$ rpki-client -vvf repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.mft File: AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.mft (raw, json) Hash identifier: rzov97aTsMC4ueJ9cQkniOf2f3m0KNkkG4h5cP8/kpE= Subject key identifier: 32:5F:24:E1:98:C5:B2:B3:11:4D:58:E2:D3:F5:BE:52:81:5F:A5:D2 Authority key identifier: AF:5A:2A:D0:C9:E5:CB:1D:9E:F8:5E:6F:8F:44:03:10:F1:00:CE:38 Certificate issuer: /CN=AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38 Certificate serial: 7DA91686EDB41911A4D5D5A5DF1273DAFAADA981 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.cer Subject info access: rsync://repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.mft Manifest number: 0300 Signing time: Thu 21 Nov 2024 08:42:01 +0000 Manifest this update: Thu 21 Nov 2024 08:37:01 +0000 Manifest next update: Sun 24 Nov 2024 16:19:01 +0000 Files and hashes: 1: 3130332e3136392e342e302f32332d3234203d3e203137393935.roa (hash: e6zTKV5eeeBjTOLPA4Uct8apjvBjBaHZhQqPX177Lcs=) 2: AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.crl (hash: vxk8NVPntpfmewUQ0NzVGQLpzSAqtlW6IwD9azTvAYE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.crl rsync://repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:a9:16:86:ed:b4:19:11:a4:d5:d5:a5:df:12:73:da:fa:ad:a9:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38 Validity Not Before: Nov 21 08:37:01 2024 GMT Not After : Nov 24 16:19:01 2024 GMT Subject: CN=325F24E198C5B2B3114D58E2D3F5BE52815FA5D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:7e:e4:db:2b:9c:e6:03:a0:6e:61:b0:e9:27: 4b:1b:0f:02:6b:af:28:4a:23:32:35:b3:7f:70:16: 07:c5:8a:56:7b:b4:92:67:9d:c9:a6:83:5d:65:a2: b3:86:87:b4:ca:ea:bf:49:3f:8f:fc:87:a8:34:18: 4d:78:f4:a5:50:0d:07:79:15:24:e2:21:41:21:a2: 6a:b6:7c:91:a9:62:44:68:4d:be:5c:b5:1a:19:ab: c3:27:42:3e:c2:a7:a3:1d:1b:ac:67:82:d0:79:21: a2:27:82:8d:27:72:90:83:1a:37:75:be:e7:72:35: 51:d0:dd:2b:be:3a:10:cf:a0:15:7c:37:d4:b7:8d: df:dd:1e:33:d7:d8:c4:b9:c4:2a:d7:5c:44:8a:ee: 15:ed:90:c3:d2:53:0c:7c:44:3d:44:95:3a:78:1a: 6c:e9:73:d6:41:4d:83:4c:38:c0:10:3d:d0:b0:2f: 25:58:a3:47:2b:5c:0a:61:32:ef:47:5e:23:c5:a5: fa:3a:99:cd:25:88:bd:12:1b:0a:53:39:39:60:04: a1:ba:75:2a:77:9c:70:bf:91:83:78:48:bd:99:31: cb:29:95:cc:00:3f:7a:93:56:fd:d1:0c:22:a5:82: 4d:1b:ad:0f:1e:a1:a2:3f:da:50:3d:04:32:ab:25: dc:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:5F:24:E1:98:C5:B2:B3:11:4D:58:E2:D3:F5:BE:52:81:5F:A5:D2 X509v3 Authority Key Identifier: keyid:AF:5A:2A:D0:C9:E5:CB:1D:9E:F8:5E:6F:8F:44:03:10:F1:00:CE:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:3b:d9:f4:c1:04:88:d9:9e:db:a2:c7:ec:55:51:df:09:a2: f4:02:86:fa:b1:59:ca:ef:3d:6f:f1:e5:63:90:b1:5b:80:fa: 1c:e1:b6:b4:f2:ac:44:8d:51:2d:af:8e:6e:bd:97:db:20:a1: cd:4e:f4:58:6a:27:29:da:e3:7c:b1:31:57:5d:e9:91:9b:34: c3:65:15:9f:c9:30:4b:3d:49:28:5c:0c:d5:27:c7:d5:6d:57: d4:5b:b0:8c:d4:76:47:e9:07:d8:4a:88:60:39:f4:23:77:89: 3c:2c:b5:3c:d1:96:bb:64:d0:ea:ba:35:8f:65:fe:0c:84:8a: 3d:90:06:e5:aa:04:8b:7d:8b:82:95:5e:c7:31:3f:70:9a:fc: 16:1c:d0:1e:9f:f9:34:4a:52:fd:5f:ca:f9:94:91:e8:fd:4e: 36:51:47:42:5f:8e:7c:3e:80:f5:6d:5f:34:0e:03:41:09:f0: fc:8e:96:fb:20:9b:56:21:80:3f:90:61:d1:ee:52:5b:71:38: 00:66:fe:d7:4e:45:f9:4f:3d:8e:28:6d:65:f3:6b:b6:9b:1d: bc:64:54:82:11:9c:ef:fb:ab:79:3d:d9:bb:40:36:fb:84:76: 63:f9:c5:d4:82:63:71:1a:b4:12:17:ab:ad:ff:ba:dd:90:82: 28:84:fb:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfakWhu20GRGk1dWl3xJz2vqtqYEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY1QTJBRDBDOUU1Q0IxRDlFRjg1RTZGOEY0NDAzMTBG MTAwQ0UzODAeFw0yNDExMjEwODM3MDFaFw0yNDExMjQxNjE5MDFaMDMxMTAvBgNV BAMTKDMyNUYyNEUxOThDNUIyQjMxMTRENThFMkQzRjVCRTUyODE1RkE1RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDefuTbK5zmA6BuYbDpJ0sbDwJr ryhKIzI1s39wFgfFilZ7tJJnncmmg11lorOGh7TK6r9JP4/8h6g0GE149KVQDQd5 FSTiIUEhomq2fJGpYkRoTb5ctRoZq8MnQj7Cp6MdG6xngtB5IaIngo0ncpCDGjd1 vudyNVHQ3Su+OhDPoBV8N9S3jd/dHjPX2MS5xCrXXESK7hXtkMPSUwx8RD1ElTp4 Gmzpc9ZBTYNMOMAQPdCwLyVYo0crXAphMu9HXiPFpfo6mc0liL0SGwpTOTlgBKG6 dSp3nHC/kYN4SL2ZMcsplcwAP3qTVv3RDCKlgk0brQ8eoaI/2lA9BDKrJdx/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMl8k4ZjFsrMRTVji0/W+UoFfpdIwHwYDVR0j BBgwFoAUr1oq0Mnlyx2e+F5vj0QDEPEAzjgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDFlNGFjOS1jMDZiLTQzNDMtODUyNi0zYTFmMWIxYjVkODIvMC9BRjVBMkFEMEM5 RTVDQjFEOUVGODVFNkY4RjQ0MDMxMEYxMDBDRTM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY1QTJBRDBDOUU1Q0IxRDlFRjg1RTZGOEY0NDAzMTBGMTAw Q0UzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQxZTRhYzktYzA2Yi00MzQzLTg1 MjYtM2ExZjFiMWI1ZDgyLzAvQUY1QTJBRDBDOUU1Q0IxRDlFRjg1RTZGOEY0NDAz MTBGMTAwQ0UzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABs72fTBBIjZntuix+xVUd8JovQChvqxWcrv PW/x5WOQsVuA+hzhtrTyrESNUS2vjm69l9sgoc1O9FhqJyna43yxMVdd6ZGbNMNl FZ/JMEs9SShcDNUnx9VtV9RbsIzUdkfpB9hKiGA59CN3iTwstTzRlrtk0Oq6NY9l /gyEij2QBuWqBIt9i4KVXscxP3Ca/BYc0B6f+TRKUv1fyvmUkej9TjZRR0Jfjnw+ gPVtXzQOA0EJ8PyOlvsgm1YhgD+QYdHuUltxOABm/tdORflPPY4obWXza7abHbxk VIIRnO/7q3k92btANvuEdmP5xdSCY3EatBIXq63/ut2QgiiE+6o= -----END CERTIFICATE-----Generated at Thu Nov 21 11:07:50 2024 by rpki-client on console-ams.rpki-client.org