$ rpki-client -vvf repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.mft File: 3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.mft (raw, json) Hash identifier: kfwMKuPGmrBRjC9RhfZ10RPYMou3yvhQCo0yjyxMkLU= Subject key identifier: 2C:03:DC:10:B5:85:E2:DC:61:7B:37:DD:EF:F6:CE:91:6C:DF:78:D4 Authority key identifier: 3E:21:73:CC:E6:7F:75:D2:9F:1C:AA:A7:39:E6:CC:67:27:D6:E0:88 Certificate issuer: /CN=3E2173CCE67F75D29F1CAAA739E6CC6727D6E088 Certificate serial: 70B0B1A709F5948E3D08E2B45A8E1CAA544C5F97 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.mft Manifest number: 01BB Signing time: Wed 23 Apr 2025 01:30:01 +0000 Manifest this update: Wed 23 Apr 2025 01:25:01 +0000 Manifest next update: Sat 26 Apr 2025 10:31:01 +0000 Files and hashes: 1: 3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.crl (hash: fcN7zJTQ6DCwYO/3px2Z1aanjKNWaqee+fxtC35ZZLY=) 2: 3130332e39382e3131372e302f32342d3234203d3e20313336383230.roa (hash: gC/dBQ2N9PvKMvFuI06G3U2I+dfO9VxJBQri33zTdRo=) 3: 3130332e39382e3131392e302f32342d3234203d3e20313336383230.roa (hash: zz0q4evVyiGmnkeJgjKZ6+3+IQRQHcK60NcY4NiLuVA=) 4: 3130332e39382e3131362e302f32322d3232203d3e20313336383230.roa (hash: zY6MeVih11oEA5Y6wZpVQeAXzh1zZ/fzkIYHt+si4VA=) 5: 3130332e39382e3131382e302f32342d3234203d3e20313336383230.roa (hash: uq7VBPdBUBt1kqmnMiL45Mq0szBy3gIv+qxo2j9zwpg=) 6: 3130332e39382e3131362e302f32342d3234203d3e20313336383230.roa (hash: pAEwhRYxV+IdN3IG0AqgmlSpqpDySaxKtO1akdQcPJk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.crl rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 10:31:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:b0:b1:a7:09:f5:94:8e:3d:08:e2:b4:5a:8e:1c:aa:54:4c:5f:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E2173CCE67F75D29F1CAAA739E6CC6727D6E088 Validity Not Before: Apr 23 01:25:01 2025 GMT Not After : Apr 26 10:31:01 2025 GMT Subject: CN=2C03DC10B585E2DC617B37DDEFF6CE916CDF78D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f3:c4:80:fb:6b:82:76:c8:26:42:2c:11:0c: b1:49:a8:a4:19:91:33:c8:41:19:2b:b4:40:ec:da: 5d:e0:d9:2e:16:85:94:e3:6b:25:3c:f8:bd:43:59: 2d:f3:54:bd:ae:2f:2f:8c:89:ca:3e:f2:1b:99:d3: b7:c9:09:ad:54:6a:a2:05:e2:3b:64:09:22:ca:af: fc:03:c2:c9:23:17:5b:f3:7b:0d:91:99:2a:07:6b: 69:15:d3:b6:e7:ae:0a:d7:32:5a:c3:b0:e5:2a:64: ed:aa:72:b0:74:fd:38:9d:41:d0:c1:08:4e:d5:68: b7:0c:3c:f5:16:fd:bf:af:59:af:9f:ba:20:9e:c6: a6:68:c8:e5:e7:38:fe:5c:6c:6b:06:3b:05:69:6e: 1a:22:2b:4a:9e:c5:46:74:21:4a:0b:3d:2b:8a:32: 93:0f:50:0d:c5:29:1f:97:35:fa:8a:77:bb:b7:64: a6:fc:d7:15:d5:10:41:be:a4:3d:29:2f:e9:6d:3f: 99:b5:5d:6d:4e:48:96:4d:23:4b:24:e9:1e:09:84: d3:71:96:16:18:a3:62:b4:db:16:71:9c:01:a2:e6: 2a:fd:43:24:18:a5:e3:be:e4:d0:c5:78:9b:97:50: 2d:09:0f:ce:2a:f9:ac:65:0c:75:40:18:aa:c4:16: 79:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:03:DC:10:B5:85:E2:DC:61:7B:37:DD:EF:F6:CE:91:6C:DF:78:D4 X509v3 Authority Key Identifier: keyid:3E:21:73:CC:E6:7F:75:D2:9F:1C:AA:A7:39:E6:CC:67:27:D6:E0:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:46:d2:d6:c4:27:5f:5b:40:4d:c3:1b:06:d3:23:d9:9f:64: 56:62:34:04:12:0f:26:e6:fd:a1:f6:6b:7e:68:9c:24:6f:ab: d0:e6:9c:a7:76:8d:4c:9e:5d:56:97:3a:bb:39:74:ea:00:12: 96:71:e1:e8:06:c1:3b:23:09:f9:b2:73:69:01:75:b5:ae:2b: 8e:f3:a8:78:2d:0e:bc:19:52:7e:ff:57:58:b4:c3:54:50:5c: 52:61:48:cd:76:60:bb:41:54:b2:dc:be:7d:e1:67:c7:48:b0: 83:e5:f7:0c:2e:de:e8:85:5b:5d:49:4a:3d:fc:a2:41:65:50: b9:e1:45:54:3a:25:8a:7c:0b:88:78:7e:6b:b4:e0:47:23:68: d7:e3:68:bb:a9:d8:12:76:1d:16:e7:94:2d:06:f5:0e:1f:65: 6d:03:b4:6e:c9:5e:30:74:5c:3e:44:02:4b:63:df:f5:fe:97: 28:bb:9c:4b:be:4e:e9:b7:d1:fe:b0:4b:d6:a4:72:ca:58:b6: f1:59:ae:4e:f6:da:8c:20:34:ad:3b:9a:5c:c3:31:f8:d4:14: ba:b1:61:5a:32:c2:9e:29:0b:e8:88:f6:08:e1:b7:0d:78:04: 9c:09:e9:af:d3:69:c1:27:54:66:0c:83:b6:62:53:db:11:44: 3d:3d:43:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcLCxpwn1lI49COK0Wo4cqlRMX5cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0UyMTczQ0NFNjdGNzVEMjlGMUNBQUE3MzlFNkNDNjcy N0Q2RTA4ODAeFw0yNTA0MjMwMTI1MDFaFw0yNTA0MjYxMDMxMDFaMDMxMTAvBgNV BAMTKDJDMDNEQzEwQjU4NUUyREM2MTdCMzdEREVGRjZDRTkxNkNERjc4RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC088SA+2uCdsgmQiwRDLFJqKQZ kTPIQRkrtEDs2l3g2S4WhZTjayU8+L1DWS3zVL2uLy+Mico+8huZ07fJCa1UaqIF 4jtkCSLKr/wDwskjF1vzew2RmSoHa2kV07bnrgrXMlrDsOUqZO2qcrB0/TidQdDB CE7VaLcMPPUW/b+vWa+fuiCexqZoyOXnOP5cbGsGOwVpbhoiK0qexUZ0IUoLPSuK MpMPUA3FKR+XNfqKd7u3ZKb81xXVEEG+pD0pL+ltP5m1XW1OSJZNI0sk6R4JhNNx lhYYo2K02xZxnAGi5ir9QyQYpeO+5NDFeJuXUC0JD84q+axlDHVAGKrEFnlNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULAPcELWF4txhezfd7/bOkWzfeNQwHwYDVR0j BBgwFoAUPiFzzOZ/ddKfHKqnOebMZyfW4IgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Y2Q1Mzk0OC1kZGYzLTQ0OWEtYmYyYi1jZjNmN2FlMTc2ZDMvMC8zRTIxNzNDQ0U2 N0Y3NUQyOUYxQ0FBQTczOUU2Q0M2NzI3RDZFMDg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0UyMTczQ0NFNjdGNzVEMjlGMUNBQUE3MzlFNkNDNjcyN0Q2 RTA4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2NkNTM5NDgtZGRmMy00NDlhLWJm MmItY2YzZjdhZTE3NmQzLzAvM0UyMTczQ0NFNjdGNzVEMjlGMUNBQUE3MzlFNkND NjcyN0Q2RTA4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEpG0tbEJ19bQE3DGwbTI9mfZFZiNAQSDybm /aH2a35onCRvq9DmnKd2jUyeXVaXOrs5dOoAEpZx4egGwTsjCfmyc2kBdbWuK47z qHgtDrwZUn7/V1i0w1RQXFJhSM12YLtBVLLcvn3hZ8dIsIPl9wwu3uiFW11JSj38 okFlULnhRVQ6JYp8C4h4fmu04EcjaNfjaLup2BJ2HRbnlC0G9Q4fZW0DtG7JXjB0 XD5EAktj3/X+lyi7nEu+Tum30f6wS9akcspYtvFZrk722owgNK07mlzDMfjUFLqx YVoywp4pC+iI9gjhtw14BJwJ6a/TacEnVGYMg7ZiU9sRRD09Q/E= -----END CERTIFICATE-----Generated at Wed Apr 23 06:32:02 2025 by rpki-client on console.sobornost.net