$ rpki-client -vvf repo-rpki.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.mft File: AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.mft (raw, json) Hash identifier: nQ2TawPJAhTyW0tGDu6m+XOj4ZQVJ/fHOgXUMmn4QCY= Subject key identifier: D2:D1:5F:EE:33:72:0A:AD:13:57:1A:89:7C:7C:00:BF:C1:9D:6C:C0 Authority key identifier: AF:DF:D5:D1:C4:B3:9F:2F:AA:BB:A5:BC:15:23:4C:2B:12:43:BF:FB Certificate issuer: /CN=AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB Certificate serial: 03F86D65BDE8BDAA0C10F57DFCD991259F4D59E7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.mft Manifest number: 02E0 Signing time: Mon 20 May 2024 03:01:17 +0000 Manifest this update: Mon 20 May 2024 02:56:17 +0000 Manifest next update: Thu 23 May 2024 11:54:17 +0000 Files and hashes: 1: AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.crl (hash: yZmpk6VlAPcQR5mx3OB3hQ6MnQAxZ/ul62Sh5tcWVY0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.crl rsync://repo-rpki.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 11:41:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:f8:6d:65:bd:e8:bd:aa:0c:10:f5:7d:fc:d9:91:25:9f:4d:59:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB Validity Not Before: May 20 02:56:17 2024 GMT Not After : May 23 11:54:17 2024 GMT Subject: CN=D2D15FEE33720AAD13571A897C7C00BFC19D6CC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:54:26:65:df:3f:c0:4b:0c:60:b9:7e:86:8c: d6:eb:27:50:f8:1c:c4:2b:0f:91:30:4d:9d:28:f8: ff:1e:5a:5a:d4:22:9b:45:c4:77:a8:c6:be:75:94: 72:8f:c1:f5:d1:b0:ae:22:cb:7d:70:5e:6a:a1:bb: 8e:b7:05:50:4e:88:f8:6d:1c:f9:a0:6c:9b:85:19: 24:50:1c:12:1a:77:e4:0f:9d:19:37:cb:6c:e7:b6: 93:61:3a:1a:9c:45:c9:48:9a:28:74:27:e5:68:3b: 0d:a0:f9:01:85:19:a4:01:e9:05:cd:76:a6:9d:2a: 0e:cb:18:52:79:da:df:a7:bd:d1:e7:a5:ab:32:3b: 4c:35:6d:c0:91:05:51:94:1f:10:9c:b6:dd:19:df: 08:3f:9a:cb:04:d6:3a:3c:83:f9:a5:90:b9:dc:96: 05:00:76:01:b6:8f:4b:40:71:95:f4:d5:54:8c:ea: 02:0f:e3:16:73:a5:cc:c9:45:ea:cd:f7:09:02:be: a2:0b:cc:1c:b0:68:3d:70:e0:62:01:7d:26:a5:c0: 53:30:ac:70:a2:46:aa:76:17:f4:d4:eb:0b:a6:58: cc:d3:2e:1d:34:ac:82:a1:22:9c:6b:82:68:63:1d: d7:59:29:a0:7a:f5:93:0a:fb:68:dc:bd:24:d0:50: 94:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:D1:5F:EE:33:72:0A:AD:13:57:1A:89:7C:7C:00:BF:C1:9D:6C:C0 X509v3 Authority Key Identifier: keyid:AF:DF:D5:D1:C4:B3:9F:2F:AA:BB:A5:BC:15:23:4C:2B:12:43:BF:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:90:38:b1:89:b5:7b:a0:23:ee:34:0e:95:c1:7f:bb:88:29: 1d:17:15:cb:bb:ea:27:9e:c6:85:dd:fc:1a:3d:2f:da:e8:de: 16:63:93:a2:20:d0:7a:85:d1:4f:52:f5:9f:55:5e:0b:a7:f3: 5d:e5:19:14:ad:e3:fa:87:b8:52:b5:11:20:c4:1e:b1:50:d6: 17:42:42:70:45:6e:f5:27:48:90:50:76:8d:b1:88:4c:43:94: 84:a7:c0:7e:2b:1b:10:02:be:e8:ce:90:c0:fe:79:fa:e0:2b: 56:35:5a:37:fd:a7:fc:e3:eb:d1:4d:b9:58:22:be:67:ef:07: 8a:6c:49:15:d9:1b:55:bd:b7:16:a8:3c:f9:b5:41:21:f2:98: 55:d1:6d:82:66:68:b9:76:6b:43:32:c8:65:93:0b:a1:7f:ba: 71:19:c6:73:db:f2:e3:d8:05:eb:72:1c:14:07:8f:7d:65:ac: 2b:b4:cf:33:1a:cf:fe:87:b6:0e:19:bd:15:85:30:1b:fb:2c: 9d:a4:69:30:82:15:c2:a3:c5:98:2a:76:c7:a8:d9:92:e8:05: 96:b3:98:7f:93:09:46:ae:49:96:01:df:12:c7:d1:83:b4:50: c8:2f:9a:ef:33:1d:61:73:19:e7:15:19:62:14:a8:f4:17:1f: d7:5e:dc:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA/htZb3ovaoMEPV9/NmRJZ9NWecwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZERkQ1RDFDNEIzOUYyRkFBQkJBNUJDMTUyMzRDMkIx MjQzQkZGQjAeFw0yNDA1MjAwMjU2MTdaFw0yNDA1MjMxMTU0MTdaMDMxMTAvBgNV BAMTKEQyRDE1RkVFMzM3MjBBQUQxMzU3MUE4OTdDN0MwMEJGQzE5RDZDQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFVCZl3z/ASwxguX6GjNbrJ1D4 HMQrD5EwTZ0o+P8eWlrUIptFxHeoxr51lHKPwfXRsK4iy31wXmqhu463BVBOiPht HPmgbJuFGSRQHBIad+QPnRk3y2zntpNhOhqcRclImih0J+VoOw2g+QGFGaQB6QXN dqadKg7LGFJ52t+nvdHnpasyO0w1bcCRBVGUHxCctt0Z3wg/mssE1jo8g/mlkLnc lgUAdgG2j0tAcZX01VSM6gIP4xZzpczJRerN9wkCvqILzBywaD1w4GIBfSalwFMw rHCiRqp2F/TU6wumWMzTLh00rIKhIpxrgmhjHddZKaB69ZMK+2jcvSTQUJRnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0tFf7jNyCq0TVxqJfHwAv8GdbMAwHwYDVR0j BBgwFoAUr9/V0cSzny+qu6W8FSNMKxJDv/swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NGZlMTgxMS1jMDNmLTQ5ZDgtOTIxNy0xM2ZmMjJhMzFlYmUvMC9BRkRGRDVEMUM0 QjM5RjJGQUFCQkE1QkMxNTIzNEMyQjEyNDNCRkZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUZERkQ1RDFDNEIzOUYyRkFBQkJBNUJDMTUyMzRDMkIxMjQz QkZGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTRmZTE4MTEtYzAzZi00OWQ4LTky MTctMTNmZjIyYTMxZWJlLzAvQUZERkQ1RDFDNEIzOUYyRkFBQkJBNUJDMTUyMzRD MkIxMjQzQkZGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJyQOLGJtXugI+40DpXBf7uIKR0XFcu76iee xoXd/Bo9L9ro3hZjk6Ig0HqF0U9S9Z9VXgun813lGRSt4/qHuFK1ESDEHrFQ1hdC QnBFbvUnSJBQdo2xiExDlISnwH4rGxACvujOkMD+efrgK1Y1Wjf9p/zj69FNuVgi vmfvB4psSRXZG1W9txaoPPm1QSHymFXRbYJmaLl2a0MyyGWTC6F/unEZxnPb8uPY BetyHBQHj31lrCu0zzMaz/6Htg4ZvRWFMBv7LJ2kaTCCFcKjxZgqdseo2ZLoBZaz mH+TCUauSZYB3xLH0YO0UMgvmu8zHWFzGecVGWIUqPQXH9de3KY= -----END CERTIFICATE-----Generated at Mon May 20 03:51:56 2024 by rpki-client on console-fra.rpki-client.org