$ rpki-client -vvf repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.mft File: AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.mft (raw, json) Hash identifier: WywcizRyDWKSyZdhbUfC+EAB246IuLfq6omjgysNl1E= Subject key identifier: 9E:B5:89:14:FB:FC:4C:D5:00:E0:31:9D:5A:7B:6C:9C:29:AE:68:01 Authority key identifier: AA:E0:29:EA:D3:C6:E5:CB:19:BC:9C:E1:41:DB:76:79:A4:23:D3:18 Certificate issuer: /CN=AAE029EAD3C6E5CB19BC9CE141DB7679A423D318 Certificate serial: 5C23E5591735EF188A3E674FA904BB3A4B90B439 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.mft Manifest number: 02AC Signing time: Thu 09 May 2024 16:41:07 +0000 Manifest this update: Thu 09 May 2024 16:36:07 +0000 Manifest next update: Sun 12 May 2024 20:06:07 +0000 Files and hashes: 1: AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.crl (hash: Ta1d4QT64bqLD4MCG5fWecnOmVEvcU7mlRcw7zpfiPo=) 2: 3130332e3136362e362e302f32332d3234203d3e203137393935.roa (hash: E7O5MGSAXZTCefSeFMICE1iHqKkmO3VLWrxq/dbTzoI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.crl rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 14:20:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:23:e5:59:17:35:ef:18:8a:3e:67:4f:a9:04:bb:3a:4b:90:b4:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AAE029EAD3C6E5CB19BC9CE141DB7679A423D318 Validity Not Before: May 9 16:36:07 2024 GMT Not After : May 12 20:06:07 2024 GMT Subject: CN=9EB58914FBFC4CD500E0319D5A7B6C9C29AE6801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8f:b4:f7:2c:dc:e2:f9:a3:8d:0f:0e:80:9e: 0f:c5:ac:b0:bb:1f:ea:28:a8:a7:57:6a:c2:35:69: 28:78:52:98:c2:35:b2:31:88:d8:27:a5:95:db:1f: 33:8b:8b:93:b1:ad:fb:b3:0c:e2:cb:27:c3:d8:01: 77:fd:92:d4:c8:33:25:1d:df:25:0c:ef:c0:a8:37: 7e:6e:b7:d3:68:53:6b:63:e0:5a:d0:8f:13:a1:80: e9:f0:8e:dc:c9:97:3f:6b:a7:bf:c7:50:1a:46:87: a7:64:34:c4:90:03:d9:01:8c:33:08:a8:7b:d4:cf: dc:c1:29:79:f6:35:30:85:76:60:81:12:bc:5c:de: 96:c9:9f:31:9e:bf:02:7e:a9:1f:02:62:54:c6:fd: ad:e1:8a:b7:88:8b:e7:f5:00:c7:ed:46:27:0a:a8: 32:9a:9e:42:f8:98:19:a1:8e:19:a1:86:b1:bd:c1: 7a:1b:58:74:06:a8:9b:a9:27:4f:e3:7b:ed:d5:8b: b7:49:be:08:0c:aa:b9:1d:45:a1:97:78:c6:3b:dd: 36:d9:6c:e4:98:b6:66:97:9f:55:44:66:ba:28:a8: 01:84:b0:31:47:9d:69:cf:bc:9a:b9:52:83:68:f4: c0:53:51:85:d2:26:06:8f:ab:fc:7b:9c:21:e6:fc: 3d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:B5:89:14:FB:FC:4C:D5:00:E0:31:9D:5A:7B:6C:9C:29:AE:68:01 X509v3 Authority Key Identifier: keyid:AA:E0:29:EA:D3:C6:E5:CB:19:BC:9C:E1:41:DB:76:79:A4:23:D3:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:6f:6e:e7:79:62:a9:85:ad:16:3f:4f:d1:51:fe:88:90:2f: 34:fd:80:2b:10:09:69:e0:5f:6f:06:e4:46:91:34:1a:7c:36: a7:e3:f0:c1:de:21:28:94:e9:f0:bb:d1:f5:25:cb:df:ad:85: e7:ea:c4:0b:59:96:25:6a:0d:b3:8d:aa:e5:0f:9f:9b:80:9e: 4c:2b:82:70:f4:e1:ee:e7:30:7a:29:9c:bd:d9:93:c9:2c:b7: 69:e5:7b:cb:8d:2e:36:d5:d1:52:40:8a:fb:f2:f2:20:2c:a5: 30:fc:e7:df:6d:b1:6d:13:20:b5:76:4f:a9:47:36:ca:68:90: c6:3e:51:1f:7e:c2:31:b9:68:d6:26:6e:13:94:b9:23:8f:ba: 1e:a3:cc:ba:35:48:c9:c7:28:a4:81:fe:b7:ad:d0:5e:18:c8: 1a:75:c0:fe:7c:02:20:11:e4:7c:13:29:0a:66:d7:8b:f9:92: 34:d8:1b:f6:a3:de:09:77:5a:35:c2:76:34:5a:65:a7:d5:12: 26:df:1b:c0:cc:86:fe:4a:9a:ef:a0:df:e0:60:a1:16:6f:4a: 1d:79:fd:b2:e2:82:c0:9c:5e:81:4e:d4:b4:67:20:53:bd:53: 32:f8:ab:1a:83:79:a3:5c:5b:4c:17:b7:10:9c:89:f0:78:40: e2:e1:b1:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXCPlWRc17xiKPmdPqQS7OkuQtDkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUFFMDI5RUFEM0M2RTVDQjE5QkM5Q0UxNDFEQjc2NzlB NDIzRDMxODAeFw0yNDA1MDkxNjM2MDdaFw0yNDA1MTIyMDA2MDdaMDMxMTAvBgNV BAMTKDlFQjU4OTE0RkJGQzRDRDUwMEUwMzE5RDVBN0I2QzlDMjlBRTY4MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClj7T3LNzi+aONDw6Ang/FrLC7 H+ooqKdXasI1aSh4UpjCNbIxiNgnpZXbHzOLi5OxrfuzDOLLJ8PYAXf9ktTIMyUd 3yUM78CoN35ut9NoU2tj4FrQjxOhgOnwjtzJlz9rp7/HUBpGh6dkNMSQA9kBjDMI qHvUz9zBKXn2NTCFdmCBErxc3pbJnzGevwJ+qR8CYlTG/a3hireIi+f1AMftRicK qDKankL4mBmhjhmhhrG9wXobWHQGqJupJ0/je+3Vi7dJvggMqrkdRaGXeMY73TbZ bOSYtmaXn1VEZrooqAGEsDFHnWnPvJq5UoNo9MBTUYXSJgaPq/x7nCHm/D0TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnrWJFPv8TNUA4DGdWntsnCmuaAEwHwYDVR0j BBgwFoAUquAp6tPG5csZvJzhQdt2eaQj0xgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZGI5MmU4OS05MmQ1LTQwNjQtOTUxMS0wNjdlMzUzNjc5Y2UvMC9BQUUwMjlFQUQz QzZFNUNCMTlCQzlDRTE0MURCNzY3OUE0MjNEMzE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUFFMDI5RUFEM0M2RTVDQjE5QkM5Q0UxNDFEQjc2NzlBNDIz RDMxOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGRiOTJlODktOTJkNS00MDY0LTk1 MTEtMDY3ZTM1MzY3OWNlLzAvQUFFMDI5RUFEM0M2RTVDQjE5QkM5Q0UxNDFEQjc2 NzlBNDIzRDMxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADZvbud5YqmFrRY/T9FR/oiQLzT9gCsQCWng X28G5EaRNBp8Nqfj8MHeISiU6fC70fUly9+thefqxAtZliVqDbONquUPn5uAnkwr gnD04e7nMHopnL3Zk8kst2nle8uNLjbV0VJAivvy8iAspTD8599tsW0TILV2T6lH NspokMY+UR9+wjG5aNYmbhOUuSOPuh6jzLo1SMnHKKSB/ret0F4YyBp1wP58AiAR 5HwTKQpm14v5kjTYG/aj3gl3WjXCdjRaZafVEibfG8DMhv5Kmu+g3+BgoRZvSh15 /bLigsCcXoFO1LRnIFO9UzL4qxqDeaNcW0wXtxCcifB4QOLhsZ0= -----END CERTIFICATE-----Generated at Thu May 9 18:11:57 2024 by rpki-client on console-fra.rpki-client.org