$ rpki-client -vvf repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft File: 3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft (raw, json) Hash identifier: u6dASGmdBJO4KO4GDJnX3NEkyA9GRu6jdWbN5wsR9bs= Subject key identifier: FB:D1:5D:AB:EE:0D:8E:44:05:EC:1F:63:65:74:1C:48:AA:87:8E:00 Authority key identifier: 3C:79:0F:E4:AB:82:A2:C1:50:17:D2:65:71:4B:12:45:BF:0A:FB:0F Certificate issuer: /CN=3C790FE4AB82A2C15017D265714B1245BF0AFB0F Certificate serial: 01DE2A740FC9A1C553D799661DBF4B16792CDA6E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft Manifest number: BA Signing time: Thu 24 Apr 2025 09:21:57 +0000 Manifest this update: Thu 24 Apr 2025 09:16:57 +0000 Manifest next update: Sun 27 Apr 2025 15:18:57 +0000 Files and hashes: 1: 3230332e3135332e39362e302f32302d3234203d3e203234323037.roa (hash: EDTzr0RnERkDSs2/M4R/0RtE2R+ut3mngAzM50kbtVY=) 2: 3232322e3136352e3139322e302f31382d3234203d3e203234323037.roa (hash: Q31WVg0nt9Akn7sHQ0ovSP+rHovoJ3AXQpCRAfyJpn4=) 3: 3230332e3135332e3131322e302f32312d3234203d3e203234323037.roa (hash: Zks55AdYxfoprGZkiZN/TIj//KiubcvneSX7655/CJQ=) 4: 323430343a663630303a3a2f33322d3438203d3e203234323037.roa (hash: xDimJNI1Twl7hCA1S5QHDj3z6dVO53eSr1zwPr1dzLg=) 5: 3C790FE4AB82A2C15017D265714B1245BF0AFB0F.crl (hash: DSTPCmjnMtKN6perUbPZ/yCOGAA6gj2HaWhBQgXFKqc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.crl rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 10:42:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:de:2a:74:0f:c9:a1:c5:53:d7:99:66:1d:bf:4b:16:79:2c:da:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C790FE4AB82A2C15017D265714B1245BF0AFB0F Validity Not Before: Apr 24 09:16:57 2025 GMT Not After : Apr 27 15:18:57 2025 GMT Subject: CN=FBD15DABEE0D8E4405EC1F6365741C48AA878E00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:04:e7:4e:30:5d:22:86:01:a3:b1:a2:38:e9: 30:c2:42:90:e5:bb:67:c3:47:a5:56:24:9b:93:92: aa:29:c7:2b:7c:23:36:bf:73:f3:7d:9d:5f:25:cf: 4e:14:f5:57:e3:be:3f:db:ff:81:73:07:be:9c:69: 54:86:3f:6c:1c:18:c0:96:13:90:01:d5:1a:71:fe: 5e:51:5b:25:bc:28:d0:e1:5c:80:d1:ed:6f:6e:6c: 23:25:7a:b4:2b:26:63:08:e8:10:64:85:c9:4d:80: a9:30:0b:51:91:ee:66:e7:7b:96:66:36:6b:fa:e2: f3:c6:65:c3:c5:11:51:25:fb:a7:2c:fd:aa:b6:a0: 28:22:e3:70:ca:ce:10:e0:d7:47:c2:86:c7:40:15: 96:fd:ed:7c:b7:8a:45:42:e2:8e:1b:90:55:7f:24: 61:9d:3f:b4:21:56:9c:41:1a:20:ff:a6:3d:2e:5f: 07:92:c7:0f:2a:77:38:0e:39:aa:30:84:c9:97:5d: 76:79:43:2c:f4:13:17:c5:25:12:9d:e8:56:fd:e3: 6b:30:15:f3:17:09:00:1c:8e:a2:b5:77:6f:8a:b9: 90:e1:61:7f:de:49:37:e5:bb:44:d3:25:1d:04:a3: 3d:56:ee:fd:0f:ba:2e:c1:b6:35:3e:4d:5e:97:c8: 31:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:D1:5D:AB:EE:0D:8E:44:05:EC:1F:63:65:74:1C:48:AA:87:8E:00 X509v3 Authority Key Identifier: keyid:3C:79:0F:E4:AB:82:A2:C1:50:17:D2:65:71:4B:12:45:BF:0A:FB:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:f7:a6:a5:47:8b:73:86:28:8b:bd:6e:44:a1:a1:7d:8f:54: de:77:0e:0b:a7:42:45:cd:4d:e3:f7:8e:fa:69:33:bd:78:b4: 53:8a:9f:da:7a:35:79:7b:47:9b:fb:9f:ac:48:e4:33:9d:28: 07:51:e0:e8:47:6e:ae:68:6f:c3:35:9f:22:b5:fc:b4:52:0b: 00:a9:19:25:56:f4:9d:fe:60:ca:cf:76:a0:e3:98:85:a6:f1: 64:1b:7c:06:8c:7c:b2:87:d4:66:6d:b9:bb:52:cc:36:e5:4c: d0:8b:7c:b3:b2:7b:ae:79:b6:8a:e5:d1:91:7e:f1:cf:1b:be: 0d:aa:1f:9f:ec:e9:6a:cd:1f:38:c2:27:da:bb:09:0a:32:eb: c0:1e:a2:8e:69:4f:63:3a:b6:b5:62:6b:6c:b5:c0:69:88:8c: 7c:b5:7a:34:1b:f4:88:8b:0b:89:0c:da:d0:38:ff:86:b0:f7: cc:2a:e7:d8:03:a3:5f:c9:3b:71:dc:71:4e:08:84:69:87:7a: 0d:36:ee:aa:b9:7e:5e:3f:be:42:9b:e3:7a:16:d6:3e:44:16: 22:17:b5:50:f1:32:de:9e:43:4c:3d:50:d9:33:29:4e:2c:49: bd:c3:07:21:3c:dd:d0:a1:8c:19:8c:50:d5:9e:7c:01:34:b9: a9:a4:eb:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAd4qdA/JocVT15lmHb9LFnks2m4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M3OTBGRTRBQjgyQTJDMTUwMTdEMjY1NzE0QjEyNDVC RjBBRkIwRjAeFw0yNTA0MjQwOTE2NTdaFw0yNTA0MjcxNTE4NTdaMDMxMTAvBgNV BAMTKEZCRDE1REFCRUUwRDhFNDQwNUVDMUY2MzY1NzQxQzQ4QUE4NzhFMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPBOdOMF0ihgGjsaI46TDCQpDl u2fDR6VWJJuTkqopxyt8Iza/c/N9nV8lz04U9Vfjvj/b/4FzB76caVSGP2wcGMCW E5AB1Rpx/l5RWyW8KNDhXIDR7W9ubCMlerQrJmMI6BBkhclNgKkwC1GR7mbne5Zm Nmv64vPGZcPFEVEl+6cs/aq2oCgi43DKzhDg10fChsdAFZb97Xy3ikVC4o4bkFV/ JGGdP7QhVpxBGiD/pj0uXweSxw8qdzgOOaowhMmXXXZ5Qyz0ExfFJRKd6Fb942sw FfMXCQAcjqK1d2+KuZDhYX/eSTflu0TTJR0Eoz1W7v0Pui7BtjU+TV6XyDHdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+9Fdq+4NjkQF7B9jZXQcSKqHjgAwHwYDVR0j BBgwFoAUPHkP5KuCosFQF9JlcUsSRb8K+w8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YzdlODA4MS02M2FmLTQ5ZTctOTY0Ni03NmMyNWE1ZTk3Y2EvMC8zQzc5MEZFNEFC ODJBMkMxNTAxN0QyNjU3MTRCMTI0NUJGMEFGQjBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0M3OTBGRTRBQjgyQTJDMTUwMTdEMjY1NzE0QjEyNDVCRjBB RkIwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmM3ZTgwODEtNjNhZi00OWU3LTk2 NDYtNzZjMjVhNWU5N2NhLzAvM0M3OTBGRTRBQjgyQTJDMTUwMTdEMjY1NzE0QjEy NDVCRjBBRkIwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ73pqVHi3OGKIu9bkShoX2PVN53DgunQkXN TeP3jvppM714tFOKn9p6NXl7R5v7n6xI5DOdKAdR4OhHbq5ob8M1nyK1/LRSCwCp GSVW9J3+YMrPdqDjmIWm8WQbfAaMfLKH1GZtubtSzDblTNCLfLOye655torl0ZF+ 8c8bvg2qH5/s6WrNHzjCJ9q7CQoy68Aeoo5pT2M6trVia2y1wGmIjHy1ejQb9IiL C4kM2tA4/4aw98wq59gDo1/JO3HccU4IhGmHeg027qq5fl4/vkKb43oW1j5EFiIX tVDxMt6eQ0w9UNkzKU4sSb3DByE83dChjBmMUNWefAE0uamk66I= -----END CERTIFICATE-----Generated at Thu Apr 24 11:25:24 2025 by rpki-client on console.sobornost.net