$ rpki-client -vvf repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft File: AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft (raw, json) Hash identifier: dX0R54w3aNaTd3QzfTOOnS5aoJQxl+4YI8IXG/L+I/4= Subject key identifier: AD:23:91:63:2C:A4:55:69:D5:72:65:A9:1A:59:E4:23:16:B1:BB:C7 Authority key identifier: AF:15:FD:8C:B4:E4:52:C7:6B:55:70:97:43:61:4F:9B:54:48:CC:DB Certificate issuer: /CN=AF15FD8CB4E452C76B55709743614F9B5448CCDB Certificate serial: 7E802B8DA9A3DAEA5F35EE6C994D9E9808D3C48E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF15FD8CB4E452C76B55709743614F9B5448CCDB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft Manifest number: 0429 Signing time: Sat 04 May 2024 04:31:00 +0000 Manifest this update: Sat 04 May 2024 04:26:00 +0000 Manifest next update: Tue 07 May 2024 09:55:00 +0000 Files and hashes: 1: 3230322e31342e39322e302f32332d3234203d3e203535363830.roa (hash: 3nZrJy840+u/rDNTE6kHUr3pTu6sKAG+u1T0Ft6yh2s=) 2: AF15FD8CB4E452C76B55709743614F9B5448CCDB.crl (hash: 7PgnHmAQGLp+i2kBZRVj9QvosKp52ILOrePWVLI3t3w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.crl rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF15FD8CB4E452C76B55709743614F9B5448CCDB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 03:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:80:2b:8d:a9:a3:da:ea:5f:35:ee:6c:99:4d:9e:98:08:d3:c4:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF15FD8CB4E452C76B55709743614F9B5448CCDB Validity Not Before: May 4 04:26:00 2024 GMT Not After : May 7 09:55:00 2024 GMT Subject: CN=AD2391632CA45569D57265A91A59E42316B1BBC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:1d:28:ff:48:f9:96:92:4e:7d:c6:b7:1d:72: 5d:96:29:a6:ee:c4:8c:0f:c0:54:e6:89:8e:39:6a: f8:b2:ad:04:09:ad:18:5c:ca:f5:47:a5:f2:3a:04: 38:84:3f:9d:e8:54:93:d2:b4:c2:6a:ac:47:20:72: cb:4f:7f:3b:8e:de:30:be:bf:0b:7e:fe:62:63:8c: 8d:69:87:45:c9:1c:91:c5:bb:7d:41:0b:d7:c8:8a: 21:73:bf:d8:e2:97:78:eb:da:f0:fd:4b:e4:c1:63: de:50:d6:3a:6f:b6:61:09:55:85:59:8b:32:19:b6: 99:89:bb:1c:e6:e4:af:6d:cd:3e:4d:e4:7d:c3:6b: 7e:9c:a7:99:72:7c:53:50:e7:30:e0:0d:ab:d0:8c: 20:e1:0e:d8:cd:f1:26:1d:38:48:ba:0e:48:2f:c6: f8:42:de:54:bf:4a:65:b7:62:93:1b:17:9b:88:74: dc:45:e9:32:27:04:d9:7d:d9:7b:59:30:7e:0b:8b: e6:11:13:9a:38:07:77:bf:34:df:7a:f8:4c:10:f3: f5:26:29:f9:eb:50:ee:a6:20:9a:c9:02:c2:6a:21: e0:8d:3a:a9:88:6d:91:b8:1c:b4:d0:b6:ea:c5:6e: 5d:48:85:25:fe:b6:31:15:ac:9c:47:c5:4f:31:52: ff:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:23:91:63:2C:A4:55:69:D5:72:65:A9:1A:59:E4:23:16:B1:BB:C7 X509v3 Authority Key Identifier: keyid:AF:15:FD:8C:B4:E4:52:C7:6B:55:70:97:43:61:4F:9B:54:48:CC:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF15FD8CB4E452C76B55709743614F9B5448CCDB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:a6:33:85:f1:4c:48:6d:b3:16:56:e9:b5:85:e9:31:c6:89: a5:3a:0a:d1:43:06:de:1a:a1:83:14:25:3e:e3:04:d4:4b:28: 0c:7f:b4:cf:80:68:21:47:f3:3f:c1:4e:d2:d9:f8:63:b9:3f: 13:48:68:c0:5b:78:7b:2e:b5:23:68:bf:b8:f2:41:cf:0d:e8: 4a:a4:1d:5f:79:ee:c1:39:b3:29:51:95:68:14:32:52:47:42: d3:70:fa:8e:39:2c:6b:8b:a8:14:fc:cc:3b:80:c1:63:27:dc: 91:a8:50:46:30:73:bc:3c:ca:9d:89:eb:c8:68:ed:c5:07:86: 3b:1d:a5:98:70:5e:61:35:30:57:bf:25:d9:98:57:e5:49:1d: e2:d4:e4:a2:e1:13:2a:71:c8:d9:e5:b7:27:b7:ec:3b:9c:83: 77:2f:10:ad:f6:a5:62:c1:99:76:51:da:76:d0:d6:60:45:34: f9:0e:8f:76:0b:89:97:d9:fd:20:73:d1:50:04:69:1e:08:29: c6:cd:53:75:2a:c9:5a:a9:fe:01:09:dc:d4:41:87:ac:83:82: ae:5a:33:43:de:ac:5a:d9:69:f2:40:79:54:55:5f:23:a5:b9: 69:6e:5f:b1:b0:31:ae:44:f1:66:67:2f:92:67:0c:fd:0c:db: 4e:d5:67:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfoArjamj2upfNe5smU2emAjTxI4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYxNUZEOENCNEU0NTJDNzZCNTU3MDk3NDM2MTRGOUI1 NDQ4Q0NEQjAeFw0yNDA1MDQwNDI2MDBaFw0yNDA1MDcwOTU1MDBaMDMxMTAvBgNV BAMTKEFEMjM5MTYzMkNBNDU1NjlENTcyNjVBOTFBNTlFNDIzMTZCMUJCQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2HSj/SPmWkk59xrcdcl2WKabu xIwPwFTmiY45aviyrQQJrRhcyvVHpfI6BDiEP53oVJPStMJqrEcgcstPfzuO3jC+ vwt+/mJjjI1ph0XJHJHFu31BC9fIiiFzv9jil3jr2vD9S+TBY95Q1jpvtmEJVYVZ izIZtpmJuxzm5K9tzT5N5H3Da36cp5lyfFNQ5zDgDavQjCDhDtjN8SYdOEi6Dkgv xvhC3lS/SmW3YpMbF5uIdNxF6TInBNl92XtZMH4Li+YRE5o4B3e/NN96+EwQ8/Um KfnrUO6mIJrJAsJqIeCNOqmIbZG4HLTQturFbl1IhSX+tjEVrJxHxU8xUv9RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrSORYyykVWnVcmWpGlnkIxaxu8cwHwYDVR0j BBgwFoAUrxX9jLTkUsdrVXCXQ2FPm1RIzNswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjBlNmEyZC04NGRjLTQ4ZGYtOWI3Ny03MjA4NTNmNDdjNmQvMC9BRjE1RkQ4Q0I0 RTQ1MkM3NkI1NTcwOTc0MzYxNEY5QjU0NDhDQ0RCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUYxNUZEOENCNEU0NTJDNzZCNTU3MDk3NDM2MTRGOUI1NDQ4 Q0NEQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzYwZTZhMmQtODRkYy00OGRmLTli NzctNzIwODUzZjQ3YzZkLzAvQUYxNUZEOENCNEU0NTJDNzZCNTU3MDk3NDM2MTRG OUI1NDQ4Q0NEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHmmM4XxTEhtsxZW6bWF6THGiaU6CtFDBt4a oYMUJT7jBNRLKAx/tM+AaCFH8z/BTtLZ+GO5PxNIaMBbeHsutSNov7jyQc8N6Eqk HV957sE5sylRlWgUMlJHQtNw+o45LGuLqBT8zDuAwWMn3JGoUEYwc7w8yp2J68ho 7cUHhjsdpZhwXmE1MFe/JdmYV+VJHeLU5KLhEypxyNnltye37Ducg3cvEK32pWLB mXZR2nbQ1mBFNPkOj3YLiZfZ/SBz0VAEaR4IKcbNU3UqyVqp/gEJ3NRBh6yDgq5a M0PerFrZafJAeVRVXyOluWluX7GwMa5E8WZnL5JnDP0M207VZ6Q= -----END CERTIFICATE-----Generated at Sat May 4 05:42:17 2024 by rpki-client on console-ams.rpki-client.org