$ rpki-client -vvf repo-rpki.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.mft File: 9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.mft (raw, json) Hash identifier: tK7+az9LLFIc9rzfVl9xodgYmauxzFKKgLFCvtM7Qp8= Subject key identifier: 08:A0:BF:C8:C2:64:AC:56:8A:9E:0A:4E:ED:52:88:E5:3B:F4:B8:C6 Authority key identifier: 9A:F7:BD:04:7F:3C:54:F9:CE:58:26:DC:91:96:C2:A3:2E:4A:7C:5F Certificate issuer: /CN=9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F Certificate serial: 44F103CF6CDD4C5AE78551C53B82C88B7D430081 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.mft Manifest number: F7 Signing time: Thu 24 Apr 2025 17:50:39 +0000 Manifest this update: Thu 24 Apr 2025 17:45:39 +0000 Manifest next update: Mon 28 Apr 2025 00:00:39 +0000 Files and hashes: 1: 3130332e3235352e39392e302f32342d3234203d3e20313531353533.roa (hash: dR97kutQJDfdqRMw3g6v2Ivop1oOeZPQjWSUUweIFKQ=) 2: 3130332e3235352e39382e302f32342d3234203d3e20313531353533.roa (hash: VSK8xHWFoAIqAfrfPnMHrz4hewwhCd2DZdkebu8f7l0=) 3: 9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.crl (hash: v/tfC2z+LM0fjcS1Rlz5MkB1Ed+vHGDfnEA3oc6H2Z8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.crl rsync://repo-rpki.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:f1:03:cf:6c:dd:4c:5a:e7:85:51:c5:3b:82:c8:8b:7d:43:00:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F Validity Not Before: Apr 24 17:45:39 2025 GMT Not After : Apr 28 00:00:39 2025 GMT Subject: CN=08A0BFC8C264AC568A9E0A4EED5288E53BF4B8C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:3d:05:59:22:92:97:0e:19:69:58:59:e4:eb: 92:66:57:12:64:fd:97:aa:db:26:71:80:e2:6f:74: f6:46:d0:c3:b6:91:97:c1:40:70:05:a0:49:1e:42: 56:31:8b:ac:59:fd:a6:ce:48:2a:ee:28:cc:28:b0: 1f:23:6e:90:b0:b2:03:2b:0f:3e:72:f2:61:da:18: 13:22:3d:a3:15:8e:7b:7c:a9:d2:53:05:22:2d:ea: 59:19:0b:0f:a4:bd:2c:bf:79:1e:a4:0a:07:d4:c3: b8:20:36:a0:0e:99:78:00:94:4c:40:1d:92:f0:1c: c5:8c:1b:11:d3:6a:86:2d:a5:42:e5:93:29:cc:53: 13:56:ec:47:e4:b2:e5:60:ea:59:68:be:95:9c:40: 0a:e8:fe:6e:07:1f:fb:4e:1f:e6:68:d2:04:0d:47: fc:21:b8:81:01:52:e4:41:50:99:62:a0:1f:f0:85: 78:a2:1a:9c:01:97:46:93:8a:64:98:29:fc:37:fb: 13:97:dd:22:0e:2d:3b:a4:29:ef:08:74:b8:90:5a: 71:39:c1:9b:23:7f:27:2e:3b:35:94:24:b5:ca:1f: 1e:cb:c4:52:23:4f:6a:1e:13:7b:9b:6c:e7:32:62: 18:f0:f1:73:3f:e7:7d:1b:1b:05:49:06:97:73:cc: f1:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:A0:BF:C8:C2:64:AC:56:8A:9E:0A:4E:ED:52:88:E5:3B:F4:B8:C6 X509v3 Authority Key Identifier: keyid:9A:F7:BD:04:7F:3C:54:F9:CE:58:26:DC:91:96:C2:A3:2E:4A:7C:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/9AF7BD047F3C54F9CE5826DC9196C2A32E4A7C5F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:23:2c:f5:aa:71:2e:6c:2e:e9:8b:0a:0c:d6:16:0a:1c:f9: 72:9a:39:0f:72:7d:84:9e:6a:03:03:ed:9d:6c:d0:05:d2:73: fc:91:8e:a2:62:a5:26:6d:3c:a3:58:b9:be:43:63:74:d7:bd: 99:81:76:a3:38:c4:13:b3:8a:be:13:45:2a:c6:69:11:a0:ec: 4f:b5:69:9a:a1:da:0a:85:81:19:ea:c3:5d:ad:23:57:c6:86: d5:f3:97:4a:87:de:00:05:24:22:32:92:de:8b:68:60:fd:0b: 41:ac:12:a2:a3:98:24:0f:5f:12:d9:58:db:0b:2f:37:45:18: da:fa:15:2d:35:81:97:86:36:fb:e2:5e:fc:19:9a:31:a9:98: b9:3e:3d:53:5e:eb:e2:8e:87:bf:d9:58:ad:5a:62:62:7c:7b: 37:d0:93:a1:0c:29:6a:46:ce:c9:fd:9c:ef:69:6b:8c:ee:b1: dc:9f:3a:78:ad:12:37:cb:82:98:05:f5:82:97:64:c6:29:0a: 28:74:86:e6:76:e5:8b:20:7a:c2:fb:67:0c:bd:a0:34:22:7b: ce:cd:e5:bd:63:54:87:cf:df:61:fa:3f:13:0c:ba:75:61:d9: fa:98:10:0c:98:53:e1:fa:d4:40:71:1e:6d:bf:dd:11:79:8d: 7e:a3:b1:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURPEDz2zdTFrnhVHFO4LIi31DAIEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFGN0JEMDQ3RjNDNTRGOUNFNTgyNkRDOTE5NkMyQTMy RTRBN0M1RjAeFw0yNTA0MjQxNzQ1MzlaFw0yNTA0MjgwMDAwMzlaMDMxMTAvBgNV BAMTKDA4QTBCRkM4QzI2NEFDNTY4QTlFMEE0RUVENTI4OEU1M0JGNEI4QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZPQVZIpKXDhlpWFnk65JmVxJk /Zeq2yZxgOJvdPZG0MO2kZfBQHAFoEkeQlYxi6xZ/abOSCruKMwosB8jbpCwsgMr Dz5y8mHaGBMiPaMVjnt8qdJTBSIt6lkZCw+kvSy/eR6kCgfUw7ggNqAOmXgAlExA HZLwHMWMGxHTaoYtpULlkynMUxNW7EfksuVg6llovpWcQAro/m4HH/tOH+Zo0gQN R/whuIEBUuRBUJlioB/whXiiGpwBl0aTimSYKfw3+xOX3SIOLTukKe8IdLiQWnE5 wZsjfycuOzWUJLXKHx7LxFIjT2oeE3ubbOcyYhjw8XM/530bGwVJBpdzzPHbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCKC/yMJkrFaKngpO7VKI5Tv0uMYwHwYDVR0j BBgwFoAUmve9BH88VPnOWCbckZbCoy5KfF8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NTdmYjE3ZS05ZDU4LTRkNTEtODQ2ZS0wYTg0Yzg2OTkxNDIvMC85QUY3QkQwNDdG M0M1NEY5Q0U1ODI2REM5MTk2QzJBMzJFNEE3QzVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUFGN0JEMDQ3RjNDNTRGOUNFNTgyNkRDOTE5NkMyQTMyRTRB N0M1Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzU3ZmIxN2UtOWQ1OC00ZDUxLTg0 NmUtMGE4NGM4Njk5MTQyLzAvOUFGN0JEMDQ3RjNDNTRGOUNFNTgyNkRDOTE5NkMy QTMyRTRBN0M1Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA8jLPWqcS5sLumLCgzWFgoc+XKaOQ9yfYSe agMD7Z1s0AXSc/yRjqJipSZtPKNYub5DY3TXvZmBdqM4xBOzir4TRSrGaRGg7E+1 aZqh2gqFgRnqw12tI1fGhtXzl0qH3gAFJCIykt6LaGD9C0GsEqKjmCQPXxLZWNsL LzdFGNr6FS01gZeGNvviXvwZmjGpmLk+PVNe6+KOh7/ZWK1aYmJ8ezfQk6EMKWpG zsn9nO9pa4zusdyfOnitEjfLgpgF9YKXZMYpCih0huZ25YsgesL7Zwy9oDQie87N 5b1jVIfP32H6PxMMunVh2fqYEAyYU+H61EBxHm2/3RF5jX6jsdA= -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:10 2025 by rpki-client on console.sobornost.net