$ rpki-client -vvf repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.mft File: AF504C4E6E3831F756E3BE07469483DFED452516.mft (raw, json) Hash identifier: HA//19QMWB8Y0/dIenZJ3uF2t2y/QkBvgztyB2ji56E= Subject key identifier: 6E:9A:3F:03:2C:EC:80:B8:88:1E:31:A4:44:24:C3:D7:10:D6:8A:CF Authority key identifier: AF:50:4C:4E:6E:38:31:F7:56:E3:BE:07:46:94:83:DF:ED:45:25:16 Certificate issuer: /CN=AF504C4E6E3831F756E3BE07469483DFED452516 Certificate serial: 5D4F52CE124E4C5F2803180E25F05E5E266C2059 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF504C4E6E3831F756E3BE07469483DFED452516.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.mft Manifest number: 04C8 Signing time: Fri 25 Apr 2025 03:20:01 +0000 Manifest this update: Fri 25 Apr 2025 03:15:01 +0000 Manifest next update: Mon 28 Apr 2025 03:55:01 +0000 Files and hashes: 1: AF504C4E6E3831F756E3BE07469483DFED452516.crl (hash: lT6ZWnOAGeXARw55fi8wXXmGJNjQ1zD0HNkr8cm9s6Y=) 2: 3130332e31312e3133342e302f32332d3234203d3e203538333932.roa (hash: yKj/LcaLHzBONx9eDhSrcYY44Dxzt/MgNKH5+9rrMKk=) 3: 323030313a6466323a363030303a3a2f34382d3438203d3e203538333932.roa (hash: 1/KGFTQyobxhAVI8Z6Ox8PIFy70waImQe4L6pe/5zlY=) 4: 3130332e34302e35342e302f32332d3234203d3e203538333932.roa (hash: +gn5K58E6ZIpYG1JbRIaPtWowpbPT7Kl7zJzF2LuH+w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.crl rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF504C4E6E3831F756E3BE07469483DFED452516.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:4f:52:ce:12:4e:4c:5f:28:03:18:0e:25:f0:5e:5e:26:6c:20:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF504C4E6E3831F756E3BE07469483DFED452516 Validity Not Before: Apr 25 03:15:01 2025 GMT Not After : Apr 28 03:55:01 2025 GMT Subject: CN=6E9A3F032CEC80B8881E31A44424C3D710D68ACF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:17:27:34:1a:9e:a2:bf:f3:d7:dd:4d:15:29: c6:dd:eb:45:14:c1:1d:d4:ba:05:96:f8:4e:5d:b6: d5:19:fd:1c:34:bf:f5:42:36:98:fe:0c:d6:aa:11: 5d:67:1a:8f:85:37:2e:83:14:6c:ce:bd:93:d6:94: 21:c4:97:c8:c8:1d:09:15:d4:ee:f5:b6:6c:e6:c3: 2d:ab:17:3d:8e:9a:e9:97:be:a7:4e:43:ed:af:d7: 9f:cc:1d:a8:4e:18:b5:26:29:cc:93:50:91:5b:c2: bb:ea:ab:74:36:c1:85:3c:60:ad:06:8d:1c:15:86: a5:ce:bf:09:e8:e8:32:20:99:dd:02:ec:0b:2f:ce: 48:bb:8b:cd:b4:bd:46:40:96:75:0d:9a:ee:01:e9: fb:aa:88:74:b4:2c:fa:67:e6:b4:92:dc:64:cd:81: f0:57:ed:30:f5:ed:0b:29:3b:92:d6:fd:3e:89:23: ca:da:7b:15:66:66:16:f6:6f:95:9c:9a:3c:91:8d: 75:52:25:35:f3:c2:cd:73:6b:ee:5e:ff:2d:fa:7e: e9:94:01:ad:2a:06:e2:4f:8e:06:eb:ed:5c:05:a8: 8e:f3:14:5b:74:3b:c8:ca:8f:a8:fa:2f:a9:f3:42: 1a:5d:fa:be:ac:8e:05:8e:db:4f:bf:73:9e:92:e5: cf:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:9A:3F:03:2C:EC:80:B8:88:1E:31:A4:44:24:C3:D7:10:D6:8A:CF X509v3 Authority Key Identifier: keyid:AF:50:4C:4E:6E:38:31:F7:56:E3:BE:07:46:94:83:DF:ED:45:25:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF504C4E6E3831F756E3BE07469483DFED452516.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:d2:68:d8:bb:39:06:b8:ab:0f:0a:b5:07:eb:c7:5f:e3:4b: 4d:0f:9d:0f:a8:5b:a9:24:87:5b:e1:39:31:88:ae:ab:bf:4f: 26:3f:5e:e3:8e:27:8e:85:d2:48:d0:49:0c:23:98:a6:8f:14: 30:b9:04:76:e9:02:37:ba:81:5b:6b:33:e5:d3:2c:66:cd:09: 34:e2:f1:0e:46:cd:07:ea:ed:e8:b7:91:01:ab:c7:cb:5e:88: 17:0f:3c:01:d6:fc:08:22:21:07:d5:70:43:09:bf:79:d7:fa: ef:51:8f:ec:9f:f0:c8:fb:4d:7c:15:f3:7f:66:09:75:2f:6f: dd:85:fc:0f:b3:7a:03:fd:3b:0e:54:03:80:21:af:dd:69:9e: 15:79:ca:4a:ae:dc:e5:83:82:a1:86:c7:12:55:75:23:4f:f8: 77:8b:a3:67:5a:af:f6:91:ae:8f:cb:ad:65:6c:02:0e:c1:67: 6f:c4:fa:7b:58:0d:22:3d:7a:e7:6e:95:2f:bd:23:9a:99:80: fd:d4:75:54:98:c8:0c:0a:c5:ab:13:b4:a9:35:7b:62:18:2d: c0:cc:46:83:8e:19:15:6f:23:d7:5d:8f:cd:37:9b:66:c0:20: 6d:c7:3f:75:b2:14:aa:71:4b:77:73:7a:a6:75:b6:97:64:66: e3:8e:25:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXU9SzhJOTF8oAxgOJfBeXiZsIFkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY1MDRDNEU2RTM4MzFGNzU2RTNCRTA3NDY5NDgzREZF RDQ1MjUxNjAeFw0yNTA0MjUwMzE1MDFaFw0yNTA0MjgwMzU1MDFaMDMxMTAvBgNV BAMTKDZFOUEzRjAzMkNFQzgwQjg4ODFFMzFBNDQ0MjRDM0Q3MTBENjhBQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYFyc0Gp6iv/PX3U0VKcbd60UU wR3UugWW+E5dttUZ/Rw0v/VCNpj+DNaqEV1nGo+FNy6DFGzOvZPWlCHEl8jIHQkV 1O71tmzmwy2rFz2OmumXvqdOQ+2v15/MHahOGLUmKcyTUJFbwrvqq3Q2wYU8YK0G jRwVhqXOvwno6DIgmd0C7Asvzki7i820vUZAlnUNmu4B6fuqiHS0LPpn5rSS3GTN gfBX7TD17QspO5LW/T6JI8raexVmZhb2b5WcmjyRjXVSJTXzws1za+5e/y36fumU Aa0qBuJPjgbr7VwFqI7zFFt0O8jKj6j6L6nzQhpd+r6sjgWO20+/c56S5c+DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbpo/AyzsgLiIHjGkRCTD1xDWis8wHwYDVR0j BBgwFoAUr1BMTm44MfdW474HRpSD3+1FJRYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZmZiNzc2Ny0zZGU5LTQ4MzMtYjRlNy1iMWI2MmVlM2NkOTkvMC9BRjUwNEM0RTZF MzgzMUY3NTZFM0JFMDc0Njk0ODNERkVENDUyNTE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY1MDRDNEU2RTM4MzFGNzU2RTNCRTA3NDY5NDgzREZFRDQ1 MjUxNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGZmYjc3NjctM2RlOS00ODMzLWI0 ZTctYjFiNjJlZTNjZDk5LzAvQUY1MDRDNEU2RTM4MzFGNzU2RTNCRTA3NDY5NDgz REZFRDQ1MjUxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI3SaNi7OQa4qw8KtQfrx1/jS00PnQ+oW6kk h1vhOTGIrqu/TyY/XuOOJ46F0kjQSQwjmKaPFDC5BHbpAje6gVtrM+XTLGbNCTTi 8Q5GzQfq7ei3kQGrx8teiBcPPAHW/AgiIQfVcEMJv3nX+u9Rj+yf8Mj7TXwV839m CXUvb92F/A+zegP9Ow5UA4Ahr91pnhV5ykqu3OWDgqGGxxJVdSNP+HeLo2dar/aR ro/LrWVsAg7BZ2/E+ntYDSI9eudulS+9I5qZgP3UdVSYyAwKxasTtKk1e2IYLcDM RoOOGRVvI9ddj803m2bAIG3HP3WyFKpxS3dzeqZ1tpdkZuOOJcU= -----END CERTIFICATE-----Generated at Fri Apr 25 06:02:22 2025 by rpki-client on console.sobornost.net