$ rpki-client -vvf repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft File: EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft (raw, json) Hash identifier: 3oNaVAcEF2E7ATDwAlhtzih+AQWReTP+Zk+rsV1u0gk= Subject key identifier: 9A:02:0F:2E:A0:80:D9:2F:63:3A:B3:F4:F0:84:6F:59:1C:44:13:E8 Authority key identifier: EF:AF:3D:BC:84:57:8E:58:6E:A4:A0:4F:C3:5E:6A:46:FA:0E:28:EA Certificate issuer: /CN=EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA Certificate serial: 7799799C036BB0F248EAFC93B8F10E4A222EA20E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft Manifest number: 9D Signing time: Thu 24 Apr 2025 12:21:21 +0000 Manifest this update: Thu 24 Apr 2025 12:16:21 +0000 Manifest next update: Sun 27 Apr 2025 14:12:21 +0000 Files and hashes: 1: EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.crl (hash: HpCt9V3fo+mTTFaOuYnFyo4aAwconO9TpYmws8Ss0DI=) 2: 3135372e36362e33362e302f32342d3234203d3e20313430303136.roa (hash: zDfqmAp3VO5lL/pBx5N4cR8KEoRuNAmls9zWuktjlvE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.crl rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 10:32:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:99:79:9c:03:6b:b0:f2:48:ea:fc:93:b8:f1:0e:4a:22:2e:a2:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA Validity Not Before: Apr 24 12:16:21 2025 GMT Not After : Apr 27 14:12:21 2025 GMT Subject: CN=9A020F2EA080D92F633AB3F4F0846F591C4413E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2c:a8:77:e7:8a:48:de:9e:4f:d2:54:74:87: 40:eb:1b:bc:71:be:d9:ff:bb:6c:01:c5:fe:87:2d: 6a:84:ff:ee:36:66:3c:28:c9:87:0d:36:35:09:fd: 26:a8:45:0a:3b:01:7c:e4:9a:4a:1b:a3:fd:e8:80: b2:6c:67:03:ec:c3:1b:4b:7a:17:73:00:e1:5a:7d: e8:9f:4d:11:44:77:47:91:5d:e7:4b:b5:7d:64:36: c5:43:2b:64:77:4c:13:d5:70:17:ee:71:ad:04:0e: 92:aa:b5:31:0e:15:cb:69:49:ad:8e:6c:39:c8:4e: ed:1e:17:bb:7b:4d:ea:58:79:23:09:35:46:9e:34: 1f:a5:e4:ec:0d:da:3a:c8:25:21:b6:6d:1b:a0:74: 74:da:a9:2f:e1:59:5e:61:d1:b2:d4:ce:88:be:1d: e2:c8:d8:b5:96:3a:0e:2d:0e:98:f0:ab:20:06:96: c0:e7:8a:87:6a:72:b7:a7:24:75:1d:67:46:e5:fe: 78:78:7a:91:4e:c0:36:d4:e7:e4:28:20:28:ff:78: e2:0d:70:b8:8b:54:cb:b9:cf:24:e0:c7:01:f6:7c: c3:6f:2a:0b:3c:01:72:e6:a8:7e:d9:69:c6:8e:6d: 84:90:18:3c:cd:59:8d:0a:c5:dc:5f:da:b9:d0:08: 07:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:02:0F:2E:A0:80:D9:2F:63:3A:B3:F4:F0:84:6F:59:1C:44:13:E8 X509v3 Authority Key Identifier: keyid:EF:AF:3D:BC:84:57:8E:58:6E:A4:A0:4F:C3:5E:6A:46:FA:0E:28:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:36:9a:9e:9b:65:11:6f:9b:71:1a:be:11:5a:00:9e:9b:03: 81:d7:56:87:50:13:d4:94:5b:72:25:c9:bf:79:b7:ce:8a:c0: 9a:09:41:aa:17:a8:f7:53:a8:21:af:69:63:04:49:b9:ad:1c: fe:9e:e0:65:c3:fb:15:d0:cc:6f:50:10:9c:e8:4a:1b:6a:30: 77:15:9d:96:a8:29:fb:7b:e6:28:21:90:c0:20:cf:87:36:9b: eb:e2:54:9b:2c:7e:0e:19:ca:c7:81:01:a5:3a:42:71:bb:50: 39:cc:16:bd:aa:67:f8:98:95:60:42:5f:e8:58:53:88:7d:84: fb:9c:55:e3:84:49:5a:7f:6c:d3:2e:ea:f3:3d:5d:e9:32:78: 9f:23:73:1d:10:b3:f0:06:e7:ec:d7:a2:7d:75:fd:b4:c8:43: 4f:f2:da:9d:69:41:70:21:57:31:23:57:17:f3:b7:b2:63:d1: ae:40:4d:a1:6f:26:cd:1f:c8:fa:61:ca:d7:90:34:a6:b7:a8: 34:4f:cd:e2:6e:87:06:cc:01:0d:b5:4c:43:c3:19:90:6d:0f: 6f:9d:7f:05:bc:5b:64:a5:47:50:e7:de:51:04:f9:7b:af:92: 01:4f:40:2f:fb:7f:3c:bc:44:72:52:8d:ae:2e:c2:f6:a4:8e: b1:a5:2a:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd5l5nANrsPJI6vyTuPEOSiIuog4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZBRjNEQkM4NDU3OEU1ODZFQTRBMDRGQzM1RTZBNDZG QTBFMjhFQTAeFw0yNTA0MjQxMjE2MjFaFw0yNTA0MjcxNDEyMjFaMDMxMTAvBgNV BAMTKDlBMDIwRjJFQTA4MEQ5MkY2MzNBQjNGNEYwODQ2RjU5MUM0NDEzRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHLKh354pI3p5P0lR0h0DrG7xx vtn/u2wBxf6HLWqE/+42ZjwoyYcNNjUJ/SaoRQo7AXzkmkobo/3ogLJsZwPswxtL ehdzAOFafeifTRFEd0eRXedLtX1kNsVDK2R3TBPVcBfuca0EDpKqtTEOFctpSa2O bDnITu0eF7t7TepYeSMJNUaeNB+l5OwN2jrIJSG2bRugdHTaqS/hWV5h0bLUzoi+ HeLI2LWWOg4tDpjwqyAGlsDniodqcrenJHUdZ0bl/nh4epFOwDbU5+QoICj/eOIN cLiLVMu5zyTgxwH2fMNvKgs8AXLmqH7ZacaObYSQGDzNWY0Kxdxf2rnQCAdxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmgIPLqCA2S9jOrP08IRvWRxEE+gwHwYDVR0j BBgwFoAU7689vIRXjlhupKBPw15qRvoOKOowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZjllMWE4YS0zOWYxLTRmZTItODMyYS1iYjJmMjA5MmZiZjYvMC9FRkFGM0RCQzg0 NTc4RTU4NkVBNEEwNEZDMzVFNkE0NkZBMEUyOEVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRUZBRjNEQkM4NDU3OEU1ODZFQTRBMDRGQzM1RTZBNDZGQTBF MjhFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWY5ZTFhOGEtMzlmMS00ZmUyLTgz MmEtYmIyZjIwOTJmYmY2LzAvRUZBRjNEQkM4NDU3OEU1ODZFQTRBMDRGQzM1RTZB NDZGQTBFMjhFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAME2mp6bZRFvm3EavhFaAJ6bA4HXVodQE9SU W3Ilyb95t86KwJoJQaoXqPdTqCGvaWMESbmtHP6e4GXD+xXQzG9QEJzoShtqMHcV nZaoKft75ighkMAgz4c2m+viVJssfg4ZyseBAaU6QnG7UDnMFr2qZ/iYlWBCX+hY U4h9hPucVeOESVp/bNMu6vM9XekyeJ8jcx0Qs/AG5+zXon11/bTIQ0/y2p1pQXAh VzEjVxfzt7Jj0a5ATaFvJs0fyPphyteQNKa3qDRPzeJuhwbMAQ21TEPDGZBtD2+d fwW8W2SlR1Dn3lEE+XuvkgFPQC/7fzy8RHJSja4uwvakjrGlKkA= -----END CERTIFICATE-----Generated at Thu Apr 24 15:50:03 2025 by rpki-client on console.sobornost.net