$ rpki-client -vvf repo-rpki.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.mft File: AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.mft (raw, json) Hash identifier: FmmSd8/+D+aWl/e1Ih3L6e08pbGg9YaDc4saElCWLak= Subject key identifier: 89:A6:D1:CD:9A:44:2F:F4:91:15:18:DF:CE:84:32:E2:E6:C4:E6:CB Authority key identifier: AF:DF:D5:D1:C4:B3:9F:2F:AA:BB:A5:BC:15:23:4C:2B:12:43:BF:FB Certificate issuer: /CN=AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB Certificate serial: 40DE4D6E8A03D108A0797639515F54AD5FD4668A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.mft Manifest number: 0333 Signing time: Sat 23 Nov 2024 14:11:33 +0000 Manifest this update: Sat 23 Nov 2024 14:06:33 +0000 Manifest next update: Tue 26 Nov 2024 23:41:33 +0000 Files and hashes: 1: AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.crl (hash: TcFlx3WDsx8xMzSlnCnQqo/SOoTjuCG0krKJPOq3VTY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.crl rsync://repo-rpki.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:de:4d:6e:8a:03:d1:08:a0:79:76:39:51:5f:54:ad:5f:d4:66:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB Validity Not Before: Nov 23 14:06:33 2024 GMT Not After : Nov 26 23:41:33 2024 GMT Subject: CN=89A6D1CD9A442FF4911518DFCE8432E2E6C4E6CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f8:da:d1:60:28:1c:df:cb:29:8a:0a:7e:2d: 06:2b:ec:9e:65:ec:a8:1e:9b:ad:a1:a3:09:5a:5e: 52:c6:84:39:c6:d0:20:98:b8:bd:11:51:48:0b:3c: 7e:13:1e:54:a3:7e:22:e1:6d:a7:24:bb:5f:40:d2: 2f:59:18:07:a5:7b:b0:ad:1f:2e:23:75:dc:1b:5d: 89:b5:0e:5b:43:16:99:85:ca:f8:38:b5:1d:22:06: 4b:71:84:9d:ee:e2:d2:8b:09:f6:1a:5a:f6:07:64: 56:a0:9d:61:34:e8:22:2b:ab:a1:f1:cd:fc:8c:4b: e4:14:24:21:68:2a:c8:73:fc:57:a2:37:83:e4:c7: 3f:0d:94:9b:1d:71:b2:fd:fd:b2:6d:22:05:65:18: 75:3e:ba:1a:db:70:d9:2b:39:bc:82:77:b7:a0:8a: 0f:81:50:07:17:b8:8f:11:f2:38:22:18:9e:be:9c: c2:fb:f4:b7:6b:3d:8c:8b:ec:a3:de:52:29:b1:65: 8e:17:59:bd:89:d1:50:f9:0e:22:64:b1:fc:6a:42: 36:6a:5a:93:3e:4c:1e:ef:3b:9d:4f:c1:d8:6b:a0: 32:e0:09:6e:f3:7b:d9:dd:f0:1e:77:5f:a1:22:65: 2b:77:39:35:84:e6:cd:09:24:6c:97:46:0f:2b:35: 29:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:A6:D1:CD:9A:44:2F:F4:91:15:18:DF:CE:84:32:E2:E6:C4:E6:CB X509v3 Authority Key Identifier: keyid:AF:DF:D5:D1:C4:B3:9F:2F:AA:BB:A5:BC:15:23:4C:2B:12:43:BF:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:41:c9:fb:19:87:e6:ce:3a:2e:af:85:f2:4b:4b:85:91:82: 6b:3b:90:57:78:b1:9d:02:db:9a:ed:b6:83:96:47:45:c2:7e: ac:70:b8:e3:7a:61:66:f6:71:76:9b:b8:a4:14:45:d5:fb:05: ec:69:c5:6a:07:78:2b:b7:ef:da:8d:d8:10:05:62:52:01:bb: eb:94:c5:aa:42:b6:7f:32:65:1d:1b:79:58:eb:82:3d:09:42: 39:8b:05:6b:a2:b8:67:9b:94:12:f2:61:37:b6:dc:f2:e0:75: 77:e3:1b:9c:4c:35:30:00:39:68:be:c6:8b:40:30:02:42:32: 6a:f8:bd:23:30:9e:93:bb:bd:c7:99:a6:52:2e:06:9b:15:28: 25:77:e3:a3:14:51:98:9b:1f:85:61:5b:f2:ab:ca:bc:ee:96: 8e:7b:ec:ba:ef:9d:6a:48:bc:f3:b6:86:76:4b:8d:c5:4e:1c: 6d:81:e9:57:27:d8:73:88:80:6b:00:64:c1:d1:d7:a5:0d:bf: a1:de:1b:76:fd:e2:9c:74:50:db:f4:26:3e:89:c7:4b:49:9f: 88:92:c8:24:a2:e9:ba:7a:fc:a0:3e:8c:f8:94:86:29:bb:5a: 5e:9a:09:e8:d5:61:0a:4c:7b:16:01:c9:d8:d1:7a:a3:c2:da: 6a:cd:e4:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQN5NbooD0QigeXY5UV9UrV/UZoowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZERkQ1RDFDNEIzOUYyRkFBQkJBNUJDMTUyMzRDMkIx MjQzQkZGQjAeFw0yNDExMjMxNDA2MzNaFw0yNDExMjYyMzQxMzNaMDMxMTAvBgNV BAMTKDg5QTZEMUNEOUE0NDJGRjQ5MTE1MThERkNFODQzMkUyRTZDNEU2Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr+NrRYCgc38spigp+LQYr7J5l 7Kgem62howlaXlLGhDnG0CCYuL0RUUgLPH4THlSjfiLhbacku19A0i9ZGAele7Ct Hy4jddwbXYm1DltDFpmFyvg4tR0iBktxhJ3u4tKLCfYaWvYHZFagnWE06CIrq6Hx zfyMS+QUJCFoKshz/FeiN4Pkxz8NlJsdcbL9/bJtIgVlGHU+uhrbcNkrObyCd7eg ig+BUAcXuI8R8jgiGJ6+nML79LdrPYyL7KPeUimxZY4XWb2J0VD5DiJksfxqQjZq WpM+TB7vO51PwdhroDLgCW7ze9nd8B53X6EiZSt3OTWE5s0JJGyXRg8rNSkdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiabRzZpEL/SRFRjfzoQy4ubE5sswHwYDVR0j BBgwFoAUr9/V0cSzny+qu6W8FSNMKxJDv/swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NGZlMTgxMS1jMDNmLTQ5ZDgtOTIxNy0xM2ZmMjJhMzFlYmUvMC9BRkRGRDVEMUM0 QjM5RjJGQUFCQkE1QkMxNTIzNEMyQjEyNDNCRkZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUZERkQ1RDFDNEIzOUYyRkFBQkJBNUJDMTUyMzRDMkIxMjQz QkZGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTRmZTE4MTEtYzAzZi00OWQ4LTky MTctMTNmZjIyYTMxZWJlLzAvQUZERkQ1RDFDNEIzOUYyRkFBQkJBNUJDMTUyMzRD MkIxMjQzQkZGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHBByfsZh+bOOi6vhfJLS4WRgms7kFd4sZ0C 25rttoOWR0XCfqxwuON6YWb2cXabuKQURdX7BexpxWoHeCu379qN2BAFYlIBu+uU xapCtn8yZR0beVjrgj0JQjmLBWuiuGeblBLyYTe23PLgdXfjG5xMNTAAOWi+xotA MAJCMmr4vSMwnpO7vceZplIuBpsVKCV346MUUZibH4VhW/Kryrzulo577LrvnWpI vPO2hnZLjcVOHG2B6Vcn2HOIgGsAZMHR16UNv6HeG3b94px0UNv0Jj6Jx0tJn4iS yCSi6bp6/KA+jPiUhim7Wl6aCejVYQpMexYBydjReqPC2mrN5C8= -----END CERTIFICATE-----Generated at Sat Nov 23 15:35:15 2024 by rpki-client on console-fra.rpki-client.org