$ rpki-client -vvf repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.mft File: AE4002B7E92AF59C76E7F8BE4B349193F05481B1.mft (raw, json) Hash identifier: dfpmkOtTTO2tJuMswy0G/nssXChCFRTHlITFdi09lHU= Subject key identifier: E2:AB:23:C0:23:2C:31:12:08:C1:F5:6B:96:53:72:75:09:2F:F1:10 Authority key identifier: AE:40:02:B7:E9:2A:F5:9C:76:E7:F8:BE:4B:34:91:93:F0:54:81:B1 Certificate issuer: /CN=AE4002B7E92AF59C76E7F8BE4B349193F05481B1 Certificate serial: 2F7C2F608D53F3EDED223CAEE42EBC7370D60860 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.mft Manifest number: A3 Signing time: Thu 30 May 2024 21:31:48 +0000 Manifest this update: Thu 30 May 2024 21:26:48 +0000 Manifest next update: Sun 02 Jun 2024 22:51:48 +0000 Files and hashes: 1: 3130332e3135392e36322e302f32332d3233203d3e20313431353931.roa (hash: oqubHhwxtqsJoNuAhS2y/kFxKvbD0whsJAs7D5UsNuU=) 2: AE4002B7E92AF59C76E7F8BE4B349193F05481B1.crl (hash: 6J75dERqACccl91HY2Exyo8VaydTwv/y93JGVUWodQ0=) 3: 3130332e3135392e36322e302f32342d3234203d3e20313431353931.roa (hash: GpPOWs9VxBPasPMBzvDCP7Tdeg1upqH9ZV21fxWvJbs=) 4: 3130332e3135392e36332e302f32342d3234203d3e20313431353931.roa (hash: T+e6QRBADZD6IUSgUKZhdJVoeEIJXyW9Ypi3ijvpV2c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.crl rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 22:51:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:7c:2f:60:8d:53:f3:ed:ed:22:3c:ae:e4:2e:bc:73:70:d6:08:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE4002B7E92AF59C76E7F8BE4B349193F05481B1 Validity Not Before: May 30 21:26:48 2024 GMT Not After : Jun 2 22:51:48 2024 GMT Subject: CN=E2AB23C0232C311208C1F56B96537275092FF110 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5f:03:fc:3c:5c:f3:ec:53:ba:2b:ab:df:b0: 01:65:06:d6:fa:60:20:12:a2:28:89:db:c1:69:0c: 89:44:6f:bf:8b:dd:47:aa:76:ab:e2:5d:39:a1:61: 2f:92:13:75:b8:6a:63:ac:99:91:70:ac:ac:22:0b: e6:b5:16:4c:ef:6b:20:33:d5:c1:8e:3a:8e:f2:54: 2a:70:ed:6b:e4:c5:84:2e:46:01:e8:62:94:85:9f: d2:20:3b:f6:d3:02:48:b9:f3:cb:25:54:f4:6c:d0: 5c:93:a7:99:8b:2c:2f:9c:5a:65:d4:da:e5:08:eb: 9d:ad:32:c4:28:bb:22:68:fa:f4:aa:a8:d2:77:01: 3c:0c:f0:68:41:4e:81:ed:09:42:0b:ff:f3:cf:19: 8b:70:50:4b:32:df:e8:4d:e5:01:5e:6e:ae:36:d7: 98:3c:b8:1e:fe:c4:32:39:29:c9:a2:52:53:02:54: 97:8a:23:37:c7:20:d3:e4:d2:4d:01:0e:48:90:85: 32:46:41:4b:b2:eb:a1:1e:77:e6:e5:0e:1f:55:e0: 9e:dc:b5:ea:1b:8d:88:e9:c8:66:d9:1b:5f:45:50: a3:1d:eb:f8:e9:2b:d1:d0:70:21:ce:4f:cf:39:af: b9:9f:bc:30:dc:91:22:48:ad:a9:bf:08:90:79:53: 4a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:AB:23:C0:23:2C:31:12:08:C1:F5:6B:96:53:72:75:09:2F:F1:10 X509v3 Authority Key Identifier: keyid:AE:40:02:B7:E9:2A:F5:9C:76:E7:F8:BE:4B:34:91:93:F0:54:81:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:f1:1a:75:9b:0b:64:19:6b:50:50:24:a2:1e:da:38:cc:b8: 5d:26:62:4a:f6:95:2b:92:7f:d4:95:c7:72:63:fb:eb:06:2b: a8:58:a9:44:c8:0d:4e:de:16:79:da:d5:66:f2:18:d9:1b:cd: bd:eb:d6:30:3e:27:32:80:80:89:55:85:db:72:2d:56:fd:f4: b7:40:a7:77:05:91:01:94:56:02:bf:38:71:ce:52:c7:6f:5f: ec:47:0a:6d:ae:9b:0b:e6:87:0c:f2:73:4c:cb:d2:0b:d2:3f: 91:29:ec:7d:41:53:eb:dd:9c:e3:f3:29:33:97:ae:61:3d:90: d7:87:2e:7f:21:91:61:3e:75:43:7f:5c:76:12:c3:79:e0:5f: 99:bb:48:42:d8:65:f8:a6:d6:91:2d:90:79:a5:3b:fc:4f:24: 4c:45:76:1c:2a:95:c9:60:94:42:95:df:ed:1a:fd:38:7e:fa: b9:ac:5f:a1:92:aa:3c:00:67:33:0a:55:7b:38:be:37:88:cf: ff:2e:86:9d:d2:c8:96:0c:72:d9:62:01:ba:cd:f2:79:ab:cc: a2:14:64:3e:6e:17:62:f9:f7:0b:56:c0:e4:d8:ba:b2:1f:6e: 2b:7b:b0:8b:b0:47:96:31:17:5b:5b:92:5a:10:22:82:74:a1: cb:90:ed:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL3wvYI1T8+3tIjyu5C68c3DWCGAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU0MDAyQjdFOTJBRjU5Qzc2RTdGOEJFNEIzNDkxOTNG MDU0ODFCMTAeFw0yNDA1MzAyMTI2NDhaFw0yNDA2MDIyMjUxNDhaMDMxMTAvBgNV BAMTKEUyQUIyM0MwMjMyQzMxMTIwOEMxRjU2Qjk2NTM3Mjc1MDkyRkYxMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8XwP8PFzz7FO6K6vfsAFlBtb6 YCASoiiJ28FpDIlEb7+L3UeqdqviXTmhYS+SE3W4amOsmZFwrKwiC+a1FkzvayAz 1cGOOo7yVCpw7WvkxYQuRgHoYpSFn9IgO/bTAki588slVPRs0FyTp5mLLC+cWmXU 2uUI652tMsQouyJo+vSqqNJ3ATwM8GhBToHtCUIL//PPGYtwUEsy3+hN5QFebq42 15g8uB7+xDI5KcmiUlMCVJeKIzfHINPk0k0BDkiQhTJGQUuy66Eed+blDh9V4J7c teobjYjpyGbZG19FUKMd6/jpK9HQcCHOT885r7mfvDDckSJIram/CJB5U0ozAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4qsjwCMsMRIIwfVrllNydQkv8RAwHwYDVR0j BBgwFoAUrkACt+kq9Zx25/i+SzSRk/BUgbEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MGMxNzFmNC1iZDExLTQ4ZWQtODdmMC0yN2VhMTIwOTA2NGYvMC9BRTQwMDJCN0U5 MkFGNTlDNzZFN0Y4QkU0QjM0OTE5M0YwNTQ4MUIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUU0MDAyQjdFOTJBRjU5Qzc2RTdGOEJFNEIzNDkxOTNGMDU0 ODFCMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjBjMTcxZjQtYmQxMS00OGVkLTg3 ZjAtMjdlYTEyMDkwNjRmLzAvQUU0MDAyQjdFOTJBRjU5Qzc2RTdGOEJFNEIzNDkx OTNGMDU0ODFCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABfxGnWbC2QZa1BQJKIe2jjMuF0mYkr2lSuS f9SVx3Jj++sGK6hYqUTIDU7eFnna1WbyGNkbzb3r1jA+JzKAgIlVhdtyLVb99LdA p3cFkQGUVgK/OHHOUsdvX+xHCm2umwvmhwzyc0zL0gvSP5Ep7H1BU+vdnOPzKTOX rmE9kNeHLn8hkWE+dUN/XHYSw3ngX5m7SELYZfim1pEtkHmlO/xPJExFdhwqlclg lEKV3+0a/Th++rmsX6GSqjwAZzMKVXs4vjeIz/8uhp3SyJYMctliAbrN8nmrzKIU ZD5uF2L59wtWwOTYurIfbit7sIuwR5YxF1tbkloQIoJ0ocuQ7Vw= -----END CERTIFICATE-----Generated at Thu May 30 22:23:03 2024 by rpki-client on console-fra.rpki-client.org