$ rpki-client -vvf repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.mft File: AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.mft (raw, json) Hash identifier: 3tQgx1eM83YldAPDhv+7b+B5AE76EaB8bu01wPsdZ3E= Subject key identifier: 7C:75:77:EE:22:06:DB:A9:70:AF:A3:D9:0C:77:1A:48:A4:23:22:87 Authority key identifier: AF:5A:2A:D0:C9:E5:CB:1D:9E:F8:5E:6F:8F:44:03:10:F1:00:CE:38 Certificate issuer: /CN=AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38 Certificate serial: 16DEC082C4F297FAEF4596BF4CC0B3D2133654BE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.cer Subject info access: rsync://repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.mft Manifest number: 0345 Signing time: Fri 25 Apr 2025 02:51:53 +0000 Manifest this update: Fri 25 Apr 2025 02:46:53 +0000 Manifest next update: Mon 28 Apr 2025 05:56:53 +0000 Files and hashes: 1: AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.crl (hash: +gp8pJuDM84LSEJ3UJ+429KjHZwJEobzHa/DAcF2UBE=) 2: 3130332e3136392e342e302f32332d3234203d3e203137393935.roa (hash: e6zTKV5eeeBjTOLPA4Uct8apjvBjBaHZhQqPX177Lcs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.crl rsync://repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:de:c0:82:c4:f2:97:fa:ef:45:96:bf:4c:c0:b3:d2:13:36:54:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38 Validity Not Before: Apr 25 02:46:53 2025 GMT Not After : Apr 28 05:56:53 2025 GMT Subject: CN=7C7577EE2206DBA970AFA3D90C771A48A4232287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:de:ee:84:de:39:bc:c3:87:6a:cd:9a:c6:3e: 6c:ef:55:53:a6:19:06:a1:05:fe:2f:1c:8c:4e:8d: 0c:ec:71:ec:e1:5e:03:55:e9:2a:53:f2:dd:76:f5: c7:03:76:36:c6:d9:4f:91:74:dd:aa:db:4c:3d:f6: 2f:02:17:61:08:d2:0c:f1:15:de:80:81:7d:8a:af: 2b:a0:cd:20:a9:28:f8:0f:78:16:95:37:5e:00:96: 02:be:98:9b:1d:45:dd:2d:05:eb:70:78:04:e9:4a: 85:dd:ac:62:17:d6:74:8d:06:4a:33:80:e3:b1:2c: fc:e7:c9:3b:8e:8d:f4:15:d9:0f:04:aa:d4:7e:9c: 92:f0:2a:99:b7:40:11:bc:44:fc:56:b2:e7:a0:28: dd:d5:46:a4:48:9f:38:da:8d:f0:5f:b5:24:a2:15: b9:30:bd:b1:db:52:36:4c:d7:0e:2e:cb:5c:86:42: f9:92:bb:50:31:05:85:57:d7:77:4c:41:63:cb:68: 7f:4b:42:02:62:4c:cd:16:fa:67:b7:83:ad:85:00: c4:b6:47:d8:bd:d6:21:1d:81:6e:8b:44:d0:52:c2: df:98:3b:5b:f4:f8:f2:d4:94:cc:0a:f1:c5:0c:3e: 55:a4:15:7b:91:4c:dd:16:34:92:af:23:51:3b:e7: e0:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:75:77:EE:22:06:DB:A9:70:AF:A3:D9:0C:77:1A:48:A4:23:22:87 X509v3 Authority Key Identifier: keyid:AF:5A:2A:D0:C9:E5:CB:1D:9E:F8:5E:6F:8F:44:03:10:F1:00:CE:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:8c:75:da:fe:8a:e4:f6:b2:31:a8:64:1b:92:e3:8a:3a:9a: b3:80:06:cc:8e:c6:92:93:cd:63:33:6f:c2:df:3c:6b:59:59: c7:9c:c4:3d:0f:ab:53:f4:51:42:c6:52:26:a6:61:67:f1:f8: 68:82:15:61:ae:e4:5d:a7:94:f1:89:3d:93:d6:a6:2d:a9:c3: 06:e1:c3:93:20:b6:4d:85:13:66:27:c1:07:18:e2:67:d3:35: 19:1c:a7:49:65:e4:25:54:b0:82:c0:c9:d7:90:30:06:4c:8c: c7:d6:1d:67:0c:f6:17:b9:9b:4f:e7:cd:51:15:0f:a4:84:e2: c6:74:ee:47:d2:61:57:35:49:f2:6c:e2:4a:76:70:9d:26:eb: 23:03:9e:fe:74:98:f7:a7:86:9c:dc:0f:99:23:b3:82:30:bd: 7d:e2:0b:a3:76:24:64:5f:2e:ff:49:14:04:b1:f2:49:28:8f: b1:fd:8a:0d:99:1e:56:d4:02:d2:ae:ad:33:fc:0a:50:26:89: fb:49:5c:00:f1:35:69:b0:5e:d3:dd:25:07:4d:dd:6a:57:b5: cf:62:ed:b8:e7:66:1a:3c:b8:4e:96:28:0b:cb:81:fe:21:6c: 9d:36:fa:45:4c:99:7c:1e:f5:52:76:d1:0a:60:9b:33:4b:53: 48:f0:e1:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFt7AgsTyl/rvRZa/TMCz0hM2VL4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY1QTJBRDBDOUU1Q0IxRDlFRjg1RTZGOEY0NDAzMTBG MTAwQ0UzODAeFw0yNTA0MjUwMjQ2NTNaFw0yNTA0MjgwNTU2NTNaMDMxMTAvBgNV BAMTKDdDNzU3N0VFMjIwNkRCQTk3MEFGQTNEOTBDNzcxQTQ4QTQyMzIyODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG3u6E3jm8w4dqzZrGPmzvVVOm GQahBf4vHIxOjQzscezhXgNV6SpT8t129ccDdjbG2U+RdN2q20w99i8CF2EI0gzx Fd6AgX2KryugzSCpKPgPeBaVN14AlgK+mJsdRd0tBetweATpSoXdrGIX1nSNBkoz gOOxLPznyTuOjfQV2Q8EqtR+nJLwKpm3QBG8RPxWsuegKN3VRqRInzjajfBftSSi FbkwvbHbUjZM1w4uy1yGQvmSu1AxBYVX13dMQWPLaH9LQgJiTM0W+me3g62FAMS2 R9i91iEdgW6LRNBSwt+YO1v0+PLUlMwK8cUMPlWkFXuRTN0WNJKvI1E75+ANAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfHV37iIG26lwr6PZDHcaSKQjIocwHwYDVR0j BBgwFoAUr1oq0Mnlyx2e+F5vj0QDEPEAzjgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDFlNGFjOS1jMDZiLTQzNDMtODUyNi0zYTFmMWIxYjVkODIvMC9BRjVBMkFEMEM5 RTVDQjFEOUVGODVFNkY4RjQ0MDMxMEYxMDBDRTM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY1QTJBRDBDOUU1Q0IxRDlFRjg1RTZGOEY0NDAzMTBGMTAw Q0UzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQxZTRhYzktYzA2Yi00MzQzLTg1 MjYtM2ExZjFiMWI1ZDgyLzAvQUY1QTJBRDBDOUU1Q0IxRDlFRjg1RTZGOEY0NDAz MTBGMTAwQ0UzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAWMddr+iuT2sjGoZBuS44o6mrOABsyOxpKT zWMzb8LfPGtZWcecxD0Pq1P0UULGUiamYWfx+GiCFWGu5F2nlPGJPZPWpi2pwwbh w5Mgtk2FE2YnwQcY4mfTNRkcp0ll5CVUsILAydeQMAZMjMfWHWcM9he5m0/nzVEV D6SE4sZ07kfSYVc1SfJs4kp2cJ0m6yMDnv50mPenhpzcD5kjs4IwvX3iC6N2JGRf Lv9JFASx8kkoj7H9ig2ZHlbUAtKurTP8ClAmiftJXADxNWmwXtPdJQdN3WpXtc9i 7bjnZho8uE6WKAvLgf4hbJ02+kVMmXwe9VJ20QpgmzNLU0jw4T4= -----END CERTIFICATE-----Generated at Fri Apr 25 06:02:21 2025 by rpki-client on console.sobornost.net