$ rpki-client -vvf repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft File: AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft (raw, json) Hash identifier: LBCaosok8pO9z4RagQj1hAVIMgchLAnAheRRGrFZkhU= Subject key identifier: 29:8A:9B:A2:0D:FB:6F:24:F5:0D:CC:8F:25:67:6A:4B:C7:B5:8B:2E Authority key identifier: AF:7B:93:8E:06:44:E5:5F:E0:20:E7:9C:53:BF:11:FD:4B:14:C9:B7 Certificate issuer: /CN=AF7B938E0644E55FE020E79C53BF11FD4B14C9B7 Certificate serial: 3E07477059ACE9846EA57672E9A5B78E4DB147CE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft Manifest number: 014C Signing time: Wed 23 Apr 2025 06:11:55 +0000 Manifest this update: Wed 23 Apr 2025 06:06:55 +0000 Manifest next update: Sat 26 Apr 2025 14:05:55 +0000 Files and hashes: 1: 3130332e3138362e35392e302f32342d3234203d3e20313439373034.roa (hash: Zn/mRLgJcAPw/B4LeoQNyY9Lq34HwGmBLP3JEPUrmtE=) 2: 3130332e3138362e35382e302f32342d3234203d3e20313439373034.roa (hash: rNChHCnrnyJLLY34G4kDGVsTPJQ1hGT5BO6DP+1g09Y=) 3: AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.crl (hash: F+Ze7NK9kJcYIX+b/F/E0KpkiSu8cSYAAihKh5gCUBs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.crl rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 12:50:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:07:47:70:59:ac:e9:84:6e:a5:76:72:e9:a5:b7:8e:4d:b1:47:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF7B938E0644E55FE020E79C53BF11FD4B14C9B7 Validity Not Before: Apr 23 06:06:55 2025 GMT Not After : Apr 26 14:05:55 2025 GMT Subject: CN=298A9BA20DFB6F24F50DCC8F25676A4BC7B58B2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:df:a6:37:74:57:09:c6:2f:96:a0:51:54:af: 8b:fa:51:e0:fb:40:34:8b:99:8b:4c:2c:29:d7:72: 39:79:4e:f9:2f:72:76:93:dd:2b:11:a6:ab:cb:04: 71:6e:21:95:df:36:62:85:50:fe:14:32:bb:04:07: 6a:8b:fb:c8:48:3f:b8:42:26:a8:a0:c2:73:92:0f: f9:18:21:a3:16:cb:6d:8e:76:af:72:ef:c3:ca:16: 0d:9d:57:60:0f:cd:7a:34:79:4c:17:e5:79:78:f9: 83:5f:51:27:bd:73:3e:be:04:d0:f0:06:54:ba:1e: 05:5c:95:05:5a:5b:7d:ce:94:b1:93:c3:13:29:bc: f6:26:67:d4:73:d9:89:7a:a5:21:fa:bc:7b:9f:ff: 76:4b:73:65:66:5b:f7:f1:ac:3e:72:99:75:13:c2: 0f:00:1a:48:7a:e1:7b:1d:d2:78:93:0f:e7:ad:a9: 30:8d:b6:ce:e3:41:9a:30:13:a7:bc:71:89:da:32: 4f:28:a8:01:92:71:ea:9f:01:99:3b:78:0e:62:fd: 17:8a:a1:2e:dd:23:69:cc:bf:7f:0c:78:22:e0:93: 40:4a:d4:66:f9:c9:4f:65:47:bd:96:85:1b:f2:aa: 3c:ef:ab:b1:6c:37:8f:e9:fa:99:77:d8:ce:ab:02: 71:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:8A:9B:A2:0D:FB:6F:24:F5:0D:CC:8F:25:67:6A:4B:C7:B5:8B:2E X509v3 Authority Key Identifier: keyid:AF:7B:93:8E:06:44:E5:5F:E0:20:E7:9C:53:BF:11:FD:4B:14:C9:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:40:8a:c3:2e:33:11:af:d6:88:6a:ce:88:cf:0f:ac:69:29: 7c:18:f6:ca:a9:ed:94:72:2d:f1:d0:71:dd:19:2c:bf:73:2b: c8:f4:ac:50:88:e9:53:d3:7a:e6:e9:ff:0b:b8:0a:fa:50:95: 71:38:64:12:7d:03:e8:81:74:c7:ad:64:6a:50:a5:11:06:2a: c3:60:8f:8d:cc:c9:43:b9:ce:e5:30:53:19:e9:af:49:e2:70: c9:d8:0f:0a:48:e7:2d:e1:9e:3e:f7:54:1e:1a:19:93:54:09: 77:26:5f:1a:e8:97:13:c7:3f:a0:44:aa:26:42:05:41:0e:42: 9a:b0:2d:7a:6c:63:97:8a:df:bf:95:b5:4e:99:cd:49:2d:0d: 81:a1:1a:97:29:12:59:75:3c:01:29:24:5c:a8:e6:f0:24:a8: 53:8a:81:e0:56:de:a2:d5:d1:58:d1:5a:b1:54:61:a3:e2:df: 1a:9e:d7:44:95:7f:4d:61:48:8a:0a:d3:66:d8:06:06:7e:99: 15:b5:5a:af:2b:3c:91:a5:ca:4a:69:36:fe:9c:9b:60:39:66: 42:86:95:7a:69:c2:9d:7b:39:92:5f:b9:7c:8e:c6:b2:41:23: c8:d1:08:6b:af:cf:a7:99:25:ce:2e:f0:90:71:fd:b9:22:93: e2:31:c2:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPgdHcFms6YRupXZy6aW3jk2xR84wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY3QjkzOEUwNjQ0RTU1RkUwMjBFNzlDNTNCRjExRkQ0 QjE0QzlCNzAeFw0yNTA0MjMwNjA2NTVaFw0yNTA0MjYxNDA1NTVaMDMxMTAvBgNV BAMTKDI5OEE5QkEyMERGQjZGMjRGNTBEQ0M4RjI1Njc2QTRCQzdCNThCMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk36Y3dFcJxi+WoFFUr4v6UeD7 QDSLmYtMLCnXcjl5TvkvcnaT3SsRpqvLBHFuIZXfNmKFUP4UMrsEB2qL+8hIP7hC JqigwnOSD/kYIaMWy22Odq9y78PKFg2dV2APzXo0eUwX5Xl4+YNfUSe9cz6+BNDw BlS6HgVclQVaW33OlLGTwxMpvPYmZ9Rz2Yl6pSH6vHuf/3ZLc2VmW/fxrD5ymXUT wg8AGkh64Xsd0niTD+etqTCNts7jQZowE6e8cYnaMk8oqAGSceqfAZk7eA5i/ReK oS7dI2nMv38MeCLgk0BK1Gb5yU9lR72WhRvyqjzvq7FsN4/p+pl32M6rAnHbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKYqbog37byT1DcyPJWdqS8e1iy4wHwYDVR0j BBgwFoAUr3uTjgZE5V/gIOecU78R/UsUybcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MTBlZGRjZC03ZDM4LTQ3NjUtYWEyNi03ZTQ1NzY3MDQyM2MvMC9BRjdCOTM4RTA2 NDRFNTVGRTAyMEU3OUM1M0JGMTFGRDRCMTRDOUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY3QjkzOEUwNjQ0RTU1RkUwMjBFNzlDNTNCRjExRkQ0QjE0 QzlCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDEwZWRkY2QtN2QzOC00NzY1LWFh MjYtN2U0NTc2NzA0MjNjLzAvQUY3QjkzOEUwNjQ0RTU1RkUwMjBFNzlDNTNCRjEx RkQ0QjE0QzlCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACZAisMuMxGv1ohqzojPD6xpKXwY9sqp7ZRy LfHQcd0ZLL9zK8j0rFCI6VPTeubp/wu4CvpQlXE4ZBJ9A+iBdMetZGpQpREGKsNg j43MyUO5zuUwUxnpr0nicMnYDwpI5y3hnj73VB4aGZNUCXcmXxrolxPHP6BEqiZC BUEOQpqwLXpsY5eK37+VtU6ZzUktDYGhGpcpEll1PAEpJFyo5vAkqFOKgeBW3qLV 0VjRWrFUYaPi3xqe10SVf01hSIoK02bYBgZ+mRW1Wq8rPJGlykppNv6cm2A5ZkKG lXppwp17OZJfuXyOxrJBI8jRCGuvz6eZJc4u8JBx/bkik+Ixwj8= -----END CERTIFICATE-----Generated at Wed Apr 23 08:55:51 2025 by rpki-client on console.sobornost.net