$ rpki-client -vvf repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.mft File: 3E69DE558C030D2041570E32C387F764C38BBBA9.mft (raw, json) Hash identifier: FIVDussjOaHk2N1c/nnIxQCelz5ijr84KV/RD1mFgo0= Subject key identifier: 64:3F:DF:F5:77:0D:80:AB:24:59:F2:40:F7:0C:D2:60:7E:DD:5D:9C Authority key identifier: 3E:69:DE:55:8C:03:0D:20:41:57:0E:32:C3:87:F7:64:C3:8B:BB:A9 Certificate issuer: /CN=3E69DE558C030D2041570E32C387F764C38BBBA9 Certificate serial: 149F0574C89EB65B2AB6AB00018B351223D797A5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E69DE558C030D2041570E32C387F764C38BBBA9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.mft Manifest number: 01B7 Signing time: Thu 24 Apr 2025 04:41:58 +0000 Manifest this update: Thu 24 Apr 2025 04:36:58 +0000 Manifest next update: Sun 27 Apr 2025 13:56:58 +0000 Files and hashes: 1: 3130332e3131372e33302e302f32342d3234203d3e2039333431.roa (hash: r8z7bDbjNyHi7VzYSSCbno+5xl3u6VN0WnpOY+FTh0M=) 2: 3130332e3131372e33312e302f32342d3234203d3e2039333431.roa (hash: r4qCVyd3k26szOGZkVLoPrnQYgvd4y2QFV5EAdd6F0w=) 3: 3130332e3131372e33302e302f32332d3233203d3e2039333431.roa (hash: OtR5QDPiIlOE8R6tAVQNMwDez94T84Oy3nqMNKHUt/s=) 4: 3E69DE558C030D2041570E32C387F764C38BBBA9.crl (hash: nMJgDqlKN4Fp/Qbz/lDHXoFnox3YpdMC1YxMhKEW9fg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.crl rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E69DE558C030D2041570E32C387F764C38BBBA9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 08:44:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:9f:05:74:c8:9e:b6:5b:2a:b6:ab:00:01:8b:35:12:23:d7:97:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E69DE558C030D2041570E32C387F764C38BBBA9 Validity Not Before: Apr 24 04:36:58 2025 GMT Not After : Apr 27 13:56:58 2025 GMT Subject: CN=643FDFF5770D80AB2459F240F70CD2607EDD5D9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ae:12:52:ba:c4:ff:ec:c9:b0:0e:6c:1c:28: 33:b5:c1:08:50:26:26:14:fe:1e:6f:9c:80:ae:7b: a7:c6:22:a6:68:3b:f2:58:c4:89:7b:d3:57:12:d0: c7:b5:51:e0:48:67:35:81:e8:50:1c:04:44:73:93: 19:ed:71:25:c0:8a:b2:04:bf:77:63:42:61:5a:a0: 1b:94:a7:21:b1:79:f9:42:99:cf:a2:58:bb:e9:c7: 49:98:45:5f:bc:ff:8a:ca:47:59:68:a7:86:94:c0: 49:c6:8d:33:52:10:b6:90:fa:63:34:cb:7b:8e:e3: ca:03:de:49:5f:81:55:0a:5f:cb:40:c9:61:cb:50: fd:63:96:3f:07:a5:6a:c4:94:a9:78:ba:44:bd:62: c5:f7:dc:bc:32:70:19:ed:08:32:30:f5:de:ef:f7: 63:bb:89:6c:05:d6:cf:48:17:5c:a7:53:ee:5e:fa: a6:d8:f1:b8:ea:b9:c8:c1:5a:74:6d:57:1e:67:27: 76:f9:d3:c1:1e:f1:05:55:55:cb:e4:cb:68:b5:7b: 8a:8d:cd:62:e2:82:c9:1c:9a:38:76:7c:2a:a0:20: 6d:1e:5e:47:d1:6a:f5:7c:94:83:cf:c9:50:d1:72: 18:cd:07:45:28:68:ef:2f:85:7c:59:4f:2d:6d:4c: 7b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:3F:DF:F5:77:0D:80:AB:24:59:F2:40:F7:0C:D2:60:7E:DD:5D:9C X509v3 Authority Key Identifier: keyid:3E:69:DE:55:8C:03:0D:20:41:57:0E:32:C3:87:F7:64:C3:8B:BB:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E69DE558C030D2041570E32C387F764C38BBBA9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:9c:09:b1:29:a6:ef:86:bc:59:93:16:8d:86:a0:a9:f1:17: cf:54:2e:1a:81:b9:26:04:45:80:94:77:07:f4:25:df:ea:92: e3:36:4e:79:3b:74:ea:c0:3f:77:4f:37:5c:b2:c6:59:50:c3: 46:0f:16:5f:b9:0d:0c:8a:92:54:4b:6c:94:26:40:6b:7e:fb: 32:9e:e3:b3:76:de:bc:e4:d2:ea:f8:0a:29:cf:ea:33:e0:a2: 95:0a:05:be:54:19:aa:f4:48:f8:b2:86:ff:12:fb:e2:f4:0a: c9:5a:50:8d:df:c5:78:9f:be:58:be:7a:a1:82:10:dc:40:8f: 88:56:d6:99:c9:f8:0f:bc:ac:f4:89:18:46:a2:dc:f4:be:38: 1d:8e:f5:9e:4d:a1:e5:50:9e:37:e8:2a:33:3e:2b:18:31:e2: 4d:2a:e3:e6:31:0c:10:67:7e:9f:e3:be:80:1b:fa:74:30:88: 17:93:9c:15:c8:b2:63:76:ef:3d:a0:7e:88:a9:51:41:6c:f9: c8:37:01:86:71:3f:77:12:24:51:f7:69:08:c7:ef:26:ba:a0: 93:7f:67:20:b9:47:88:16:ea:7e:d1:43:6c:26:aa:8d:9f:2c: 82:a2:14:ec:99:6f:96:a8:2c:46:0b:7f:c0:c5:2a:f1:4d:d6: e5:41:62:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFJ8FdMietlsqtqsAAYs1EiPXl6UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U2OURFNTU4QzAzMEQyMDQxNTcwRTMyQzM4N0Y3NjRD MzhCQkJBOTAeFw0yNTA0MjQwNDM2NThaFw0yNTA0MjcxMzU2NThaMDMxMTAvBgNV BAMTKDY0M0ZERkY1NzcwRDgwQUIyNDU5RjI0MEY3MENEMjYwN0VERDVEOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqrhJSusT/7MmwDmwcKDO1wQhQ JiYU/h5vnICue6fGIqZoO/JYxIl701cS0Me1UeBIZzWB6FAcBERzkxntcSXAirIE v3djQmFaoBuUpyGxeflCmc+iWLvpx0mYRV+8/4rKR1lop4aUwEnGjTNSELaQ+mM0 y3uO48oD3klfgVUKX8tAyWHLUP1jlj8HpWrElKl4ukS9YsX33LwycBntCDIw9d7v 92O7iWwF1s9IF1ynU+5e+qbY8bjqucjBWnRtVx5nJ3b508Ee8QVVVcvky2i1e4qN zWLigskcmjh2fCqgIG0eXkfRavV8lIPPyVDRchjNB0UoaO8vhXxZTy1tTHv5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZD/f9XcNgKskWfJA9wzSYH7dXZwwHwYDVR0j BBgwFoAUPmneVYwDDSBBVw4yw4f3ZMOLu6kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OWIzYmIzNC0xNWUyLTQ0ODctYjUyNy02ZTc1MTI4NmNlN2QvMC8zRTY5REU1NThD MDMwRDIwNDE1NzBFMzJDMzg3Rjc2NEMzOEJCQkE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U2OURFNTU4QzAzMEQyMDQxNTcwRTMyQzM4N0Y3NjRDMzhC QkJBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzliM2JiMzQtMTVlMi00NDg3LWI1 MjctNmU3NTEyODZjZTdkLzAvM0U2OURFNTU4QzAzMEQyMDQxNTcwRTMyQzM4N0Y3 NjRDMzhCQkJBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADqcCbEppu+GvFmTFo2GoKnxF89ULhqBuSYE RYCUdwf0Jd/qkuM2Tnk7dOrAP3dPN1yyxllQw0YPFl+5DQyKklRLbJQmQGt++zKe 47N23rzk0ur4CinP6jPgopUKBb5UGar0SPiyhv8S++L0CslaUI3fxXifvli+eqGC ENxAj4hW1pnJ+A+8rPSJGEai3PS+OB2O9Z5NoeVQnjfoKjM+Kxgx4k0q4+YxDBBn fp/jvoAb+nQwiBeTnBXIsmN27z2gfoipUUFs+cg3AYZxP3cSJFH3aQjH7ya6oJN/ ZyC5R4gW6n7RQ2wmqo2fLIKiFOyZb5aoLEYLf8DFKvFN1uVBYvY= -----END CERTIFICATE-----Generated at Thu Apr 24 06:50:02 2025 by rpki-client on console.sobornost.net