$ rpki-client -vvf repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.mft File: AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.mft (raw, json) Hash identifier: 2jR75o3og3nY5zAgguzWKJeVTJ+nLJiI1hMZvwdNxM0= Subject key identifier: CA:04:7C:BE:D6:01:41:E1:ED:E9:AA:D6:75:30:35:3B:1A:4B:DF:5E Authority key identifier: AE:DA:3A:68:76:F2:BB:6E:33:C8:1B:B2:8B:08:F9:F3:6C:80:DC:40 Certificate issuer: /CN=AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40 Certificate serial: 6EA8F94AF57BF8EC41EAE387D7A0BE9792755751 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.mft Manifest number: 0159 Signing time: Mon 25 Nov 2024 04:11:47 +0000 Manifest this update: Mon 25 Nov 2024 04:06:47 +0000 Manifest next update: Thu 28 Nov 2024 13:36:47 +0000 Files and hashes: 1: 3130332e31372e3134322e302f32342d3234203d3e2039333431.roa (hash: hLQPD3MbEwgildQda9wOjE3SYD9HUC8/tR+TH7Mo1TY=) 2: AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.crl (hash: jjozXJ881dai2mAXn2aV+D6AyxcgAAUqU3LmoJWfGbk=) 3: 3130332e31372e3134322e302f32332d3233203d3e2039333431.roa (hash: VxDJRyHf4quz1NG42aRPhCKiwsHNdLZ5RbJ8wFW7Nhg=) 4: 3130332e31372e3134332e302f32342d3234203d3e2039333431.roa (hash: gwUhQCLpG414frqxV/A3eihir8ysCdrvlyk1yD6ay90=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.crl rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:a8:f9:4a:f5:7b:f8:ec:41:ea:e3:87:d7:a0:be:97:92:75:57:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40 Validity Not Before: Nov 25 04:06:47 2024 GMT Not After : Nov 28 13:36:47 2024 GMT Subject: CN=CA047CBED60141E1EDE9AAD67530353B1A4BDF5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:dc:21:a8:16:7c:16:b4:b7:2e:fe:07:7e:db: 8f:42:7c:c9:22:75:af:15:2b:58:f6:07:0f:c7:14: d1:ac:e9:78:41:b8:53:a7:7a:a2:e5:99:1e:8b:94: a6:b0:89:e5:c5:10:ec:df:6d:d1:0c:14:ac:df:dd: b7:c6:86:4f:7b:99:2b:17:82:0d:99:97:c0:12:a8: 1d:f1:08:8b:56:c7:13:56:9d:0e:0a:f7:76:82:68: c1:5d:97:2f:e0:d0:46:9c:97:bd:eb:a0:bf:2e:e4: 36:a5:a4:c6:c7:d0:1c:55:5e:25:24:dc:a5:40:8a: 44:f5:ea:94:13:05:17:d3:74:25:4f:5d:37:0d:26: e0:2a:d0:a5:db:93:47:2b:2d:52:30:35:b1:3e:6f: 5b:b0:fb:ec:9d:7d:8e:a7:4b:d9:d1:4e:01:dc:b4: 03:97:f3:0a:bf:78:77:64:33:68:df:8d:a3:cc:ce: 70:52:5a:66:a0:31:6d:58:6e:d2:ef:29:6b:eb:65: 4d:2f:9d:24:bd:ce:43:c6:74:78:6a:f1:55:0a:eb: c5:ab:71:b1:bf:71:b5:68:57:d6:4f:88:6c:75:11: 36:04:d6:ed:0c:35:60:c5:03:81:7e:a3:fc:0e:c6: fc:f4:8a:9c:10:19:66:5d:4b:77:4d:9d:86:94:11: 84:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:04:7C:BE:D6:01:41:E1:ED:E9:AA:D6:75:30:35:3B:1A:4B:DF:5E X509v3 Authority Key Identifier: keyid:AE:DA:3A:68:76:F2:BB:6E:33:C8:1B:B2:8B:08:F9:F3:6C:80:DC:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:ce:6b:b2:07:15:8c:05:25:31:fa:31:36:f1:60:a5:1e:a1: 49:05:01:77:35:a8:3c:ce:64:b5:18:dd:cb:9a:1f:02:3a:ee: 32:4c:72:6f:9e:a1:2d:cb:ac:62:41:a9:55:a0:d7:7c:8d:c3: fb:18:af:f7:7f:ec:54:bc:00:49:f3:1c:3d:8f:a1:a1:b7:9f: b0:38:7d:ad:c0:1d:43:29:1c:56:a2:a3:df:e4:59:68:57:c7: d8:da:cf:10:c7:4c:12:31:8c:61:a7:45:0d:30:31:8f:15:b5: 9c:d9:e0:25:b0:cf:0c:cd:6c:60:e2:48:17:a7:24:54:30:f4: f7:b6:4f:c9:73:70:73:7b:7d:a9:0b:7f:b0:23:4f:11:cf:90: 50:d1:d0:67:75:9e:c6:0d:91:3c:98:91:f8:4a:66:ae:6f:6f: 17:53:b7:c1:fe:4f:58:d5:05:0a:58:18:8b:ed:88:2c:64:fa: aa:9c:9f:a6:e2:6c:00:18:77:7d:a9:60:c4:8d:9a:d7:2a:71: 6f:8d:b4:91:d2:f6:4e:f2:cb:00:c4:7f:e4:bc:8e:14:a0:9e: a2:dd:84:ee:ba:65:75:51:de:7f:6d:d5:d4:ee:b4:8b:c3:29: cd:e6:96:91:66:41:46:32:bb:aa:94:32:08:ea:fa:ec:77:0e: 72:13:2d:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbqj5SvV7+OxB6uOH16C+l5J1V1EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVEQTNBNjg3NkYyQkI2RTMzQzgxQkIyOEIwOEY5RjM2 QzgwREM0MDAeFw0yNDExMjUwNDA2NDdaFw0yNDExMjgxMzM2NDdaMDMxMTAvBgNV BAMTKENBMDQ3Q0JFRDYwMTQxRTFFREU5QUFENjc1MzAzNTNCMUE0QkRGNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD63CGoFnwWtLcu/gd+249CfMki da8VK1j2Bw/HFNGs6XhBuFOneqLlmR6LlKawieXFEOzfbdEMFKzf3bfGhk97mSsX gg2Zl8ASqB3xCItWxxNWnQ4K93aCaMFdly/g0Eacl73roL8u5DalpMbH0BxVXiUk 3KVAikT16pQTBRfTdCVPXTcNJuAq0KXbk0crLVIwNbE+b1uw++ydfY6nS9nRTgHc tAOX8wq/eHdkM2jfjaPMznBSWmagMW1YbtLvKWvrZU0vnSS9zkPGdHhq8VUK68Wr cbG/cbVoV9ZPiGx1ETYE1u0MNWDFA4F+o/wOxvz0ipwQGWZdS3dNnYaUEYTNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUygR8vtYBQeHt6arWdTA1OxpL314wHwYDVR0j BBgwFoAUrto6aHbyu24zyBuyiwj582yA3EAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NzU5NDc2ZS02YWRiLTRmMmUtYmU3NS04NDY3MjU5ZTEyOGYvMC9BRURBM0E2ODc2 RjJCQjZFMzNDODFCQjI4QjA4RjlGMzZDODBEQzQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUVEQTNBNjg3NkYyQkI2RTMzQzgxQkIyOEIwOEY5RjM2Qzgw REM0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDc1OTQ3NmUtNmFkYi00ZjJlLWJl NzUtODQ2NzI1OWUxMjhmLzAvQUVEQTNBNjg3NkYyQkI2RTMzQzgxQkIyOEIwOEY5 RjM2QzgwREM0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKbOa7IHFYwFJTH6MTbxYKUeoUkFAXc1qDzO ZLUY3cuaHwI67jJMcm+eoS3LrGJBqVWg13yNw/sYr/d/7FS8AEnzHD2PoaG3n7A4 fa3AHUMpHFaio9/kWWhXx9jazxDHTBIxjGGnRQ0wMY8VtZzZ4CWwzwzNbGDiSBen JFQw9Pe2T8lzcHN7fakLf7AjTxHPkFDR0Gd1nsYNkTyYkfhKZq5vbxdTt8H+T1jV BQpYGIvtiCxk+qqcn6bibAAYd32pYMSNmtcqcW+NtJHS9k7yywDEf+S8jhSgnqLd hO66ZXVR3n9t1dTutIvDKc3mlpFmQUYyu6qUMgjq+ux3DnITLdU= -----END CERTIFICATE-----Generated at Mon Nov 25 04:42:06 2024 by rpki-client on console-ams.rpki-client.org