$ rpki-client -vvf repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft File: AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft (raw, json) Hash identifier: ALe66tAupiZuTQoWwooUubQa5k1N3gqa+tlQS+fv9I8= Subject key identifier: BA:64:C2:55:DE:DF:B2:59:47:24:39:6E:6D:8B:8C:2F:FA:E0:7E:F4 Authority key identifier: AE:FE:27:D2:9E:7A:97:59:83:A2:40:B5:3A:6F:71:C7:85:F7:E9:A6 Certificate issuer: /CN=AEFE27D29E7A975983A240B53A6F71C785F7E9A6 Certificate serial: 14E6E091B8BBB1EBB0CAAAF7627C6CF700504774 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft Manifest number: 01BF Signing time: Sun 24 Nov 2024 14:40:05 +0000 Manifest this update: Sun 24 Nov 2024 14:35:05 +0000 Manifest next update: Wed 27 Nov 2024 20:03:05 +0000 Files and hashes: 1: AEFE27D29E7A975983A240B53A6F71C785F7E9A6.crl (hash: 4GSkF1JHUyXZpRGddVIs3rGv/eRyNoAb7bk/bY8t6G4=) 2: 3130332e3134372e3231392e302f32342d3234203d3e20313339393739.roa (hash: VMElV9WpTZ8Gw2sJOOzCmbXCuYQzpRJxQhqupdhcyTo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.crl rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:e6:e0:91:b8:bb:b1:eb:b0:ca:aa:f7:62:7c:6c:f7:00:50:47:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEFE27D29E7A975983A240B53A6F71C785F7E9A6 Validity Not Before: Nov 24 14:35:05 2024 GMT Not After : Nov 27 20:03:05 2024 GMT Subject: CN=BA64C255DEDFB2594724396E6D8B8C2FFAE07EF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5d:4e:76:2b:66:c3:c2:5c:3c:a7:a6:e4:2b: ce:b7:7c:b1:ba:81:0a:a1:6c:85:04:1c:05:d3:30: 9e:2f:90:44:c0:c1:4f:06:32:63:9c:6c:2c:1e:45: b5:46:e4:ff:66:7b:c7:9d:07:fb:37:86:fc:58:8b: f5:b8:2b:17:62:4a:0d:09:1b:72:0f:6d:0d:c9:71: 21:02:b0:65:fd:e1:67:6c:df:c1:dc:ec:1f:d1:21: 18:23:94:1f:45:17:cc:da:6c:e9:6a:f1:a8:24:de: 50:9e:b6:2d:77:50:5f:26:f7:d3:2b:9c:23:bb:d9: e0:9c:8c:b4:f1:9b:24:53:70:f0:2e:33:87:b3:b0: 6c:e1:b6:8d:ab:6b:7b:14:c6:c7:4a:6b:52:7a:33: fd:03:ef:e5:35:14:69:0a:d3:e2:e2:c9:de:8f:a1: 38:f0:ab:36:4f:9a:aa:20:6e:93:ca:91:40:97:a3: 70:b8:10:4b:16:92:29:e8:7c:57:4b:b9:29:04:85: 5a:64:50:15:20:d5:33:07:0a:9e:8c:d6:86:c3:0f: 38:80:c4:0e:70:5e:68:b7:21:75:c1:4e:69:9c:40: 36:34:0c:77:a2:8d:96:91:43:8f:01:03:2f:e7:4c: fd:6c:46:c8:69:ec:c4:ee:32:e9:25:0e:d9:d0:24: be:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:64:C2:55:DE:DF:B2:59:47:24:39:6E:6D:8B:8C:2F:FA:E0:7E:F4 X509v3 Authority Key Identifier: keyid:AE:FE:27:D2:9E:7A:97:59:83:A2:40:B5:3A:6F:71:C7:85:F7:E9:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:d5:18:ce:f8:99:a9:3b:de:01:b3:a8:f3:ec:f9:48:20:8c: e3:fe:dc:e6:e8:ca:5c:fa:14:04:61:1b:1f:ae:c2:ad:10:36: f7:a4:7d:24:3e:ce:00:ff:13:c0:e7:c2:21:fd:54:56:a6:dd: b3:e3:fc:fd:80:89:e9:4b:5f:2d:cd:52:01:ea:a0:7c:f8:75: c8:cc:61:68:70:26:90:61:70:d0:63:19:78:2d:14:67:d9:3e: b1:f0:fa:f7:9c:85:b4:5a:1a:f9:24:2e:44:8c:44:d7:db:42: 96:5a:7b:55:07:4d:5d:bc:d4:7c:6e:e7:89:6f:bc:ff:b2:4e: 28:36:41:e5:e1:fc:7d:66:ae:a1:0e:0b:dc:86:f2:87:e8:30: 77:16:e3:91:df:41:1c:37:3a:a0:b2:55:05:69:03:00:05:8a: a0:09:23:0a:4c:cb:07:e5:23:b8:f7:b0:e8:85:8f:37:03:c1: 96:c1:6a:0e:bb:dd:e5:8c:a0:44:1d:4a:ba:70:58:33:c4:e9: b7:33:76:8f:ab:1e:05:09:52:df:13:62:97:d8:b2:fd:a7:2b: 95:9a:57:13:58:ad:61:b4:ba:5f:4c:66:b9:65:67:f0:0b:86: 4a:30:12:be:ea:ca:b2:22:2f:3a:d2:61:fd:70:f6:93:cf:e7: 95:57:90:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFObgkbi7seuwyqr3Ynxs9wBQR3QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVGRTI3RDI5RTdBOTc1OTgzQTI0MEI1M0E2RjcxQzc4 NUY3RTlBNjAeFw0yNDExMjQxNDM1MDVaFw0yNDExMjcyMDAzMDVaMDMxMTAvBgNV BAMTKEJBNjRDMjU1REVERkIyNTk0NzI0Mzk2RTZEOEI4QzJGRkFFMDdFRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkXU52K2bDwlw8p6bkK863fLG6 gQqhbIUEHAXTMJ4vkETAwU8GMmOcbCweRbVG5P9me8edB/s3hvxYi/W4KxdiSg0J G3IPbQ3JcSECsGX94Wds38Hc7B/RIRgjlB9FF8zabOlq8agk3lCeti13UF8m99Mr nCO72eCcjLTxmyRTcPAuM4ezsGzhto2ra3sUxsdKa1J6M/0D7+U1FGkK0+Liyd6P oTjwqzZPmqogbpPKkUCXo3C4EEsWkinofFdLuSkEhVpkUBUg1TMHCp6M1obDDziA xA5wXmi3IXXBTmmcQDY0DHeijZaRQ48BAy/nTP1sRshp7MTuMuklDtnQJL5XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUumTCVd7fsllHJDlubYuML/rgfvQwHwYDVR0j BBgwFoAUrv4n0p56l1mDokC1Om9xx4X36aYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Nzc2ZjJlNS1kZmJkLTRmN2YtOGIzZC03Yjk3MGQ1NDFiOGYvMC9BRUZFMjdEMjlF N0E5NzU5ODNBMjQwQjUzQTZGNzFDNzg1RjdFOUE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUVGRTI3RDI5RTdBOTc1OTgzQTI0MEI1M0E2RjcxQzc4NUY3 RTlBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzc3NmYyZTUtZGZiZC00ZjdmLThi M2QtN2I5NzBkNTQxYjhmLzAvQUVGRTI3RDI5RTdBOTc1OTgzQTI0MEI1M0E2Rjcx Qzc4NUY3RTlBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAITVGM74mak73gGzqPPs+UggjOP+3Oboylz6 FARhGx+uwq0QNvekfSQ+zgD/E8DnwiH9VFam3bPj/P2AielLXy3NUgHqoHz4dcjM YWhwJpBhcNBjGXgtFGfZPrHw+vechbRaGvkkLkSMRNfbQpZae1UHTV281Hxu54lv vP+yTig2QeXh/H1mrqEOC9yG8ofoMHcW45HfQRw3OqCyVQVpAwAFiqAJIwpMywfl I7j3sOiFjzcDwZbBag673eWMoEQdSrpwWDPE6bczdo+rHgUJUt8TYpfYsv2nK5Wa VxNYrWG0ul9MZrllZ/ALhkowEr7qyrIiLzrSYf1w9pPP55VXkAY= -----END CERTIFICATE-----Generated at Sun Nov 24 15:29:10 2024 by rpki-client on console-ams.rpki-client.org