$ rpki-client -vvf repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.mft File: 0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.mft (raw, json) Hash identifier: JgjC6SWabHsKepZiChbwBtzdUgsthzElzikolaxjYfQ= Subject key identifier: 34:7C:70:A1:A6:3D:42:D9:AA:3F:E5:32:EB:60:1A:A8:CA:03:CF:78 Authority key identifier: 0A:FD:8F:6B:02:40:5F:4D:E9:A9:46:84:0C:C5:AE:2E:6A:C8:E4:0C Certificate issuer: /CN=0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C Certificate serial: 3E6B538A879AE74C84384A15432988BBC6D215A5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.mft Manifest number: 0425 Signing time: Thu 24 Apr 2025 03:10:02 +0000 Manifest this update: Thu 24 Apr 2025 03:05:02 +0000 Manifest next update: Sun 27 Apr 2025 13:51:02 +0000 Files and hashes: 1: 0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.crl (hash: P2bR09S8SY2m9F9G/98UC9avjxTZbULGfdrR08Ao2Ic=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.crl rsync://repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 08:44:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:6b:53:8a:87:9a:e7:4c:84:38:4a:15:43:29:88:bb:c6:d2:15:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C Validity Not Before: Apr 24 03:05:02 2025 GMT Not After : Apr 27 13:51:02 2025 GMT Subject: CN=347C70A1A63D42D9AA3FE532EB601AA8CA03CF78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c8:5c:15:01:cb:4a:0f:f7:0c:6a:87:4a:b8: 86:6f:9b:95:5c:38:56:b7:82:2a:94:04:aa:51:95: b3:19:61:bf:d8:90:d2:00:0e:ae:e9:71:12:0b:8d: ac:33:c9:0d:a4:05:cb:8a:af:a0:98:cb:57:bc:83: 8a:3b:34:7e:f4:9e:d1:2f:4c:46:61:f0:5a:f0:58: 08:82:33:6d:c6:ae:eb:bc:35:f8:31:4f:a9:4e:0d: 9f:23:26:38:74:83:90:f5:6b:7b:3a:f2:33:e0:ba: a5:14:27:9b:7d:6e:7c:7f:54:d5:48:10:9c:dd:21: 7d:39:a3:46:8c:3f:ae:56:42:4e:c0:6c:4a:9f:94: ed:bd:4c:c7:51:cd:de:9b:9f:61:ee:d9:f2:2e:47: 3e:dc:a3:61:b7:c2:4e:e2:5b:8d:b5:d4:73:a4:57: ca:a4:ab:4b:e0:cc:b1:0d:52:b9:02:ed:31:27:3a: a1:80:3e:62:ca:0d:4b:cd:67:67:ca:e1:ac:75:a7: 02:9b:b8:e0:bd:0e:23:01:9e:f6:bf:2d:82:84:1f: a6:36:91:59:ec:9f:a0:77:f0:72:28:f0:6d:6f:3a: bb:b7:a7:8d:85:d1:be:b9:76:8c:e7:3b:ce:55:63: 9c:b5:b2:e4:3f:58:38:28:26:3f:db:ab:9f:68:67: 37:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:7C:70:A1:A6:3D:42:D9:AA:3F:E5:32:EB:60:1A:A8:CA:03:CF:78 X509v3 Authority Key Identifier: keyid:0A:FD:8F:6B:02:40:5F:4D:E9:A9:46:84:0C:C5:AE:2E:6A:C8:E4:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:b2:ae:55:12:34:02:52:8b:1e:8a:ca:cb:f3:74:03:fc:1e: 15:79:b9:79:0a:3c:e0:68:3b:04:05:b5:8e:e2:e6:d1:f3:7a: 24:5e:c5:ab:85:24:3d:be:66:93:d6:b5:e4:39:15:18:b5:13: 8b:a0:38:41:c6:5e:6a:fc:71:22:13:bd:ba:67:68:b1:00:e0: bc:f0:9c:44:6a:ab:83:f0:aa:de:e9:0c:f3:69:ad:fe:ee:4a: e9:4b:68:5c:98:a2:34:bd:23:29:ff:3f:3c:97:02:25:b8:8a: 2d:62:a6:1a:76:89:50:e4:de:15:b2:97:99:3c:cf:9d:93:db: 2e:82:be:31:ae:db:40:c9:04:24:e9:92:7d:f3:9a:59:01:dd: 2b:ee:b0:bc:6f:8d:fb:5e:d9:b0:97:c3:2d:00:10:b1:81:c2: cb:bd:42:a7:b6:be:a7:7c:f6:24:97:75:e5:ab:90:7f:d2:5f: e3:9a:d3:73:b4:18:1c:9b:fb:55:59:75:1a:20:5e:5a:d0:98: 29:e3:51:5d:88:ef:65:ed:d2:55:a3:6f:b1:49:ce:21:c2:4f: e6:b4:83:35:53:06:af:64:4a:bd:6c:5e:c3:a7:13:92:82:b3: db:90:46:68:47:72:4b:42:40:2a:74:35:dc:1a:d8:58:5a:cb: e1:ef:ef:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPmtTioea50yEOEoVQymIu8bSFaUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEFGRDhGNkIwMjQwNUY0REU5QTk0Njg0MENDNUFFMkU2 QUM4RTQwQzAeFw0yNTA0MjQwMzA1MDJaFw0yNTA0MjcxMzUxMDJaMDMxMTAvBgNV BAMTKDM0N0M3MEExQTYzRDQyRDlBQTNGRTUzMkVCNjAxQUE4Q0EwM0NGNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpyFwVActKD/cMaodKuIZvm5Vc OFa3giqUBKpRlbMZYb/YkNIADq7pcRILjawzyQ2kBcuKr6CYy1e8g4o7NH70ntEv TEZh8FrwWAiCM23Gruu8NfgxT6lODZ8jJjh0g5D1a3s68jPguqUUJ5t9bnx/VNVI EJzdIX05o0aMP65WQk7AbEqflO29TMdRzd6bn2Hu2fIuRz7co2G3wk7iW4211HOk V8qkq0vgzLENUrkC7TEnOqGAPmLKDUvNZ2fK4ax1pwKbuOC9DiMBnva/LYKEH6Y2 kVnsn6B38HIo8G1vOru3p42F0b65doznO85VY5y1suQ/WDgoJj/bq59oZzf3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNHxwoaY9QtmqP+Uy62AaqMoDz3gwHwYDVR0j BBgwFoAUCv2PawJAX03pqUaEDMWuLmrI5AwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NDdjNmVjYi0wYmFlLTQ1YzMtYWFkYS00M2E2YTE3MWMwNDYvMC8wQUZEOEY2QjAy NDA1RjRERTlBOTQ2ODQwQ0M1QUUyRTZBQzhFNDBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEFGRDhGNkIwMjQwNUY0REU5QTk0Njg0MENDNUFFMkU2QUM4 RTQwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTQ3YzZlY2ItMGJhZS00NWMzLWFh ZGEtNDNhNmExNzFjMDQ2LzAvMEFGRDhGNkIwMjQwNUY0REU5QTk0Njg0MENDNUFF MkU2QUM4RTQwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAayrlUSNAJSix6KysvzdAP8HhV5uXkKPOBo OwQFtY7i5tHzeiRexauFJD2+ZpPWteQ5FRi1E4ugOEHGXmr8cSITvbpnaLEA4Lzw nERqq4Pwqt7pDPNprf7uSulLaFyYojS9Iyn/PzyXAiW4ii1iphp2iVDk3hWyl5k8 z52T2y6CvjGu20DJBCTpkn3zmlkB3SvusLxvjfte2bCXwy0AELGBwsu9Qqe2vqd8 9iSXdeWrkH/SX+Oa03O0GByb+1VZdRogXlrQmCnjUV2I72Xt0lWjb7FJziHCT+a0 gzVTBq9kSr1sXsOnE5KCs9uQRmhHcktCQCp0Ndwa2Fhay+Hv78A= -----END CERTIFICATE-----Generated at Thu Apr 24 06:49:50 2025 by rpki-client on console.sobornost.net