$ rpki-client -vvf repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.mft File: 3308A0FBD29F359AD61CAA389208E1D74CC28164.mft (raw, json) Hash identifier: 0VzowN315MBPuUMGCkSFgBesAWoT6O9D1sRH+1k6vTg= Subject key identifier: 10:A4:51:57:F0:41:02:D4:8D:72:F0:6E:05:EC:79:8F:EA:D6:B5:55 Authority key identifier: 33:08:A0:FB:D2:9F:35:9A:D6:1C:AA:38:92:08:E1:D7:4C:C2:81:64 Certificate issuer: /CN=3308A0FBD29F359AD61CAA389208E1D74CC28164 Certificate serial: 61CB122B25ECA9B9C17FC5BE11317F8AB9203B6F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3308A0FBD29F359AD61CAA389208E1D74CC28164.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.mft Manifest number: A9 Signing time: Fri 25 Apr 2025 19:32:14 +0000 Manifest this update: Fri 25 Apr 2025 19:27:14 +0000 Manifest next update: Tue 29 Apr 2025 07:18:14 +0000 Files and hashes: 1: 3132312e3130312e3138392e302f32342d3234203d3e203338373835.roa (hash: Csz/yUZ7Lzvn/nuu4THB9U+el9Pek+D7VdsMj61HX6w=) 2: 3132312e3130312e3138362e302f32342d3234203d3e203338373835.roa (hash: ldyK2huQ95pUCINHnT0U5z7ALHHC4dFAFsmJktUnRJw=) 3: 3132312e3130312e3139312e302f32342d3234203d3e203338373835.roa (hash: EV9DFisiiygvSyZKF0tZ0Lxf1X12CCisGawptespLsI=) 4: 3132312e3130312e3138382e302f32342d3234203d3e203338373835.roa (hash: jVBeyFMPWkiATlRCTVFrCw8EykcpuEgYVgn4T3UPT6M=) 5: 3308A0FBD29F359AD61CAA389208E1D74CC28164.crl (hash: k/lAQ4D1fXa25Gf+9boCgdjZZsqjL1a4OCZWLQc1eK0=) 6: 3132312e3130312e3139302e302f32342d3234203d3e203338373835.roa (hash: db2ZBDbPQBZ+1fLhUcrVMNSFZdZMKLIQU1qfyXpKY5M=) 7: 3132312e3130312e3138342e302f32342d3234203d3e203338373835.roa (hash: cpQ+yGOPRMcycDguY5pOMH22P4g6dN/h+7VVRFd0gvs=) 8: 3132312e3130312e3138372e302f32342d3234203d3e203338373835.roa (hash: Hv2jdXQUlOnlnToQUuoVlZDHe+biYftXfxb3LM1GOc0=) 9: 3132312e3130312e3138352e302f32342d3234203d3e203338373835.roa (hash: azmIwktH3vpajsF8gQt8znOMbH0C7Vn9MDVUjZva6CY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.crl rsync://repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3308A0FBD29F359AD61CAA389208E1D74CC28164.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 00:35:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:cb:12:2b:25:ec:a9:b9:c1:7f:c5:be:11:31:7f:8a:b9:20:3b:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3308A0FBD29F359AD61CAA389208E1D74CC28164 Validity Not Before: Apr 25 19:27:14 2025 GMT Not After : Apr 29 07:18:14 2025 GMT Subject: CN=10A45157F04102D48D72F06E05EC798FEAD6B555 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5d:e2:77:56:37:08:9f:35:0e:6a:c8:6c:d7: d4:d9:8c:ce:a0:c2:4f:32:c5:57:f5:43:74:71:bc: 4d:80:db:0c:2e:06:2d:4f:89:ad:53:c7:d2:df:9d: 88:5d:cd:2e:8b:f2:2b:2c:f7:86:45:fe:19:70:6e: bf:b5:1f:7a:47:5e:de:65:97:82:1d:c4:b5:af:b9: 21:37:1b:a2:8e:94:ed:ff:91:94:c1:48:3b:2a:71: a1:cd:33:45:d8:ed:d0:01:8a:3c:58:9b:4e:88:08: 29:c1:2b:3d:60:e9:33:42:bb:2d:62:f4:1c:37:45: 8e:7d:cb:57:91:b6:10:0d:2d:3a:04:63:82:b4:ae: 71:8a:57:9a:d2:18:ca:91:09:36:68:bc:0b:43:b9: a2:c0:29:2d:a1:bc:b8:1b:fa:49:5d:8a:16:8a:04: cd:a7:cf:30:7d:d7:03:0c:ad:76:48:cd:dc:f1:44: de:4f:75:af:03:6f:4f:40:6d:08:72:9e:14:ef:c7: fc:41:1c:3e:51:e3:26:09:d4:65:9d:c2:eb:07:31: b9:4a:f4:fe:65:fc:e4:6b:4c:12:43:51:62:69:e6: 0a:25:8f:25:78:1c:9d:fa:d2:5c:54:99:85:7d:7e: bf:09:ef:ef:0b:af:f3:ae:f1:a7:4a:22:88:bc:ed: 66:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:A4:51:57:F0:41:02:D4:8D:72:F0:6E:05:EC:79:8F:EA:D6:B5:55 X509v3 Authority Key Identifier: keyid:33:08:A0:FB:D2:9F:35:9A:D6:1C:AA:38:92:08:E1:D7:4C:C2:81:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3308A0FBD29F359AD61CAA389208E1D74CC28164.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:99:5e:c9:6d:0f:4e:b4:79:18:90:1f:c7:30:b6:c0:e6:01: 25:16:6b:17:69:ce:97:d7:4e:84:b5:10:6b:6e:f0:9c:10:d4: 42:11:97:13:0b:61:f6:fb:68:bd:2e:12:35:19:63:4f:c0:dd: 64:9b:90:69:41:e9:81:cc:50:47:88:21:ff:c1:89:54:d5:ad: 7c:8f:16:24:50:ec:2a:fd:dc:7e:13:28:ea:04:83:6d:07:e6: b0:7e:11:a4:bb:63:6d:fe:36:43:79:d3:1b:d3:0c:1d:d1:6c: 48:36:cf:b7:d3:81:ee:e8:58:0c:27:d6:e4:9e:76:b2:26:a1: dd:46:07:81:8d:c4:d0:b9:e2:45:e8:35:a9:9a:b7:f3:89:6d: 1b:45:c4:94:83:97:ff:ea:3d:cd:93:4e:4e:84:a9:73:9e:d7: b8:af:0b:2c:65:d3:ba:fa:74:d5:3f:56:cf:c0:2f:33:d5:ca: 14:00:e7:32:8b:c5:7a:76:d1:f5:13:e6:c5:04:9c:00:67:63: f3:0e:fc:4f:b1:b7:16:86:fa:b5:8c:9d:8b:58:4f:07:04:6f: 60:b0:ed:58:4a:bb:f4:98:a9:c3:ca:9d:34:81:75:2d:36:c3: 2f:cd:58:5d:66:31:03:5b:53:09:2e:a0:f5:8a:ab:f7:6e:a7: 7e:b2:3f:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYcsSKyXsqbnBf8W+ETF/irkgO28wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzMwOEEwRkJEMjlGMzU5QUQ2MUNBQTM4OTIwOEUxRDc0 Q0MyODE2NDAeFw0yNTA0MjUxOTI3MTRaFw0yNTA0MjkwNzE4MTRaMDMxMTAvBgNV BAMTKDEwQTQ1MTU3RjA0MTAyRDQ4RDcyRjA2RTA1RUM3OThGRUFENkI1NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdXeJ3VjcInzUOashs19TZjM6g wk8yxVf1Q3RxvE2A2wwuBi1Pia1Tx9LfnYhdzS6L8iss94ZF/hlwbr+1H3pHXt5l l4IdxLWvuSE3G6KOlO3/kZTBSDsqcaHNM0XY7dABijxYm06ICCnBKz1g6TNCuy1i 9Bw3RY59y1eRthANLToEY4K0rnGKV5rSGMqRCTZovAtDuaLAKS2hvLgb+kldihaK BM2nzzB91wMMrXZIzdzxRN5Pda8Db09AbQhynhTvx/xBHD5R4yYJ1GWdwusHMblK 9P5l/ORrTBJDUWJp5goljyV4HJ360lxUmYV9fr8J7+8Lr/Ou8adKIoi87WbFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEKRRV/BBAtSNcvBuBex5j+rWtVUwHwYDVR0j BBgwFoAUMwig+9KfNZrWHKo4kgjh10zCgWQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NTcyZGZiZS00Y2EwLTRhNDYtODAzNy00OTY4ZWQ5N2NhZGMvMC8zMzA4QTBGQkQy OUYzNTlBRDYxQ0FBMzg5MjA4RTFENzRDQzI4MTY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzMwOEEwRkJEMjlGMzU5QUQ2MUNBQTM4OTIwOEUxRDc0Q0My ODE2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTU3MmRmYmUtNGNhMC00YTQ2LTgw MzctNDk2OGVkOTdjYWRjLzAvMzMwOEEwRkJEMjlGMzU5QUQ2MUNBQTM4OTIwOEUx RDc0Q0MyODE2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAGZXsltD060eRiQH8cwtsDmASUWaxdpzpfX ToS1EGtu8JwQ1EIRlxMLYfb7aL0uEjUZY0/A3WSbkGlB6YHMUEeIIf/BiVTVrXyP FiRQ7Cr93H4TKOoEg20H5rB+EaS7Y23+NkN50xvTDB3RbEg2z7fTge7oWAwn1uSe drImod1GB4GNxNC54kXoNamat/OJbRtFxJSDl//qPc2TTk6EqXOe17ivCyxl07r6 dNU/Vs/ALzPVyhQA5zKLxXp20fUT5sUEnABnY/MO/E+xtxaG+rWMnYtYTwcEb2Cw 7VhKu/SYqcPKnTSBdS02wy/NWF1mMQNbUwkuoPWKq/dup36yP3c= -----END CERTIFICATE-----Generated at Fri Apr 25 22:07:25 2025 by rpki-client on console.sobornost.net