$ rpki-client -vvf repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft File: 3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft (raw, json) Hash identifier: WrBzfgRghF/d31SP4t/6QH3SNNqejWquaK5ue87lXLE= Subject key identifier: FD:05:75:AB:F7:D2:F3:49:B5:8D:2D:27:70:B4:C7:91:1B:8B:1C:07 Authority key identifier: 3E:DB:B7:84:47:14:C5:45:CE:D7:24:12:0E:D0:E5:A3:4E:FB:45:EE Certificate issuer: /CN=3EDBB7844714C545CED724120ED0E5A34EFB45EE Certificate serial: 65ADDEA316AFC2DB62EEB636773614ADE9FB0DCA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDBB7844714C545CED724120ED0E5A34EFB45EE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft Manifest number: 04C9 Signing time: Wed 23 Apr 2025 09:50:35 +0000 Manifest this update: Wed 23 Apr 2025 09:45:35 +0000 Manifest next update: Sat 26 Apr 2025 21:25:35 +0000 Files and hashes: 1: 3230322e35312e39362e302f31392d3234203d3e203137393935.roa (hash: RzpF8tFy62QFxO5rx50rJvqckeHeBS/lfFxDrWgg/Gw=) 2: 3138322e31362e3136302e302f31392d3234203d3e203137393935.roa (hash: s19IDj9mMJ0lErBIJsliZ5CjEuGnp4A/oBPXh9EeGJ0=) 3: 3130332e38352e3134382e302f32322d3234203d3e203137393935.roa (hash: Dshq7FLG/8IwFv2djPDoFCF11ZS5aruhkwaXf8oFx88=) 4: 3EDBB7844714C545CED724120ED0E5A34EFB45EE.crl (hash: pXYKDG8h8fWGmNLEqKgq3QoaBAzq11QA7PSk8rhvndA=) 5: 3132342e3135382e3134342e302f32302d3234203d3e203137393935.roa (hash: Maowy9ZefjHDMfvujJn0ro1tBo40XSiT/nD665jrUOE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.crl rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDBB7844714C545CED724120ED0E5A34EFB45EE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 12:29:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:ad:de:a3:16:af:c2:db:62:ee:b6:36:77:36:14:ad:e9:fb:0d:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3EDBB7844714C545CED724120ED0E5A34EFB45EE Validity Not Before: Apr 23 09:45:35 2025 GMT Not After : Apr 26 21:25:35 2025 GMT Subject: CN=FD0575ABF7D2F349B58D2D2770B4C7911B8B1C07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:19:0f:2d:51:ef:14:da:ba:bb:75:59:0f:99: 51:0a:21:0b:f5:25:e7:79:f8:62:75:eb:72:ac:19: f8:3b:9b:3d:dc:cb:b1:02:b3:40:8f:7b:68:07:35: de:76:b6:8f:43:a4:b2:c9:20:8c:35:c5:98:e5:22: ed:ca:cc:28:c2:9d:15:a2:59:8e:a5:4d:dc:54:06: ff:19:b5:7c:3e:2c:87:9f:78:4b:79:d3:2d:e9:d4: ff:40:ff:51:a3:9e:62:66:0a:14:6f:14:41:e1:48: fb:ed:c2:ed:3e:85:60:eb:ce:0f:ee:aa:06:72:ec: 8a:f9:43:24:d8:01:a0:a1:b3:35:4b:6c:98:21:2c: 41:b0:18:3f:dd:ae:de:fa:88:c0:f8:91:20:9a:8f: e3:72:5a:65:63:bd:29:0a:24:da:47:2f:79:49:67: e5:94:a4:dc:7d:23:a6:4d:70:bc:1a:83:77:31:5a: 0a:37:38:9c:0d:b6:32:9d:10:50:27:81:45:27:45: e3:e3:dd:2c:dd:86:30:96:ae:19:e5:bb:81:32:49: c3:75:1e:cd:71:c1:f5:0b:5d:e5:0b:25:b4:80:e3: e7:3f:57:63:d5:5e:9d:d2:d1:0b:84:d8:a8:0d:a2: 28:fb:5c:6b:7b:fe:60:a0:ed:f0:86:bb:ee:4c:38: a1:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:05:75:AB:F7:D2:F3:49:B5:8D:2D:27:70:B4:C7:91:1B:8B:1C:07 X509v3 Authority Key Identifier: keyid:3E:DB:B7:84:47:14:C5:45:CE:D7:24:12:0E:D0:E5:A3:4E:FB:45:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDBB7844714C545CED724120ED0E5A34EFB45EE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:f5:35:16:4d:9f:5f:de:34:f0:61:67:81:15:30:58:d0:a1: 2f:8a:f5:9b:22:12:c5:41:33:0c:c9:43:0a:38:f9:a4:77:75: a5:e6:c8:f1:29:52:2b:ab:df:72:37:46:e4:0f:49:b6:d7:e6: 34:6f:5f:d4:84:d1:6e:4a:c7:11:52:3c:f9:bd:3c:43:17:4b: ae:cc:48:96:f0:b1:fb:b8:fe:85:5c:98:f2:f3:77:52:bf:68: 56:e6:0b:10:19:57:e7:a0:68:06:0e:5a:e5:90:91:83:bd:8d: f4:ac:42:3c:96:c4:a3:4e:46:8a:aa:17:c9:93:cb:50:41:e1: 51:ec:fb:0b:20:f2:d6:71:5a:cf:b9:fc:f1:c3:bd:e5:6a:e2: a9:69:71:3c:76:17:30:52:5d:60:fa:fc:63:e8:6e:08:33:96: d1:cf:fc:19:62:ae:83:38:5a:0f:2d:23:e8:58:67:34:2e:63: a1:fe:f6:95:58:66:a6:3c:84:47:cb:82:0b:cf:c4:5e:07:b3: e8:2c:f6:66:f2:85:2a:dc:ae:35:b5:66:58:59:d9:bf:7a:ed: 3f:51:78:a9:43:8c:a0:a6:30:6b:fd:49:04:d0:99:98:8a:80: 9b:8a:e0:b2:52:1e:c0:51:77:b8:06:86:93:13:c6:2d:7a:ad: a6:b9:93:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZa3eoxavwtti7rY2dzYUren7DcowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VEQkI3ODQ0NzE0QzU0NUNFRDcyNDEyMEVEMEU1QTM0 RUZCNDVFRTAeFw0yNTA0MjMwOTQ1MzVaFw0yNTA0MjYyMTI1MzVaMDMxMTAvBgNV BAMTKEZEMDU3NUFCRjdEMkYzNDlCNThEMkQyNzcwQjRDNzkxMUI4QjFDMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIGQ8tUe8U2rq7dVkPmVEKIQv1 Jed5+GJ163KsGfg7mz3cy7ECs0CPe2gHNd52to9DpLLJIIw1xZjlIu3KzCjCnRWi WY6lTdxUBv8ZtXw+LIefeEt50y3p1P9A/1GjnmJmChRvFEHhSPvtwu0+hWDrzg/u qgZy7Ir5QyTYAaChszVLbJghLEGwGD/drt76iMD4kSCaj+NyWmVjvSkKJNpHL3lJ Z+WUpNx9I6ZNcLwag3cxWgo3OJwNtjKdEFAngUUnRePj3SzdhjCWrhnlu4EyScN1 Hs1xwfULXeULJbSA4+c/V2PVXp3S0QuE2KgNoij7XGt7/mCg7fCGu+5MOKFbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/QV1q/fS80m1jS0ncLTHkRuLHAcwHwYDVR0j BBgwFoAUPtu3hEcUxUXO1yQSDtDlo077Re4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZWQ5NTVjOC1lNmQzLTQ5YzItYWJkOC1lMGY5MmMwODEyNDcvMC8zRURCQjc4NDQ3 MTRDNTQ1Q0VENzI0MTIwRUQwRTVBMzRFRkI0NUVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0VEQkI3ODQ0NzE0QzU0NUNFRDcyNDEyMEVEMEU1QTM0RUZC NDVFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWVkOTU1YzgtZTZkMy00OWMyLWFi ZDgtZTBmOTJjMDgxMjQ3LzAvM0VEQkI3ODQ0NzE0QzU0NUNFRDcyNDEyMEVEMEU1 QTM0RUZCNDVFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE/1NRZNn1/eNPBhZ4EVMFjQoS+K9ZsiEsVB MwzJQwo4+aR3daXmyPEpUiur33I3RuQPSbbX5jRvX9SE0W5KxxFSPPm9PEMXS67M SJbwsfu4/oVcmPLzd1K/aFbmCxAZV+egaAYOWuWQkYO9jfSsQjyWxKNORoqqF8mT y1BB4VHs+wsg8tZxWs+5/PHDveVq4qlpcTx2FzBSXWD6/GPobggzltHP/BliroM4 Wg8tI+hYZzQuY6H+9pVYZqY8hEfLggvPxF4Hs+gs9mbyhSrcrjW1ZlhZ2b967T9R eKlDjKCmMGv9SQTQmZiKgJuK4LJSHsBRd7gGhpMTxi16raa5k6o= -----END CERTIFICATE-----Generated at Wed Apr 23 13:25:33 2025 by rpki-client on console.sobornost.net