$ rpki-client -vvf repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft File: AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft (raw, json) Hash identifier: ujarQxjKVjGPJMiWp//4l+AzHglYfPYi9vX/KRppDKk= Subject key identifier: FD:92:63:3A:2C:D0:DC:9A:A0:84:6E:10:D2:B5:89:8C:7A:1A:BF:77 Authority key identifier: AE:D8:CB:33:E7:89:DD:34:21:82:B8:DD:6D:16:D9:5A:45:B9:81:EF Certificate issuer: /CN=AED8CB33E789DD342182B8DD6D16D95A45B981EF Certificate serial: 329F72C1E955E1A0C8956531B1046CFED77D3403 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AED8CB33E789DD342182B8DD6D16D95A45B981EF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft Manifest number: 1D Signing time: Mon 25 Nov 2024 14:11:38 +0000 Manifest this update: Mon 25 Nov 2024 14:06:38 +0000 Manifest next update: Thu 28 Nov 2024 17:17:38 +0000 Files and hashes: 1: AED8CB33E789DD342182B8DD6D16D95A45B981EF.crl (hash: Bp69vpZXfDLst+0HSm68V6TjTYvWujhIQy/+tWghN8s=) 2: 3136302e3138372e35352e302f32342d3234203d3e20313533313137.roa (hash: VYWAk8iGSZzF5g6fTa7RhmuP4rGT675f8tCJgCmKW00=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.crl rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AED8CB33E789DD342182B8DD6D16D95A45B981EF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 17:17:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:9f:72:c1:e9:55:e1:a0:c8:95:65:31:b1:04:6c:fe:d7:7d:34:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AED8CB33E789DD342182B8DD6D16D95A45B981EF Validity Not Before: Nov 25 14:06:38 2024 GMT Not After : Nov 28 17:17:38 2024 GMT Subject: CN=FD92633A2CD0DC9AA0846E10D2B5898C7A1ABF77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ba:e2:2a:eb:05:61:05:f2:81:1f:2d:d5:14: 69:b4:7e:2f:df:f6:07:ee:56:db:c1:0a:2c:d5:d6: 9d:13:30:54:19:67:fe:40:dd:39:96:9b:02:4d:ce: ac:77:46:b2:27:93:a4:33:07:c1:51:d2:a6:41:62: 44:76:b1:9b:53:1c:a6:f6:fa:b9:7c:b7:20:ed:73: aa:ab:af:f3:29:ff:36:ae:92:31:16:ad:a5:39:dc: f8:b0:f4:13:6f:7e:26:2d:af:f3:82:18:fb:9d:f3: da:f7:12:c4:59:1f:7f:4e:bc:5e:f7:c5:16:7f:60: 9e:87:1f:96:d6:1f:b3:44:48:c9:c1:16:e6:b5:77: 36:ed:3f:10:14:4c:eb:d6:ec:94:74:76:6f:1a:9b: 80:eb:96:13:b3:e5:60:11:93:0b:97:59:a2:33:06: e4:68:ff:0d:61:2e:86:12:f0:29:68:97:a6:14:88: e7:7a:18:95:ad:d3:d1:ad:c8:f7:ee:ef:be:3c:1d: b6:76:9b:fa:d1:70:9e:f0:fd:63:57:e9:90:1b:43: f6:e0:5b:0b:23:5f:cc:4a:0e:fe:1d:27:e0:c8:1a: 04:56:bb:f4:6d:33:96:9f:13:c5:92:f1:3a:fb:ee: 87:95:c4:f5:53:cd:7a:cf:63:dc:4a:f5:90:0a:62: 5d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:92:63:3A:2C:D0:DC:9A:A0:84:6E:10:D2:B5:89:8C:7A:1A:BF:77 X509v3 Authority Key Identifier: keyid:AE:D8:CB:33:E7:89:DD:34:21:82:B8:DD:6D:16:D9:5A:45:B9:81:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AED8CB33E789DD342182B8DD6D16D95A45B981EF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:2b:d2:1c:04:c9:5e:b2:f4:22:5c:1f:cc:e4:a7:3c:50:e0: 5d:77:d2:d7:8c:89:8e:55:60:ca:b7:64:af:02:fa:e9:8e:b9: cc:4d:7a:b7:cf:90:7b:94:96:5d:3a:45:27:7f:fd:56:09:c3: 79:e1:c2:04:ce:c0:f6:76:96:3f:54:f5:3a:28:18:af:72:47: 98:de:39:2a:b4:9a:80:7b:4e:bc:25:4f:a3:07:b9:01:09:5f: 3b:34:5f:e1:9e:9d:b9:b0:41:af:a7:ea:73:4f:f1:bd:b2:e7: 8e:e7:1a:6a:2e:49:8a:26:82:bf:d1:a5:46:65:36:d9:9b:88: 59:c0:8f:97:34:6d:47:fc:8f:d5:bf:cb:66:ae:b0:6b:f2:bc: 15:6a:a6:b4:0b:da:94:75:99:0f:0c:f2:78:b0:34:3d:df:51: b5:74:9e:82:39:c8:8c:13:37:99:38:83:b8:b3:1e:43:b4:1e: b3:33:b0:08:e0:33:9e:71:cc:07:c0:7a:a6:26:f8:8f:bc:f8: e2:31:13:4d:e5:29:dd:ba:51:09:8e:98:f2:58:d1:0e:34:0f: 59:4c:12:82:5b:2f:fa:84:b4:d8:72:15:61:b7:50:3a:5f:ed: c4:db:6e:af:73:d1:fe:cd:8c:d4:41:2e:60:68:2c:9f:e0:ee: 59:a7:0a:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMp9ywelV4aDIlWUxsQRs/td9NAMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVEOENCMzNFNzg5REQzNDIxODJCOERENkQxNkQ5NUE0 NUI5ODFFRjAeFw0yNDExMjUxNDA2MzhaFw0yNDExMjgxNzE3MzhaMDMxMTAvBgNV BAMTKEZEOTI2MzNBMkNEMERDOUFBMDg0NkUxMEQyQjU4OThDN0ExQUJGNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJuuIq6wVhBfKBHy3VFGm0fi/f 9gfuVtvBCizV1p0TMFQZZ/5A3TmWmwJNzqx3RrInk6QzB8FR0qZBYkR2sZtTHKb2 +rl8tyDtc6qrr/Mp/zaukjEWraU53Piw9BNvfiYtr/OCGPud89r3EsRZH39OvF73 xRZ/YJ6HH5bWH7NESMnBFua1dzbtPxAUTOvW7JR0dm8am4DrlhOz5WARkwuXWaIz BuRo/w1hLoYS8Clol6YUiOd6GJWt09GtyPfu7748HbZ2m/rRcJ7w/WNX6ZAbQ/bg WwsjX8xKDv4dJ+DIGgRWu/RtM5afE8WS8Tr77oeVxPVTzXrPY9xK9ZAKYl0RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/ZJjOizQ3JqghG4Q0rWJjHoav3cwHwYDVR0j BBgwFoAUrtjLM+eJ3TQhgrjdbRbZWkW5ge8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWIwN2E5ZS02MmRmLTQ4MDgtOWQyYS1hNmU2ODg0YmNiYmIvMC9BRUQ4Q0IzM0U3 ODlERDM0MjE4MkI4REQ2RDE2RDk1QTQ1Qjk4MUVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUVEOENCMzNFNzg5REQzNDIxODJCOERENkQxNkQ5NUE0NUI5 ODFFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTliMDdhOWUtNjJkZi00ODA4LTlk MmEtYTZlNjg4NGJjYmJiLzAvQUVEOENCMzNFNzg5REQzNDIxODJCOERENkQxNkQ5 NUE0NUI5ODFFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALUr0hwEyV6y9CJcH8zkpzxQ4F130teMiY5V YMq3ZK8C+umOucxNerfPkHuUll06RSd//VYJw3nhwgTOwPZ2lj9U9TooGK9yR5je OSq0moB7TrwlT6MHuQEJXzs0X+GenbmwQa+n6nNP8b2y547nGmouSYomgr/RpUZl NtmbiFnAj5c0bUf8j9W/y2ausGvyvBVqprQL2pR1mQ8M8niwND3fUbV0noI5yIwT N5k4g7izHkO0HrMzsAjgM55xzAfAeqYm+I+8+OIxE03lKd26UQmOmPJY0Q40D1lM EoJbL/qEtNhyFWG3UDpf7cTbbq9z0f7NjNRBLmBoLJ/g7lmnCkg= -----END CERTIFICATE-----Generated at Mon Nov 25 15:49:31 2024 by rpki-client on console-ams.rpki-client.org