:4a:47:84:72:d6: c5:46:41:a2:2f:12:fd:69:60:6a:41:42:20:96:f7: ea:7f:29:ff:06:44:0c:58:bc:03:1b:f0:58:36:4b: d5:b7:fa:6c:58:fa:22:cb:7c:be:07:9a:de:09:25: 96:48:c1:fc:f0:26:68:9b:cd:ce:c4:c9:76:e3:8e: ae:b5:52:70:45:58:0a:38:45:ce:28:41:24:b8:36: c1:05:f6:1f:fb:dc:49:2b:fc:13:fc:41:20:0b:7e: 02:01:06:36:f7:69:cb:70:c8:34:65:d9:d2:8c:91: 45:a4:58:b7:d0:34:91:91:ca:5a:f7:ed:d2:2a:97: df:15:e4:da:6f:7f:05:bb:b2:a2:3e:f3:f8:be:c0: 02:01:a7:aa:7c:97:af:76:09:ea:0c:15:58:63:8f: 66:37:0b:14:7c:f3:9f:7c:5a:f6:2c:fc:93:6e:7b: 1f:ef:49:47:ef:9b:4e:56:63:ac:63:64:75:bd:3f: 35:2e:2d:56:2f:01:e5:a4:ba:89:8e:49:5a:98:65: 4f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:69:8F:F7:5D:A1:9E:ED:94:49:D8:E8:F8:07:19:F1:18:7F:B5:AD X509v3 Authority Key Identifier: keyid:D3:B0:DD:BB:8E:07:FC:D9:8A:39:9C:90:C5:B3:FC:32:B4:FA:28:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:71:09:83:44:9d:3a:7d:db:67:1b:85:bf:df:02:78:69:2e: 21:35:a5:6a:6b:d0:d1:93:de:02:49:23:44:1a:4a:5a:b8:73: 5c:54:d9:4b:1b:c9:6c:8c:f2:1e:b7:12:15:7b:18:23:41:c7: 15:51:16:c9:b5:54:39:04:fb:a1:c0:78:cc:71:82:4a:01:5c: ac:d0:26:0a:e7:96:57:5f:f0:93:08:67:8f:cd:05:ac:db:d6: 06:20:2d:d2:80:e5:fa:3b:08:9e:21:f9:f9:18:6b:a2:73:29: 10:c1:f4:ff:0f:a5:b5:71:45:35:32:1a:27:61:9f:33:59:22: 12:66:b2:b9:f5:54:b0:16:08:70:91:9e:31:08:b1:93:f9:7f: bf:cf:66:de:36:d3:56:ab:a4:24:ee:b8:c5:ef:f7:8b:7c:7d: 75:f4:f3:ff:6a:43:78:92:63:f6:c2:30:9e:a2:de:60:b4:b9: fe:8a:8a:34:5d:fa:84:f7:94:d3:d0:86:91:50:2f:4d:82:0b: 91:37:35:7f:fd:75:4c:9b:07:23:f4:cd:f1:da:ef:90:50:11: b0:c5:69:bc:c5:1e:37:17:8a:df:6c:48:0f:d2:d7:51:80:c7: f4:17:7d:34:a7:ef:fd:7d:35:3b:db:21:38:01:7e:e4:11:37: ad:93:95:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXffr6fu4ABkhgpbURo7mftXUX6QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNCMEREQkI4RTA3RkNEOThBMzk5QzkwQzVCM0ZDMzJC NEZBMjhGMDAeFw0yNTA0MjMxMjA1MDJaFw0yNTA0MjYyMDI3MDJaMDMxMTAvBgNV BAMTKDdBNjk4RkY3NURBMTlFRUQ5NDQ5RDhFOEY4MDcxOUYxMTg3RkI1QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQrAmiNsJ+c42gx0uHwylddW+q s4OdPHELAJhV6u+Dsc9Hcx/uKmkK474F+AdCarhV1ZYMAnVKR4Ry1sVGQaIvEv1p YGpBQiCW9+p/Kf8GRAxYvAMb8Fg2S9W3+mxY+iLLfL4Hmt4JJZZIwfzwJmibzc7E yXbjjq61UnBFWAo4Rc4oQSS4NsEF9h/73Ekr/BP8QSALfgIBBjb3actwyDRl2dKM kUWkWLfQNJGRylr37dIql98V5NpvfwW7sqI+8/i+wAIBp6p8l692CeoMFVhjj2Y3 CxR88598WvYs/JNuex/vSUfvm05WY6xjZHW9PzUuLVYvAeWkuomOSVqYZU+VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUemmP912hnu2USdjo+AcZ8Rh/ta0wHwYDVR0j BBgwFoAU07Ddu44H/NmKOZyQxbP8MrT6KPAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDlmOThmMy03MmYwLTQwMDYtYmU5OS1iOWE5ZThkOWQyYmYvMC9EM0IwRERCQjhF MDdGQ0Q5OEEzOTlDOTBDNUIzRkMzMkI0RkEyOEYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDNCMEREQkI4RTA3RkNEOThBMzk5QzkwQzVCM0ZDMzJCNEZB MjhGMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q5Zjk4ZjMtNzJmMC00MDA2LWJl OTktYjlhOWU4ZDlkMmJmLzAvRDNCMEREQkI4RTA3RkNEOThBMzk5QzkwQzVCM0ZD MzJCNEZBMjhGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIRxCYNEnTp922cbhb/fAnhpLiE1pWpr0NGT 3gJJI0QaSlq4c1xU2UsbyWyM8h63EhV7GCNBxxVRFsm1VDkE+6HAeMxxgkoBXKzQ Jgrnlldf8JMIZ4/NBazb1gYgLdKA5fo7CJ4h+fkYa6JzKRDB9P8PpbVxRTUyGidh nzNZIhJmsrn1VLAWCHCRnjEIsZP5f7/PZt4201arpCTuuMXv94t8fXX08/9qQ3iS Y/bCMJ6i3mC0uf6KijRd+oT3lNPQhpFQL02CC5E3NX/9dUybByP0zfHa75BQEbDF abzFHjcXit9sSA/S11GAx/QXfTSn7/19NTvbITgBfuQRN62TldI= -----END CERTIFICATE-----Generated at Wed Apr 23 15:33:57 2025 by rpki-client on console.sobornost.net