$ rpki-client -vvf repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft File: AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft (raw, json) Hash identifier: Vxx4S268MmdA+4gcI9hvw2VvEnuXAtww2Olwb7iG6DU= Subject key identifier: BD:23:7A:03:CF:2D:53:F8:4E:AB:63:4F:92:87:56:96:4F:16:24:B5 Authority key identifier: AE:12:58:1F:3D:20:A8:70:88:DA:AE:24:37:4C:C2:D8:FE:34:FA:12 Certificate issuer: /CN=AE12581F3D20A87088DAAE24374CC2D8FE34FA12 Certificate serial: 03685B8CDACA318B29AF5622E7877138F23C9988 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft Manifest number: 016F Signing time: Thu 24 Apr 2025 05:20:02 +0000 Manifest this update: Thu 24 Apr 2025 05:15:02 +0000 Manifest next update: Sun 27 Apr 2025 13:42:02 +0000 Files and hashes: 1: AE12581F3D20A87088DAAE24374CC2D8FE34FA12.crl (hash: lCdr2uFMANXubdInWUNRn2CV4n/j9AG9J9e/KbRpV5E=) 2: 3130332e3132312e39362e302f32332d3234203d3e20313335343738.roa (hash: IPfktJHuN8vFwv3vTFio1ygOZMMuBp50CVFsd7SC0h8=) 3: 3130332e3132312e39382e302f32332d3234203d3e20313335343738.roa (hash: Vt+xMHjG5YTpxuui1w1X3tQR1voBOHb2VX4CdiVJNBs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.crl rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 08:44:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:68:5b:8c:da:ca:31:8b:29:af:56:22:e7:87:71:38:f2:3c:99:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE12581F3D20A87088DAAE24374CC2D8FE34FA12 Validity Not Before: Apr 24 05:15:02 2025 GMT Not After : Apr 27 13:42:02 2025 GMT Subject: CN=BD237A03CF2D53F84EAB634F928756964F1624B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:97:51:0c:e8:1c:f1:df:70:ca:96:be:95:39: ca:f9:5a:56:67:c0:f8:bc:4d:88:5d:cb:19:b4:36: 59:cf:9a:24:25:59:1c:12:22:94:c3:36:ec:ec:ae: 3a:7e:00:60:5f:19:aa:00:58:28:a2:b5:84:5c:86: 94:e7:60:b4:fb:6f:de:2b:08:74:f6:91:d3:d4:db: 8c:8a:a6:4f:a8:45:47:51:7f:b7:96:f0:94:1a:0a: fa:89:9e:26:2d:fc:9e:c0:52:89:11:a8:d9:d1:9b: 7d:4b:f3:8e:ff:a5:c1:a1:37:19:28:03:8e:9d:7f: 39:d6:eb:8b:b0:96:d4:70:9f:28:40:af:dc:48:00: fa:bb:70:cc:10:17:42:9c:1a:e3:e2:23:2b:82:e0: 45:6d:7e:d2:4a:39:d0:b8:1c:d2:2f:21:ca:e0:24: 54:ef:eb:46:cd:f4:e5:81:ea:02:06:34:05:6b:60: 18:d2:cf:7d:75:b3:1f:26:f3:9b:e5:87:d4:98:aa: 58:9f:45:b8:41:03:63:3e:48:f5:a4:45:2d:75:8d: 46:b8:ab:3e:6c:34:4e:f6:ac:a1:81:ba:eb:55:fd: c7:27:3d:64:46:d6:4d:00:a0:4e:68:c8:17:71:bc: a9:51:aa:c9:3d:c9:62:08:4c:1b:36:b1:e9:9e:8b: d9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:23:7A:03:CF:2D:53:F8:4E:AB:63:4F:92:87:56:96:4F:16:24:B5 X509v3 Authority Key Identifier: keyid:AE:12:58:1F:3D:20:A8:70:88:DA:AE:24:37:4C:C2:D8:FE:34:FA:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:8b:8e:94:e4:a9:09:f1:db:53:23:c2:1e:fd:ef:8f:0e:c4: 26:f8:e3:5c:e9:75:de:26:80:98:1c:ed:9b:59:5e:9f:44:73: 5b:14:59:3e:99:df:90:fc:e2:70:20:de:2c:e3:16:f4:78:83: 25:4c:28:10:a1:e0:61:13:1d:5e:7f:85:c8:d2:b1:08:ee:c2: 14:1a:3c:20:6a:b2:31:79:5f:57:2a:5c:06:e7:fd:aa:4c:47: 56:99:47:0d:3e:60:37:1b:7d:a6:9c:dc:b5:d8:bc:04:73:79: 76:06:df:53:ec:a0:51:0e:d6:de:b9:f3:66:19:b9:f3:46:fe: b4:c8:cb:a2:31:4b:53:ac:9d:a6:11:f4:de:1e:46:e7:e0:9d: 45:9a:c3:1e:6f:67:2a:1a:98:56:d9:c9:6e:d3:bb:4c:ca:48: f0:ac:c8:55:ac:12:8e:b8:77:90:88:82:db:96:46:ec:dd:4c: 79:ec:9f:41:02:0e:6a:6b:10:24:a4:ed:52:89:94:89:e5:c2: 2a:a5:4f:33:d2:73:5c:88:13:72:12:01:ae:5f:05:77:75:93: e7:ff:b9:2c:af:6b:0c:5b:55:7d:ec:d0:02:07:2c:8e:a2:fd: f6:0f:91:3a:60:78:b6:5f:3b:bc:bc:38:d1:1d:9b:3f:e3:ff: a2:ad:8e:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA2hbjNrKMYspr1Yi54dxOPI8mYgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUxMjU4MUYzRDIwQTg3MDg4REFBRTI0Mzc0Q0MyRDhG RTM0RkExMjAeFw0yNTA0MjQwNTE1MDJaFw0yNTA0MjcxMzQyMDJaMDMxMTAvBgNV BAMTKEJEMjM3QTAzQ0YyRDUzRjg0RUFCNjM0RjkyODc1Njk2NEYxNjI0QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXl1EM6Bzx33DKlr6VOcr5WlZn wPi8TYhdyxm0NlnPmiQlWRwSIpTDNuzsrjp+AGBfGaoAWCiitYRchpTnYLT7b94r CHT2kdPU24yKpk+oRUdRf7eW8JQaCvqJniYt/J7AUokRqNnRm31L847/pcGhNxko A46dfznW64uwltRwnyhAr9xIAPq7cMwQF0KcGuPiIyuC4EVtftJKOdC4HNIvIcrg JFTv60bN9OWB6gIGNAVrYBjSz311sx8m85vlh9SYqlifRbhBA2M+SPWkRS11jUa4 qz5sNE72rKGBuutV/ccnPWRG1k0AoE5oyBdxvKlRqsk9yWIITBs2semei9ndAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvSN6A88tU/hOq2NPkodWlk8WJLUwHwYDVR0j BBgwFoAUrhJYHz0gqHCI2q4kN0zC2P40+hIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Mzc3NDYxZC1mZTRmLTQ5NjEtOTJlNS05NjU1YWYyNTc1NGEvMC9BRTEyNTgxRjNE MjBBODcwODhEQUFFMjQzNzRDQzJEOEZFMzRGQTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUUxMjU4MUYzRDIwQTg3MDg4REFBRTI0Mzc0Q0MyRDhGRTM0 RkExMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjM3NzQ2MWQtZmU0Zi00OTYxLTky ZTUtOTY1NWFmMjU3NTRhLzAvQUUxMjU4MUYzRDIwQTg3MDg4REFBRTI0Mzc0Q0My RDhGRTM0RkExMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGmLjpTkqQnx21Mjwh79748OxCb441zpdd4m gJgc7ZtZXp9Ec1sUWT6Z35D84nAg3izjFvR4gyVMKBCh4GETHV5/hcjSsQjuwhQa PCBqsjF5X1cqXAbn/apMR1aZRw0+YDcbfaac3LXYvARzeXYG31PsoFEO1t6582YZ ufNG/rTIy6IxS1OsnaYR9N4eRufgnUWawx5vZyoamFbZyW7Tu0zKSPCsyFWsEo64 d5CIgtuWRuzdTHnsn0ECDmprECSk7VKJlInlwiqlTzPSc1yIE3ISAa5fBXd1k+f/ uSyvawxbVX3s0AIHLI6i/fYPkTpgeLZfO7y8ONEdmz/j/6Ktjm8= -----END CERTIFICATE-----Generated at Thu Apr 24 09:03:03 2025 by rpki-client on console.sobornost.net