$ rpki-client -vvf repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft File: AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft (raw, json) Hash identifier: V1P5TLpytm05e15EEJ/KKhWaYg40Dp6vDt5niV7uaCI= Subject key identifier: B0:DB:4D:25:D8:66:2A:DD:D4:35:25:13:05:DC:7D:7F:AA:B1:2F:12 Authority key identifier: AF:A7:AE:3D:79:0A:1F:0C:91:4B:83:99:E4:69:5F:4D:63:42:B4:C3 Certificate issuer: /CN=AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3 Certificate serial: 1A66317A832A0AAF02B882C12DA3F7DBFEB60F30 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft Manifest number: AD Signing time: Thu 24 Apr 2025 09:41:24 +0000 Manifest this update: Thu 24 Apr 2025 09:36:24 +0000 Manifest next update: Sun 27 Apr 2025 10:37:24 +0000 Files and hashes: 1: AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.crl (hash: 7sWEN/UriysAcizq8YI0briPAEsQ+ExG9w5YLMnTsdw=) 2: 3135372e31302e3138312e302f32342d3234203d3e20313532333439.roa (hash: JcxcaxwKLkaXPPx4myqNJpdCaATZRCOkTz9pp1mz/yI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.crl rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 10:32:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:66:31:7a:83:2a:0a:af:02:b8:82:c1:2d:a3:f7:db:fe:b6:0f:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3 Validity Not Before: Apr 24 09:36:24 2025 GMT Not After : Apr 27 10:37:24 2025 GMT Subject: CN=B0DB4D25D8662ADDD435251305DC7D7FAAB12F12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5b:38:ce:f2:04:47:b3:30:b5:29:ce:1e:68: f0:44:ab:09:bb:31:5d:8c:e5:02:1c:d9:78:49:08: 82:ec:16:5c:f9:37:7c:3d:14:9f:fa:fc:ac:54:b7: 13:af:76:c3:ac:df:b7:fe:61:16:37:b3:f1:1c:ab: 69:70:7f:ca:d4:9f:92:06:27:32:41:ac:39:f3:0c: 59:e3:84:e9:c9:63:6a:ad:dd:0d:e0:b9:36:52:2d: fe:58:6e:1a:fa:3c:0f:87:f7:ed:ec:d7:d3:50:1b: b7:c8:10:48:08:1f:2e:ba:a1:07:63:87:3f:2e:d6: 65:90:c0:4a:bb:fe:3e:87:0c:2f:e5:a9:c5:d9:95: 91:e0:b3:05:bc:0b:70:37:d7:a5:42:40:87:23:28: bc:c1:ff:3c:93:66:11:5d:23:34:16:2e:ff:02:9a: c4:bf:a8:49:48:d9:1c:ce:84:94:d5:1b:bf:a9:88: bd:3e:05:e3:f1:6c:e3:92:bb:c1:e4:f0:99:28:db: 49:07:51:05:8e:ab:50:6d:55:82:e1:4d:7a:44:38: e6:30:96:ed:2b:df:56:52:4f:06:a6:c4:50:08:62: 88:55:91:77:d0:37:ca:c6:62:b6:0c:cc:8a:be:01: f9:fe:22:4b:3d:f5:9b:2e:3e:0a:e0:fd:3d:1d:d9: 4b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:DB:4D:25:D8:66:2A:DD:D4:35:25:13:05:DC:7D:7F:AA:B1:2F:12 X509v3 Authority Key Identifier: keyid:AF:A7:AE:3D:79:0A:1F:0C:91:4B:83:99:E4:69:5F:4D:63:42:B4:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:1d:c3:d9:71:00:e3:59:70:c5:5e:b7:e0:a9:71:70:da:4a: ea:53:f7:a0:d2:7a:ca:ca:07:3d:81:10:99:b2:9a:1e:1e:db: ad:5a:51:0a:c0:89:8c:83:91:6c:99:45:9e:22:e1:a0:1c:ad: 09:d1:83:18:6f:68:50:b3:d9:f4:c9:f8:f6:9f:eb:e6:07:cb: f4:ce:5d:15:d5:7b:56:b9:ef:b2:c6:2d:98:96:27:10:ce:5f: 95:30:ae:6a:e7:93:9e:a6:62:5a:5b:45:7c:39:8b:04:b1:0d: f1:c5:e8:57:97:87:bb:5d:a9:b6:4d:a3:19:c0:7b:46:8a:c6: c1:7a:c4:74:24:5c:4c:ee:d2:97:27:06:4b:34:84:36:7b:38: cc:32:9d:9c:c3:3e:54:bd:53:64:16:8b:fd:c5:0c:84:7b:6f: 05:ef:be:f7:76:5e:55:3f:a2:80:d3:96:9e:db:50:62:f0:3a: 77:22:32:ab:9b:9c:1c:19:e1:0d:a3:56:c5:bd:91:0c:32:fe: 71:75:53:5c:62:62:b8:83:96:59:4f:c1:97:af:44:87:ae:11: 49:fa:d2:93:23:48:ea:8f:99:b3:aa:ba:84:9c:67:70:8a:0e: 0b:9d:68:af:90:fb:6a:ec:9d:7f:72:cb:97:98:a4:14:56:94: 61:df:dc:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGmYxeoMqCq8CuILBLaP32/62DzAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZBN0FFM0Q3OTBBMUYwQzkxNEI4Mzk5RTQ2OTVGNEQ2 MzQyQjRDMzAeFw0yNTA0MjQwOTM2MjRaFw0yNTA0MjcxMDM3MjRaMDMxMTAvBgNV BAMTKEIwREI0RDI1RDg2NjJBRERENDM1MjUxMzA1REM3RDdGQUFCMTJGMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgWzjO8gRHszC1Kc4eaPBEqwm7 MV2M5QIc2XhJCILsFlz5N3w9FJ/6/KxUtxOvdsOs37f+YRY3s/Ecq2lwf8rUn5IG JzJBrDnzDFnjhOnJY2qt3Q3guTZSLf5Ybhr6PA+H9+3s19NQG7fIEEgIHy66oQdj hz8u1mWQwEq7/j6HDC/lqcXZlZHgswW8C3A316VCQIcjKLzB/zyTZhFdIzQWLv8C msS/qElI2RzOhJTVG7+piL0+BePxbOOSu8Hk8Jko20kHUQWOq1BtVYLhTXpEOOYw lu0r31ZSTwamxFAIYohVkXfQN8rGYrYMzIq+Afn+Iks99ZsuPgrg/T0d2UszAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsNtNJdhmKt3UNSUTBdx9f6qxLxIwHwYDVR0j BBgwFoAUr6euPXkKHwyRS4OZ5GlfTWNCtMMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OTBkMDI2NS0yY2MxLTQ2M2QtOTQ4Yi1jZGVkMTNhMjAyOTUvMC9BRkE3QUUzRDc5 MEExRjBDOTE0QjgzOTlFNDY5NUY0RDYzNDJCNEMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUZBN0FFM0Q3OTBBMUYwQzkxNEI4Mzk5RTQ2OTVGNEQ2MzQy QjRDMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjkwZDAyNjUtMmNjMS00NjNkLTk0 OGItY2RlZDEzYTIwMjk1LzAvQUZBN0FFM0Q3OTBBMUYwQzkxNEI4Mzk5RTQ2OTVG NEQ2MzQyQjRDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHUdw9lxAONZcMVet+CpcXDaSupT96DSesrK Bz2BEJmymh4e261aUQrAiYyDkWyZRZ4i4aAcrQnRgxhvaFCz2fTJ+Paf6+YHy/TO XRXVe1a577LGLZiWJxDOX5Uwrmrnk56mYlpbRXw5iwSxDfHF6FeXh7tdqbZNoxnA e0aKxsF6xHQkXEzu0pcnBks0hDZ7OMwynZzDPlS9U2QWi/3FDIR7bwXvvvd2XlU/ ooDTlp7bUGLwOnciMqubnBwZ4Q2jVsW9kQwy/nF1U1xiYriDlllPwZevRIeuEUn6 0pMjSOqPmbOquoScZ3CKDgudaK+Q+2rsnX9yy5eYpBRWlGHf3CQ= -----END CERTIFICATE-----Generated at Thu Apr 24 11:25:24 2025 by rpki-client on console.sobornost.net