$ rpki-client -vvf repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft File: 3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft (raw, json) Hash identifier: LCi0PArSS0ajE7vqPWIyQF7MqYO3ghEAb4ns4bxgeoQ= Subject key identifier: B9:F8:75:D3:44:AA:B2:0C:6E:E5:59:4A:A7:3A:45:AD:7A:28:F7:5D Authority key identifier: 3F:F5:F9:3C:DA:B2:F6:66:B9:63:C4:1B:B8:3E:D3:E3:51:30:D5:30 Certificate issuer: /CN=3FF5F93CDAB2F666B963C41BB83ED3E35130D530 Certificate serial: 5CB3F16C46D889F71FAD4359EAE15E61A3615BDC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft Manifest number: 0152 Signing time: Wed 23 Apr 2025 15:42:11 +0000 Manifest this update: Wed 23 Apr 2025 15:37:11 +0000 Manifest next update: Sat 26 Apr 2025 23:21:11 +0000 Files and hashes: 1: 3130332e35312e3130332e302f32342d3234203d3e20313339343332.roa (hash: pMd2fLZ8G56ZDvxTI0R0016ec0byrXQ6BSiilyfhyHw=) 2: 3FF5F93CDAB2F666B963C41BB83ED3E35130D530.crl (hash: eagPV1MeRKD7lxJd2aZYswgeyu1NhM6wyA8o+3of7ic=) 3: 3130332e3232352e39372e302f32342d3234203d3e20313339343332.roa (hash: rwWXLno549FvBCR7UqrdCi7giNmOD5uuZTisrjvVg1w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.crl rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 12:29:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:b3:f1:6c:46:d8:89:f7:1f:ad:43:59:ea:e1:5e:61:a3:61:5b:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FF5F93CDAB2F666B963C41BB83ED3E35130D530 Validity Not Before: Apr 23 15:37:11 2025 GMT Not After : Apr 26 23:21:11 2025 GMT Subject: CN=B9F875D344AAB20C6EE5594AA73A45AD7A28F75D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6b:fb:42:7c:03:33:4f:31:41:d5:0d:52:c9: 24:99:c2:5e:98:53:20:b5:ab:ec:85:44:96:e6:7b: 8e:17:cd:5c:27:c5:7f:d1:2b:5a:ce:63:e9:26:7f: 34:f1:42:92:32:ee:ed:fd:d7:fe:cc:04:87:8e:bf: e8:aa:86:bc:c6:c6:37:bc:f9:46:8b:0b:44:9e:c3: fd:86:3e:a0:d6:f9:97:c4:43:e0:2b:c3:6f:df:55: 34:70:89:87:40:01:cd:1b:38:16:3f:9e:38:ab:40: ae:3f:4b:6b:b7:5a:8c:4a:2f:be:1f:82:2f:29:42: 0b:0b:b7:b8:fd:01:02:98:58:55:0b:47:31:c9:49: 6f:ac:ac:7c:b3:aa:d7:1e:89:ea:39:f4:5a:75:6a: 01:93:78:04:32:70:33:54:50:7c:64:9f:da:14:47: ae:6a:18:a9:c5:4b:f5:90:1c:c6:1d:84:d4:18:4e: 4c:14:a5:60:66:3f:d1:9f:0f:5e:e8:f3:e2:54:a6: 5f:6d:28:02:7b:cd:da:f3:4e:33:6e:f8:4c:9f:a1: 5b:d4:e6:7e:f2:0a:32:2c:e0:ec:7c:7c:8c:5e:56: 1a:c5:13:f4:f3:6f:af:b2:6f:a1:72:69:8c:4a:61: bc:73:53:ca:c6:a5:0a:f2:12:2e:3b:9b:5c:59:91: ef:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:F8:75:D3:44:AA:B2:0C:6E:E5:59:4A:A7:3A:45:AD:7A:28:F7:5D X509v3 Authority Key Identifier: keyid:3F:F5:F9:3C:DA:B2:F6:66:B9:63:C4:1B:B8:3E:D3:E3:51:30:D5:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:73:14:a8:f3:57:02:25:07:bf:f4:85:a4:dc:0c:d9:89:f9: 34:42:fb:da:ba:ce:71:11:3b:1f:9b:12:53:47:25:f7:f3:cc: aa:18:75:4d:d2:6c:c0:37:a9:5d:1b:64:d8:f0:fe:69:42:45: f3:5b:80:41:1d:d1:1f:30:28:15:b0:56:d5:ea:04:86:b1:eb: f5:b1:f1:24:5d:3d:77:2b:f1:34:a9:2a:f8:60:38:1c:fd:8c: 00:8a:81:44:87:5e:d0:5b:a8:b0:49:11:e5:08:59:8f:2e:09: 44:b5:cf:81:f4:c5:d2:3a:7c:db:c9:02:a0:19:13:e7:ce:81: d6:38:f7:29:94:52:b9:10:ef:c6:59:b6:c9:95:27:b8:4f:9c: fa:8d:2c:2f:a8:f0:a1:41:7d:64:50:e8:d5:82:43:00:04:39: 77:b2:cf:c5:ca:ae:2a:27:f0:25:99:15:54:a1:68:62:89:d3: a5:a4:a0:1a:91:54:54:b8:e6:15:d2:9a:a1:fa:43:3a:f6:52: b1:d7:8c:6a:5d:82:c0:20:df:f7:84:c1:d6:aa:68:e2:60:dd: ad:15:60:98:23:39:ac:3d:33:cf:33:12:d0:f5:ff:d7:2c:63: 18:dc:3c:32:08:aa:e4:cb:5e:df:68:6e:37:0b:d5:2c:cc:91: 28:10:fd:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXLPxbEbYifcfrUNZ6uFeYaNhW9wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZGNUY5M0NEQUIyRjY2NkI5NjNDNDFCQjgzRUQzRTM1 MTMwRDUzMDAeFw0yNTA0MjMxNTM3MTFaFw0yNTA0MjYyMzIxMTFaMDMxMTAvBgNV BAMTKEI5Rjg3NUQzNDRBQUIyMEM2RUU1NTk0QUE3M0E0NUFEN0EyOEY3NUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoa/tCfAMzTzFB1Q1SySSZwl6Y UyC1q+yFRJbme44XzVwnxX/RK1rOY+kmfzTxQpIy7u391/7MBIeOv+iqhrzGxje8 +UaLC0Sew/2GPqDW+ZfEQ+Arw2/fVTRwiYdAAc0bOBY/njirQK4/S2u3WoxKL74f gi8pQgsLt7j9AQKYWFULRzHJSW+srHyzqtceieo59Fp1agGTeAQycDNUUHxkn9oU R65qGKnFS/WQHMYdhNQYTkwUpWBmP9GfD17o8+JUpl9tKAJ7zdrzTjNu+EyfoVvU 5n7yCjIs4Ox8fIxeVhrFE/Tzb6+yb6FyaYxKYbxzU8rGpQryEi47m1xZke8/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUufh100Sqsgxu5VlKpzpFrXoo910wHwYDVR0j BBgwFoAUP/X5PNqy9ma5Y8QbuD7T41Ew1TAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NzgzZWQyOC01ODgxLTQ3ZGEtYWU2Ni1lMWRiNjc5NDJlYjEvMC8zRkY1RjkzQ0RB QjJGNjY2Qjk2M0M0MUJCODNFRDNFMzUxMzBENTMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZGNUY5M0NEQUIyRjY2NkI5NjNDNDFCQjgzRUQzRTM1MTMw RDUzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODc4M2VkMjgtNTg4MS00N2RhLWFl NjYtZTFkYjY3OTQyZWIxLzAvM0ZGNUY5M0NEQUIyRjY2NkI5NjNDNDFCQjgzRUQz RTM1MTMwRDUzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD9zFKjzVwIlB7/0haTcDNmJ+TRC+9q6znER Ox+bElNHJffzzKoYdU3SbMA3qV0bZNjw/mlCRfNbgEEd0R8wKBWwVtXqBIax6/Wx 8SRdPXcr8TSpKvhgOBz9jACKgUSHXtBbqLBJEeUIWY8uCUS1z4H0xdI6fNvJAqAZ E+fOgdY49ymUUrkQ78ZZtsmVJ7hPnPqNLC+o8KFBfWRQ6NWCQwAEOXeyz8XKrion 8CWZFVShaGKJ06WkoBqRVFS45hXSmqH6Qzr2UrHXjGpdgsAg3/eEwdaqaOJg3a0V YJgjOaw9M88zEtD1/9csYxjcPDIIquTLXt9objcL1SzMkSgQ/U4= -----END CERTIFICATE-----Generated at Wed Apr 23 17:38:31 2025 by rpki-client on console.sobornost.net