$ rpki-client -vvf repo-rpki.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.mft File: 3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.mft (raw, json) Hash identifier: r2XXidWs/BeDVALmypQQN6rzdPR8g+SXW89nZnndB/w= Subject key identifier: 15:8B:6E:9F:66:84:C4:6D:2D:00:D8:58:D5:4B:C3:2C:45:08:DA:55 Authority key identifier: 3E:CE:7D:2E:9C:2F:F3:D5:D3:0D:29:4D:74:92:C3:FE:F6:51:BA:AA Certificate issuer: /CN=3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA Certificate serial: 3BCF28E8F752761EB8FE163E710FFA095576D5C3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.mft Manifest number: 0314 Signing time: Wed 23 Apr 2025 09:01:52 +0000 Manifest this update: Wed 23 Apr 2025 08:56:52 +0000 Manifest next update: Sat 26 Apr 2025 18:14:52 +0000 Files and hashes: 1: 3130332e3137312e3138322e302f32342d3234203d3e20313432333735.roa (hash: 7VSc9Gcvnpfn7ZPPafV+FSx6VsyDCdcR7tm8J+oVFFo=) 2: 3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.crl (hash: dE9PVsv1icIAIem2YvStTgsXMfybT2Z/6vDEWIeKV3o=) 3: 3130332e3137312e3138322e302f32332d3233203d3e20313432333735.roa (hash: aihSJuIZjlYbfPjvBLdvafMIwZ5NASIBmOuqn4SEmM0=) 4: 3130332e3137312e3138332e302f32342d3234203d3e20313432333735.roa (hash: KwtUaoClH3kiNpvEIWalSEf5bxo2cymUbkAJRaf/ygM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.crl rsync://repo-rpki.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 09:26:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:cf:28:e8:f7:52:76:1e:b8:fe:16:3e:71:0f:fa:09:55:76:d5:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA Validity Not Before: Apr 23 08:56:52 2025 GMT Not After : Apr 26 18:14:52 2025 GMT Subject: CN=158B6E9F6684C46D2D00D858D54BC32C4508DA55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a6:c4:b3:83:96:63:7e:3e:d2:40:c3:70:c5: a2:2b:27:8f:0f:29:bb:9f:a0:64:de:18:a8:dc:f4: 11:db:ad:18:65:53:ae:0d:fb:d7:77:b2:a5:98:1a: 73:b2:4e:24:e8:ed:fb:8c:be:eb:17:37:56:30:79: f2:35:11:cf:f1:40:5f:e1:3c:8a:d1:02:37:70:06: 65:3a:8f:af:4a:8d:5c:d0:98:d4:8e:f4:6b:bc:37: 0f:ea:b9:d6:68:69:94:85:f5:1b:40:1b:78:9b:7a: 00:dd:8a:22:af:91:e9:62:2b:bb:4e:56:1d:7a:39: 20:ba:95:43:8f:f5:14:c2:ee:3d:46:8a:c3:4a:55: bb:af:4f:41:75:4c:98:f7:31:69:61:45:36:b9:68: 5c:50:a9:12:b4:fc:4a:29:30:f6:1b:20:4f:02:7b: 35:50:e5:ea:a1:65:a5:a3:c8:37:d4:7c:12:db:51: 67:da:92:ef:d6:39:29:7e:ea:ff:f1:47:a4:dd:a8: 25:ea:93:bc:ee:41:27:e5:cd:a6:b9:72:a2:7d:b6: c3:50:c1:b3:c1:1e:ee:4c:bd:81:df:a8:4a:51:96: ae:80:f6:39:9c:6b:d0:02:cf:e9:14:a5:f0:cd:84: be:c0:f9:41:76:c0:b7:ed:82:e1:fb:5c:e1:f7:59: 23:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:8B:6E:9F:66:84:C4:6D:2D:00:D8:58:D5:4B:C3:2C:45:08:DA:55 X509v3 Authority Key Identifier: keyid:3E:CE:7D:2E:9C:2F:F3:D5:D3:0D:29:4D:74:92:C3:FE:F6:51:BA:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:95:0f:a1:36:25:df:fa:a0:b3:fa:11:0e:17:04:99:52:3f: 15:4e:f8:dd:2c:cb:c2:a1:0d:6e:73:0a:12:f1:48:6b:88:fc: ca:c6:8e:77:9e:e0:d5:a2:46:8d:74:d7:ef:ed:05:dc:db:3b: 2a:e7:5e:ca:a3:b8:83:eb:1c:d8:fb:4d:fe:32:87:bb:bb:94: 4f:40:86:a1:d2:52:91:67:6a:23:1f:28:6c:74:3c:9b:3f:86: 8e:1c:e7:a2:5d:94:dc:e1:03:80:dd:41:08:24:35:3a:94:3b: 58:5c:7f:b0:26:a8:5b:71:b1:7f:5e:30:01:84:7d:a7:86:6c: f9:fd:31:20:5f:f9:bd:59:c4:29:8e:b6:fc:e4:cf:04:c0:c2: 03:62:20:a9:b5:12:c0:4d:b7:f7:36:08:a9:b1:58:15:55:5a: ff:58:ad:1b:01:ea:19:10:f7:9f:11:79:55:62:61:1c:f8:c2: 5a:30:23:39:8d:9e:b4:62:a5:98:09:29:5a:48:22:69:82:e5: 0f:39:02:70:75:c3:c4:22:3f:b3:05:60:dd:a8:1d:26:cd:aa: f7:1f:59:e6:d9:4f:5d:cb:20:bf:8c:18:29:7b:d5:58:ff:f4: 1b:c4:11:42:40:e6:a4:a1:02:63:c9:de:48:2c:ad:80:6a:14: 56:bb:b8:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO88o6PdSdh64/hY+cQ/6CVV21cMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VDRTdEMkU5QzJGRjNENUQzMEQyOTRENzQ5MkMzRkVG NjUxQkFBQTAeFw0yNTA0MjMwODU2NTJaFw0yNTA0MjYxODE0NTJaMDMxMTAvBgNV BAMTKDE1OEI2RTlGNjY4NEM0NkQyRDAwRDg1OEQ1NEJDMzJDNDUwOERBNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRpsSzg5Zjfj7SQMNwxaIrJ48P KbufoGTeGKjc9BHbrRhlU64N+9d3sqWYGnOyTiTo7fuMvusXN1YwefI1Ec/xQF/h PIrRAjdwBmU6j69KjVzQmNSO9Gu8Nw/qudZoaZSF9RtAG3ibegDdiiKvkeliK7tO Vh16OSC6lUOP9RTC7j1GisNKVbuvT0F1TJj3MWlhRTa5aFxQqRK0/EopMPYbIE8C ezVQ5eqhZaWjyDfUfBLbUWfaku/WOSl+6v/xR6TdqCXqk7zuQSflzaa5cqJ9tsNQ wbPBHu5MvYHfqEpRlq6A9jmca9ACz+kUpfDNhL7A+UF2wLftguH7XOH3WSNPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFYtun2aExG0tANhY1UvDLEUI2lUwHwYDVR0j BBgwFoAUPs59Lpwv89XTDSlNdJLD/vZRuqowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MzUwNWNiMy1iNTVlLTQwZTQtYWM3OS02MzY1NjA2ZjRlZjkvMC8zRUNFN0QyRTlD MkZGM0Q1RDMwRDI5NEQ3NDkyQzNGRUY2NTFCQUFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0VDRTdEMkU5QzJGRjNENUQzMEQyOTRENzQ5MkMzRkVGNjUx QkFBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTM1MDVjYjMtYjU1ZS00MGU0LWFj NzktNjM2NTYwNmY0ZWY5LzAvM0VDRTdEMkU5QzJGRjNENUQzMEQyOTRENzQ5MkMz RkVGNjUxQkFBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKKVD6E2Jd/6oLP6EQ4XBJlSPxVO+N0sy8Kh DW5zChLxSGuI/MrGjnee4NWiRo101+/tBdzbOyrnXsqjuIPrHNj7Tf4yh7u7lE9A hqHSUpFnaiMfKGx0PJs/ho4c56JdlNzhA4DdQQgkNTqUO1hcf7AmqFtxsX9eMAGE faeGbPn9MSBf+b1ZxCmOtvzkzwTAwgNiIKm1EsBNt/c2CKmxWBVVWv9YrRsB6hkQ 958ReVViYRz4wlowIzmNnrRipZgJKVpIImmC5Q85AnB1w8QiP7MFYN2oHSbNqvcf WebZT13LIL+MGCl71Vj/9BvEEUJA5qShAmPJ3kgsrYBqFFa7uPI= -----END CERTIFICATE-----Generated at Wed Apr 23 11:12:24 2025 by rpki-client on console.sobornost.net