$ rpki-client -vvf repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.mft File: AE4002B7E92AF59C76E7F8BE4B349193F05481B1.mft (raw, json) Hash identifier: f+Fb8Fa+hyoUYqidZ18WcCjgi76AAsbJKutEOQbOQrs= Subject key identifier: 7D:81:38:BA:A3:B6:4C:EB:03:92:E2:0E:A5:64:F6:62:4C:E1:CA:E6 Authority key identifier: AE:40:02:B7:E9:2A:F5:9C:76:E7:F8:BE:4B:34:91:93:F0:54:81:B1 Certificate issuer: /CN=AE4002B7E92AF59C76E7F8BE4B349193F05481B1 Certificate serial: 2819880EB33DA4B7C2930B78AA598F612DE7332A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.mft Manifest number: F1 Signing time: Fri 22 Nov 2024 03:42:09 +0000 Manifest this update: Fri 22 Nov 2024 03:37:09 +0000 Manifest next update: Mon 25 Nov 2024 12:34:09 +0000 Files and hashes: 1: AE4002B7E92AF59C76E7F8BE4B349193F05481B1.crl (hash: 2sNtOoCXe93KrcPFPTwKEYk3R415qKK2UutryOH2ZB0=) 2: 3130332e3135392e36322e302f32342d3234203d3e20313431353931.roa (hash: GpPOWs9VxBPasPMBzvDCP7Tdeg1upqH9ZV21fxWvJbs=) 3: 3130332e3135392e36332e302f32342d3234203d3e20313431353931.roa (hash: T+e6QRBADZD6IUSgUKZhdJVoeEIJXyW9Ypi3ijvpV2c=) 4: 3130332e3135392e36322e302f32332d3233203d3e20313431353931.roa (hash: FuC0X759h2GO+MLLKWRrbDk5a3CiG3LjZLk/US775mk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.crl rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:19:88:0e:b3:3d:a4:b7:c2:93:0b:78:aa:59:8f:61:2d:e7:33:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE4002B7E92AF59C76E7F8BE4B349193F05481B1 Validity Not Before: Nov 22 03:37:09 2024 GMT Not After : Nov 25 12:34:09 2024 GMT Subject: CN=7D8138BAA3B64CEB0392E20EA564F6624CE1CAE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:cd:6f:4a:d0:b3:85:43:e5:e4:b4:c6:e7:92: 47:a0:b3:2a:cc:5f:c2:e0:7c:ee:da:f0:98:4d:18: 1e:2f:94:97:75:a7:79:81:c2:3e:a2:6b:23:19:c4: 72:1a:9f:56:d1:f8:5a:9a:2c:b4:f0:be:64:8e:18: 16:97:02:35:f9:a5:8a:f5:f8:bb:ac:e5:65:7e:d0: c8:06:34:b2:b5:cd:03:82:a2:07:33:fd:19:39:a3: a3:59:04:98:cb:b7:e6:d4:8c:69:b8:2e:ab:ab:d0: 0f:15:fe:62:40:60:09:1d:25:e8:db:38:c0:85:3e: b2:19:8f:71:5b:94:53:49:3e:b6:60:26:da:86:78: f7:68:1c:dc:a6:3f:fd:92:de:d8:52:9c:11:2a:94: 21:aa:46:18:02:1e:55:5c:7b:ac:52:1f:89:56:48: 84:44:d6:12:a8:a8:f8:34:6d:d7:c8:b1:4a:6d:c4: ae:14:47:65:7b:9b:3b:e3:19:81:05:08:72:ba:c4: 34:0a:71:3a:80:49:60:84:ff:b6:14:ea:3b:e0:9b: 0f:54:16:da:d1:60:56:ab:97:d9:fa:b9:6a:9c:ea: c2:9a:9b:06:57:44:3e:10:4d:82:24:7d:d7:02:14: 5c:4f:81:ec:8e:81:98:93:79:b1:6c:bf:74:5f:52: e9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:81:38:BA:A3:B6:4C:EB:03:92:E2:0E:A5:64:F6:62:4C:E1:CA:E6 X509v3 Authority Key Identifier: keyid:AE:40:02:B7:E9:2A:F5:9C:76:E7:F8:BE:4B:34:91:93:F0:54:81:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:9c:eb:c8:8c:5a:02:1e:39:11:c4:cf:02:5e:be:6e:8c:18: 9a:08:fe:b5:11:d1:2a:ee:17:c8:86:f2:d9:ec:fd:87:05:e9: a5:01:d5:03:fa:8b:8b:22:c9:b7:34:2b:46:51:e0:d1:6b:57: d1:e6:fa:80:e3:db:69:dd:ae:6a:d7:23:b5:de:9d:c2:7b:a7: a7:59:3d:11:8f:61:c7:a7:f6:3f:33:94:6d:9b:5d:31:00:8c: c7:a8:fe:0f:0a:28:ca:93:78:68:69:6d:75:6b:db:21:3b:c8: 20:a7:d8:28:83:09:d0:75:0e:b1:12:58:df:3d:92:e9:d5:3c: 6f:97:92:06:52:f3:be:d5:27:36:c3:73:71:3f:9f:f7:57:54: ff:02:4c:c3:9c:5e:5e:8d:57:81:1a:5d:c9:cb:69:3d:f3:c1: aa:18:2e:21:c6:08:10:28:1e:64:fa:5c:49:dd:c8:fa:3c:02: f4:01:ec:c5:c1:8e:0e:a1:05:38:c7:42:84:0a:a2:8b:8f:b4: 36:8c:df:bc:8f:ff:03:10:5d:62:29:94:20:1d:4f:d4:1b:1d: 84:6a:3c:3e:4e:1a:61:10:c5:39:53:f0:bc:7d:1e:34:e4:30: c2:db:0d:09:21:a2:f2:ae:48:d2:eb:8c:05:d4:37:c3:fa:4d: 9a:bb:13:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKBmIDrM9pLfCkwt4qlmPYS3nMyowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU0MDAyQjdFOTJBRjU5Qzc2RTdGOEJFNEIzNDkxOTNG MDU0ODFCMTAeFw0yNDExMjIwMzM3MDlaFw0yNDExMjUxMjM0MDlaMDMxMTAvBgNV BAMTKDdEODEzOEJBQTNCNjRDRUIwMzkyRTIwRUE1NjRGNjYyNENFMUNBRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBzW9K0LOFQ+XktMbnkkegsyrM X8LgfO7a8JhNGB4vlJd1p3mBwj6iayMZxHIan1bR+FqaLLTwvmSOGBaXAjX5pYr1 +Lus5WV+0MgGNLK1zQOCogcz/Rk5o6NZBJjLt+bUjGm4Lqur0A8V/mJAYAkdJejb OMCFPrIZj3FblFNJPrZgJtqGePdoHNymP/2S3thSnBEqlCGqRhgCHlVce6xSH4lW SIRE1hKoqPg0bdfIsUptxK4UR2V7mzvjGYEFCHK6xDQKcTqASWCE/7YU6jvgmw9U FtrRYFarl9n6uWqc6sKamwZXRD4QTYIkfdcCFFxPgeyOgZiTebFsv3RfUumnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfYE4uqO2TOsDkuIOpWT2YkzhyuYwHwYDVR0j BBgwFoAUrkACt+kq9Zx25/i+SzSRk/BUgbEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MGMxNzFmNC1iZDExLTQ4ZWQtODdmMC0yN2VhMTIwOTA2NGYvMC9BRTQwMDJCN0U5 MkFGNTlDNzZFN0Y4QkU0QjM0OTE5M0YwNTQ4MUIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUU0MDAyQjdFOTJBRjU5Qzc2RTdGOEJFNEIzNDkxOTNGMDU0 ODFCMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjBjMTcxZjQtYmQxMS00OGVkLTg3 ZjAtMjdlYTEyMDkwNjRmLzAvQUU0MDAyQjdFOTJBRjU5Qzc2RTdGOEJFNEIzNDkx OTNGMDU0ODFCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC2c68iMWgIeORHEzwJevm6MGJoI/rUR0Sru F8iG8tns/YcF6aUB1QP6i4siybc0K0ZR4NFrV9Hm+oDj22ndrmrXI7XencJ7p6dZ PRGPYcen9j8zlG2bXTEAjMeo/g8KKMqTeGhpbXVr2yE7yCCn2CiDCdB1DrESWN89 kunVPG+XkgZS877VJzbDc3E/n/dXVP8CTMOcXl6NV4EaXcnLaT3zwaoYLiHGCBAo HmT6XEndyPo8AvQB7MXBjg6hBTjHQoQKoouPtDaM37yP/wMQXWIplCAdT9QbHYRq PD5OGmEQxTlT8Lx9HjTkMMLbDQkhovKuSNLrjAXUN8P6TZq7E3A= -----END CERTIFICATE-----Generated at Fri Nov 22 06:33:23 2024 by rpki-client on console-ams.rpki-client.org