$ rpki-client -vvf repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft File: 2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft (raw, json) Hash identifier: +4070lOHMvwF3bk6tNT0N3WMQQ0bCM5vny5OdyRqkL4= Subject key identifier: 62:6E:80:96:6F:34:D1:F6:28:49:DB:9C:21:AA:1C:64:4E:4E:E4:65 Authority key identifier: 2A:F5:12:1C:D1:CF:A7:79:8C:C1:DD:77:7B:46:43:69:D1:DE:A6:C1 Certificate issuer: /CN=2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1 Certificate serial: 29462B46CEDDEB9D197A36CFACFADA0A787E26F6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft Manifest number: 0219 Signing time: Thu 24 Apr 2025 07:01:11 +0000 Manifest this update: Thu 24 Apr 2025 06:56:11 +0000 Manifest next update: Sun 27 Apr 2025 09:37:11 +0000 Files and hashes: 1: 3130332e3134382e32342e302f32332d3234203d3e20313339393831.roa (hash: 6FLbYuy1S5qOt7tY0dfAZpELgfONO6cx6swxFm3099E=) 2: 2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.crl (hash: yz7LHvghMUnJ4aqRDZrZHFKOnCQorm/Py2X2X5/TU9Q=) 3: 323430353a633863303a3a2f33322d3332203d3e20313339393831.roa (hash: xAQ8nY4YiCbyThm1ahzRI7qCPhGk2b5venOiA8cHRk4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.crl rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 08:44:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:46:2b:46:ce:dd:eb:9d:19:7a:36:cf:ac:fa:da:0a:78:7e:26:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1 Validity Not Before: Apr 24 06:56:11 2025 GMT Not After : Apr 27 09:37:11 2025 GMT Subject: CN=626E80966F34D1F62849DB9C21AA1C644E4EE465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:0f:29:f0:14:82:f0:eb:5c:42:09:d1:10:ba: 80:b5:8c:cc:71:4b:10:e4:62:c3:c5:bf:f5:19:fb: 93:a0:e4:12:89:e7:0d:70:5d:e7:8a:d6:ef:a8:27: a5:4a:07:63:e7:cd:3e:53:73:f7:68:58:ea:12:74: 47:fc:99:89:a9:7e:76:33:34:25:93:f5:8d:5c:25: eb:e5:ed:78:26:da:b6:0f:55:28:c6:38:b5:bf:91: 13:f9:a0:f7:33:3f:d9:53:dd:92:cb:93:37:37:88: 6d:8c:8d:16:c2:49:07:63:cf:25:7b:72:6b:62:1a: 95:1c:e5:f8:bd:f1:ba:26:8c:b1:2d:3d:88:1c:f2: 26:67:ef:11:0e:90:bc:5b:36:50:df:cf:c8:c4:8d: b2:ab:f9:97:f7:c1:02:91:99:b9:3f:43:0f:8b:58: 9e:a7:4b:f7:d6:bb:3e:21:93:d0:eb:32:e6:9b:cb: ea:4b:67:62:cc:68:38:d1:22:3d:75:23:f7:ba:69: 56:fc:84:b2:7a:f9:ab:43:64:0f:20:93:8b:a6:44: 11:75:c0:a5:68:ba:7b:4b:2f:0c:36:13:6a:ea:a5: 0c:34:90:30:9e:05:de:d7:da:5c:e5:9b:c3:07:c4: eb:72:77:e8:1a:5b:24:d4:f5:cc:c2:b8:a4:67:29: a0:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:6E:80:96:6F:34:D1:F6:28:49:DB:9C:21:AA:1C:64:4E:4E:E4:65 X509v3 Authority Key Identifier: keyid:2A:F5:12:1C:D1:CF:A7:79:8C:C1:DD:77:7B:46:43:69:D1:DE:A6:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:4a:83:59:41:70:08:ec:4f:b7:dc:b5:1e:31:d1:73:e0:e1: 15:73:0c:8a:00:91:73:f0:d6:54:0b:dd:54:e2:d6:7e:f9:e6: 03:c7:b7:90:8c:0b:52:97:6e:e6:fa:c7:b7:67:0b:61:49:77: 25:17:ea:b8:aa:a1:10:52:10:1f:fa:e8:37:12:f3:a7:b5:df: f9:a8:a8:be:49:c9:75:13:98:67:b1:5d:fa:18:83:d4:c1:ea: 75:4a:8a:24:87:a9:21:eb:af:3b:8f:e1:96:d7:00:94:f7:20: 13:af:a4:12:f7:06:24:28:43:8a:a5:fb:bb:99:dd:d4:64:4b: 4f:ba:6a:8c:2e:f9:f6:98:11:92:58:bc:6a:6d:5c:29:eb:af: 58:80:c7:0c:a7:84:94:3a:57:d3:5d:3c:5b:1d:33:96:37:30: e7:0a:fe:6d:83:10:43:73:b6:26:a7:8e:99:31:fc:e7:99:0a: 14:54:47:e4:d7:ea:8f:22:27:d5:28:eb:a5:6f:ff:03:be:dd: 68:c3:8a:64:6c:a7:6a:60:23:b7:7d:ec:f8:e9:26:ba:3e:88: 43:53:1b:c7:af:b1:56:5c:0f:fd:65:78:c5:3c:15:ab:d5:df: 0a:bc:21:ff:ce:e3:47:75:49:fe:d1:23:81:3b:a4:9c:16:9a: 47:50:21:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKUYrRs7d650ZejbPrPraCnh+JvYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFGNTEyMUNEMUNGQTc3OThDQzFERDc3N0I0NjQzNjlE MURFQTZDMTAeFw0yNTA0MjQwNjU2MTFaFw0yNTA0MjcwOTM3MTFaMDMxMTAvBgNV BAMTKDYyNkU4MDk2NkYzNEQxRjYyODQ5REI5QzIxQUExQzY0NEU0RUU0NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcDynwFILw61xCCdEQuoC1jMxx SxDkYsPFv/UZ+5Og5BKJ5w1wXeeK1u+oJ6VKB2PnzT5Tc/doWOoSdEf8mYmpfnYz NCWT9Y1cJevl7Xgm2rYPVSjGOLW/kRP5oPczP9lT3ZLLkzc3iG2MjRbCSQdjzyV7 cmtiGpUc5fi98bomjLEtPYgc8iZn7xEOkLxbNlDfz8jEjbKr+Zf3wQKRmbk/Qw+L WJ6nS/fWuz4hk9DrMuaby+pLZ2LMaDjRIj11I/e6aVb8hLJ6+atDZA8gk4umRBF1 wKVountLLww2E2rqpQw0kDCeBd7X2lzlm8MHxOtyd+gaWyTU9czCuKRnKaD9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYm6Alm800fYoSducIaocZE5O5GUwHwYDVR0j BBgwFoAUKvUSHNHPp3mMwd13e0ZDadHepsEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OTJlMDdmOC0xYTQ4LTQzOTEtYTZhNS04ZTRlMzljODU4OGEvMC8yQUY1MTIxQ0Qx Q0ZBNzc5OENDMURENzc3QjQ2NDM2OUQxREVBNkMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkFGNTEyMUNEMUNGQTc3OThDQzFERDc3N0I0NjQzNjlEMURF QTZDMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTkyZTA3ZjgtMWE0OC00MzkxLWE2 YTUtOGU0ZTM5Yzg1ODhhLzAvMkFGNTEyMUNEMUNGQTc3OThDQzFERDc3N0I0NjQz NjlEMURFQTZDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABlKg1lBcAjsT7fctR4x0XPg4RVzDIoAkXPw 1lQL3VTi1n755gPHt5CMC1KXbub6x7dnC2FJdyUX6riqoRBSEB/66DcS86e13/mo qL5JyXUTmGexXfoYg9TB6nVKiiSHqSHrrzuP4ZbXAJT3IBOvpBL3BiQoQ4ql+7uZ 3dRkS0+6aowu+faYEZJYvGptXCnrr1iAxwynhJQ6V9NdPFsdM5Y3MOcK/m2DEENz tianjpkx/OeZChRUR+TX6o8iJ9Uo66Vv/wO+3WjDimRsp2pgI7d97PjpJro+iENT G8evsVZcD/1leMU8FavV3wq8If/O40d1Sf7RI4E7pJwWmkdQIeE= -----END CERTIFICATE-----Generated at Thu Apr 24 09:03:03 2025 by rpki-client on console.sobornost.net