$ rpki-client -vvf repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.mft File: AF504C4E6E3831F756E3BE07469483DFED452516.mft (raw, json) Hash identifier: IZp/fElrAWZ12J/MUnMPyxW6SiMQFy+qZttEnR/Dixw= Subject key identifier: 20:AE:0F:05:19:DC:76:B3:C3:A6:E1:3F:A1:83:C2:D7:88:69:30:48 Authority key identifier: AF:50:4C:4E:6E:38:31:F7:56:E3:BE:07:46:94:83:DF:ED:45:25:16 Certificate issuer: /CN=AF504C4E6E3831F756E3BE07469483DFED452516 Certificate serial: 1AB1F9A02CC1E6FC7B8A1BFCED6149F24B046C87 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF504C4E6E3831F756E3BE07469483DFED452516.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.mft Manifest number: 0428 Signing time: Tue 30 Apr 2024 10:40:01 +0000 Manifest this update: Tue 30 Apr 2024 10:35:01 +0000 Manifest next update: Fri 03 May 2024 19:28:01 +0000 Files and hashes: 1: AF504C4E6E3831F756E3BE07469483DFED452516.crl (hash: KU+LxjM9KWuXuCXmLnyAV2ISWnEzfXt/yUMNVfbTovg=) 2: 323030313a6466323a363030303a3a2f34382d3438203d3e203538333932.roa (hash: MPgX6nSUwbH9FphBMR6NJG2BDqcA3cj8QC+544KXSvk=) 3: 3130332e31312e3133342e302f32332d3234203d3e203538333932.roa (hash: //8RUAobLXV1JMXmZJVAyzx31BxHxTrg0me3iufb1Cc=) 4: 3130332e34302e35342e302f32332d3234203d3e203538333932.roa (hash: OZwgVgoMKy0sEqn16IC+rFGcPcd50kthg4z/SgUUsM8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.crl rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF504C4E6E3831F756E3BE07469483DFED452516.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 16:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:b1:f9:a0:2c:c1:e6:fc:7b:8a:1b:fc:ed:61:49:f2:4b:04:6c:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF504C4E6E3831F756E3BE07469483DFED452516 Validity Not Before: Apr 30 10:35:01 2024 GMT Not After : May 3 19:28:01 2024 GMT Subject: CN=20AE0F0519DC76B3C3A6E13FA183C2D788693048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:fc:01:99:c0:5b:15:52:bd:38:d0:75:a0:9d: 0f:aa:b4:b5:82:96:cf:3a:45:35:09:e4:e7:e6:5e: b6:0f:95:ab:bb:7d:b8:ca:13:7b:9d:01:2e:c5:cd: 0d:89:69:d3:e0:a1:59:36:b7:01:02:a8:f8:8b:16: ad:d9:68:ed:cc:50:bf:e8:ba:2c:12:31:25:b8:3d: 1e:b8:05:83:4f:12:52:36:4e:7a:e2:b9:04:b2:e8: 29:c5:7e:98:4c:1d:46:1d:11:9e:e8:76:29:50:da: 6c:b3:77:c7:5e:5b:c1:28:82:1a:ce:44:2b:a5:b0: 35:fc:98:ff:a6:07:41:86:6d:33:42:37:7a:72:b0: 2a:45:13:e7:fb:94:b4:8b:c6:9c:97:cb:7b:42:a6: cd:91:89:65:55:6a:26:d1:f4:55:8e:f7:2b:2f:5d: e7:21:a8:4c:15:83:3c:48:39:32:50:2e:ea:a6:e2: db:47:b5:58:22:7e:73:a6:8d:0c:6e:2f:85:2a:b7: 40:7a:4d:08:c2:3a:8d:cf:c9:3c:d2:2c:48:6e:d8: dd:d8:b8:b1:ea:20:4f:fe:cf:f8:76:40:03:99:3c: cb:c7:e7:93:65:49:26:4f:27:65:d9:90:27:f7:2c: a5:2e:d7:17:e5:77:6e:ce:0b:71:9d:b9:89:c7:7f: 74:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:AE:0F:05:19:DC:76:B3:C3:A6:E1:3F:A1:83:C2:D7:88:69:30:48 X509v3 Authority Key Identifier: keyid:AF:50:4C:4E:6E:38:31:F7:56:E3:BE:07:46:94:83:DF:ED:45:25:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF504C4E6E3831F756E3BE07469483DFED452516.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:51:40:9e:08:97:d7:b6:d8:2e:78:12:d5:fe:fa:5c:f4:92: 0e:fe:14:53:31:4d:8c:42:bc:bd:79:f9:3e:2f:a9:c3:ed:c3: d4:16:27:09:5d:df:24:cc:a5:67:52:40:52:10:56:11:0b:eb: 1a:83:2e:98:0c:c9:fd:3c:62:27:c8:1c:7d:3e:3c:15:f0:f5: f9:d0:45:e0:6f:ae:96:2e:93:7b:08:a5:71:3e:25:41:50:95: 0b:24:8f:db:24:86:a5:9c:85:44:14:c6:6b:4b:b0:e6:80:3d: 01:dc:97:4c:99:c7:1c:3b:29:7e:b1:fc:45:ed:9b:2b:55:8e: ce:06:ab:55:f7:8b:03:45:61:05:4d:48:3b:78:98:a2:56:57: c5:04:8c:f9:c2:67:6b:59:1e:f2:10:ce:e9:db:fa:bb:6b:29: da:0b:21:7e:fb:f6:17:c6:00:c1:f8:ad:56:d1:b8:5f:63:8c: b3:39:09:7b:0b:c4:df:f5:b0:01:34:3e:04:1c:1a:1e:e2:99: 84:17:90:50:34:e5:e0:38:a7:8c:9c:47:f0:a5:e5:1f:81:71: 00:85:e0:ae:90:d1:06:d9:66:77:d7:3f:d2:f1:dc:25:a7:d7: 59:c0:a1:7c:78:3c:d6:8e:42:d0:4e:48:6c:d2:1b:8e:26:aa: 9b:60:7a:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGrH5oCzB5vx7ihv87WFJ8ksEbIcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY1MDRDNEU2RTM4MzFGNzU2RTNCRTA3NDY5NDgzREZF RDQ1MjUxNjAeFw0yNDA0MzAxMDM1MDFaFw0yNDA1MDMxOTI4MDFaMDMxMTAvBgNV BAMTKDIwQUUwRjA1MTlEQzc2QjNDM0E2RTEzRkExODNDMkQ3ODg2OTMwNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn/AGZwFsVUr040HWgnQ+qtLWC ls86RTUJ5OfmXrYPlau7fbjKE3udAS7FzQ2JadPgoVk2twECqPiLFq3ZaO3MUL/o uiwSMSW4PR64BYNPElI2TnriuQSy6CnFfphMHUYdEZ7odilQ2myzd8deW8EoghrO RCulsDX8mP+mB0GGbTNCN3pysCpFE+f7lLSLxpyXy3tCps2RiWVVaibR9FWO9ysv XechqEwVgzxIOTJQLuqm4ttHtVgifnOmjQxuL4Uqt0B6TQjCOo3PyTzSLEhu2N3Y uLHqIE/+z/h2QAOZPMvH55NlSSZPJ2XZkCf3LKUu1xfld27OC3GduYnHf3TzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIK4PBRncdrPDpuE/oYPC14hpMEgwHwYDVR0j BBgwFoAUr1BMTm44MfdW474HRpSD3+1FJRYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZmZiNzc2Ny0zZGU5LTQ4MzMtYjRlNy1iMWI2MmVlM2NkOTkvMC9BRjUwNEM0RTZF MzgzMUY3NTZFM0JFMDc0Njk0ODNERkVENDUyNTE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY1MDRDNEU2RTM4MzFGNzU2RTNCRTA3NDY5NDgzREZFRDQ1 MjUxNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGZmYjc3NjctM2RlOS00ODMzLWI0 ZTctYjFiNjJlZTNjZDk5LzAvQUY1MDRDNEU2RTM4MzFGNzU2RTNCRTA3NDY5NDgz REZFRDQ1MjUxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHlRQJ4Il9e22C54EtX++lz0kg7+FFMxTYxC vL15+T4vqcPtw9QWJwld3yTMpWdSQFIQVhEL6xqDLpgMyf08YifIHH0+PBXw9fnQ ReBvrpYuk3sIpXE+JUFQlQskj9skhqWchUQUxmtLsOaAPQHcl0yZxxw7KX6x/EXt mytVjs4Gq1X3iwNFYQVNSDt4mKJWV8UEjPnCZ2tZHvIQzunb+rtrKdoLIX779hfG AMH4rVbRuF9jjLM5CXsLxN/1sAE0PgQcGh7imYQXkFA05eA4p4ycR/Cl5R+BcQCF 4K6Q0QbZZnfXP9Lx3CWn11nAoXx4PNaOQtBOSGzSG44mqptgeus= -----END CERTIFICATE-----Generated at Tue Apr 30 12:55:39 2024 by rpki-client on console-fra.rpki-client.org