$ rpki-client -vvf repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft File: AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft (raw, json) Hash identifier: V3EYRiBgWYKGK0pCbM1MA3WKjNhlSIOz2qbGTO6Yg9E= Subject key identifier: 17:A5:9B:C2:1E:06:C5:1C:BB:90:57:7B:C1:F3:E4:4E:25:16:74:53 Authority key identifier: AF:FB:90:3F:87:6C:B3:B8:74:8A:1C:89:94:58:FF:38:A0:D0:6D:4B Certificate issuer: /CN=AFFB903F876CB3B8748A1C899458FF38A0D06D4B Certificate serial: 2DC9DB7728BA1838E46A17405ADDAF5D97E6532C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft Manifest number: 018F Signing time: Sun 24 Nov 2024 18:31:26 +0000 Manifest this update: Sun 24 Nov 2024 18:26:26 +0000 Manifest next update: Thu 28 Nov 2024 03:43:26 +0000 Files and hashes: 1: 3130332e3138342e36332e302f32342d3234203d3e20313439363734.roa (hash: JVwjfITPIiXwaoLA1+VjmhWI9oDXDt0QXKsa+BUATOo=) 2: AFFB903F876CB3B8748A1C899458FF38A0D06D4B.crl (hash: CeDB78/tLtW54xnoFXWARkb9SB+MTwFuuTm8/+FWx7Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.crl rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:c9:db:77:28:ba:18:38:e4:6a:17:40:5a:dd:af:5d:97:e6:53:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFFB903F876CB3B8748A1C899458FF38A0D06D4B Validity Not Before: Nov 24 18:26:26 2024 GMT Not After : Nov 28 03:43:26 2024 GMT Subject: CN=17A59BC21E06C51CBB90577BC1F3E44E25167453 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:94:66:f1:02:be:8e:4e:ff:1b:64:06:36:fe: 74:f7:f5:dd:a3:c4:33:8e:10:f7:f8:be:72:6c:3c: 77:10:37:80:81:f6:ea:c2:b6:10:42:60:ee:39:fa: ec:b3:85:d3:25:ba:ea:54:dd:cc:92:ad:f4:d2:d5: e8:01:4a:c0:d4:98:54:a7:0f:e8:46:96:5c:02:77: 3f:08:05:0d:98:a5:02:64:40:d8:c5:3e:3f:ef:80: f4:bf:76:a7:15:d6:66:9c:46:15:15:9c:42:0e:1b: b8:6d:d6:46:9d:be:08:42:5b:d2:df:c9:a0:62:fe: ef:2b:4f:9c:da:c5:5e:49:1d:d2:5b:9d:7c:b0:31: f3:4c:82:f3:54:af:32:e7:52:77:4b:8d:f3:11:7d: 7d:d3:b6:b2:76:78:19:21:8a:b9:86:9f:f4:9f:50: 31:de:2c:fd:82:e1:47:6d:c8:7c:d7:87:b3:b6:7f: 16:ee:ca:04:4b:8f:ad:f9:f9:95:3d:e7:85:1c:cb: d7:cc:bf:0c:40:88:70:58:15:ff:48:df:e1:3f:60: ce:e8:17:45:84:b4:71:de:67:02:cb:eb:c9:ff:f8: 95:db:70:9f:8b:d5:90:2d:4c:64:30:2e:03:ad:85: 4b:3a:29:00:f2:c1:f6:ae:40:c0:63:51:6b:20:48: 93:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:A5:9B:C2:1E:06:C5:1C:BB:90:57:7B:C1:F3:E4:4E:25:16:74:53 X509v3 Authority Key Identifier: keyid:AF:FB:90:3F:87:6C:B3:B8:74:8A:1C:89:94:58:FF:38:A0:D0:6D:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:b2:5f:56:75:6c:11:e9:13:74:c2:6b:43:67:bb:65:f7:5c: a7:dd:63:77:e8:ec:4f:96:49:71:5b:3f:57:bb:81:b5:2b:d4: 71:0f:05:1a:ab:ad:67:49:79:c2:d7:00:a2:22:46:26:5b:20: 14:c3:1a:c0:be:be:6f:11:e9:e1:75:ac:6b:41:3e:dd:e3:c1: c1:fc:14:b7:e9:c6:2b:2b:49:7f:51:fd:37:84:3f:4c:ec:0f: 21:c1:3d:7f:55:68:7d:0d:b6:b2:30:17:1a:df:5d:07:00:b9: 8b:8b:8e:af:a7:ce:31:6c:a9:a0:7d:7d:a2:7f:51:b4:26:74: fa:c5:6d:c8:54:af:8b:77:d7:d3:0f:e5:2d:42:93:6c:b4:c5: dd:c3:27:57:89:e4:ca:a5:bd:7e:02:4d:5e:93:3d:fe:77:a6: dd:6a:58:90:17:ec:fd:18:6c:a3:cd:b7:f9:49:66:4f:87:cd: 3f:ce:20:79:3e:8a:7e:3b:e8:7c:5a:3b:e9:bf:91:ba:2a:4d: 86:98:2a:d8:05:82:24:12:4d:31:ff:d6:1f:fc:d7:37:d5:a9: d2:83:73:08:35:85:f6:55:37:82:da:fd:b2:a5:98:98:7f:5d: 27:a9:f1:c2:05:1f:0d:bd:b6:d3:09:fb:80:9a:cf:81:33:c7: bc:ee:52:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULcnbdyi6GDjkahdAWt2vXZfmUywwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZGQjkwM0Y4NzZDQjNCODc0OEExQzg5OTQ1OEZGMzhB MEQwNkQ0QjAeFw0yNDExMjQxODI2MjZaFw0yNDExMjgwMzQzMjZaMDMxMTAvBgNV BAMTKDE3QTU5QkMyMUUwNkM1MUNCQjkwNTc3QkMxRjNFNDRFMjUxNjc0NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjlGbxAr6OTv8bZAY2/nT39d2j xDOOEPf4vnJsPHcQN4CB9urCthBCYO45+uyzhdMluupU3cySrfTS1egBSsDUmFSn D+hGllwCdz8IBQ2YpQJkQNjFPj/vgPS/dqcV1macRhUVnEIOG7ht1kadvghCW9Lf yaBi/u8rT5zaxV5JHdJbnXywMfNMgvNUrzLnUndLjfMRfX3TtrJ2eBkhirmGn/Sf UDHeLP2C4UdtyHzXh7O2fxbuygRLj635+ZU954Ucy9fMvwxAiHBYFf9I3+E/YM7o F0WEtHHeZwLL68n/+JXbcJ+L1ZAtTGQwLgOthUs6KQDywfauQMBjUWsgSJMnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF6Wbwh4GxRy7kFd7wfPkTiUWdFMwHwYDVR0j BBgwFoAUr/uQP4dss7h0ihyJlFj/OKDQbUswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NGM0MzE0Zi1kM2I4LTRlMDYtYjI0NS00YTAyNzBiMjJhZGEvMC9BRkZCOTAzRjg3 NkNCM0I4NzQ4QTFDODk5NDU4RkYzOEEwRDA2RDRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUZGQjkwM0Y4NzZDQjNCODc0OEExQzg5OTQ1OEZGMzhBMEQw NkQ0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTRjNDMxNGYtZDNiOC00ZTA2LWIy NDUtNGEwMjcwYjIyYWRhLzAvQUZGQjkwM0Y4NzZDQjNCODc0OEExQzg5OTQ1OEZG MzhBMEQwNkQ0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABiyX1Z1bBHpE3TCa0Nnu2X3XKfdY3fo7E+W SXFbP1e7gbUr1HEPBRqrrWdJecLXAKIiRiZbIBTDGsC+vm8R6eF1rGtBPt3jwcH8 FLfpxisrSX9R/TeEP0zsDyHBPX9VaH0NtrIwFxrfXQcAuYuLjq+nzjFsqaB9faJ/ UbQmdPrFbchUr4t319MP5S1Ck2y0xd3DJ1eJ5MqlvX4CTV6TPf53pt1qWJAX7P0Y bKPNt/lJZk+HzT/OIHk+in476HxaO+m/kboqTYaYKtgFgiQSTTH/1h/81zfVqdKD cwg1hfZVN4La/bKlmJh/XSep8cIFHw29ttMJ+4Caz4Ezx7zuUkY= -----END CERTIFICATE-----Generated at Sun Nov 24 19:46:17 2024 by rpki-client on console-fra.rpki-client.org