$ rpki-client -vvf repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft File: AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft (raw, json) Hash identifier: XW9TK6LFejQ3lvGgKUv02x1IrSIBTWJkt5tzqF7vmns= Subject key identifier: B2:78:86:89:C6:19:CD:84:2E:5E:61:1A:1A:8A:26:68:B9:D4:D7:48 Authority key identifier: AF:15:FD:8C:B4:E4:52:C7:6B:55:70:97:43:61:4F:9B:54:48:CC:DB Certificate issuer: /CN=AF15FD8CB4E452C76B55709743614F9B5448CCDB Certificate serial: 5A38721DE0E0D46B7FD0E88670D1614F2B70F8C9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF15FD8CB4E452C76B55709743614F9B5448CCDB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft Manifest number: 0482 Signing time: Thu 21 Nov 2024 09:01:16 +0000 Manifest this update: Thu 21 Nov 2024 08:56:16 +0000 Manifest next update: Sun 24 Nov 2024 11:27:16 +0000 Files and hashes: 1: AF15FD8CB4E452C76B55709743614F9B5448CCDB.crl (hash: vHWE6giKH95d0TLZHWTwJ0qzPlRM5fmfAwuFKY4n7a8=) 2: 3230322e31342e39322e302f32332d3234203d3e203535363830.roa (hash: PHUFI70Yd8/eQH1IB5Bqra7jl3oU7toK/ScFCZQ9jng=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.crl rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF15FD8CB4E452C76B55709743614F9B5448CCDB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:38:72:1d:e0:e0:d4:6b:7f:d0:e8:86:70:d1:61:4f:2b:70:f8:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF15FD8CB4E452C76B55709743614F9B5448CCDB Validity Not Before: Nov 21 08:56:16 2024 GMT Not After : Nov 24 11:27:16 2024 GMT Subject: CN=B2788689C619CD842E5E611A1A8A2668B9D4D748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:0a:46:9d:b5:83:6c:01:92:f9:f8:f1:4f:4d: fa:c0:61:67:31:e3:bf:c0:5c:fb:e3:9b:3d:d4:08: 00:5c:58:58:4d:91:47:03:08:a6:11:b7:17:16:83: 0d:d0:8d:2d:77:cd:d6:15:27:84:10:ca:60:f2:a3: da:36:5c:b3:94:f5:a2:69:ce:5b:2f:b0:cf:45:3f: a7:b9:31:9e:54:a8:47:71:d6:36:00:aa:0a:b0:84: c8:8b:16:8e:be:87:66:ea:ee:43:c8:82:59:11:58: 32:21:a4:0a:cb:e6:63:7d:2d:3c:ba:ae:14:ec:1f: 2f:7c:05:91:5a:c8:56:78:7f:43:40:e3:6c:d3:4f: 04:77:ab:58:ee:9c:43:ba:cf:ec:c0:95:b9:3f:62: c1:8e:af:32:91:17:4f:10:e3:ed:ed:62:cd:05:ff: f4:8c:27:f9:8e:d9:48:d2:0d:9d:ec:8f:00:4f:d4: 6a:ff:68:c2:2e:dd:79:74:de:7b:ff:0a:41:76:64: ae:37:65:af:45:03:de:82:e3:8c:dd:4e:04:dd:63: ae:51:0a:76:39:ed:ee:ef:80:ac:53:8d:3d:00:b7: 09:f3:5f:5e:12:d9:a5:46:1a:2e:80:19:1f:29:1c: dc:24:d1:96:98:e8:06:e7:8f:ad:18:41:e2:f9:c4: 9f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:78:86:89:C6:19:CD:84:2E:5E:61:1A:1A:8A:26:68:B9:D4:D7:48 X509v3 Authority Key Identifier: keyid:AF:15:FD:8C:B4:E4:52:C7:6B:55:70:97:43:61:4F:9B:54:48:CC:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF15FD8CB4E452C76B55709743614F9B5448CCDB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:68:ac:2a:65:a8:b0:88:b9:22:3d:8b:9d:a9:4e:93:8e:8d: a0:1b:3c:d7:01:d4:ff:6b:1d:2e:2d:3d:95:33:16:bf:18:2a: b2:b4:05:74:5b:a5:09:66:77:66:21:06:51:d6:07:fd:21:d8: b1:05:df:b2:91:63:a6:1a:3c:81:ef:32:74:1b:b1:a0:b4:78: e6:7d:8d:4e:7a:59:01:ff:a0:b5:8a:a4:cd:58:d0:e9:4f:58: 04:e3:b4:84:60:a2:15:be:94:b2:2f:f7:de:71:df:05:3f:9d: 9e:91:65:d9:60:fc:77:18:15:97:8c:80:3a:c5:48:0c:17:95: 4c:da:e2:df:88:db:96:f1:5a:1c:1f:6a:bb:a1:48:f2:90:fe: d7:66:b4:de:6a:c2:e4:d7:f5:4e:d9:7e:a5:83:03:88:56:35: 1c:6d:7c:89:bc:54:0b:9b:dd:16:2f:c4:c4:94:65:3c:37:21: 0f:a2:70:d6:b6:ca:2b:c9:79:de:96:80:47:ee:2c:d0:13:18: 82:01:4a:3c:86:7d:1f:78:b4:48:03:03:65:20:22:52:46:18: d5:1e:98:bf:16:00:d1:0c:e1:6d:69:e6:9c:b7:64:43:61:d6: 8f:6a:b9:74:23:19:fa:42:53:2f:3c:51:99:1f:29:12:77:94: 5a:ee:f2:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWjhyHeDg1Gt/0OiGcNFhTytw+MkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYxNUZEOENCNEU0NTJDNzZCNTU3MDk3NDM2MTRGOUI1 NDQ4Q0NEQjAeFw0yNDExMjEwODU2MTZaFw0yNDExMjQxMTI3MTZaMDMxMTAvBgNV BAMTKEIyNzg4Njg5QzYxOUNEODQyRTVFNjExQTFBOEEyNjY4QjlENEQ3NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeCkadtYNsAZL5+PFPTfrAYWcx 47/AXPvjmz3UCABcWFhNkUcDCKYRtxcWgw3QjS13zdYVJ4QQymDyo9o2XLOU9aJp zlsvsM9FP6e5MZ5UqEdx1jYAqgqwhMiLFo6+h2bq7kPIglkRWDIhpArL5mN9LTy6 rhTsHy98BZFayFZ4f0NA42zTTwR3q1junEO6z+zAlbk/YsGOrzKRF08Q4+3tYs0F //SMJ/mO2UjSDZ3sjwBP1Gr/aMIu3Xl03nv/CkF2ZK43Za9FA96C44zdTgTdY65R CnY57e7vgKxTjT0AtwnzX14S2aVGGi6AGR8pHNwk0ZaY6Abnj60YQeL5xJ+3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsniGicYZzYQuXmEaGoomaLnU10gwHwYDVR0j BBgwFoAUrxX9jLTkUsdrVXCXQ2FPm1RIzNswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjBlNmEyZC04NGRjLTQ4ZGYtOWI3Ny03MjA4NTNmNDdjNmQvMC9BRjE1RkQ4Q0I0 RTQ1MkM3NkI1NTcwOTc0MzYxNEY5QjU0NDhDQ0RCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUYxNUZEOENCNEU0NTJDNzZCNTU3MDk3NDM2MTRGOUI1NDQ4 Q0NEQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzYwZTZhMmQtODRkYy00OGRmLTli NzctNzIwODUzZjQ3YzZkLzAvQUYxNUZEOENCNEU0NTJDNzZCNTU3MDk3NDM2MTRG OUI1NDQ4Q0NEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABZorCplqLCIuSI9i52pTpOOjaAbPNcB1P9r HS4tPZUzFr8YKrK0BXRbpQlmd2YhBlHWB/0h2LEF37KRY6YaPIHvMnQbsaC0eOZ9 jU56WQH/oLWKpM1Y0OlPWATjtIRgohW+lLIv995x3wU/nZ6RZdlg/HcYFZeMgDrF SAwXlUza4t+I25bxWhwfaruhSPKQ/tdmtN5qwuTX9U7ZfqWDA4hWNRxtfIm8VAub 3RYvxMSUZTw3IQ+icNa2yivJed6WgEfuLNATGIIBSjyGfR94tEgDA2UgIlJGGNUe mL8WANEM4W1p5py3ZENh1o9quXQjGfpCUy88UZkfKRJ3lFru8nY= -----END CERTIFICATE-----Generated at Thu Nov 21 11:03:06 2024 by rpki-client on console-fra.rpki-client.org