$ rpki-client -vvf repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft File: AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft (raw, json) Hash identifier: nen1r0snHUBN4boPWa7ZBR2x5ZG93aueXZSN1LVKjo8= Subject key identifier: C6:B4:27:AE:AB:CC:22:AA:95:29:DE:5F:E7:D5:90:D8:47:F5:1D:1C Authority key identifier: AE:A1:1B:A0:E9:BE:13:4F:2A:F5:C9:C6:9E:B1:FF:58:5E:4F:3A:B7 Certificate issuer: /CN=AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7 Certificate serial: 0947614CC059BB6830B437CCF1C485686E571685 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft Manifest number: A3 Signing time: Sat 18 May 2024 20:51:25 +0000 Manifest this update: Sat 18 May 2024 20:46:25 +0000 Manifest next update: Wed 22 May 2024 05:48:25 +0000 Files and hashes: 1: 3130332e3134392e33342e302f32342d3234203d3e203234353334.roa (hash: 36HKzFRtXgkpw637URQhXSsabEjYhyMw6xSrfDJZVCk=) 2: AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.crl (hash: wxFPSWTXkjFb+VhZ7T4sGrt7le9NO9M5NkNkq+2+9zM=) 3: 3130332e3134392e33352e302f32342d3234203d3e203234353334.roa (hash: kOFuSaWcp+Tj246w7gXWZs/JRQP0bIRuXOfYlDYSSms=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.crl rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:47:61:4c:c0:59:bb:68:30:b4:37:cc:f1:c4:85:68:6e:57:16:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7 Validity Not Before: May 18 20:46:25 2024 GMT Not After : May 22 05:48:25 2024 GMT Subject: CN=C6B427AEABCC22AA9529DE5FE7D590D847F51D1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:aa:11:09:04:48:04:c9:74:3d:ba:d3:08:a5: 2a:7b:38:80:0c:12:b5:57:17:f4:df:d7:99:49:c6: c0:40:e7:3a:a4:e2:bf:e2:76:87:4d:33:5e:0f:3e: fa:c8:3f:b7:17:aa:09:15:14:8d:f6:7c:6b:66:42: c4:75:2f:dc:58:e0:12:08:c6:88:ef:76:eb:f0:0d: 70:d9:45:69:63:9b:04:09:9f:07:02:4d:e6:34:7f: 14:6a:b8:4d:06:a4:1d:d7:93:24:27:21:ca:c5:0b: aa:75:79:8b:43:19:47:bd:08:77:d3:1f:14:25:ff: 6a:9a:9a:01:b4:66:e4:97:07:f2:2c:9d:e7:6b:03: 3f:48:b3:99:ec:7b:d7:1c:8b:df:a0:3a:90:f0:98: c0:06:d5:c3:df:dd:b3:a5:7e:23:97:d2:22:e8:9a: 9e:e7:96:e0:fb:71:61:9e:b8:c3:85:d0:a5:85:b6: db:8b:c1:98:41:c4:30:5a:85:bb:5f:56:ae:c8:58: e4:09:d0:39:89:0f:e2:94:c1:41:fb:b5:f6:a1:d8: 08:00:60:7b:88:0b:8d:2c:23:e1:58:00:48:05:b6: 88:d0:3e:68:3d:ad:14:c0:99:9c:62:ec:98:21:e4: 45:aa:87:15:b6:9a:35:7e:2c:dc:a5:77:01:7c:c7: 56:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:B4:27:AE:AB:CC:22:AA:95:29:DE:5F:E7:D5:90:D8:47:F5:1D:1C X509v3 Authority Key Identifier: keyid:AE:A1:1B:A0:E9:BE:13:4F:2A:F5:C9:C6:9E:B1:FF:58:5E:4F:3A:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:7f:65:b3:d8:5a:5c:80:f8:11:c6:15:39:20:9a:fe:6c:a7: 8d:40:73:5b:a7:17:d5:ea:3d:ae:49:dd:24:c0:3f:8e:52:b6: d1:85:60:c6:08:f2:cf:60:44:ae:7c:85:0d:77:e8:cd:e5:7b: 57:0d:9d:2b:97:94:a4:0d:57:a8:6a:d3:7c:84:a5:05:f9:5b: 3a:2f:10:12:60:88:36:ef:3e:d9:c6:7f:1f:9b:d5:6d:b3:33: 2e:43:8c:8e:ee:5f:fc:1c:38:c4:9e:cd:56:de:fb:60:38:3f: 72:fc:8c:57:12:2b:0b:3b:20:ef:45:ed:c5:a0:8e:71:46:71: 7c:19:8d:af:0c:82:6d:49:ed:7b:7d:d6:bf:f8:32:98:d0:68: 26:74:0d:f2:0d:e2:7f:25:e5:15:90:a9:49:a8:06:00:66:28: a1:ee:11:ab:68:08:37:0f:d5:f2:12:e4:6f:d2:b2:9f:96:45: cb:0a:4f:59:78:b9:ed:56:eb:b0:d0:a2:f3:25:e9:a7:d6:5e: dc:c5:ae:25:21:82:fb:fe:11:8c:4f:fb:54:71:f3:c8:c7:e4: 24:cf:fc:93:49:1c:cf:9b:2d:50:12:a9:c0:77:72:6c:c6:3d: 31:76:49:98:c0:d3:ad:4c:e3:e2:1b:7f:8f:2f:2f:6f:14:d4: ca:f0:8c:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCUdhTMBZu2gwtDfM8cSFaG5XFoUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVBMTFCQTBFOUJFMTM0RjJBRjVDOUM2OUVCMUZGNTg1 RTRGM0FCNzAeFw0yNDA1MTgyMDQ2MjVaFw0yNDA1MjIwNTQ4MjVaMDMxMTAvBgNV BAMTKEM2QjQyN0FFQUJDQzIyQUE5NTI5REU1RkU3RDU5MEQ4NDdGNTFEMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6qhEJBEgEyXQ9utMIpSp7OIAM ErVXF/Tf15lJxsBA5zqk4r/idodNM14PPvrIP7cXqgkVFI32fGtmQsR1L9xY4BII xojvduvwDXDZRWljmwQJnwcCTeY0fxRquE0GpB3XkyQnIcrFC6p1eYtDGUe9CHfT HxQl/2qamgG0ZuSXB/IsnedrAz9Is5nse9cci9+gOpDwmMAG1cPf3bOlfiOX0iLo mp7nluD7cWGeuMOF0KWFttuLwZhBxDBahbtfVq7IWOQJ0DmJD+KUwUH7tfah2AgA YHuIC40sI+FYAEgFtojQPmg9rRTAmZxi7Jgh5EWqhxW2mjV+LNyldwF8x1Z1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxrQnrqvMIqqVKd5f59WQ2Ef1HRwwHwYDVR0j BBgwFoAUrqEboOm+E08q9cnGnrH/WF5POrcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MzYzNWUyNS04NTk5LTQ4YWUtYmRjYi1lMzIzZGZjODk2ZWMvMC9BRUExMUJBMEU5 QkUxMzRGMkFGNUM5QzY5RUIxRkY1ODVFNEYzQUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUVBMTFCQTBFOUJFMTM0RjJBRjVDOUM2OUVCMUZGNTg1RTRG M0FCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjM2MzVlMjUtODU5OS00OGFlLWJk Y2ItZTMyM2RmYzg5NmVjLzAvQUVBMTFCQTBFOUJFMTM0RjJBRjVDOUM2OUVCMUZG NTg1RTRGM0FCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABB/ZbPYWlyA+BHGFTkgmv5sp41Ac1unF9Xq Pa5J3STAP45SttGFYMYI8s9gRK58hQ136M3le1cNnSuXlKQNV6hq03yEpQX5Wzov EBJgiDbvPtnGfx+b1W2zMy5DjI7uX/wcOMSezVbe+2A4P3L8jFcSKws7IO9F7cWg jnFGcXwZja8Mgm1J7Xt91r/4MpjQaCZ0DfIN4n8l5RWQqUmoBgBmKKHuEatoCDcP 1fIS5G/Ssp+WRcsKT1l4ue1W67DQovMl6afWXtzFriUhgvv+EYxP+1Rx88jH5CTP /JNJHM+bLVASqcB3cmzGPTF2SZjA061M4+Ibf48vL28U1MrwjHk= -----END CERTIFICATE-----Generated at Sat May 18 21:23:57 2024 by rpki-client on console-fra.rpki-client.org