$ rpki-client -vvf repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.mft File: 3008AF948C4742A525201F3FDA7EFB1800D52D64.mft (raw, json) Hash identifier: xKMpOEIUWo0TbvAGst0pNVhQtNthcILdGaDwxed4/hs= Subject key identifier: 4A:29:70:0B:B6:0A:7C:02:79:0A:67:38:4D:03:F0:80:3E:03:EA:8D Authority key identifier: 30:08:AF:94:8C:47:42:A5:25:20:1F:3F:DA:7E:FB:18:00:D5:2D:64 Certificate issuer: /CN=3008AF948C4742A525201F3FDA7EFB1800D52D64 Certificate serial: 5028A4CF9E4761263092347F95F88F57C3744E24 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3008AF948C4742A525201F3FDA7EFB1800D52D64.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.mft Manifest number: C6 Signing time: Thu 24 Apr 2025 14:11:58 +0000 Manifest this update: Thu 24 Apr 2025 14:06:58 +0000 Manifest next update: Mon 28 Apr 2025 00:00:58 +0000 Files and hashes: 1: 3135372e31352e34362e302f32332d3234203d3e20313532333936.roa (hash: G0a1IDIDp/6OW+B4SPVbcSdJGPsXh5ci397pwO85gSY=) 2: 3008AF948C4742A525201F3FDA7EFB1800D52D64.crl (hash: FdtNaIeyRz4Hdxy+yMcOaL44ju/Fu4MDIDVeHCYA72M=) 3: 3135372e31352e34372e302f32342d3234203d3e20313532333936.roa (hash: 2sgMNPvdPKPmSXukXACjrwvtdQ3QHDjRcB3RK3DeklA=) 4: 3135372e31352e34362e302f32342d3234203d3e20313532333936.roa (hash: mMVF2hYAKg0sTXxaBuy+2bvelwvkw1QteJi5RAQF2oo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.crl rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3008AF948C4742A525201F3FDA7EFB1800D52D64.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 10:32:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:28:a4:cf:9e:47:61:26:30:92:34:7f:95:f8:8f:57:c3:74:4e:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3008AF948C4742A525201F3FDA7EFB1800D52D64 Validity Not Before: Apr 24 14:06:58 2025 GMT Not After : Apr 28 00:00:58 2025 GMT Subject: CN=4A29700BB60A7C02790A67384D03F0803E03EA8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:8d:22:52:a3:f1:5a:a4:dc:7f:1a:bc:20:ca: cd:60:86:58:38:08:1a:bd:47:c9:1a:a6:17:d1:39: 77:04:aa:db:70:cb:f3:1e:e0:17:47:36:66:99:49: aa:a9:ef:73:34:22:b6:5b:27:cc:ad:51:74:98:35: 5f:b6:2a:38:a9:4e:1f:81:3b:e3:38:8d:f7:6f:29: 51:fa:75:6a:ac:72:76:be:cd:07:d9:23:ea:ea:26: 62:5c:83:ed:26:a8:40:3f:d0:8e:c6:72:f9:a2:c6: b2:b2:43:cc:2f:08:4b:47:52:d3:ec:d7:28:b2:44: da:6d:52:30:fa:94:63:0d:a0:83:35:2a:ae:52:97: 1c:63:22:c7:27:91:fa:fd:5e:c7:0a:40:2b:73:d8: 4b:64:a7:a8:df:3e:da:ab:57:98:d3:c3:ed:35:c2: cc:a0:53:e8:71:f8:38:6e:4d:c5:b8:4d:c4:81:85: 6f:52:d0:c7:07:6f:24:2a:da:66:e5:ec:de:69:10: 0c:e9:70:f0:cc:2f:63:e0:4c:97:bf:bc:dc:da:d8: b5:9c:01:b0:27:f6:1d:7c:f9:c6:ca:2b:4d:8c:05: 4a:2f:41:3e:a5:51:fd:7b:96:ae:87:0e:f9:46:40: 8e:61:2a:40:0a:ce:72:d6:aa:52:6a:37:be:50:4d: 72:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:29:70:0B:B6:0A:7C:02:79:0A:67:38:4D:03:F0:80:3E:03:EA:8D X509v3 Authority Key Identifier: keyid:30:08:AF:94:8C:47:42:A5:25:20:1F:3F:DA:7E:FB:18:00:D5:2D:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3008AF948C4742A525201F3FDA7EFB1800D52D64.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:56:10:ac:e9:7e:5a:86:a2:f8:a8:56:0b:b2:16:05:5f:12: 47:68:2b:ab:a0:fb:ad:3b:fd:42:a8:56:ee:c0:cb:1c:76:2c: f2:e2:8b:73:83:e1:c8:71:79:91:61:bb:d5:a6:ab:60:b2:05: a5:b6:cb:68:b7:87:7b:b5:c5:08:51:70:55:57:6b:d5:34:f4: 5c:ad:ce:d3:6e:93:17:99:56:03:d1:c1:ca:ea:80:13:c2:f4: ee:f3:6b:54:16:14:92:de:6c:88:5f:fb:4a:b2:e7:4e:b6:2d: b6:11:9b:14:50:33:9d:59:a4:40:67:a6:f9:f1:1f:bc:12:46: 71:a3:0a:37:7a:20:ca:62:da:08:5d:dc:57:a1:2f:49:28:38: 58:91:a6:a3:f9:7c:a0:85:2d:a2:54:4a:48:b5:a0:db:b9:78: bd:2d:d9:82:33:64:cd:12:0e:c0:e1:0c:c7:b7:02:55:15:61: 91:8f:01:4b:d4:c6:38:03:33:d1:d8:e2:9f:29:c3:5e:79:4f: 6c:31:44:2b:47:6e:9a:40:9a:f3:b6:41:4e:80:29:ef:dd:7a: a8:27:a2:84:90:c4:1b:ba:77:98:1c:a4:79:4c:20:6d:06:50: 55:04:67:28:b6:7e:e1:d2:e6:ce:9e:95:6a:7b:b8:f8:8e:17: 8e:3e:83:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUCikz55HYSYwkjR/lfiPV8N0TiQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzAwOEFGOTQ4QzQ3NDJBNTI1MjAxRjNGREE3RUZCMTgw MEQ1MkQ2NDAeFw0yNTA0MjQxNDA2NThaFw0yNTA0MjgwMDAwNThaMDMxMTAvBgNV BAMTKDRBMjk3MDBCQjYwQTdDMDI3OTBBNjczODREMDNGMDgwM0UwM0VBOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYjSJSo/FapNx/Grwgys1ghlg4 CBq9R8kaphfROXcEqttwy/Me4BdHNmaZSaqp73M0IrZbJ8ytUXSYNV+2KjipTh+B O+M4jfdvKVH6dWqscna+zQfZI+rqJmJcg+0mqEA/0I7GcvmixrKyQ8wvCEtHUtPs 1yiyRNptUjD6lGMNoIM1Kq5SlxxjIscnkfr9XscKQCtz2Etkp6jfPtqrV5jTw+01 wsygU+hx+DhuTcW4TcSBhW9S0McHbyQq2mbl7N5pEAzpcPDML2PgTJe/vNza2LWc AbAn9h18+cbKK02MBUovQT6lUf17lq6HDvlGQI5hKkAKznLWqlJqN75QTXIjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSilwC7YKfAJ5Cmc4TQPwgD4D6o0wHwYDVR0j BBgwFoAUMAivlIxHQqUlIB8/2n77GADVLWQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YzM0ZWVkOS0xODdlLTRmNDYtYTViYi0wZWE4ZjY2OWFlOTAvMC8zMDA4QUY5NDhD NDc0MkE1MjUyMDFGM0ZEQTdFRkIxODAwRDUyRDY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzAwOEFGOTQ4QzQ3NDJBNTI1MjAxRjNGREE3RUZCMTgwMEQ1 MkQ2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGMzNGVlZDktMTg3ZS00ZjQ2LWE1 YmItMGVhOGY2NjlhZTkwLzAvMzAwOEFGOTQ4QzQ3NDJBNTI1MjAxRjNGREE3RUZC MTgwMEQ1MkQ2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGtWEKzpflqGovioVguyFgVfEkdoK6ug+607 /UKoVu7Ayxx2LPLii3OD4chxeZFhu9Wmq2CyBaW2y2i3h3u1xQhRcFVXa9U09Fyt ztNukxeZVgPRwcrqgBPC9O7za1QWFJLebIhf+0qy5062LbYRmxRQM51ZpEBnpvnx H7wSRnGjCjd6IMpi2ghd3FehL0koOFiRpqP5fKCFLaJUSki1oNu5eL0t2YIzZM0S DsDhDMe3AlUVYZGPAUvUxjgDM9HY4p8pw155T2wxRCtHbppAmvO2QU6AKe/deqgn ooSQxBu6d5gcpHlMIG0GUFUEZyi2fuHS5s6elWp7uPiOF44+g2c= -----END CERTIFICATE-----Generated at Thu Apr 24 15:50:16 2025 by rpki-client on console.sobornost.net