$ rpki-client -vvf repo-rpki.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/AEB84984B4021FC01344F3D02190FDED8607E7FA.mft File: AEB84984B4021FC01344F3D02190FDED8607E7FA.mft (raw, json) Hash identifier: mKWx9h5mBiqR5CiQQ4DyhVjdNEZ3ooqiOpVw5CwiFYY= Subject key identifier: 1C:27:31:F6:B3:A3:72:44:EA:79:ED:F9:7E:44:A6:24:3A:73:42:22 Authority key identifier: AE:B8:49:84:B4:02:1F:C0:13:44:F3:D0:21:90:FD:ED:86:07:E7:FA Certificate issuer: /CN=AEB84984B4021FC01344F3D02190FDED8607E7FA Certificate serial: 29BB881797CC50AA05E407FECEB5003B4A4B4FF7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEB84984B4021FC01344F3D02190FDED8607E7FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/AEB84984B4021FC01344F3D02190FDED8607E7FA.mft Manifest number: 0153 Signing time: Wed 23 Apr 2025 16:20:56 +0000 Manifest this update: Wed 23 Apr 2025 16:15:56 +0000 Manifest next update: Sun 27 Apr 2025 02:33:56 +0000 Files and hashes: 1: AEB84984B4021FC01344F3D02190FDED8607E7FA.crl (hash: ECN7/qVYulO4prHbVyl/z0LxKUzo2/TwNUGbo6b7e6c=) 2: 3130332e3132322e322e302f32342d3234203d3e20313430333839.roa (hash: tbN19feblT3PguVaZeJVSZOFHq52R/v7NXiFpVjRDJ4=) 3: 3130332e3132322e332e302f32342d3234203d3e20313430333839.roa (hash: H/C8JBNaVqOow9m1g+QZ6kwM7JKkj4ce0Cna5R3evE0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/AEB84984B4021FC01344F3D02190FDED8607E7FA.crl rsync://repo-rpki.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/AEB84984B4021FC01344F3D02190FDED8607E7FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEB84984B4021FC01344F3D02190FDED8607E7FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 02:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:bb:88:17:97:cc:50:aa:05:e4:07:fe:ce:b5:00:3b:4a:4b:4f:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEB84984B4021FC01344F3D02190FDED8607E7FA Validity Not Before: Apr 23 16:15:56 2025 GMT Not After : Apr 27 02:33:56 2025 GMT Subject: CN=1C2731F6B3A37244EA79EDF97E44A6243A734222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ec:ef:6f:18:d9:b0:ad:a3:31:1d:5a:39:cb: 1c:34:b5:1b:03:dc:69:a3:d0:ed:0c:6e:65:35:b8: f2:c6:a9:87:a0:95:21:0f:e7:65:a8:b2:bf:54:08: 19:f8:9d:d7:3f:03:00:e0:1b:c4:00:dd:29:47:ad: a2:5d:c4:fc:6d:e3:80:5d:7a:c3:fa:6f:cf:52:68: 7f:d9:80:05:6b:79:71:97:cd:2f:5b:e1:bf:36:2d: 71:55:f9:64:1c:72:86:e6:c9:ca:d3:69:a6:80:4d: b7:51:6a:e9:b6:b2:ac:53:fb:80:34:e8:bd:b4:94: ba:e9:61:04:75:89:98:7d:7a:ba:12:ca:11:30:00: 9f:e1:15:5e:6e:7c:94:a1:e8:de:84:80:78:6e:52: d6:71:f2:23:cd:a9:12:e4:21:71:be:05:b7:9a:8a: 0a:1c:42:6e:3d:da:67:fd:5a:47:45:64:51:39:45: 56:af:9e:3c:26:4c:35:46:67:38:7e:ff:a6:57:03: fa:43:70:f7:23:a4:84:50:0a:1f:b7:80:cf:0e:1f: 79:0b:8c:48:c7:47:03:98:07:16:c9:99:71:05:93: 88:e2:91:5d:d2:68:ed:8e:6e:73:d7:83:99:c9:a9: 8b:b6:bf:12:06:db:85:e2:b3:86:39:47:e1:3e:e7: 09:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:27:31:F6:B3:A3:72:44:EA:79:ED:F9:7E:44:A6:24:3A:73:42:22 X509v3 Authority Key Identifier: keyid:AE:B8:49:84:B4:02:1F:C0:13:44:F3:D0:21:90:FD:ED:86:07:E7:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/AEB84984B4021FC01344F3D02190FDED8607E7FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEB84984B4021FC01344F3D02190FDED8607E7FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/AEB84984B4021FC01344F3D02190FDED8607E7FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:30:59:de:e3:dd:c2:91:b9:01:62:70:2f:86:09:e7:03:50: 58:75:5f:67:3a:c5:c9:a9:19:19:56:3f:7d:25:5e:f7:45:23: 59:f5:c3:17:60:3d:cd:25:f6:ae:0a:dc:b2:2f:48:03:f0:db: d1:a7:9d:35:ce:9a:6a:c1:3b:ec:0d:79:8a:80:a3:04:92:c3: e9:89:80:82:fb:91:a9:bd:1f:8c:3f:f7:93:42:52:68:92:32: 96:f5:7a:77:da:cf:e6:5b:11:72:03:5e:34:47:c8:4d:11:c6: b3:58:28:8a:63:de:5f:c5:1e:03:92:d3:77:64:ba:72:82:5c: c6:d4:1f:ec:79:04:30:d1:11:98:b8:77:0e:f2:c3:af:ab:fe: 9b:71:3a:4f:29:3f:40:d8:19:fd:d4:82:bd:7b:3d:69:40:4d: b4:09:4a:69:87:3b:cb:0e:bd:48:69:ba:2d:4c:e2:8a:16:14: f4:2e:64:91:48:06:8c:35:1b:d3:1e:74:47:75:67:cb:95:3d: 4b:c9:cd:80:10:49:31:32:06:f4:ac:23:76:05:6a:58:e6:9f: a5:07:ee:9f:6f:41:c3:76:0c:cf:83:c3:68:57:de:53:81:67: 9b:f6:33:45:c5:06:6e:19:ee:18:bc:37:29:46:6f:da:5d:ee: fb:52:19:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKbuIF5fMUKoF5Af+zrUAO0pLT/cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVCODQ5ODRCNDAyMUZDMDEzNDRGM0QwMjE5MEZERUQ4 NjA3RTdGQTAeFw0yNTA0MjMxNjE1NTZaFw0yNTA0MjcwMjMzNTZaMDMxMTAvBgNV BAMTKDFDMjczMUY2QjNBMzcyNDRFQTc5RURGOTdFNDRBNjI0M0E3MzQyMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd7O9vGNmwraMxHVo5yxw0tRsD 3Gmj0O0MbmU1uPLGqYeglSEP52Wosr9UCBn4ndc/AwDgG8QA3SlHraJdxPxt44Bd esP6b89SaH/ZgAVreXGXzS9b4b82LXFV+WQccobmycrTaaaATbdRaum2sqxT+4A0 6L20lLrpYQR1iZh9eroSyhEwAJ/hFV5ufJSh6N6EgHhuUtZx8iPNqRLkIXG+Bbea igocQm492mf9WkdFZFE5RVavnjwmTDVGZzh+/6ZXA/pDcPcjpIRQCh+3gM8OH3kL jEjHRwOYBxbJmXEFk4jikV3SaO2ObnPXg5nJqYu2vxIG24Xis4Y5R+E+5wl7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHCcx9rOjckTqee35fkSmJDpzQiIwHwYDVR0j BBgwFoAUrrhJhLQCH8ATRPPQIZD97YYH5/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MjE5NTVmMC00YjQwLTRjM2ItOWZmZi05ZjkyNThjMzk3NWEvMC9BRUI4NDk4NEI0 MDIxRkMwMTM0NEYzRDAyMTkwRkRFRDg2MDdFN0ZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUVCODQ5ODRCNDAyMUZDMDEzNDRGM0QwMjE5MEZERUQ4NjA3 RTdGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjIxOTU1ZjAtNGI0MC00YzNiLTlm ZmYtOWY5MjU4YzM5NzVhLzAvQUVCODQ5ODRCNDAyMUZDMDEzNDRGM0QwMjE5MEZE RUQ4NjA3RTdGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFYwWd7j3cKRuQFicC+GCecDUFh1X2c6xcmp GRlWP30lXvdFI1n1wxdgPc0l9q4K3LIvSAPw29GnnTXOmmrBO+wNeYqAowSSw+mJ gIL7kam9H4w/95NCUmiSMpb1enfaz+ZbEXIDXjRHyE0RxrNYKIpj3l/FHgOS03dk unKCXMbUH+x5BDDREZi4dw7yw6+r/ptxOk8pP0DYGf3Ugr17PWlATbQJSmmHO8sO vUhpui1M4ooWFPQuZJFIBow1G9MedEd1Z8uVPUvJzYAQSTEyBvSsI3YFaljmn6UH 7p9vQcN2DM+Dw2hX3lOBZ5v2M0XFBm4Z7hi8NylGb9pd7vtSGUs= -----END CERTIFICATE-----Generated at Wed Apr 23 19:50:54 2025 by rpki-client on console.sobornost.net