$ rpki-client -vvf repo-rpki.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/AEB84984B4021FC01344F3D02190FDED8607E7FA.mft File: AEB84984B4021FC01344F3D02190FDED8607E7FA.mft (raw, json) Hash identifier: G8TZZAYuUA7Z7nrppseD7n1bRg8NngIWRfJRAyLnh1s= Subject key identifier: 24:59:00:9F:A9:EB:A9:BB:EE:73:04:A7:47:FD:32:CF:E1:C0:CA:F2 Authority key identifier: AE:B8:49:84:B4:02:1F:C0:13:44:F3:D0:21:90:FD:ED:86:07:E7:FA Certificate issuer: /CN=AEB84984B4021FC01344F3D02190FDED8607E7FA Certificate serial: 0C634F54215846F32E54BD842226AD8EA20AF5C9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEB84984B4021FC01344F3D02190FDED8607E7FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/AEB84984B4021FC01344F3D02190FDED8607E7FA.mft Manifest number: C1 Signing time: Wed 29 May 2024 03:10:52 +0000 Manifest this update: Wed 29 May 2024 03:05:52 +0000 Manifest next update: Sat 01 Jun 2024 08:37:52 +0000 Files and hashes: 1: AEB84984B4021FC01344F3D02190FDED8607E7FA.crl (hash: B0DuzN5g0DXBUZJmRbx0714P5gfDOZxoUFR2/eFZCSA=) 2: 3130332e3132322e332e302f32342d3234203d3e20313430333839.roa (hash: PllgWWbUWfgBriJUuJOlsvokQeWGrz8aR9wj0Y+LcOU=) 3: 3130332e3132322e322e302f32342d3234203d3e20313430333839.roa (hash: k3K6dCZYLtu+MpD1Gjak0kDNIxUc2+OyygM1PHy79pw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/AEB84984B4021FC01344F3D02190FDED8607E7FA.crl rsync://repo-rpki.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/AEB84984B4021FC01344F3D02190FDED8607E7FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEB84984B4021FC01344F3D02190FDED8607E7FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 04:52:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:63:4f:54:21:58:46:f3:2e:54:bd:84:22:26:ad:8e:a2:0a:f5:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEB84984B4021FC01344F3D02190FDED8607E7FA Validity Not Before: May 29 03:05:52 2024 GMT Not After : Jun 1 08:37:52 2024 GMT Subject: CN=2459009FA9EBA9BBEE7304A747FD32CFE1C0CAF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e2:0a:24:d5:d7:52:ca:ac:ef:ea:4a:55:be: 96:85:a0:60:85:08:7e:bd:bf:23:6d:d1:37:ed:d0: f4:15:a3:98:a8:b2:38:24:56:b1:1a:fa:43:28:d5: a3:ac:c8:38:06:19:e1:26:5b:53:e6:63:6b:01:0e: 10:49:2e:06:c5:c6:b3:9d:af:2a:64:dd:6a:20:c6: 1e:d0:9e:81:6f:84:93:f9:1e:d4:bb:95:2b:17:04: 63:b5:75:61:f7:ab:60:4c:12:01:65:3d:bb:48:e7: 01:1f:e2:85:43:01:ae:cc:11:16:86:b7:cb:b3:67: 13:2b:f0:f8:5f:d2:2b:43:ce:d0:05:30:21:1d:78: 2c:8d:6e:56:6a:d1:02:d1:1b:3d:92:90:aa:14:95: 54:0f:65:e7:57:6b:81:12:83:b6:56:1b:44:0a:9a: 59:b6:0f:bd:5d:ef:44:f9:72:66:06:11:3e:44:8a: 36:ba:83:ff:0a:c1:bc:78:86:9c:44:52:ee:c2:29: 53:2e:22:5a:a3:b6:91:21:b9:5c:95:d4:5d:00:0a: b1:63:88:26:0d:55:95:db:5d:b1:da:f0:19:86:10: 55:b6:b6:e8:06:9f:1c:58:39:5b:cb:87:e7:94:06: 57:cd:33:4e:45:cd:dc:e5:7a:29:9b:ba:43:5a:f9: 58:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:59:00:9F:A9:EB:A9:BB:EE:73:04:A7:47:FD:32:CF:E1:C0:CA:F2 X509v3 Authority Key Identifier: keyid:AE:B8:49:84:B4:02:1F:C0:13:44:F3:D0:21:90:FD:ED:86:07:E7:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/AEB84984B4021FC01344F3D02190FDED8607E7FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEB84984B4021FC01344F3D02190FDED8607E7FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/AEB84984B4021FC01344F3D02190FDED8607E7FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:91:62:9f:ba:81:76:19:5b:54:67:87:3f:41:6f:8a:c0:fd: 49:a8:fb:47:85:42:e0:47:70:8f:b4:56:ef:17:91:56:87:2b: ab:8d:1e:05:4a:6a:fa:c1:d2:00:ee:a0:7e:95:07:58:27:1f: 5f:d5:ab:eb:71:b9:43:cf:ed:24:54:c5:1d:e5:7b:96:5a:7a: 44:94:5b:b6:21:f8:69:a6:0a:6c:a6:86:02:c8:12:ab:40:de: 7d:3a:cd:76:61:be:87:4a:0a:e4:d2:c9:fe:a8:cb:1d:6e:e3: 66:93:c9:ba:20:b3:69:c3:e4:4c:64:03:b0:93:39:a4:e7:35: a9:c0:fc:96:ae:f0:f1:0d:85:e3:c2:3b:01:f7:0f:a2:cf:cc: a6:e1:dc:4e:52:aa:00:58:ee:75:24:78:94:fd:4f:6a:98:b0: 6f:2e:ef:ec:6b:4f:58:fb:69:8e:5d:41:18:af:40:76:dd:5f: 16:fd:1f:43:f5:cb:9a:1b:8d:7f:14:b1:9f:4e:11:86:49:d6: 50:f7:1d:1c:0a:26:dc:ff:8b:47:e1:c6:12:73:8e:63:15:3e: bc:ef:4e:9e:60:79:6f:0f:c9:cb:0b:e0:8d:fb:d1:6b:b5:05: f3:b9:43:84:46:f1:3f:54:00:bb:a8:f9:8c:6e:61:f3:f8:1f: 4e:11:5e:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDGNPVCFYRvMuVL2EIiatjqIK9ckwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVCODQ5ODRCNDAyMUZDMDEzNDRGM0QwMjE5MEZERUQ4 NjA3RTdGQTAeFw0yNDA1MjkwMzA1NTJaFw0yNDA2MDEwODM3NTJaMDMxMTAvBgNV BAMTKDI0NTkwMDlGQTlFQkE5QkJFRTczMDRBNzQ3RkQzMkNGRTFDMENBRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr4gok1ddSyqzv6kpVvpaFoGCF CH69vyNt0Tft0PQVo5iosjgkVrEa+kMo1aOsyDgGGeEmW1PmY2sBDhBJLgbFxrOd rypk3Wogxh7QnoFvhJP5HtS7lSsXBGO1dWH3q2BMEgFlPbtI5wEf4oVDAa7MERaG t8uzZxMr8Phf0itDztAFMCEdeCyNblZq0QLRGz2SkKoUlVQPZedXa4ESg7ZWG0QK mlm2D71d70T5cmYGET5Eija6g/8Kwbx4hpxEUu7CKVMuIlqjtpEhuVyV1F0ACrFj iCYNVZXbXbHa8BmGEFW2tugGnxxYOVvLh+eUBlfNM05FzdzleimbukNa+VhXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJFkAn6nrqbvucwSnR/0yz+HAyvIwHwYDVR0j BBgwFoAUrrhJhLQCH8ATRPPQIZD97YYH5/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MjE5NTVmMC00YjQwLTRjM2ItOWZmZi05ZjkyNThjMzk3NWEvMC9BRUI4NDk4NEI0 MDIxRkMwMTM0NEYzRDAyMTkwRkRFRDg2MDdFN0ZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUVCODQ5ODRCNDAyMUZDMDEzNDRGM0QwMjE5MEZERUQ4NjA3 RTdGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjIxOTU1ZjAtNGI0MC00YzNiLTlm ZmYtOWY5MjU4YzM5NzVhLzAvQUVCODQ5ODRCNDAyMUZDMDEzNDRGM0QwMjE5MEZE RUQ4NjA3RTdGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABSRYp+6gXYZW1Rnhz9Bb4rA/Umo+0eFQuBH cI+0Vu8XkVaHK6uNHgVKavrB0gDuoH6VB1gnH1/Vq+txuUPP7SRUxR3le5ZaekSU W7Yh+GmmCmymhgLIEqtA3n06zXZhvodKCuTSyf6oyx1u42aTybogs2nD5ExkA7CT OaTnNanA/Jau8PENhePCOwH3D6LPzKbh3E5SqgBY7nUkeJT9T2qYsG8u7+xrT1j7 aY5dQRivQHbdXxb9H0P1y5objX8UsZ9OEYZJ1lD3HRwKJtz/i0fhxhJzjmMVPrzv Tp5geW8PycsL4I370Wu1BfO5Q4RG8T9UALuo+YxuYfP4H04RXpU= -----END CERTIFICATE-----Generated at Wed May 29 06:10:48 2024 by rpki-client on console-ams.rpki-client.org