$ rpki-client -vvf repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft File: ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft (raw, json) Hash identifier: z+LQUSPSZxpmXePVhEuD4TvB0LCJ5tmn4aZi5aYU0mM= Subject key identifier: 10:F3:68:1A:A3:3D:EB:C8:17:6C:77:3C:69:E7:55:9E:A6:43:D6:24 Authority key identifier: AC:FB:1A:5D:99:38:A6:4B:3B:54:A8:32:D5:B7:9C:03:24:86:A7:59 Certificate issuer: /CN=ACFB1A5D9938A64B3B54A832D5B79C032486A759 Certificate serial: 41E39F0FBA5B3B56A5208E8CC650EFCBE846134F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/ACFB1A5D9938A64B3B54A832D5B79C032486A759.cer Subject info access: rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft Manifest number: 74 Signing time: Fri 25 Apr 2025 09:10:01 +0000 Manifest this update: Fri 25 Apr 2025 09:05:01 +0000 Manifest next update: Mon 28 Apr 2025 15:55:01 +0000 Files and hashes: 1: 3136302e32352e3135372e302f32342d3234203d3e20313533303835.roa (hash: Ga+yghCCzynYQRLXxC8Ud9CUE2ETMSKZ2vuWiIruJEs=) 2: ACFB1A5D9938A64B3B54A832D5B79C032486A759.crl (hash: qUSoIUuN62Sacl1xiqfi683O4o0Ogbici53pypcU+ts=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.crl rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/ACFB1A5D9938A64B3B54A832D5B79C032486A759.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 19:57:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:e3:9f:0f:ba:5b:3b:56:a5:20:8e:8c:c6:50:ef:cb:e8:46:13:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ACFB1A5D9938A64B3B54A832D5B79C032486A759 Validity Not Before: Apr 25 09:05:01 2025 GMT Not After : Apr 28 15:55:01 2025 GMT Subject: CN=10F3681AA33DEBC8176C773C69E7559EA643D624 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:cd:b8:86:f2:ec:68:3d:56:67:be:9f:47:f4: 5e:f8:e6:19:47:d0:64:cf:33:94:28:56:f3:42:49: e4:b0:2c:56:09:77:05:f4:84:15:ab:3c:5d:94:69: ef:55:de:88:09:d1:8b:e4:ab:0c:ac:4d:fb:10:6b: d1:d7:e0:c2:a4:40:ac:9e:8f:4a:42:b8:c7:30:4a: a7:f6:41:7c:95:ca:7a:19:b7:97:21:88:d8:73:b4: bb:17:e1:03:18:7c:3b:e9:e8:d7:34:cc:54:a3:da: 7d:bf:87:a2:e0:4f:3c:69:14:9b:d0:d0:cd:6f:c9: 60:fe:21:d5:b3:ce:95:13:18:3b:93:e2:e5:ad:8b: da:ff:cd:bf:b4:3e:52:59:ff:63:99:6e:a2:b2:de: 14:35:55:51:f2:45:88:bd:5b:a6:a1:91:32:9a:d2: 48:86:35:3d:bd:73:41:91:63:3c:24:1d:63:e3:b4: 44:f9:af:de:43:2d:13:e7:e6:eb:c9:4a:14:9b:75: aa:20:62:0a:e2:9b:68:7a:51:05:2e:b6:ba:ae:41: 66:fd:16:3b:92:f8:87:6c:78:38:af:65:b5:1e:fa: d3:0c:dc:c1:e5:c3:0d:6d:1f:69:25:69:69:e9:18: c5:e5:34:2f:24:03:b9:d9:bc:fe:ab:9a:6b:21:95: 13:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:F3:68:1A:A3:3D:EB:C8:17:6C:77:3C:69:E7:55:9E:A6:43:D6:24 X509v3 Authority Key Identifier: keyid:AC:FB:1A:5D:99:38:A6:4B:3B:54:A8:32:D5:B7:9C:03:24:86:A7:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/ACFB1A5D9938A64B3B54A832D5B79C032486A759.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:b7:fc:82:dd:59:b8:2f:1d:d2:48:07:1f:73:a9:13:61:7f: a2:54:9c:02:55:32:32:68:15:52:e1:6b:fc:d7:f0:9d:19:9e: 04:16:d8:b2:4c:87:07:c3:72:0a:d0:6b:5a:b2:22:5c:71:ba: 3a:9c:35:de:37:af:18:f0:5a:8e:1e:fa:4f:db:27:12:5f:b0: d9:e7:ac:cc:f4:12:3f:94:d0:1b:90:69:38:b6:91:51:a8:08: 08:20:9d:a7:62:9f:5e:17:d3:2a:d0:89:ea:5d:af:ae:bd:fa: 0b:ee:d3:87:c5:d9:3f:85:57:79:10:6d:49:bc:af:15:07:40: ce:67:f9:5a:39:72:eb:31:c8:96:99:a8:11:89:c5:00:3b:2e: fa:3c:4c:34:7b:b6:3d:ea:9a:9b:f4:f8:85:31:b3:e9:40:b0: 09:eb:95:55:37:61:d2:8b:43:3c:7d:18:6b:39:a4:ef:1e:b6: 9e:17:28:ce:61:6b:3a:ae:f7:64:c9:c4:b5:6e:eb:e0:08:a8: 08:c4:17:58:83:bc:30:81:9c:10:db:a0:0e:7e:51:ba:1f:82: 7c:e5:77:bd:ae:cb:78:e4:aa:b1:45:5e:5f:63:34:5a:20:d7: 02:d3:62:92:a1:52:43:21:de:81:3a:0f:7c:ef:ee:a9:01:8e: fa:af:d5:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQeOfD7pbO1alII6MxlDvy+hGE08wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUNGQjFBNUQ5OTM4QTY0QjNCNTRBODMyRDVCNzlDMDMy NDg2QTc1OTAeFw0yNTA0MjUwOTA1MDFaFw0yNTA0MjgxNTU1MDFaMDMxMTAvBgNV BAMTKDEwRjM2ODFBQTMzREVCQzgxNzZDNzczQzY5RTc1NTlFQTY0M0Q2MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyzbiG8uxoPVZnvp9H9F745hlH 0GTPM5QoVvNCSeSwLFYJdwX0hBWrPF2Uae9V3ogJ0YvkqwysTfsQa9HX4MKkQKye j0pCuMcwSqf2QXyVynoZt5chiNhztLsX4QMYfDvp6Nc0zFSj2n2/h6LgTzxpFJvQ 0M1vyWD+IdWzzpUTGDuT4uWti9r/zb+0PlJZ/2OZbqKy3hQ1VVHyRYi9W6ahkTKa 0kiGNT29c0GRYzwkHWPjtET5r95DLRPn5uvJShSbdaogYgrim2h6UQUutrquQWb9 FjuS+IdseDivZbUe+tMM3MHlww1tH2klaWnpGMXlNC8kA7nZvP6rmmshlRNrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEPNoGqM968gXbHc8aedVnqZD1iQwHwYDVR0j BBgwFoAUrPsaXZk4pks7VKgy1becAySGp1kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZTk1NGY0Mi05NDUyLTQyNDctOTlhNS0zMWE1M2U1NmE5ZjgvMC9BQ0ZCMUE1RDk5 MzhBNjRCM0I1NEE4MzJENUI3OUMwMzI0ODZBNzU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUNGQjFBNUQ5OTM4QTY0QjNCNTRBODMyRDVCNzlDMDMyNDg2 QTc1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmU5NTRmNDItOTQ1Mi00MjQ3LTk5 YTUtMzFhNTNlNTZhOWY4LzAvQUNGQjFBNUQ5OTM4QTY0QjNCNTRBODMyRDVCNzlD MDMyNDg2QTc1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ+3/ILdWbgvHdJIBx9zqRNhf6JUnAJVMjJo FVLha/zX8J0ZngQW2LJMhwfDcgrQa1qyIlxxujqcNd43rxjwWo4e+k/bJxJfsNnn rMz0Ej+U0BuQaTi2kVGoCAggnadin14X0yrQiepdr669+gvu04fF2T+FV3kQbUm8 rxUHQM5n+Vo5cusxyJaZqBGJxQA7Lvo8TDR7tj3qmpv0+IUxs+lAsAnrlVU3YdKL Qzx9GGs5pO8etp4XKM5hazqu92TJxLVu6+AIqAjEF1iDvDCBnBDboA5+Ubofgnzl d72uy3jkqrFFXl9jNFog1wLTYpKhUkMh3oE6D3zv7qkBjvqv1f0= -----END CERTIFICATE-----Generated at Fri Apr 25 12:54:06 2025 by rpki-client on console.sobornost.net