$ rpki-client -vvf repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.mft File: A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.mft (raw, json) Hash identifier: R9r9SEoISrsoYGiqKyyOq57FwPfQgOb2LjjBYmFXeQ8= Subject key identifier: 40:08:31:F5:02:04:97:54:FE:63:70:6A:8A:EA:CB:AD:08:56:F5:77 Authority key identifier: A4:D9:09:9C:36:5D:8B:B9:FA:96:A2:A5:1F:A4:C6:1F:10:5E:F8:48 Certificate issuer: /CN=A4D9099C365D8BB9FA96A2A51FA4C61F105EF848 Certificate serial: 435BC260DB9135870A6452BD433B8D685ECEFB1E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.mft Manifest number: AF Signing time: Thu 24 Apr 2025 01:42:17 +0000 Manifest this update: Thu 24 Apr 2025 01:37:17 +0000 Manifest next update: Sun 27 Apr 2025 08:21:17 +0000 Files and hashes: 1: 3130332e3235352e3136342e302f32332d3233203d3e20313531393934.roa (hash: sEObMlhse4CyL4oCmxoxoPLEseBLcDvbzgfCGrhTjW0=) 2: 3130332e3235352e3136342e302f32342d3234203d3e20313531393934.roa (hash: +WwlmKdoXMg38Ivud82/QXjyd3ODqNLzlXpK9Yw3uY4=) 3: 3130332e3235352e3136352e302f32342d3234203d3e20313531393934.roa (hash: /VKdsaTHmCyGCE586MO51z4LSl8AS7ykHk2hmgDFEO4=) 4: A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.crl (hash: J5IKWl4PnrjXRUzqWGZdyIQu21fvFgruyeZCJyJar8c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.crl rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 08:10:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:5b:c2:60:db:91:35:87:0a:64:52:bd:43:3b:8d:68:5e:ce:fb:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4D9099C365D8BB9FA96A2A51FA4C61F105EF848 Validity Not Before: Apr 24 01:37:17 2025 GMT Not After : Apr 27 08:21:17 2025 GMT Subject: CN=400831F502049754FE63706A8AEACBAD0856F577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:b4:bd:e1:44:aa:7c:e1:98:d5:eb:27:e7:ae: e0:25:12:ac:4a:d7:1d:d0:61:97:03:23:b6:a2:ee: 4b:69:7b:8c:78:a3:6c:01:24:10:66:2e:f8:f6:4a: 5e:b9:dc:2f:e9:b1:4f:0c:5f:0c:56:d3:f4:74:37: dc:76:82:37:8c:8a:fa:e4:1b:af:1a:d4:09:a3:71: 6e:56:19:37:3b:92:e0:7e:91:ba:c9:28:0f:8d:e8: 41:c2:07:cf:b6:25:0e:32:df:1e:7f:b5:9d:02:e4: e8:4d:1f:40:df:bc:88:8d:08:67:53:fd:7a:2b:d1: 11:69:8b:f9:cb:28:95:c0:be:fe:7e:cc:cf:2e:e0: 95:e8:b6:87:84:6a:b6:c5:37:90:b6:d6:db:08:36: fc:14:ee:ce:12:cc:78:1d:25:f6:5c:2d:aa:c7:25: 41:c4:00:fe:33:c5:73:6c:ff:2a:75:ae:4d:ae:d0: f0:ca:bb:c9:c7:37:79:dd:30:b0:3f:a5:d4:28:40: 26:c1:7f:9f:a0:e7:64:19:ad:4a:7f:2e:d2:0a:bf: 0f:5b:ce:19:7c:19:a3:84:da:15:92:2a:60:6f:12: 12:20:1a:b2:8c:b2:2f:17:e9:3b:b7:25:2f:41:c6: 31:1a:0d:c2:f7:50:3f:31:e1:cc:56:5e:29:6d:da: ac:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:08:31:F5:02:04:97:54:FE:63:70:6A:8A:EA:CB:AD:08:56:F5:77 X509v3 Authority Key Identifier: keyid:A4:D9:09:9C:36:5D:8B:B9:FA:96:A2:A5:1F:A4:C6:1F:10:5E:F8:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:a1:31:d6:f2:15:86:54:b4:fc:e9:31:9d:67:ab:a9:6e:19: b3:1e:02:cb:28:c8:b0:d1:15:af:8c:82:02:32:26:a5:01:20: 2f:5d:fd:72:fb:13:59:38:a6:3c:32:ed:fa:b5:d5:32:07:5c: 75:68:b2:b7:20:77:78:10:38:da:b5:2b:46:79:2b:52:0a:3f: 7a:12:86:33:8c:8e:2a:a9:f4:46:ca:87:08:4b:f2:a0:6a:f0: 22:32:a8:d8:79:c8:91:7d:58:8b:34:1d:b6:b8:26:50:14:11: 0f:41:d6:b3:f7:d1:4e:98:24:41:2b:22:bb:79:0f:20:6b:6c: 0a:de:a6:8e:19:3d:8c:ae:d8:7a:6f:4f:21:58:f8:a5:38:28: a0:34:30:b5:98:a7:9d:90:44:5a:e6:89:c8:0a:e7:8c:05:c3: 14:c1:69:06:6a:4a:bd:df:cb:a3:fd:b1:7f:b1:91:65:a0:a3: 05:65:1f:4f:bb:da:de:e7:de:23:9d:7d:54:41:e3:a0:8b:a6: 3c:8c:4e:34:e7:ba:87:66:08:d5:94:a4:1f:55:df:79:3b:38: 47:68:0e:dc:9e:eb:4d:35:db:39:6f:e1:56:5a:3e:6f:85:0c: 16:ee:20:87:e0:22:3d:18:5e:70:dc:97:8f:e5:14:cb:3e:e5: f4:c2:b4:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ1vCYNuRNYcKZFK9QzuNaF7O+x4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTREOTA5OUMzNjVEOEJCOUZBOTZBMkE1MUZBNEM2MUYx MDVFRjg0ODAeFw0yNTA0MjQwMTM3MTdaFw0yNTA0MjcwODIxMTdaMDMxMTAvBgNV BAMTKDQwMDgzMUY1MDIwNDk3NTRGRTYzNzA2QThBRUFDQkFEMDg1NkY1NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD9tL3hRKp84ZjV6yfnruAlEqxK 1x3QYZcDI7ai7ktpe4x4o2wBJBBmLvj2Sl653C/psU8MXwxW0/R0N9x2gjeMivrk G68a1AmjcW5WGTc7kuB+kbrJKA+N6EHCB8+2JQ4y3x5/tZ0C5OhNH0DfvIiNCGdT /Xor0RFpi/nLKJXAvv5+zM8u4JXotoeEarbFN5C21tsINvwU7s4SzHgdJfZcLarH JUHEAP4zxXNs/yp1rk2u0PDKu8nHN3ndMLA/pdQoQCbBf5+g52QZrUp/LtIKvw9b zhl8GaOE2hWSKmBvEhIgGrKMsi8X6Tu3JS9BxjEaDcL3UD8x4cxWXilt2qxbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQAgx9QIEl1T+Y3BqiurLrQhW9XcwHwYDVR0j BBgwFoAUpNkJnDZdi7n6lqKlH6TGHxBe+EgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YzQ3ZWY1Yy01YmJhLTRjZDEtOGRjOS0xNzNlMjc1MWY0ZjQvMC9BNEQ5MDk5QzM2 NUQ4QkI5RkE5NkEyQTUxRkE0QzYxRjEwNUVGODQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTREOTA5OUMzNjVEOEJCOUZBOTZBMkE1MUZBNEM2MUYxMDVF Rjg0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M0N2VmNWMtNWJiYS00Y2QxLThk YzktMTczZTI3NTFmNGY0LzAvQTREOTA5OUMzNjVEOEJCOUZBOTZBMkE1MUZBNEM2 MUYxMDVFRjg0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAGhMdbyFYZUtPzpMZ1nq6luGbMeAssoyLDR Fa+MggIyJqUBIC9d/XL7E1k4pjwy7fq11TIHXHVosrcgd3gQONq1K0Z5K1IKP3oS hjOMjiqp9EbKhwhL8qBq8CIyqNh5yJF9WIs0Hba4JlAUEQ9B1rP30U6YJEErIrt5 DyBrbArepo4ZPYyu2HpvTyFY+KU4KKA0MLWYp52QRFrmicgK54wFwxTBaQZqSr3f y6P9sX+xkWWgowVlH0+72t7n3iOdfVRB46CLpjyMTjTnuodmCNWUpB9V33k7OEdo Dtye60012zlv4VZaPm+FDBbuIIfgIj0YXnDcl4/lFMs+5fTCtMs= -----END CERTIFICATE-----Generated at Thu Apr 24 04:31:37 2025 by rpki-client on console.sobornost.net