$ rpki-client -vvf repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.mft File: 3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.mft (raw, json) Hash identifier: G9i3nzZciNA5ZK+vVvho8z1hSDfVi3TszEM8b3M8NLc= Subject key identifier: 42:D0:D8:34:48:BD:70:F9:54:D1:3B:3A:45:AE:53:08:DF:FE:D2:DD Authority key identifier: 3B:76:4E:CE:3D:B3:0D:E5:7C:60:36:DC:CB:AE:95:8B:ED:34:9A:E0 Certificate issuer: /CN=3B764ECE3DB30DE57C6036DCCBAE958BED349AE0 Certificate serial: 7236C985B24EA20033962ED4AD4C7882E2B2E805 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.mft Manifest number: 0183 Signing time: Wed 23 Apr 2025 11:41:19 +0000 Manifest this update: Wed 23 Apr 2025 11:36:19 +0000 Manifest next update: Sat 26 Apr 2025 20:46:19 +0000 Files and hashes: 1: 3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.crl (hash: lGmA6hlnCVWUdSCetpDkm0lFsK6DOob8RIFp8gySFU0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.crl rsync://repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 12:29:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:36:c9:85:b2:4e:a2:00:33:96:2e:d4:ad:4c:78:82:e2:b2:e8:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B764ECE3DB30DE57C6036DCCBAE958BED349AE0 Validity Not Before: Apr 23 11:36:19 2025 GMT Not After : Apr 26 20:46:19 2025 GMT Subject: CN=42D0D83448BD70F954D13B3A45AE5308DFFED2DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b4:0e:c8:7a:e8:fd:0f:b3:f6:7b:27:15:78: 0a:20:f5:16:95:26:1b:f6:12:37:f7:b8:04:74:4e: 23:0b:f0:a9:0f:24:64:0e:6e:96:82:3d:4c:92:33: 7f:20:cf:9c:d1:e1:09:00:eb:52:91:95:69:e9:ed: b0:de:bc:03:43:97:f7:0f:cf:12:01:c0:4d:b4:f8: 70:55:43:a3:e0:36:d3:f4:eb:d9:36:3c:6c:d7:55: bb:71:1d:95:89:08:c1:cd:da:b5:76:91:2a:e3:19: d6:22:ca:05:b4:1e:19:c6:72:ea:0b:84:d2:c1:15: 54:28:5f:1a:10:37:d8:1b:b7:32:d0:18:ce:8c:e6: 79:12:f2:2e:c7:da:d0:4a:63:b7:10:06:1b:28:f4: 57:72:29:53:15:a5:d0:01:b7:e5:17:1f:54:d0:94: f2:46:f0:b3:41:f7:98:09:02:47:95:ad:cb:e6:ed: b0:c0:cb:0f:47:65:bd:1e:8b:5d:1a:c6:4b:1f:85: 6e:bb:4c:32:dd:f8:72:04:e2:6c:e9:c9:35:2a:33: fb:39:47:56:55:65:78:80:bd:d2:6f:64:4a:f8:a5: e0:bc:17:d3:f9:c0:64:05:80:67:e0:8d:2b:5a:c8: 4c:07:c3:ce:bc:64:d1:e5:3c:8f:83:ef:c7:dc:6d: fe:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:D0:D8:34:48:BD:70:F9:54:D1:3B:3A:45:AE:53:08:DF:FE:D2:DD X509v3 Authority Key Identifier: keyid:3B:76:4E:CE:3D:B3:0D:E5:7C:60:36:DC:CB:AE:95:8B:ED:34:9A:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:3e:51:27:4d:44:ad:75:f4:6c:d6:3f:55:c3:b0:18:75:ab: 4e:88:4c:bf:60:4c:86:0d:cf:bb:4a:4c:22:bb:5f:6d:48:ea: c0:92:ca:5c:b2:ef:fc:28:f9:3e:53:58:b6:97:0f:d2:d4:47: 0d:30:76:d4:08:f8:a5:d5:d6:ea:32:29:fb:71:55:cb:50:de: 43:67:43:f5:10:7b:39:8d:fa:88:64:bf:1d:27:54:23:00:61: 88:22:9f:71:ac:f4:a0:57:f1:f9:9c:8e:31:e7:d5:ce:47:08: 19:81:3c:82:c2:8b:21:f7:f8:44:d2:7e:ec:d1:13:a7:c2:1e: cb:44:32:8a:44:99:63:a6:8f:2c:4c:02:6c:fb:5b:62:4b:81: 60:d7:72:01:75:ce:b4:f6:bb:50:d6:fb:fd:70:63:5c:fe:84: 73:8f:f6:d6:e5:ff:5c:28:61:89:14:b3:f0:c7:da:64:ab:23: 45:82:4c:1d:9c:4b:18:06:2a:d8:c2:16:f8:cb:1c:58:5e:e7: 07:91:8a:3d:3e:7a:f1:3d:3d:69:03:89:5e:dc:ed:b6:c5:6c: 5e:7f:4f:10:81:11:34:99:0b:22:6c:27:42:99:68:a3:18:99: 3c:fe:ae:16:0d:9a:c7:d5:95:0c:01:44:f1:5e:7f:ee:b5:f9: 12:80:e3:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcjbJhbJOogAzli7UrUx4guKy6AUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I3NjRFQ0UzREIzMERFNTdDNjAzNkRDQ0JBRTk1OEJF RDM0OUFFMDAeFw0yNTA0MjMxMTM2MTlaFw0yNTA0MjYyMDQ2MTlaMDMxMTAvBgNV BAMTKDQyRDBEODM0NDhCRDcwRjk1NEQxM0IzQTQ1QUU1MzA4REZGRUQyREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmtA7Ieuj9D7P2eycVeAog9RaV Jhv2Ejf3uAR0TiML8KkPJGQObpaCPUySM38gz5zR4QkA61KRlWnp7bDevANDl/cP zxIBwE20+HBVQ6PgNtP069k2PGzXVbtxHZWJCMHN2rV2kSrjGdYiygW0HhnGcuoL hNLBFVQoXxoQN9gbtzLQGM6M5nkS8i7H2tBKY7cQBhso9FdyKVMVpdABt+UXH1TQ lPJG8LNB95gJAkeVrcvm7bDAyw9HZb0ei10axksfhW67TDLd+HIE4mzpyTUqM/s5 R1ZVZXiAvdJvZEr4peC8F9P5wGQFgGfgjStayEwHw868ZNHlPI+D78fcbf45AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQtDYNEi9cPlU0Ts6Ra5TCN/+0t0wHwYDVR0j BBgwFoAUO3ZOzj2zDeV8YDbcy66Vi+00muAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDAyOWMyMi0yMjE1LTQ4YzEtOWFiNi1iYjEzYzAxYjQzYjEvMC8zQjc2NEVDRTNE QjMwREU1N0M2MDM2RENDQkFFOTU4QkVEMzQ5QUUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0I3NjRFQ0UzREIzMERFNTdDNjAzNkRDQ0JBRTk1OEJFRDM0 OUFFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQwMjljMjItMjIxNS00OGMxLTlh YjYtYmIxM2MwMWI0M2IxLzAvM0I3NjRFQ0UzREIzMERFNTdDNjAzNkRDQ0JBRTk1 OEJFRDM0OUFFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAA+USdNRK119GzWP1XDsBh1q06ITL9gTIYN z7tKTCK7X21I6sCSylyy7/wo+T5TWLaXD9LURw0wdtQI+KXV1uoyKftxVctQ3kNn Q/UQezmN+ohkvx0nVCMAYYgin3Gs9KBX8fmcjjHn1c5HCBmBPILCiyH3+ETSfuzR E6fCHstEMopEmWOmjyxMAmz7W2JLgWDXcgF1zrT2u1DW+/1wY1z+hHOP9tbl/1wo YYkUs/DH2mSrI0WCTB2cSxgGKtjCFvjLHFhe5weRij0+evE9PWkDiV7c7bbFbF5/ TxCBETSZCyJsJ0KZaKMYmTz+rhYNmsfVlQwBRPFef+61+RKA48U= -----END CERTIFICATE-----Generated at Wed Apr 23 13:25:44 2025 by rpki-client on console.sobornost.net