$ rpki-client -vvf repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft File: AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft (raw, json) Hash identifier: +nmTZYNNeaBkB9IWGeyu5QiZW/G56BFpIeJH2R0HYJU= Subject key identifier: BE:46:01:25:C3:DA:0F:96:57:21:23:B0:1F:0F:65:7F:21:18:6F:9D Authority key identifier: AF:CE:E1:D4:39:DB:14:41:C4:F2:12:23:91:8A:C0:81:1E:65:D5:6F Certificate issuer: /CN=AFCEE1D439DB1441C4F21223918AC0811E65D56F Certificate serial: 73D509B7862738665F693E71820C6ED777074D91 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCEE1D439DB1441C4F21223918AC0811E65D56F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft Manifest number: 0272 Signing time: Thu 24 Apr 2025 20:01:39 +0000 Manifest this update: Thu 24 Apr 2025 19:56:39 +0000 Manifest next update: Mon 28 Apr 2025 04:23:39 +0000 Files and hashes: 1: 3130332e3137352e3138382e302f32332d3234203d3e20313334363538.roa (hash: nbrMCd1FrZtyUDsSqPOwiezNZhmsRsgvcmYK466mrE4=) 2: AFCEE1D439DB1441C4F21223918AC0811E65D56F.crl (hash: gqnwIPqfdETufmyDEUcAlBF0sqcuh9vwKZSn5YMyzA0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.crl rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCEE1D439DB1441C4F21223918AC0811E65D56F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:d5:09:b7:86:27:38:66:5f:69:3e:71:82:0c:6e:d7:77:07:4d:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFCEE1D439DB1441C4F21223918AC0811E65D56F Validity Not Before: Apr 24 19:56:39 2025 GMT Not After : Apr 28 04:23:39 2025 GMT Subject: CN=BE460125C3DA0F96572123B01F0F657F21186F9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1f:04:d1:60:17:5f:8c:e5:41:2b:90:76:ed: aa:21:16:fd:fd:a7:7e:82:ee:7f:24:de:1b:ef:88: 20:b0:db:8a:c4:db:c0:69:c2:44:a2:e2:8c:61:d6: 8a:27:d5:e2:d4:82:70:81:e3:a1:f2:7b:42:2a:df: d7:aa:5a:2f:b5:be:71:cc:a3:2a:71:a0:b5:da:0f: e7:f8:e0:cc:b0:8e:f2:ab:1c:85:b6:21:16:c2:b7: ac:d8:9b:7c:97:02:af:30:77:83:17:07:8b:f7:c3: c5:7a:c8:69:72:c1:bc:8d:dc:38:b2:e4:88:1a:77: 33:82:a6:75:29:d1:31:24:38:e6:d5:5a:62:64:f9: c6:28:ce:a3:28:4b:fa:4d:2b:06:fc:cd:5f:68:94: 4c:e5:87:73:fe:ee:3f:af:56:46:82:5c:31:85:a0: 49:a7:14:e8:6b:43:d4:d0:a9:01:14:dd:96:28:54: ce:63:c7:fc:4c:2f:8e:0c:db:9c:10:98:c5:f6:d6: 1a:fb:62:10:a0:d6:89:5b:45:b9:29:2e:d5:91:dd: f0:b2:23:32:8e:cf:5f:83:b4:d3:2b:e0:f8:22:2b: 86:ff:61:e7:ee:48:fd:a5:73:cc:ca:e1:fa:6a:f7: 13:e6:29:e6:d1:d3:35:02:5e:aa:94:2e:7e:d8:1f: e6:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:46:01:25:C3:DA:0F:96:57:21:23:B0:1F:0F:65:7F:21:18:6F:9D X509v3 Authority Key Identifier: keyid:AF:CE:E1:D4:39:DB:14:41:C4:F2:12:23:91:8A:C0:81:1E:65:D5:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCEE1D439DB1441C4F21223918AC0811E65D56F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:ef:0e:8b:a2:78:8f:ee:65:4d:1f:9e:80:b8:3b:8b:d1:b4: f6:4c:4a:b2:cd:90:2c:bd:09:1f:92:02:75:04:75:12:cb:7e: fb:fa:d9:6c:0f:63:78:8d:b7:55:a9:96:46:95:75:05:eb:40: 66:35:de:de:97:19:3a:50:19:04:13:2a:98:c0:1b:db:57:28: 60:df:22:b5:08:17:1e:79:a9:d8:ba:60:f7:6d:30:f8:8e:6f: c4:24:a8:8c:c9:3e:9b:18:36:ad:8f:58:72:4c:23:48:78:bc: df:08:96:b6:55:cb:b1:71:62:95:0d:f2:b6:a3:8d:9d:d8:1a: b8:8d:3c:13:8c:bb:02:22:1d:60:56:f4:93:e7:53:61:42:3a: 61:f5:a3:3f:4f:fa:81:b9:4c:3a:48:1b:a1:fb:be:ff:3f:5a: 6a:e9:b2:16:20:89:e8:25:64:11:88:da:11:bb:32:64:dd:57: 47:26:a6:1c:65:95:19:88:db:00:ae:2b:88:43:12:67:cc:69: 43:46:d2:78:26:61:f6:2f:6f:4f:cf:28:81:75:93:99:c0:3e: 79:b9:34:f8:de:f8:56:e6:44:95:4f:65:d9:13:fe:50:45:34: 0d:25:71:83:d3:b5:d9:2e:21:a2:8f:a2:97:de:6d:05:86:ee: 64:5b:55:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc9UJt4YnOGZfaT5xggxu13cHTZEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZDRUUxRDQzOURCMTQ0MUM0RjIxMjIzOTE4QUMwODEx RTY1RDU2RjAeFw0yNTA0MjQxOTU2MzlaFw0yNTA0MjgwNDIzMzlaMDMxMTAvBgNV BAMTKEJFNDYwMTI1QzNEQTBGOTY1NzIxMjNCMDFGMEY2NTdGMjExODZGOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEHwTRYBdfjOVBK5B27aohFv39 p36C7n8k3hvviCCw24rE28BpwkSi4oxh1oon1eLUgnCB46Hye0Iq39eqWi+1vnHM oypxoLXaD+f44MywjvKrHIW2IRbCt6zYm3yXAq8wd4MXB4v3w8V6yGlywbyN3Diy 5IgadzOCpnUp0TEkOObVWmJk+cYozqMoS/pNKwb8zV9olEzlh3P+7j+vVkaCXDGF oEmnFOhrQ9TQqQEU3ZYoVM5jx/xML44M25wQmMX21hr7YhCg1olbRbkpLtWR3fCy IzKOz1+DtNMr4PgiK4b/YefuSP2lc8zK4fpq9xPmKebR0zUCXqqULn7YH+YHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvkYBJcPaD5ZXISOwHw9lfyEYb50wHwYDVR0j BBgwFoAUr87h1DnbFEHE8hIjkYrAgR5l1W8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OWY2MDkyNy0xZjM0LTRjNTQtOTY3NC1mOWRlYWY3NWMyZmMvMC9BRkNFRTFENDM5 REIxNDQxQzRGMjEyMjM5MThBQzA4MTFFNjVENTZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUZDRUUxRDQzOURCMTQ0MUM0RjIxMjIzOTE4QUMwODExRTY1 RDU2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjlmNjA5MjctMWYzNC00YzU0LTk2 NzQtZjlkZWFmNzVjMmZjLzAvQUZDRUUxRDQzOURCMTQ0MUM0RjIxMjIzOTE4QUMw ODExRTY1RDU2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIHvDouieI/uZU0fnoC4O4vRtPZMSrLNkCy9 CR+SAnUEdRLLfvv62WwPY3iNt1WplkaVdQXrQGY13t6XGTpQGQQTKpjAG9tXKGDf IrUIFx55qdi6YPdtMPiOb8QkqIzJPpsYNq2PWHJMI0h4vN8IlrZVy7FxYpUN8raj jZ3YGriNPBOMuwIiHWBW9JPnU2FCOmH1oz9P+oG5TDpIG6H7vv8/WmrpshYgiegl ZBGI2hG7MmTdV0cmphxllRmI2wCuK4hDEmfMaUNG0ngmYfYvb0/PKIF1k5nAPnm5 NPje+FbmRJVPZdkT/lBFNA0lcYPTtdkuIaKPopfebQWG7mRbVQU= -----END CERTIFICATE-----Generated at Fri Apr 25 00:06:29 2025 by rpki-client on console.sobornost.net