$ rpki-client -vvf repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft File: 3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft (raw, json) Hash identifier: ZcjmDcbxf13ps/PjiyIelc+QoJj3Lbetg8ngYZ+cSDc= Subject key identifier: A9:6E:D1:10:97:6D:E4:EE:DA:95:70:60:93:16:20:CC:34:25:EB:97 Authority key identifier: 3C:91:48:EF:27:AF:5E:D3:48:13:42:F5:DE:F2:5A:26:A0:CB:9F:8B Certificate issuer: /CN=3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B Certificate serial: 769F2F5056B0E4B88D09D4F82E8C5E7C689301FD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft Manifest number: 0324 Signing time: Sat 26 Apr 2025 15:41:15 +0000 Manifest this update: Sat 26 Apr 2025 15:36:15 +0000 Manifest next update: Tue 29 Apr 2025 16:47:15 +0000 Files and hashes: 1: 3130332e3137312e31392e302f32342d3234203d3e20313338363038.roa (hash: DS4rfXsOZAd6zyO+PWFbBzflwksjO/ECzvelckHR5dk=) 2: 3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.crl (hash: 2MQL5ihWsd9TsqpmM5RBP5GlxoJdUT2j/fCPSXuAJ2Y=) 3: 3130332e3137312e31382e302f32342d3234203d3e20313336303532.roa (hash: 5h5J8xW62JxvWusBPqO7t7BtPqu0f0FKKCSn5YoWmpk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.crl rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 16:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:9f:2f:50:56:b0:e4:b8:8d:09:d4:f8:2e:8c:5e:7c:68:93:01:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B Validity Not Before: Apr 26 15:36:15 2025 GMT Not After : Apr 29 16:47:15 2025 GMT Subject: CN=A96ED110976DE4EEDA957060931620CC3425EB97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f2:f5:25:a4:19:20:27:4d:1b:d4:20:11:a4: 1a:14:c0:c3:11:a7:07:ee:b8:ca:ac:53:52:25:05: 04:89:76:10:71:09:72:8b:8d:e3:81:18:95:d0:58: 71:af:5c:68:2b:58:83:0c:b9:8b:7c:1e:c5:33:73: fe:18:5a:0c:e6:4b:c4:9b:39:4d:50:aa:3f:cb:e1: db:20:39:61:1d:34:ff:bd:29:3d:e1:f2:58:e5:a8: ea:4d:02:65:28:8b:99:28:28:51:01:13:2e:5d:26: f2:a7:4c:72:52:ab:8e:cc:fa:15:96:2e:9b:9a:88: 0e:cc:a7:78:ea:f2:a6:a3:77:c7:d9:41:31:65:c7: 61:18:84:33:d4:50:84:e5:06:66:16:ca:a8:f4:c7: 61:1f:97:ac:96:3a:52:f4:eb:34:a5:4e:f3:81:99: dc:f0:34:16:3f:33:8d:b1:75:0d:df:be:f3:b0:49: 6d:9c:e0:69:d3:a6:26:ae:a4:fe:80:54:79:bb:6b: e3:21:a4:d4:64:1f:c4:f3:db:d1:9e:82:fc:7c:cb: 7b:35:20:c4:85:56:3d:05:9d:2a:ba:09:88:e0:f4: 4b:03:27:2f:b8:df:bc:46:9b:86:45:6d:cb:d5:fd: 34:5a:0e:55:e6:b5:e8:95:30:55:50:8e:83:17:98: de:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:6E:D1:10:97:6D:E4:EE:DA:95:70:60:93:16:20:CC:34:25:EB:97 X509v3 Authority Key Identifier: keyid:3C:91:48:EF:27:AF:5E:D3:48:13:42:F5:DE:F2:5A:26:A0:CB:9F:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:6c:71:f1:6f:cf:93:78:a0:2a:bf:c9:00:9a:4f:f4:39:54: ee:0d:f7:78:b0:b2:75:a7:41:1f:e8:85:08:37:b0:c8:43:32: 54:7a:94:dc:6f:62:52:a5:7b:9d:68:8d:2a:77:6b:3d:96:a5: c2:7b:66:f2:1b:6b:ff:aa:a4:4d:53:ea:30:e6:dd:a0:02:1b: e8:37:68:df:65:3b:42:d0:34:31:7f:06:da:54:d1:8b:8e:1c: b1:62:f7:26:e7:4c:f4:1f:1b:e5:9b:df:eb:fb:b0:a9:48:95: 69:d0:00:6e:41:c0:fd:14:d7:47:e4:bb:f1:1f:f4:22:76:be: 05:78:5a:a3:ad:35:ae:9a:f5:b7:ab:d2:61:c5:78:81:2b:9f: f0:9f:8f:77:87:54:d9:20:b1:e3:d9:f9:a1:53:77:c5:5c:5c: 73:d0:b2:96:64:df:85:9d:f8:89:27:c8:33:d5:51:75:56:0d: 43:92:cd:9d:74:04:09:06:af:3d:09:37:62:f3:0d:02:b2:77: 15:79:2b:c8:00:cf:6c:a1:0c:00:a2:1e:65:f9:78:f8:08:44: 21:23:e9:80:4b:c5:ed:34:0f:c6:ed:ef:dd:0e:af:6e:07:fb: 20:98:c6:33:6f:03:cc:e1:65:89:ab:2a:2d:58:a0:96:f8:6b: f9:cc:fd:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdp8vUFaw5LiNCdT4LoxefGiTAf0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M5MTQ4RUYyN0FGNUVEMzQ4MTM0MkY1REVGMjVBMjZB MENCOUY4QjAeFw0yNTA0MjYxNTM2MTVaFw0yNTA0MjkxNjQ3MTVaMDMxMTAvBgNV BAMTKEE5NkVEMTEwOTc2REU0RUVEQTk1NzA2MDkzMTYyMENDMzQyNUVCOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC18vUlpBkgJ00b1CARpBoUwMMR pwfuuMqsU1IlBQSJdhBxCXKLjeOBGJXQWHGvXGgrWIMMuYt8HsUzc/4YWgzmS8Sb OU1Qqj/L4dsgOWEdNP+9KT3h8ljlqOpNAmUoi5koKFEBEy5dJvKnTHJSq47M+hWW LpuaiA7Mp3jq8qajd8fZQTFlx2EYhDPUUITlBmYWyqj0x2Efl6yWOlL06zSlTvOB mdzwNBY/M42xdQ3fvvOwSW2c4GnTpiaupP6AVHm7a+MhpNRkH8Tz29Gegvx8y3s1 IMSFVj0FnSq6CYjg9EsDJy+437xGm4ZFbcvV/TRaDlXmteiVMFVQjoMXmN4nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqW7REJdt5O7alXBgkxYgzDQl65cwHwYDVR0j BBgwFoAUPJFI7yevXtNIE0L13vJaJqDLn4swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YThmNjlmNy05MzMyLTRjZDQtYjNlNS1jYzZjNDc3MmNmNzMvMC8zQzkxNDhFRjI3 QUY1RUQzNDgxMzQyRjVERUYyNUEyNkEwQ0I5RjhCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0M5MTQ4RUYyN0FGNUVEMzQ4MTM0MkY1REVGMjVBMjZBMENC OUY4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWE4ZjY5ZjctOTMzMi00Y2Q0LWIz ZTUtY2M2YzQ3NzJjZjczLzAvM0M5MTQ4RUYyN0FGNUVEMzQ4MTM0MkY1REVGMjVB MjZBMENCOUY4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH9scfFvz5N4oCq/yQCaT/Q5VO4N93iwsnWn QR/ohQg3sMhDMlR6lNxvYlKle51ojSp3az2WpcJ7ZvIba/+qpE1T6jDm3aACG+g3 aN9lO0LQNDF/BtpU0YuOHLFi9ybnTPQfG+Wb3+v7sKlIlWnQAG5BwP0U10fku/Ef 9CJ2vgV4WqOtNa6a9ber0mHFeIErn/Cfj3eHVNkgsePZ+aFTd8VcXHPQspZk34Wd +IknyDPVUXVWDUOSzZ10BAkGrz0JN2LzDQKydxV5K8gAz2yhDACiHmX5ePgIRCEj 6YBLxe00D8bt790Or24H+yCYxjNvA8zhZYmrKi1YoJb4a/nM/Tc= -----END CERTIFICATE-----Generated at Sat Apr 26 18:17:59 2025 by rpki-client on console.sobornost.net