$ rpki-client -vvf repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.mft File: AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.mft (raw, json) Hash identifier: nifXQrlpzl4ldrR90LetVFB9MEjlDxw47egbS4S3Q9A= Subject key identifier: 03:97:AC:8D:B6:05:73:F0:D4:5D:3C:04:A8:E1:8F:F6:0F:1B:EA:26 Authority key identifier: AF:68:71:CA:FD:05:C6:F6:25:9C:DC:9B:3F:E8:65:6F:CE:DE:C3:D5 Certificate issuer: /CN=AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5 Certificate serial: 7863078F6567735B885FAC6D0BA202634BB7796D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.mft Manifest number: 0C Signing time: Thu 21 Nov 2024 08:20:01 +0000 Manifest this update: Thu 21 Nov 2024 08:15:01 +0000 Manifest next update: Sun 24 Nov 2024 19:45:01 +0000 Files and hashes: 1: 3135372e36362e34302e302f32342d3234203d3e20313532373934.roa (hash: XF0z782r3sHF+OrwCSt8ZCAVQ0WZ8tu8nYx4HOA7soI=) 2: 3135372e36362e34302e302f32332d3233203d3e20313532373934.roa (hash: /DFyNaEsyO2usBnFzIOmfhaGZCRB0eHYovN+KsopEbs=) 3: 3135372e36362e34312e302f32342d3234203d3e20313532373934.roa (hash: AjW16B5R157K3hvjOmHF0WbVknW4Cg9BK3NqgeP7LAQ=) 4: AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.crl (hash: 6gNCj4oc2kdQ7evURw3qQBPz2LDH3knEONDWDuQNXz8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.crl rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:63:07:8f:65:67:73:5b:88:5f:ac:6d:0b:a2:02:63:4b:b7:79:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5 Validity Not Before: Nov 21 08:15:01 2024 GMT Not After : Nov 24 19:45:01 2024 GMT Subject: CN=0397AC8DB60573F0D45D3C04A8E18FF60F1BEA26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2e:dc:6f:56:21:20:39:16:16:17:d8:ad:98: 18:53:42:9d:1e:90:74:4c:4b:48:23:8b:97:1c:72: e0:49:96:4a:99:2c:e0:53:5f:e8:fe:14:4e:eb:8b: 0d:b7:18:69:96:59:3d:0b:92:96:8a:f9:31:da:4d: f5:59:75:21:d1:a6:b9:e6:64:fd:66:89:61:f0:26: cb:80:4f:85:9b:e3:64:4a:4d:b5:bd:c4:92:45:72: 1e:2b:79:26:7e:9f:1c:00:c1:a5:f6:30:bb:d9:de: 76:d8:c2:e5:f8:12:4d:06:24:10:17:14:60:1b:2b: ab:d4:89:7a:60:47:3d:6e:a1:4e:13:76:91:59:45: f9:84:f3:e5:40:9c:0e:a3:07:1e:40:ea:90:22:dd: f7:ac:67:44:52:22:a7:1a:69:44:d9:18:70:72:88: 21:d3:37:0e:e9:f2:8f:cc:1d:7e:40:50:0e:17:24: 37:e0:ba:b6:78:f2:d1:9c:4e:13:8a:24:e0:8d:5d: 73:25:ca:dd:d0:a7:78:2b:05:ba:da:db:eb:61:74: 65:a8:fd:25:d9:83:bf:69:a5:fd:60:cc:1b:33:1c: 17:77:21:b3:e4:90:ba:d7:60:d7:cf:c2:76:4e:45: ba:d5:88:cb:b6:70:7a:23:d7:4c:01:d0:e2:44:8e: 59:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:97:AC:8D:B6:05:73:F0:D4:5D:3C:04:A8:E1:8F:F6:0F:1B:EA:26 X509v3 Authority Key Identifier: keyid:AF:68:71:CA:FD:05:C6:F6:25:9C:DC:9B:3F:E8:65:6F:CE:DE:C3:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:7b:b2:59:3b:d2:c3:8f:ab:75:ac:43:be:5d:7b:d6:ae:d3: 03:41:ab:4e:39:c0:81:a7:0d:73:03:93:10:8e:d3:59:d4:71: 47:f3:dc:55:8b:ce:f8:7c:96:1c:ed:4d:61:b9:15:37:54:b7: e8:4d:3e:4b:c8:69:07:7b:4d:36:f1:ff:ad:49:f2:85:c4:4f: a1:8d:bb:2c:cf:75:10:ae:55:00:a3:ac:10:03:86:92:82:45: d4:06:63:20:96:c1:13:2d:bf:92:d7:a4:69:ce:a9:4a:db:be: 56:92:5b:05:c6:f0:8b:66:73:c0:87:ca:91:47:e2:9a:1e:e8: fa:d0:06:fa:37:3c:0e:67:95:2d:df:e9:14:5c:f7:b3:3a:c5: fb:ec:6e:29:cd:e8:cc:f0:a4:25:d7:ac:40:3a:3e:1c:9b:48: f8:62:2f:c2:4f:22:5d:70:a4:76:40:b1:ad:07:31:b2:6a:0b: a2:f9:4d:2c:68:f7:ae:b3:c4:b2:24:10:a8:25:10:a8:fe:b0: 3d:fe:44:4f:82:36:99:5a:df:2f:ec:5b:88:45:47:63:68:1b: 27:66:01:1b:e8:5a:42:c7:1d:92:66:85:2e:4f:19:1c:6a:fa: 49:66:b4:84:06:39:4b:52:1c:52:2c:11:0c:4a:9a:6f:ff:96: 0e:3a:a4:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeGMHj2Vnc1uIX6xtC6ICY0u3eW0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY2ODcxQ0FGRDA1QzZGNjI1OUNEQzlCM0ZFODY1NkZD RURFQzNENTAeFw0yNDExMjEwODE1MDFaFw0yNDExMjQxOTQ1MDFaMDMxMTAvBgNV BAMTKDAzOTdBQzhEQjYwNTczRjBENDVEM0MwNEE4RTE4RkY2MEYxQkVBMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGLtxvViEgORYWF9itmBhTQp0e kHRMS0gji5cccuBJlkqZLOBTX+j+FE7riw23GGmWWT0LkpaK+THaTfVZdSHRprnm ZP1miWHwJsuAT4Wb42RKTbW9xJJFch4reSZ+nxwAwaX2MLvZ3nbYwuX4Ek0GJBAX FGAbK6vUiXpgRz1uoU4TdpFZRfmE8+VAnA6jBx5A6pAi3fesZ0RSIqcaaUTZGHBy iCHTNw7p8o/MHX5AUA4XJDfgurZ48tGcThOKJOCNXXMlyt3Qp3grBbra2+thdGWo /SXZg79ppf1gzBszHBd3IbPkkLrXYNfPwnZORbrViMu2cHoj10wB0OJEjllBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA5esjbYFc/DUXTwEqOGP9g8b6iYwHwYDVR0j BBgwFoAUr2hxyv0FxvYlnNybP+hlb87ew9UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 N2YyYzE5MC0zMGY1LTRmMTktYmZjYS0wYjk4N2E1MmZkNTUvMC9BRjY4NzFDQUZE MDVDNkY2MjU5Q0RDOUIzRkU4NjU2RkNFREVDM0Q1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUY2ODcxQ0FGRDA1QzZGNjI1OUNEQzlCM0ZFODY1NkZDRURF QzNENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzdmMmMxOTAtMzBmNS00ZjE5LWJm Y2EtMGI5ODdhNTJmZDU1LzAvQUY2ODcxQ0FGRDA1QzZGNjI1OUNEQzlCM0ZFODY1 NkZDRURFQzNENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG17slk70sOPq3WsQ75de9au0wNBq045wIGn DXMDkxCO01nUcUfz3FWLzvh8lhztTWG5FTdUt+hNPkvIaQd7TTbx/61J8oXET6GN uyzPdRCuVQCjrBADhpKCRdQGYyCWwRMtv5LXpGnOqUrbvlaSWwXG8Itmc8CHypFH 4poe6PrQBvo3PA5nlS3f6RRc97M6xfvsbinN6MzwpCXXrEA6PhybSPhiL8JPIl1w pHZAsa0HMbJqC6L5TSxo966zxLIkEKglEKj+sD3+RE+CNpla3y/sW4hFR2NoGydm ARvoWkLHHZJmhS5PGRxq+klmtIQGOUtSHFIsEQxKmm//lg46pEQ= -----END CERTIFICATE-----Generated at Thu Nov 21 09:07:04 2024 by rpki-client on console-ams.rpki-client.org