$ rpki-client -vvf repo-rpki.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.mft File: AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.mft (raw, json) Hash identifier: LGPDcY1FB+GagunefXmgHvKrPb2FQymVPK5drYBMMSc= Subject key identifier: EB:EC:5F:C5:7B:34:4D:2C:AE:A9:68:26:27:1E:6C:11:3F:9E:B8:40 Authority key identifier: AF:DF:D5:D1:C4:B3:9F:2F:AA:BB:A5:BC:15:23:4C:2B:12:43:BF:FB Certificate issuer: /CN=AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB Certificate serial: 5DBA2FA34A2A719661A26A5AC2D33A62B9E62246 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.mft Manifest number: 0377 Signing time: Fri 25 Apr 2025 08:51:26 +0000 Manifest this update: Fri 25 Apr 2025 08:46:26 +0000 Manifest next update: Mon 28 Apr 2025 19:59:26 +0000 Files and hashes: 1: AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.crl (hash: PygP6mn+1FCXX0Pmb28eqo+ypdr5J4QwsxqzfO5WOVQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.crl rsync://repo-rpki.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 14:02:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:ba:2f:a3:4a:2a:71:96:61:a2:6a:5a:c2:d3:3a:62:b9:e6:22:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB Validity Not Before: Apr 25 08:46:26 2025 GMT Not After : Apr 28 19:59:26 2025 GMT Subject: CN=EBEC5FC57B344D2CAEA96826271E6C113F9EB840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:8a:1e:f3:c1:75:b4:27:73:07:1f:ab:05:86: e9:e1:f1:ef:56:4c:07:70:8c:89:ae:1e:3a:c6:43: e5:ad:6d:a0:c8:d9:5a:4b:27:63:d2:ca:73:0e:ef: 2a:0a:c8:fa:5a:94:2e:38:7f:a3:f5:00:dc:38:95: 28:d6:29:0d:d1:04:4b:85:fa:af:ed:fe:5f:61:d4: dc:14:ae:cc:c6:af:dc:b3:5d:82:4f:2a:59:56:0d: ec:cb:cf:64:10:ad:63:6a:a2:2d:45:be:6a:8e:52: a7:07:0a:cf:66:7b:2b:40:d6:c5:d4:4c:e1:16:98: 83:0d:06:41:e0:24:0a:41:d8:4f:cf:70:08:15:8e: e5:63:45:8b:f7:bf:cd:36:27:97:a6:40:63:38:9d: 21:dd:27:24:e9:17:83:e7:f3:dc:91:27:e5:51:a6: 25:71:a6:ff:f0:b4:4e:fb:be:09:12:03:4e:b8:b4: a2:d0:53:da:f5:49:45:53:a2:d8:94:63:18:34:ed: ce:7e:d3:ac:0b:3c:fb:63:09:22:84:cb:0a:39:b2: 69:48:c1:2e:1c:ac:06:18:57:f0:73:d7:c6:8e:c0: 70:3f:29:cb:33:3d:12:89:35:df:3b:55:7f:58:b8: 0d:87:72:19:71:16:d9:bf:ee:57:c1:91:cb:07:38: 7d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:EC:5F:C5:7B:34:4D:2C:AE:A9:68:26:27:1E:6C:11:3F:9E:B8:40 X509v3 Authority Key Identifier: keyid:AF:DF:D5:D1:C4:B3:9F:2F:AA:BB:A5:BC:15:23:4C:2B:12:43:BF:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:cf:fc:a1:f1:38:10:f1:c6:ea:57:99:4c:17:f9:c9:22:72: 46:5c:9f:95:c7:8d:98:3c:9e:af:5e:8e:13:e6:c9:71:33:57: cc:62:0c:4f:66:ba:1d:bf:ed:89:9f:eb:8a:5a:b1:b8:b4:14: 46:70:5b:47:5e:c5:70:18:fb:4b:2d:87:e3:01:64:42:00:80: 49:cb:5d:c3:c7:2a:3e:0c:96:d0:12:78:cf:2c:74:e7:ac:e9: 21:d0:6b:8c:c5:42:1e:66:49:97:78:76:18:92:b3:f7:9f:6b: 08:79:95:c2:aa:9b:0e:60:0e:3b:9e:0e:b2:86:45:27:e9:e8: 5f:8c:4d:1f:47:ba:e3:d8:23:8c:0f:61:3b:6a:24:48:84:64: a3:f5:34:9c:bd:c5:73:33:96:10:46:a7:f5:1c:b6:8f:86:c9: 20:19:07:6a:30:cc:f8:8a:02:d2:4b:72:cc:9f:4e:80:8b:a5: 03:ce:50:06:68:b7:e3:9c:5e:4a:45:49:e0:88:75:53:b2:c5: 04:a4:5b:f9:64:df:7b:95:34:b2:04:2c:65:29:e5:79:73:2d: 5e:ff:63:81:9e:27:2f:ca:b6:b3:1d:9f:a3:3d:61:24:33:a1: f9:a9:20:5d:e9:ca:10:43:ec:aa:5c:6e:43:fc:86:0e:41:9d: fb:73:d5:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXbovo0oqcZZhompawtM6YrnmIkYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZERkQ1RDFDNEIzOUYyRkFBQkJBNUJDMTUyMzRDMkIx MjQzQkZGQjAeFw0yNTA0MjUwODQ2MjZaFw0yNTA0MjgxOTU5MjZaMDMxMTAvBgNV BAMTKEVCRUM1RkM1N0IzNDREMkNBRUE5NjgyNjI3MUU2QzExM0Y5RUI4NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYih7zwXW0J3MHH6sFhunh8e9W TAdwjImuHjrGQ+WtbaDI2VpLJ2PSynMO7yoKyPpalC44f6P1ANw4lSjWKQ3RBEuF +q/t/l9h1NwUrszGr9yzXYJPKllWDezLz2QQrWNqoi1FvmqOUqcHCs9meytA1sXU TOEWmIMNBkHgJApB2E/PcAgVjuVjRYv3v802J5emQGM4nSHdJyTpF4Pn89yRJ+VR piVxpv/wtE77vgkSA064tKLQU9r1SUVTotiUYxg07c5+06wLPPtjCSKEywo5smlI wS4crAYYV/Bz18aOwHA/KcszPRKJNd87VX9YuA2HchlxFtm/7lfBkcsHOH0RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6+xfxXs0TSyuqWgmJx5sET+euEAwHwYDVR0j BBgwFoAUr9/V0cSzny+qu6W8FSNMKxJDv/swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NGZlMTgxMS1jMDNmLTQ5ZDgtOTIxNy0xM2ZmMjJhMzFlYmUvMC9BRkRGRDVEMUM0 QjM5RjJGQUFCQkE1QkMxNTIzNEMyQjEyNDNCRkZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUZERkQ1RDFDNEIzOUYyRkFBQkJBNUJDMTUyMzRDMkIxMjQz QkZGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTRmZTE4MTEtYzAzZi00OWQ4LTky MTctMTNmZjIyYTMxZWJlLzAvQUZERkQ1RDFDNEIzOUYyRkFBQkJBNUJDMTUyMzRD MkIxMjQzQkZGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIPP/KHxOBDxxupXmUwX+ckickZcn5XHjZg8 nq9ejhPmyXEzV8xiDE9muh2/7Ymf64pasbi0FEZwW0dexXAY+0sth+MBZEIAgEnL XcPHKj4MltASeM8sdOes6SHQa4zFQh5mSZd4dhiSs/efawh5lcKqmw5gDjueDrKG RSfp6F+MTR9HuuPYI4wPYTtqJEiEZKP1NJy9xXMzlhBGp/Ucto+GySAZB2owzPiK AtJLcsyfToCLpQPOUAZot+OcXkpFSeCIdVOyxQSkW/lk33uVNLIELGUp5XlzLV7/ Y4GeJy/KtrMdn6M9YSQzofmpIF3pyhBD7KpcbkP8hg5Bnftz1dk= -----END CERTIFICATE-----Generated at Fri Apr 25 10:36:52 2025 by rpki-client on console.sobornost.net