$ rpki-client -vvf repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.mft File: AF504C4E6E3831F756E3BE07469483DFED452516.mft (raw, json) Hash identifier: cJDKbe4IpRX2izvYwIXj0Y7RDwBrhe/RFoYoXpopQs4= Subject key identifier: 92:93:BB:D9:5A:A3:EC:0B:2C:4C:CD:EF:59:67:5A:50:9A:E1:E1:0C Authority key identifier: AF:50:4C:4E:6E:38:31:F7:56:E3:BE:07:46:94:83:DF:ED:45:25:16 Certificate issuer: /CN=AF504C4E6E3831F756E3BE07469483DFED452516 Certificate serial: 6F795C764C7E82DE7A3C7AF06F610DD0382EFD54 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF504C4E6E3831F756E3BE07469483DFED452516.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.mft Manifest number: 0483 Signing time: Fri 22 Nov 2024 15:30:01 +0000 Manifest this update: Fri 22 Nov 2024 15:25:01 +0000 Manifest next update: Mon 25 Nov 2024 18:41:01 +0000 Files and hashes: 1: 3130332e34302e35342e302f32332d3234203d3e203538333932.roa (hash: +gn5K58E6ZIpYG1JbRIaPtWowpbPT7Kl7zJzF2LuH+w=) 2: AF504C4E6E3831F756E3BE07469483DFED452516.crl (hash: ElqeMcRF7z8fZ/49gxSKX8zNM6d5l17OPh5CfVtcekk=) 3: 3130332e31312e3133342e302f32332d3234203d3e203538333932.roa (hash: yKj/LcaLHzBONx9eDhSrcYY44Dxzt/MgNKH5+9rrMKk=) 4: 323030313a6466323a363030303a3a2f34382d3438203d3e203538333932.roa (hash: 1/KGFTQyobxhAVI8Z6Ox8PIFy70waImQe4L6pe/5zlY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.crl rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF504C4E6E3831F756E3BE07469483DFED452516.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 18:41:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:79:5c:76:4c:7e:82:de:7a:3c:7a:f0:6f:61:0d:d0:38:2e:fd:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF504C4E6E3831F756E3BE07469483DFED452516 Validity Not Before: Nov 22 15:25:01 2024 GMT Not After : Nov 25 18:41:01 2024 GMT Subject: CN=9293BBD95AA3EC0B2C4CCDEF59675A509AE1E10C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:85:1b:6b:ee:d6:2f:6e:8e:97:c6:17:7d:64: 50:7e:c1:74:29:23:00:07:38:0e:1a:2c:75:ba:00: 47:74:a8:c2:54:78:10:22:80:fd:ad:c8:b3:39:68: b9:e0:3a:4f:ba:35:09:db:f1:b2:89:87:84:cd:b0: 41:53:82:58:7c:75:cd:2b:a9:d0:fa:10:f2:08:ff: 5c:5c:e3:ae:df:1a:e1:90:31:67:e4:e5:30:0b:39: 0a:ba:3c:ee:f3:17:ce:ee:ef:67:9d:9b:36:74:72: 5b:3a:2a:06:dd:9a:5b:cf:50:ba:1e:8e:7c:9d:50: d7:70:ae:58:2c:db:af:49:9c:52:18:e4:49:51:7a: d5:0a:90:9b:7c:ec:70:01:7c:cc:14:ca:6b:c6:40: ee:f9:54:b1:ba:42:7c:91:5b:b6:25:bc:1a:5b:6b: 66:86:c1:10:40:1b:ea:c0:ce:8b:7f:65:57:23:c2: 5a:81:38:0e:b8:69:d0:db:39:71:2b:f4:ba:8c:cc: c5:76:83:47:79:e8:ba:73:79:69:1d:f7:a0:29:ec: 26:8c:43:4a:ee:c1:47:37:13:17:fb:77:74:c0:c3: fe:ae:6c:07:c5:fe:f8:61:14:d4:50:8b:76:0f:2d: 9e:7f:1b:30:95:3b:c7:22:a3:2e:64:c1:8c:9b:01: 43:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:93:BB:D9:5A:A3:EC:0B:2C:4C:CD:EF:59:67:5A:50:9A:E1:E1:0C X509v3 Authority Key Identifier: keyid:AF:50:4C:4E:6E:38:31:F7:56:E3:BE:07:46:94:83:DF:ED:45:25:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF504C4E6E3831F756E3BE07469483DFED452516.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:bb:6f:bf:59:e0:0e:ca:c5:a2:e9:31:8f:7b:79:79:84:60: 11:9a:00:0c:e9:d1:b9:c4:16:14:42:a4:1e:ec:8b:72:ef:ca: ed:ac:79:0f:fa:ca:39:27:86:af:de:4e:64:93:9d:31:57:6f: e2:e5:c6:ef:ab:d1:2f:2a:02:e0:92:da:06:1a:20:3d:5a:ce: 66:b6:6f:34:78:bd:bf:a6:bf:90:83:42:fe:b6:e0:84:b0:72: 23:12:01:e7:3d:ac:e4:e2:33:04:73:f3:11:82:e0:28:62:9f: f0:b9:bd:0d:8b:3b:4f:25:8b:ef:a4:b6:04:41:a7:37:f5:b3: a7:3b:a7:a4:63:4b:ad:3d:63:7b:58:d7:7a:76:c4:bc:67:1a: c2:e1:9b:2b:90:f2:1b:ac:a1:bc:70:9b:ac:26:51:bb:dd:1e: c0:16:0f:1b:84:ae:82:8f:27:b5:1c:19:35:e6:17:9a:e5:ae: b4:51:7f:4e:7d:45:ec:b1:14:e5:ae:8b:c6:4c:65:ee:83:9e: 0e:f1:c0:23:ae:8b:47:cd:b5:da:16:f6:22:ad:be:ac:3a:c9: 56:bb:1c:a0:94:28:26:d2:9b:58:8f:d9:de:63:af:52:5e:e5: 7f:4a:11:6f:39:69:f6:e8:d5:be:5c:82:37:77:c8:9b:5d:8e: 3f:33:88:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb3lcdkx+gt56PHrwb2EN0Dgu/VQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY1MDRDNEU2RTM4MzFGNzU2RTNCRTA3NDY5NDgzREZF RDQ1MjUxNjAeFw0yNDExMjIxNTI1MDFaFw0yNDExMjUxODQxMDFaMDMxMTAvBgNV BAMTKDkyOTNCQkQ5NUFBM0VDMEIyQzRDQ0RFRjU5Njc1QTUwOUFFMUUxMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvhRtr7tYvbo6Xxhd9ZFB+wXQp IwAHOA4aLHW6AEd0qMJUeBAigP2tyLM5aLngOk+6NQnb8bKJh4TNsEFTglh8dc0r qdD6EPII/1xc467fGuGQMWfk5TALOQq6PO7zF87u72edmzZ0cls6KgbdmlvPULoe jnydUNdwrlgs269JnFIY5ElRetUKkJt87HABfMwUymvGQO75VLG6QnyRW7YlvBpb a2aGwRBAG+rAzot/ZVcjwlqBOA64adDbOXEr9LqMzMV2g0d56LpzeWkd96Ap7CaM Q0ruwUc3Exf7d3TAw/6ubAfF/vhhFNRQi3YPLZ5/GzCVO8cioy5kwYybAUOfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkpO72Vqj7AssTM3vWWdaUJrh4QwwHwYDVR0j BBgwFoAUr1BMTm44MfdW474HRpSD3+1FJRYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZmZiNzc2Ny0zZGU5LTQ4MzMtYjRlNy1iMWI2MmVlM2NkOTkvMC9BRjUwNEM0RTZF MzgzMUY3NTZFM0JFMDc0Njk0ODNERkVENDUyNTE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY1MDRDNEU2RTM4MzFGNzU2RTNCRTA3NDY5NDgzREZFRDQ1 MjUxNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGZmYjc3NjctM2RlOS00ODMzLWI0 ZTctYjFiNjJlZTNjZDk5LzAvQUY1MDRDNEU2RTM4MzFGNzU2RTNCRTA3NDY5NDgz REZFRDQ1MjUxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACO7b79Z4A7KxaLpMY97eXmEYBGaAAzp0bnE FhRCpB7si3Lvyu2seQ/6yjknhq/eTmSTnTFXb+Llxu+r0S8qAuCS2gYaID1azma2 bzR4vb+mv5CDQv624ISwciMSAec9rOTiMwRz8xGC4Chin/C5vQ2LO08li++ktgRB pzf1s6c7p6RjS609Y3tY13p2xLxnGsLhmyuQ8husobxwm6wmUbvdHsAWDxuEroKP J7UcGTXmF5rlrrRRf059ReyxFOWui8ZMZe6Dng7xwCOui0fNtdoW9iKtvqw6yVa7 HKCUKCbSm1iP2d5jr1Je5X9KEW85afbo1b5cgjd3yJtdjj8ziKM= -----END CERTIFICATE-----Generated at Fri Nov 22 16:43:36 2024 by rpki-client on console-ams.rpki-client.org