$ rpki-client -vvf repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft File: AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft (raw, json) Hash identifier: 0SPusMY7/ftkgwU603k8WeGHEotm6/M19FfFwuZXa3M= Subject key identifier: E8:E9:15:4F:10:6B:6D:CE:C4:D0:11:9C:2B:6A:2D:BE:A2:8A:2A:B2 Authority key identifier: AF:95:8D:E0:EC:E8:30:B2:C0:7C:1A:58:CE:91:5F:DB:82:C3:C2:F6 Certificate issuer: /CN=AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6 Certificate serial: 21A748813AE53CCD23E90F2FE0610E75C207803A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft Manifest number: 024A Signing time: Wed 23 Apr 2025 21:22:04 +0000 Manifest this update: Wed 23 Apr 2025 21:17:04 +0000 Manifest next update: Sun 27 Apr 2025 06:00:04 +0000 Files and hashes: 1: 3130332e3137322e32332e302f32342d3234203d3e20313437313237.roa (hash: 8PoVgFfgdv0P+Y4Af6XkrWx9EOtSeERWvAdTwZHIcYM=) 2: AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.crl (hash: 4Q+b0Bm8ECfZO3ncfpOW9uPEbCRXDtxJGayQqwPv290=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.crl rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 02:40:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:a7:48:81:3a:e5:3c:cd:23:e9:0f:2f:e0:61:0e:75:c2:07:80:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6 Validity Not Before: Apr 23 21:17:04 2025 GMT Not After : Apr 27 06:00:04 2025 GMT Subject: CN=E8E9154F106B6DCEC4D0119C2B6A2DBEA28A2AB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:cb:b7:9a:4f:78:31:a2:b4:7f:c4:1c:2a:e9: 8c:19:5e:de:0d:5e:31:35:08:cf:ca:0c:33:d8:b3: ce:a4:87:67:0d:27:cc:1d:b9:e9:6e:cb:65:68:c3: a1:84:e8:d1:1a:1c:00:54:43:8b:78:70:c5:ff:3a: 66:10:c8:70:23:42:14:66:4b:35:5f:d8:e9:27:3f: 9a:d7:2a:44:5b:84:3e:51:46:b3:84:1d:94:1b:fc: f0:52:61:a0:17:ec:07:99:ed:6f:ed:15:e0:57:57: 34:22:e9:bc:92:a8:57:e8:86:ec:1b:4d:86:26:72: c0:e6:77:4e:e7:33:24:12:6c:e8:02:8a:fa:89:89: 86:88:54:8e:a3:2d:07:77:48:29:04:e8:dc:7e:5b: a1:1c:7f:18:13:d2:0d:d4:3e:c4:37:e7:9d:58:b5: fc:2e:80:39:00:5f:7d:76:34:a5:fa:e4:44:2c:80: 63:5f:0b:ac:41:89:c9:6e:0a:a8:2d:fb:25:26:64: af:3e:bc:db:2e:5e:b9:98:30:14:8e:72:5c:67:99: 6b:5d:49:64:16:3e:ee:6b:08:f3:fa:fe:fc:4f:50: 54:62:43:8e:88:1e:9d:15:ab:c7:e7:5c:1b:cb:d0: 0d:71:3d:fd:05:c3:ac:2c:d1:49:e6:c4:a0:25:7b: 11:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:E9:15:4F:10:6B:6D:CE:C4:D0:11:9C:2B:6A:2D:BE:A2:8A:2A:B2 X509v3 Authority Key Identifier: keyid:AF:95:8D:E0:EC:E8:30:B2:C0:7C:1A:58:CE:91:5F:DB:82:C3:C2:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:3f:f4:07:08:b9:c5:f6:96:81:0b:f8:74:0b:10:df:1f:0d: f3:61:44:92:f8:9e:ec:2c:a5:69:06:ab:7c:42:a8:57:18:eb: 7a:d7:22:8a:fe:05:4c:27:8e:0c:37:da:d6:61:d5:55:33:ae: b1:b8:13:cf:f3:a3:89:41:d5:61:6d:44:13:ef:0d:8d:b2:fb: 8f:ec:a5:01:ba:c2:43:f0:8b:2d:98:65:83:49:9a:c2:46:cb: da:99:7e:55:0d:5d:71:ee:55:4f:f0:0d:6e:d4:6c:83:84:03: 59:6b:cd:aa:7f:d9:de:5d:c8:da:3d:fb:60:05:2a:e4:72:0e: a6:7b:43:0e:76:33:b7:1d:a9:1b:98:1f:56:de:aa:ca:7e:cb: 96:9f:71:54:62:8e:90:a2:ca:22:c4:63:5e:4b:f7:e9:c6:a6: f6:ba:b2:1f:04:1a:66:53:05:02:0c:8a:a7:25:b9:b3:5b:a3: a1:8d:1e:2f:68:17:2e:20:3b:70:64:c1:81:18:5c:06:8a:d2: 5c:4d:e9:29:29:bc:ee:9e:be:2a:8a:53:b5:52:a2:b5:81:42: 3f:ea:49:37:4f:a3:ff:76:c3:5a:4d:33:75:c5:c4:0b:e5:20: d2:c4:57:71:45:df:fd:2d:f7:2f:ad:9a:30:d9:c5:73:1f:ec: 98:fc:2f:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIadIgTrlPM0j6Q8v4GEOdcIHgDowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY5NThERTBFQ0U4MzBCMkMwN0MxQTU4Q0U5MTVGREI4 MkMzQzJGNjAeFw0yNTA0MjMyMTE3MDRaFw0yNTA0MjcwNjAwMDRaMDMxMTAvBgNV BAMTKEU4RTkxNTRGMTA2QjZEQ0VDNEQwMTE5QzJCNkEyREJFQTI4QTJBQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdy7eaT3gxorR/xBwq6YwZXt4N XjE1CM/KDDPYs86kh2cNJ8wdueluy2Vow6GE6NEaHABUQ4t4cMX/OmYQyHAjQhRm SzVf2OknP5rXKkRbhD5RRrOEHZQb/PBSYaAX7AeZ7W/tFeBXVzQi6bySqFfohuwb TYYmcsDmd07nMyQSbOgCivqJiYaIVI6jLQd3SCkE6Nx+W6EcfxgT0g3UPsQ3551Y tfwugDkAX312NKX65EQsgGNfC6xBicluCqgt+yUmZK8+vNsuXrmYMBSOclxnmWtd SWQWPu5rCPP6/vxPUFRiQ46IHp0Vq8fnXBvL0A1xPf0Fw6ws0UnmxKAlexF7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6OkVTxBrbc7E0BGcK2otvqKKKrIwHwYDVR0j BBgwFoAUr5WN4OzoMLLAfBpYzpFf24LDwvYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OWRlMGMzOS04NGQ1LTQ0MDUtOTU0ZC00ZDNkNzEyNjkzY2UvMC9BRjk1OERFMEVD RTgzMEIyQzA3QzFBNThDRTkxNUZEQjgyQzNDMkY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY5NThERTBFQ0U4MzBCMkMwN0MxQTU4Q0U5MTVGREI4MkMz QzJGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzlkZTBjMzktODRkNS00NDA1LTk1 NGQtNGQzZDcxMjY5M2NlLzAvQUY5NThERTBFQ0U4MzBCMkMwN0MxQTU4Q0U5MTVG REI4MkMzQzJGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADs/9AcIucX2loEL+HQLEN8fDfNhRJL4nuws pWkGq3xCqFcY63rXIor+BUwnjgw32tZh1VUzrrG4E8/zo4lB1WFtRBPvDY2y+4/s pQG6wkPwiy2YZYNJmsJGy9qZflUNXXHuVU/wDW7UbIOEA1lrzap/2d5dyNo9+2AF KuRyDqZ7Qw52M7cdqRuYH1beqsp+y5afcVRijpCiyiLEY15L9+nGpva6sh8EGmZT BQIMiqclubNbo6GNHi9oFy4gO3BkwYEYXAaK0lxN6SkpvO6eviqKU7VSorWBQj/q STdPo/92w1pNM3XFxAvlINLEV3FF3/0t9y+tmjDZxXMf7Jj8L/w= -----END CERTIFICATE-----Generated at Thu Apr 24 01:45:22 2025 by rpki-client on console.sobornost.net