$ rpki-client -vvf repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft File: AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft (raw, json) Hash identifier: rd09U41a91exLHWK4RSgxNX050tguK2DKjQUPWQQP0E= Subject key identifier: BD:23:DD:7A:5D:56:E8:60:76:7B:91:9E:7F:CC:13:CA:1C:4E:CC:73 Authority key identifier: AF:A7:AE:3D:79:0A:1F:0C:91:4B:83:99:E4:69:5F:4D:63:42:B4:C3 Certificate issuer: /CN=AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3 Certificate serial: 7683D9AB5D3DD15C22FADA4135A97D782938B6EF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft Manifest number: 69 Signing time: Fri 22 Nov 2024 06:01:29 +0000 Manifest this update: Fri 22 Nov 2024 05:56:29 +0000 Manifest next update: Mon 25 Nov 2024 16:07:29 +0000 Files and hashes: 1: AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.crl (hash: 8G2To+xH1guZHoQ3B9IEH8vIgloNcfXnuZNWt4nyIDI=) 2: 3135372e31302e3138312e302f32342d3234203d3e20313532333439.roa (hash: 8FPhxDphugXh+NqSEJNKiuwL/Ju34oBivfOS3hLv1ao=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.crl rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:83:d9:ab:5d:3d:d1:5c:22:fa:da:41:35:a9:7d:78:29:38:b6:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3 Validity Not Before: Nov 22 05:56:29 2024 GMT Not After : Nov 25 16:07:29 2024 GMT Subject: CN=BD23DD7A5D56E860767B919E7FCC13CA1C4ECC73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:c9:d7:1e:1b:f4:24:18:6d:ce:a6:0f:43:c5: 18:4c:0d:28:70:b3:5f:10:57:ee:f9:95:9f:6d:d2: c2:d9:c4:6b:d6:ef:6e:e9:44:a5:fe:ad:51:61:dd: c7:c2:67:75:85:dc:b3:32:7b:d2:b2:3b:e9:99:6f: ca:58:48:06:aa:44:66:c5:da:8c:e2:e9:6c:58:32: 82:9d:af:93:07:d8:8f:8b:86:bb:21:71:4a:5f:57: 0b:72:e7:5f:90:05:b6:02:be:e8:e1:4b:ab:ff:0d: d5:45:7e:c9:0c:24:cc:d7:39:69:82:a0:3f:67:be: 43:f4:6a:36:fd:a2:98:5c:6a:7f:9b:ec:8e:ca:e7: e4:98:b5:c6:de:8e:3c:84:8c:be:49:56:35:13:b0: 78:91:9b:ba:d8:9e:82:01:2c:cc:c9:5a:47:75:63: 17:d7:98:5c:d1:ce:58:19:b0:84:55:69:79:fc:95: 79:84:49:ab:85:7d:09:0d:4e:e5:2d:52:b0:32:c5: 76:eb:91:bc:fb:be:c7:60:9e:84:9c:6f:96:24:f1: fd:82:e4:cc:8a:bb:cd:d4:83:3c:02:fe:0f:ea:7c: ea:90:12:e5:68:e6:9d:e6:d2:5f:7d:a7:9a:7c:17: 96:3a:b4:75:f8:fb:b0:ec:3d:05:76:a5:d3:19:fa: da:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:23:DD:7A:5D:56:E8:60:76:7B:91:9E:7F:CC:13:CA:1C:4E:CC:73 X509v3 Authority Key Identifier: keyid:AF:A7:AE:3D:79:0A:1F:0C:91:4B:83:99:E4:69:5F:4D:63:42:B4:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:7e:40:5e:b0:47:eb:0d:22:3a:9d:05:bd:10:b4:35:ee:e0: 41:1e:b7:7f:fa:51:fc:91:71:85:a8:0b:f3:59:f2:5c:70:f1: cd:f7:d7:6b:b9:ee:e5:06:1d:07:a5:9c:70:7d:fc:67:20:04: af:74:06:42:93:68:fc:eb:16:1b:c6:63:e2:68:4b:80:37:46: c6:b5:87:0f:dc:b0:6f:83:6d:d3:c0:ab:8b:a8:fb:aa:f8:8e: eb:c5:16:b8:97:65:59:38:fb:15:4c:bf:b8:41:db:ed:f7:06: d6:b0:72:22:6f:2f:23:74:2a:71:39:c1:72:fd:09:ba:7b:da: 5c:03:68:a0:60:dd:9e:30:d8:2f:c4:e7:24:08:06:1c:93:c7: cf:ca:fd:57:80:86:c0:ed:28:81:4f:ba:26:b4:47:54:bd:ee: 85:47:0f:2a:07:06:34:0a:ec:e9:5b:21:09:07:85:05:31:d2: 93:36:49:95:7c:53:55:88:cd:91:cc:6c:2f:22:76:59:d5:89: 44:62:9e:b6:43:50:92:47:b2:63:60:fb:e9:9b:0e:71:2f:88: 3d:41:41:cd:ac:49:00:dc:00:e4:e6:10:59:4b:2e:73:7a:88: c1:d1:59:e0:0f:31:c3:32:f2:6e:d2:4f:ec:0c:9e:14:aa:be: b4:72:bf:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdoPZq1090Vwi+tpBNal9eCk4tu8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZBN0FFM0Q3OTBBMUYwQzkxNEI4Mzk5RTQ2OTVGNEQ2 MzQyQjRDMzAeFw0yNDExMjIwNTU2MjlaFw0yNDExMjUxNjA3MjlaMDMxMTAvBgNV BAMTKEJEMjNERDdBNUQ1NkU4NjA3NjdCOTE5RTdGQ0MxM0NBMUM0RUNDNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyydceG/QkGG3Opg9DxRhMDShw s18QV+75lZ9t0sLZxGvW727pRKX+rVFh3cfCZ3WF3LMye9KyO+mZb8pYSAaqRGbF 2ozi6WxYMoKdr5MH2I+LhrshcUpfVwty51+QBbYCvujhS6v/DdVFfskMJMzXOWmC oD9nvkP0ajb9ophcan+b7I7K5+SYtcbejjyEjL5JVjUTsHiRm7rYnoIBLMzJWkd1 YxfXmFzRzlgZsIRVaXn8lXmESauFfQkNTuUtUrAyxXbrkbz7vsdgnoScb5Yk8f2C 5MyKu83UgzwC/g/qfOqQEuVo5p3m0l99p5p8F5Y6tHX4+7DsPQV2pdMZ+tqLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvSPdel1W6GB2e5Gef8wTyhxOzHMwHwYDVR0j BBgwFoAUr6euPXkKHwyRS4OZ5GlfTWNCtMMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OTBkMDI2NS0yY2MxLTQ2M2QtOTQ4Yi1jZGVkMTNhMjAyOTUvMC9BRkE3QUUzRDc5 MEExRjBDOTE0QjgzOTlFNDY5NUY0RDYzNDJCNEMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUZBN0FFM0Q3OTBBMUYwQzkxNEI4Mzk5RTQ2OTVGNEQ2MzQy QjRDMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjkwZDAyNjUtMmNjMS00NjNkLTk0 OGItY2RlZDEzYTIwMjk1LzAvQUZBN0FFM0Q3OTBBMUYwQzkxNEI4Mzk5RTQ2OTVG NEQ2MzQyQjRDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACl+QF6wR+sNIjqdBb0QtDXu4EEet3/6UfyR cYWoC/NZ8lxw8c3312u57uUGHQelnHB9/GcgBK90BkKTaPzrFhvGY+JoS4A3Rsa1 hw/csG+DbdPAq4uo+6r4juvFFriXZVk4+xVMv7hB2+33BtawciJvLyN0KnE5wXL9 Cbp72lwDaKBg3Z4w2C/E5yQIBhyTx8/K/VeAhsDtKIFPuia0R1S97oVHDyoHBjQK 7OlbIQkHhQUx0pM2SZV8U1WIzZHMbC8idlnViURinrZDUJJHsmNg++mbDnEviD1B Qc2sSQDcAOTmEFlLLnN6iMHRWeAPMcMy8m7ST+wMnhSqvrRyvxo= -----END CERTIFICATE-----Generated at Fri Nov 22 06:56:26 2024 by rpki-client on console-fra.rpki-client.org