$ rpki-client -vvf repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft File: 9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft (raw, json) Hash identifier: LbdqClNXyvx9eX9k7yLp5kftMa+kyRt6KFF0ggfx6x4= Subject key identifier: 9F:D4:F9:03:D1:C5:65:0A:51:53:D6:B0:6A:2F:08:17:B1:BE:EA:A0 Authority key identifier: 9A:FE:57:3F:E3:29:0D:FB:E2:E6:4F:AC:EC:24:DC:7B:DD:16:10:76 Certificate issuer: /CN=9AFE573FE3290DFBE2E64FACEC24DC7BDD161076 Certificate serial: D8A4AF7CBDD842CC03D780D6FEA5647DE94EF6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft Manifest number: 59 Signing time: Thu 24 Apr 2025 01:30:51 +0000 Manifest this update: Thu 24 Apr 2025 01:25:51 +0000 Manifest next update: Sun 27 Apr 2025 04:37:51 +0000 Files and hashes: 1: 9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.crl (hash: 76ikfujBrsXQgLu63VYM00LSBsLqDxF+dEhOACN8ak4=) 2: 323030313a6466343a353534303a3a2f34382d3438203d3e20313533313232.roa (hash: llXvyGLPDurj6bmSYN1tz+/ct/cQR7nz/GjhVW22jnQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.crl rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 04:37:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: d8:a4:af:7c:bd:d8:42:cc:03:d7:80:d6:fe:a5:64:7d:e9:4e:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AFE573FE3290DFBE2E64FACEC24DC7BDD161076 Validity Not Before: Apr 24 01:25:51 2025 GMT Not After : Apr 27 04:37:51 2025 GMT Subject: CN=9FD4F903D1C5650A5153D6B06A2F0817B1BEEAA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:18:3f:93:27:e5:9d:65:d8:ba:c6:bf:9c:8a: 86:ff:49:4c:54:d7:b5:6f:d2:fb:9a:70:6c:f0:84: e7:02:60:be:7c:3a:07:44:70:15:00:2c:97:9f:99: 83:d1:e4:26:36:3f:eb:98:8f:4b:c3:ce:95:d1:30: 80:ba:57:b6:b4:6f:90:7a:63:f5:fd:0c:7f:b0:f2: e9:5b:26:04:e2:7c:7a:76:27:f7:d3:58:32:38:a4: d4:6c:5a:dd:e4:88:0f:38:26:96:11:69:64:e7:32: 57:1a:c8:27:37:9e:47:15:20:ab:68:b6:bf:31:fe: 20:cf:02:d2:ef:3b:09:75:a0:84:60:f9:69:b3:ee: 97:7a:ce:ca:3d:46:09:1f:8c:1d:8c:d8:ef:60:c5: 03:07:f5:f3:96:2f:1a:44:68:c2:9a:2b:3b:c7:1a: e0:51:50:aa:56:b2:8d:9c:71:fc:75:a7:40:bf:6f: fb:19:55:60:65:4d:c0:69:90:2d:fe:86:24:10:b1: eb:44:15:74:57:03:73:75:2d:3c:7f:d4:88:41:bf: ee:2b:4a:ae:97:e6:3a:09:51:80:95:e5:90:61:8e: 02:fe:fc:36:b3:dd:4c:9f:4a:f9:ed:be:3c:bb:4c: 54:5e:87:98:ab:d6:eb:cb:d2:12:b8:14:43:b4:09: bf:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:D4:F9:03:D1:C5:65:0A:51:53:D6:B0:6A:2F:08:17:B1:BE:EA:A0 X509v3 Authority Key Identifier: keyid:9A:FE:57:3F:E3:29:0D:FB:E2:E6:4F:AC:EC:24:DC:7B:DD:16:10:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:41:fc:e0:57:01:e3:27:fa:72:5b:ff:da:94:13:90:7e:43: be:6d:1d:28:d7:a7:6f:d2:80:57:93:6f:64:c5:25:63:90:95: 4f:bc:9d:3d:22:75:fc:9c:d5:91:e1:a0:41:7c:c7:bc:05:0f: 65:3b:0d:c6:16:d1:44:45:38:2b:a2:ff:bc:4e:2b:91:cb:bc: d2:87:67:ff:8d:0b:aa:f1:af:b7:da:34:79:78:a1:ca:54:2e: 76:c1:31:e2:7f:4a:a4:f8:c0:e4:ac:5f:99:4a:ec:ab:73:c9: a8:11:1a:16:f9:1e:54:f6:8f:3c:ab:a2:89:70:f6:e3:5c:83: 39:00:43:c8:f3:e2:aa:48:eb:c3:5a:6f:13:ce:78:85:bc:ac: ad:39:ac:d1:f8:dc:3e:2b:2f:7f:ad:6f:70:a9:1b:80:b4:19: 5c:87:bd:9e:bd:db:b2:e2:92:cb:05:4b:c4:e5:c5:9c:a4:6f: 14:88:e5:43:9c:75:3c:22:8e:ff:44:38:63:74:72:e5:5d:ab: 57:4e:a4:49:31:8a:c0:d8:b2:76:26:fd:98:93:81:c1:9f:8d: 08:a2:24:a2:2b:3a:a7:4a:70:ee:5f:b6:b3:2e:d1:9d:65:2b: 2f:31:50:57:7b:06:0c:3d:5b:5b:9e:dd:10:16:ae:c7:fb:bb: 72:87:d2:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUANikr3y92ELMA9eA1v6lZH3pTvYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFGRTU3M0ZFMzI5MERGQkUyRTY0RkFDRUMyNERDN0JE RDE2MTA3NjAeFw0yNTA0MjQwMTI1NTFaFw0yNTA0MjcwNDM3NTFaMDMxMTAvBgNV BAMTKDlGRDRGOTAzRDFDNTY1MEE1MTUzRDZCMDZBMkYwODE3QjFCRUVBQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiGD+TJ+WdZdi6xr+ciob/SUxU 17Vv0vuacGzwhOcCYL58OgdEcBUALJefmYPR5CY2P+uYj0vDzpXRMIC6V7a0b5B6 Y/X9DH+w8ulbJgTifHp2J/fTWDI4pNRsWt3kiA84JpYRaWTnMlcayCc3nkcVIKto tr8x/iDPAtLvOwl1oIRg+Wmz7pd6zso9RgkfjB2M2O9gxQMH9fOWLxpEaMKaKzvH GuBRUKpWso2ccfx1p0C/b/sZVWBlTcBpkC3+hiQQsetEFXRXA3N1LTx/1IhBv+4r Sq6X5joJUYCV5ZBhjgL+/Daz3UyfSvntvjy7TFReh5ir1uvL0hK4FEO0Cb9dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn9T5A9HFZQpRU9awai8IF7G+6qAwHwYDVR0j BBgwFoAUmv5XP+MpDfvi5k+s7CTce90WEHYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDIyZjY0OS05OTY4LTQ5NWQtYmRmMS03ZDc2MjU2ZGFhZDUvMS85QUZFNTczRkUz MjkwREZCRTJFNjRGQUNFQzI0REM3QkREMTYxMDc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUFGRTU3M0ZFMzI5MERGQkUyRTY0RkFDRUMyNERDN0JERDE2 MTA3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQyMmY2NDktOTk2OC00OTVkLWJk ZjEtN2Q3NjI1NmRhYWQ1LzEvOUFGRTU3M0ZFMzI5MERGQkUyRTY0RkFDRUMyNERD N0JERDE2MTA3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL5B/OBXAeMn+nJb/9qUE5B+Q75tHSjXp2/S gFeTb2TFJWOQlU+8nT0idfyc1ZHhoEF8x7wFD2U7DcYW0URFOCui/7xOK5HLvNKH Z/+NC6rxr7faNHl4ocpULnbBMeJ/SqT4wOSsX5lK7KtzyagRGhb5HlT2jzyroolw 9uNcgzkAQ8jz4qpI68NabxPOeIW8rK05rNH43D4rL3+tb3CpG4C0GVyHvZ6927Li kssFS8TlxZykbxSI5UOcdTwijv9EOGN0cuVdq1dOpEkxisDYsnYm/ZiTgcGfjQii JKIrOqdKcO5ftrMu0Z1lKy8xUFd7Bgw9W1ue3RAWrsf7u3KH0tA= -----END CERTIFICATE-----Generated at Thu Apr 24 04:31:38 2025 by rpki-client on console.sobornost.net