$ rpki-client -vvf repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3D93688202931D72322A7EE0053964A2DD8EB457.mft File: 3D93688202931D72322A7EE0053964A2DD8EB457.mft (raw, json) Hash identifier: 9GR/0fSPDrI6yP4kwPWpTg35R08v1Q7ZyoFlDWo7C3s= Subject key identifier: 5E:76:96:8A:62:E3:A5:25:84:EC:00:08:78:51:E0:6B:CC:8F:73:3E Authority key identifier: 3D:93:68:82:02:93:1D:72:32:2A:7E:E0:05:39:64:A2:DD:8E:B4:57 Certificate issuer: /CN=3D93688202931D72322A7EE0053964A2DD8EB457 Certificate serial: 35F72EF9DE74498629E157DA3575D4428401CBEC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D93688202931D72322A7EE0053964A2DD8EB457.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3D93688202931D72322A7EE0053964A2DD8EB457.mft Manifest number: 01F8 Signing time: Wed 23 Apr 2025 19:42:13 +0000 Manifest this update: Wed 23 Apr 2025 19:37:13 +0000 Manifest next update: Sun 27 Apr 2025 07:11:13 +0000 Files and hashes: 1: 3130332e3138342e36342e302f32332d3234203d3e203539323738.roa (hash: DkL978cCjpD0PQ0XgknN+Mz9vJLe59QDx419VcnHPIA=) 2: 3D93688202931D72322A7EE0053964A2DD8EB457.crl (hash: hSOs5ZwoSuZh9fGGcSITBh0U6OPHzUJmdnRJrJ6YKto=) 3: 3130332e3138342e36342e302f32332d3234203d3e20313439363832.roa (hash: eaULz+kMsRSSqy6h3V303twAaR4RcVJjEt3EXFQ5l2A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3D93688202931D72322A7EE0053964A2DD8EB457.crl rsync://repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3D93688202931D72322A7EE0053964A2DD8EB457.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D93688202931D72322A7EE0053964A2DD8EB457.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 02:40:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:f7:2e:f9:de:74:49:86:29:e1:57:da:35:75:d4:42:84:01:cb:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D93688202931D72322A7EE0053964A2DD8EB457 Validity Not Before: Apr 23 19:37:13 2025 GMT Not After : Apr 27 07:11:13 2025 GMT Subject: CN=5E76968A62E3A52584EC00087851E06BCC8F733E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e0:ad:41:5c:63:b3:f5:f7:d6:78:6e:83:ee: a4:9a:6b:76:d5:92:c7:79:00:66:b3:aa:c2:86:4b: 47:75:56:40:97:eb:62:75:ed:11:a5:00:03:5c:4d: d4:56:4c:67:89:de:5c:3c:a0:6d:83:04:23:50:96: 3d:ce:7d:b3:ff:da:97:1f:5c:40:03:95:0e:d0:41: 1e:7e:33:10:a5:12:6e:43:19:1c:a9:56:d8:e8:cc: 90:9b:16:1d:44:2a:4a:4c:4a:cb:62:52:5b:c1:2c: b9:26:f3:34:e6:5c:42:23:fb:8c:d8:d1:63:05:bf: 4d:1e:23:6c:01:63:0e:61:c7:f9:00:10:23:bd:9d: 95:3c:f7:8c:a4:1e:d9:08:c3:60:1b:42:b9:00:a1: 28:dd:58:df:71:95:54:38:0d:50:ff:4e:fe:e8:d2: 1b:ff:94:d4:de:48:9e:ef:a4:39:3e:2a:fb:5a:f6: 9f:96:1e:27:85:b9:fe:25:61:7c:15:30:8e:dc:e3: 71:24:d1:eb:db:74:13:ef:51:2f:9a:b8:da:ef:b4: b7:2d:c7:8e:8d:61:e1:3c:05:5d:ce:0e:b2:d3:6b: a1:eb:33:7b:78:00:2d:57:19:10:0b:45:e7:36:b2: 2f:af:74:2d:18:be:bc:36:48:bc:08:63:07:7e:bf: 61:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:76:96:8A:62:E3:A5:25:84:EC:00:08:78:51:E0:6B:CC:8F:73:3E X509v3 Authority Key Identifier: keyid:3D:93:68:82:02:93:1D:72:32:2A:7E:E0:05:39:64:A2:DD:8E:B4:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3D93688202931D72322A7EE0053964A2DD8EB457.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D93688202931D72322A7EE0053964A2DD8EB457.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3D93688202931D72322A7EE0053964A2DD8EB457.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:40:32:ba:45:a0:63:c0:c1:f2:25:da:e9:72:d9:66:b3:a8: f1:e0:8e:4e:8f:40:80:a3:31:46:1f:df:a0:bf:b4:83:3e:f3: 0d:de:3e:96:92:8d:29:a9:b5:54:ee:41:01:80:c8:28:0c:2c: 45:b4:0d:88:45:2c:f7:7f:cb:9e:88:73:28:84:5a:e9:d8:46: 10:29:50:f9:80:40:29:d9:51:a4:31:27:03:69:df:c6:24:5b: b5:33:f0:21:4d:39:f4:60:cb:1e:5b:19:e6:e0:ad:cc:4f:fc: a0:66:da:09:a6:24:db:fc:8a:a6:f4:f1:c2:72:ac:cd:b8:2d: 99:ec:02:60:0e:30:74:98:e4:07:0d:16:ff:96:b4:ac:a8:8b: e2:2e:99:b4:14:b8:12:f3:f6:bd:12:e7:b8:25:c1:e0:16:59: 73:94:5f:b9:46:13:38:56:ed:9c:b7:21:9c:c5:cb:87:88:02: 75:85:03:2f:97:e5:36:53:53:d7:df:0a:ea:de:47:0f:58:33: 27:f6:99:be:91:32:89:9f:07:b3:ea:d4:19:cc:1c:52:d6:53: b4:1e:16:89:ea:1a:8d:85:4c:15:c4:26:c9:9a:34:76:78:d2: 5c:41:86:a8:07:c4:1c:5b:a1:cd:cb:73:86:e2:12:ca:e3:53: 63:bb:e7:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNfcu+d50SYYp4VfaNXXUQoQBy+wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q5MzY4ODIwMjkzMUQ3MjMyMkE3RUUwMDUzOTY0QTJE RDhFQjQ1NzAeFw0yNTA0MjMxOTM3MTNaFw0yNTA0MjcwNzExMTNaMDMxMTAvBgNV BAMTKDVFNzY5NjhBNjJFM0E1MjU4NEVDMDAwODc4NTFFMDZCQ0M4RjczM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC64K1BXGOz9ffWeG6D7qSaa3bV ksd5AGazqsKGS0d1VkCX62J17RGlAANcTdRWTGeJ3lw8oG2DBCNQlj3OfbP/2pcf XEADlQ7QQR5+MxClEm5DGRypVtjozJCbFh1EKkpMSstiUlvBLLkm8zTmXEIj+4zY 0WMFv00eI2wBYw5hx/kAECO9nZU894ykHtkIw2AbQrkAoSjdWN9xlVQ4DVD/Tv7o 0hv/lNTeSJ7vpDk+Kvta9p+WHieFuf4lYXwVMI7c43Ek0evbdBPvUS+auNrvtLct x46NYeE8BV3ODrLTa6HrM3t4AC1XGRALRec2si+vdC0Yvrw2SLwIYwd+v2G3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXnaWimLjpSWE7AAIeFHga8yPcz4wHwYDVR0j BBgwFoAUPZNoggKTHXIyKn7gBTlkot2OtFcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NmQ4ODQ5Ni1iMmJhLTRkMTMtOTgyNS1hZTM4YWZmMWRhMTUvMC8zRDkzNjg4MjAy OTMxRDcyMzIyQTdFRTAwNTM5NjRBMkREOEVCNDU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q5MzY4ODIwMjkzMUQ3MjMyMkE3RUUwMDUzOTY0QTJERDhF QjQ1Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjZkODg0OTYtYjJiYS00ZDEzLTk4 MjUtYWUzOGFmZjFkYTE1LzAvM0Q5MzY4ODIwMjkzMUQ3MjMyMkE3RUUwMDUzOTY0 QTJERDhFQjQ1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACdAMrpFoGPAwfIl2uly2WazqPHgjk6PQICj MUYf36C/tIM+8w3ePpaSjSmptVTuQQGAyCgMLEW0DYhFLPd/y56IcyiEWunYRhAp UPmAQCnZUaQxJwNp38YkW7Uz8CFNOfRgyx5bGebgrcxP/KBm2gmmJNv8iqb08cJy rM24LZnsAmAOMHSY5AcNFv+WtKyoi+IumbQUuBLz9r0S57glweAWWXOUX7lGEzhW 7Zy3IZzFy4eIAnWFAy+X5TZTU9ffCureRw9YMyf2mb6RMomfB7Pq1BnMHFLWU7Qe FonqGo2FTBXEJsmaNHZ40lxBhqgHxBxboc3Lc4biEsrjU2O7544= -----END CERTIFICATE-----Generated at Wed Apr 23 22:12:04 2025 by rpki-client on console.sobornost.net