$ rpki-client -vvf repo-rpki.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.mft File: AF52E716DE71EEA9353FEA92FBF72DA2106A594C.mft (raw, json) Hash identifier: FSBM/W8g1aIU3RWtb2gGEyJlN996XlIxTx4wwq1YlF4= Subject key identifier: A8:DE:AF:33:8A:FE:58:61:1A:8B:8B:E1:59:ED:1E:F8:51:23:85:4D Authority key identifier: AF:52:E7:16:DE:71:EE:A9:35:3F:EA:92:FB:F7:2D:A2:10:6A:59:4C Certificate issuer: /CN=AF52E716DE71EEA9353FEA92FBF72DA2106A594C Certificate serial: 5FD1CCB775E01A8002C5926FBE02DE8E6B06D476 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.mft Manifest number: 0434 Signing time: Tue 21 May 2024 19:40:56 +0000 Manifest this update: Tue 21 May 2024 19:35:56 +0000 Manifest next update: Sat 25 May 2024 05:46:56 +0000 Files and hashes: 1: 323030313a6466373a373430303a3a2f34382d3438203d3e20313336303532.roa (hash: OB875uh6wOTciQxrqkHO/20nRAiPbyWsP8F9+D/60rc=) 2: 3130332e3233362e3230312e302f32342d3234203d3e20313336303532.roa (hash: vVq5IZtEQhPj4BOXAl1eggBM+hgx+OY8wD2HovPggOI=) 3: 3130332e31352e3232362e302f32342d3234203d3e20313336303532.roa (hash: /uPmMXJbLV/RJ1NBuMsFBIxXXdZGUbZTuxT3HZUYdMU=) 4: AF52E716DE71EEA9353FEA92FBF72DA2106A594C.crl (hash: O8F4EFF48mG4cIbpHmkqlDC5+qpjFrKxaJtybS0HQes=) 5: 3130332e32382e35322e302f32332d3234203d3e20313336303532.roa (hash: 6S9av5iO1RLdTW1sC/u1s/hJFFSQCsrZ7RFlRZsdMWk=) 6: 3130332e35352e33362e302f32322d3234203d3e20313336303532.roa (hash: 8O7G6XeriXEgTx2RYSguXINiEEUaQhtNKti+QFwHliA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.crl rsync://repo-rpki.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 00:42:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:d1:cc:b7:75:e0:1a:80:02:c5:92:6f:be:02:de:8e:6b:06:d4:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF52E716DE71EEA9353FEA92FBF72DA2106A594C Validity Not Before: May 21 19:35:56 2024 GMT Not After : May 25 05:46:56 2024 GMT Subject: CN=A8DEAF338AFE58611A8B8BE159ED1EF85123854D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:40:6e:5a:2e:8b:0d:7b:55:73:7a:01:d8:a4: 05:c7:76:c5:c5:d0:03:82:73:6c:26:5b:db:8e:d1: be:9a:ed:18:e4:07:94:cb:78:c6:8c:c9:d9:86:ab: ef:aa:0a:fa:ab:e2:f5:4b:c8:54:59:49:d8:43:60: 5b:19:72:a8:97:2f:31:ef:58:dd:45:bf:91:2a:ad: ec:b7:3b:e3:ae:4b:63:eb:9a:84:99:c8:39:e7:0e: 0c:16:41:39:29:d9:70:62:97:38:46:fe:e4:76:0d: 93:72:cc:94:38:53:9f:81:0b:fc:dc:ae:e4:98:47: fa:ab:d4:27:03:22:8f:85:22:0d:90:f3:10:82:20: e5:8a:b7:80:cc:83:5d:97:15:eb:c0:c9:18:f5:4d: ec:7d:64:b3:f5:ed:3d:ae:7d:7a:08:7a:10:44:f7: 04:c3:d4:86:37:37:38:cb:46:d3:78:c3:be:71:2d: 1b:d3:cf:46:09:3f:a4:e5:0b:56:d3:2b:ab:95:d8: 96:3d:46:47:46:e5:cd:b9:2e:c1:23:c4:80:84:03: 85:8d:d7:24:db:af:f5:dd:f0:a0:23:f9:b4:a7:8e: fd:20:b9:09:57:f3:c1:ec:c9:1e:dc:77:7f:6b:2d: 32:e9:9a:6d:e7:f9:24:e3:b7:92:c6:cf:ad:d9:a8: 60:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:DE:AF:33:8A:FE:58:61:1A:8B:8B:E1:59:ED:1E:F8:51:23:85:4D X509v3 Authority Key Identifier: keyid:AF:52:E7:16:DE:71:EE:A9:35:3F:EA:92:FB:F7:2D:A2:10:6A:59:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:09:38:14:78:79:13:4a:13:e7:15:0e:d1:04:c1:7e:61:00: 65:1c:72:7b:dc:6f:63:17:26:57:f0:9c:6f:0e:76:19:f3:72: 52:33:b5:b0:44:57:ed:22:0c:da:f5:55:15:9f:fb:29:45:5f: 94:e8:fb:4e:a7:85:8e:df:af:f6:15:51:d8:20:ca:c7:52:7f: d0:91:67:04:23:22:25:98:ce:50:8c:33:1c:b1:5d:8c:5f:8f: 35:83:bc:2f:18:53:e0:c3:36:c6:35:2e:14:68:c5:62:31:54: 42:27:27:c0:37:fc:6e:8c:fd:d1:f8:05:12:65:9a:33:f6:78: d8:af:be:5a:85:81:22:dd:b5:d9:9e:8e:e9:d7:46:90:76:61: 9b:35:72:e6:22:20:cb:9a:e1:2f:c8:cc:9e:1f:d6:51:cd:5b: 4b:bc:50:36:cd:b3:b6:08:43:f5:0e:ff:57:ff:bd:69:43:1e: 79:b7:c0:81:2a:cc:09:67:99:1a:66:13:e9:66:c1:16:4a:ab: 74:cf:b3:af:66:eb:79:3b:63:01:96:da:05:86:8d:04:7b:a3: 4b:62:d4:38:3d:da:aa:e5:8e:ab:dc:20:fa:a6:9d:02:0e:44: 66:ea:b5:23:2e:1d:b0:bd:d3:f6:94:88:6e:d0:72:91:9c:25: 96:e8:b7:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX9HMt3XgGoACxZJvvgLejmsG1HYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY1MkU3MTZERTcxRUVBOTM1M0ZFQTkyRkJGNzJEQTIx MDZBNTk0QzAeFw0yNDA1MjExOTM1NTZaFw0yNDA1MjUwNTQ2NTZaMDMxMTAvBgNV BAMTKEE4REVBRjMzOEFGRTU4NjExQThCOEJFMTU5RUQxRUY4NTEyMzg1NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlQG5aLosNe1VzegHYpAXHdsXF 0AOCc2wmW9uO0b6a7RjkB5TLeMaMydmGq++qCvqr4vVLyFRZSdhDYFsZcqiXLzHv WN1Fv5Eqrey3O+OuS2PrmoSZyDnnDgwWQTkp2XBilzhG/uR2DZNyzJQ4U5+BC/zc ruSYR/qr1CcDIo+FIg2Q8xCCIOWKt4DMg12XFevAyRj1Tex9ZLP17T2ufXoIehBE 9wTD1IY3NzjLRtN4w75xLRvTz0YJP6TlC1bTK6uV2JY9RkdG5c25LsEjxICEA4WN 1yTbr/Xd8KAj+bSnjv0guQlX88HsyR7cd39rLTLpmm3n+STjt5LGz63ZqGBPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqN6vM4r+WGEai4vhWe0e+FEjhU0wHwYDVR0j BBgwFoAUr1LnFt5x7qk1P+qS+/ctohBqWUwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MmFjMGNhNS01Y2U3LTRlNmUtOWZmZi03MjEzZWYxZWYzNjQvMC9BRjUyRTcxNkRF NzFFRUE5MzUzRkVBOTJGQkY3MkRBMjEwNkE1OTRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY1MkU3MTZERTcxRUVBOTM1M0ZFQTkyRkJGNzJEQTIxMDZB NTk0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTJhYzBjYTUtNWNlNy00ZTZlLTlm ZmYtNzIxM2VmMWVmMzY0LzAvQUY1MkU3MTZERTcxRUVBOTM1M0ZFQTkyRkJGNzJE QTIxMDZBNTk0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGkJOBR4eRNKE+cVDtEEwX5hAGUccnvcb2MX JlfwnG8OdhnzclIztbBEV+0iDNr1VRWf+ylFX5To+06nhY7fr/YVUdggysdSf9CR ZwQjIiWYzlCMMxyxXYxfjzWDvC8YU+DDNsY1LhRoxWIxVEInJ8A3/G6M/dH4BRJl mjP2eNivvlqFgSLdtdmejunXRpB2YZs1cuYiIMua4S/IzJ4f1lHNW0u8UDbNs7YI Q/UO/1f/vWlDHnm3wIEqzAlnmRpmE+lmwRZKq3TPs69m63k7YwGW2gWGjQR7o0ti 1Dg92qrljqvcIPqmnQIORGbqtSMuHbC90/aUiG7QcpGcJZbotww= -----END CERTIFICATE-----Generated at Tue May 21 23:08:24 2024 by rpki-client on console-ams.rpki-client.org