$ rpki-client -vvf repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft File: AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft (raw, json) Hash identifier: IwjF/jD6A4RD+4/A3xUEA0GL3nZHmhWOOF6hKrrKzpg= Subject key identifier: D7:0C:32:27:DF:A7:61:14:C6:3E:B5:DD:D1:3A:BD:4B:8E:31:F1:7C Authority key identifier: AF:A7:AE:3D:79:0A:1F:0C:91:4B:83:99:E4:69:5F:4D:63:42:B4:C3 Certificate issuer: /CN=AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3 Certificate serial: 332D67D272FD3AE5460357D1FA61E240E66DCA20 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft Manifest number: 1B Signing time: Sat 01 Jun 2024 04:11:16 +0000 Manifest this update: Sat 01 Jun 2024 04:06:16 +0000 Manifest next update: Tue 04 Jun 2024 07:18:16 +0000 Files and hashes: 1: 3135372e31302e3138312e302f32342d3234203d3e20313532333439.roa (hash: 8FPhxDphugXh+NqSEJNKiuwL/Ju34oBivfOS3hLv1ao=) 2: AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.crl (hash: V3E/VOuxNhyqKyEfm1xWRhDKL1bv137bPP38UnP/hVk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.crl rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 07:18:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:2d:67:d2:72:fd:3a:e5:46:03:57:d1:fa:61:e2:40:e6:6d:ca:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3 Validity Not Before: Jun 1 04:06:16 2024 GMT Not After : Jun 4 07:18:16 2024 GMT Subject: CN=D70C3227DFA76114C63EB5DDD13ABD4B8E31F17C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:74:74:05:8b:bb:74:d0:cb:fe:76:1c:2c:07: dd:3d:57:78:e0:23:5b:54:aa:b7:42:7b:6b:0c:af: b9:69:ed:ae:29:10:72:21:74:13:1f:17:12:e8:5c: ac:5d:42:70:94:b1:83:16:10:51:02:27:a2:f2:7b: 33:eb:b3:2f:a3:21:3d:9e:93:11:69:1f:5b:bd:6f: a8:b1:e7:6e:24:05:bd:6d:c9:94:9f:f2:4a:bf:f0: 8b:f8:88:32:cf:b9:08:4e:7e:8c:6c:c9:a0:91:cf: d4:d7:20:c6:7f:df:21:b8:66:2b:87:b6:c3:7e:fe: 3f:e5:f5:08:64:a9:1e:ca:5e:2b:0f:c9:90:fe:cc: 62:28:9d:7c:c5:c8:8d:06:eb:ba:9c:f9:5c:a4:20: 3d:cb:52:0d:5c:b3:71:51:bc:e8:f8:44:62:e2:c9: 04:f4:41:71:65:db:e0:98:01:9e:19:07:eb:8b:95: 57:95:06:8b:db:c5:ae:1a:d8:4e:1a:61:d1:7e:f3: db:d4:01:ee:f7:9f:6a:94:00:24:77:18:0a:a0:6d: 91:67:1b:b0:54:ce:88:98:63:ed:2f:ee:74:e7:54: ae:0e:18:26:bf:32:a5:02:c4:1a:35:eb:6c:6e:58: d0:73:c8:c8:32:55:9e:7c:81:cd:49:96:3e:90:59: df:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:0C:32:27:DF:A7:61:14:C6:3E:B5:DD:D1:3A:BD:4B:8E:31:F1:7C X509v3 Authority Key Identifier: keyid:AF:A7:AE:3D:79:0A:1F:0C:91:4B:83:99:E4:69:5F:4D:63:42:B4:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:6b:3b:30:13:ad:b9:bd:52:2b:2f:f0:a3:cd:d8:f5:3c:93: 72:18:7e:8a:76:bd:98:c8:22:a9:65:e8:e4:d1:65:3c:c9:53: 8d:d0:79:f1:e0:95:06:3b:2c:43:80:75:a1:49:a1:27:0c:05: 8f:62:de:7a:48:af:aa:63:ca:c7:79:37:2e:bb:34:8c:88:3f: 85:72:f8:a8:ea:d4:d2:3f:16:55:7d:fe:13:1e:65:6b:e0:1f: ca:8b:b8:82:94:b5:45:20:02:8b:bd:3e:02:5d:df:3e:cc:62: e1:69:72:8c:7e:e2:aa:7a:c9:dd:09:f7:59:73:13:68:6e:c9: 47:61:ab:53:b5:d9:15:50:63:61:d0:4b:9b:7c:89:74:3e:a0: 81:ca:cf:1f:5a:6a:8a:95:1b:bc:b7:00:bd:46:55:73:f9:9b: fd:06:aa:c6:1f:ab:61:5b:be:69:7a:ce:8c:15:af:8a:fe:e5: c9:92:8e:f6:c0:b6:54:54:a5:69:96:f9:46:c3:47:4d:37:53: 4a:62:c2:7b:21:6e:ce:7c:42:08:4c:2a:a5:7f:a7:ed:d5:e6: de:7b:8b:a7:8f:a8:b0:69:8f:5b:7e:3a:16:06:4e:a2:b8:bb: 2e:28:a2:99:ca:04:2e:e0:b7:ed:05:37:5c:da:67:61:89:cc: 9a:15:40:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMy1n0nL9OuVGA1fR+mHiQOZtyiAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZBN0FFM0Q3OTBBMUYwQzkxNEI4Mzk5RTQ2OTVGNEQ2 MzQyQjRDMzAeFw0yNDA2MDEwNDA2MTZaFw0yNDA2MDQwNzE4MTZaMDMxMTAvBgNV BAMTKEQ3MEMzMjI3REZBNzYxMTRDNjNFQjVEREQxM0FCRDRCOEUzMUYxN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1dHQFi7t00Mv+dhwsB909V3jg I1tUqrdCe2sMr7lp7a4pEHIhdBMfFxLoXKxdQnCUsYMWEFECJ6LyezPrsy+jIT2e kxFpH1u9b6ix524kBb1tyZSf8kq/8Iv4iDLPuQhOfoxsyaCRz9TXIMZ/3yG4ZiuH tsN+/j/l9QhkqR7KXisPyZD+zGIonXzFyI0G67qc+VykID3LUg1cs3FRvOj4RGLi yQT0QXFl2+CYAZ4ZB+uLlVeVBovbxa4a2E4aYdF+89vUAe73n2qUACR3GAqgbZFn G7BUzoiYY+0v7nTnVK4OGCa/MqUCxBo162xuWNBzyMgyVZ58gc1Jlj6QWd9hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1wwyJ9+nYRTGPrXd0Tq9S44x8XwwHwYDVR0j BBgwFoAUr6euPXkKHwyRS4OZ5GlfTWNCtMMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OTBkMDI2NS0yY2MxLTQ2M2QtOTQ4Yi1jZGVkMTNhMjAyOTUvMC9BRkE3QUUzRDc5 MEExRjBDOTE0QjgzOTlFNDY5NUY0RDYzNDJCNEMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUZBN0FFM0Q3OTBBMUYwQzkxNEI4Mzk5RTQ2OTVGNEQ2MzQy QjRDMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjkwZDAyNjUtMmNjMS00NjNkLTk0 OGItY2RlZDEzYTIwMjk1LzAvQUZBN0FFM0Q3OTBBMUYwQzkxNEI4Mzk5RTQ2OTVG NEQ2MzQyQjRDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAFrOzATrbm9Uisv8KPN2PU8k3IYfop2vZjI Iqll6OTRZTzJU43QefHglQY7LEOAdaFJoScMBY9i3npIr6pjysd5Ny67NIyIP4Vy +Kjq1NI/FlV9/hMeZWvgH8qLuIKUtUUgAou9PgJd3z7MYuFpcox+4qp6yd0J91lz E2huyUdhq1O12RVQY2HQS5t8iXQ+oIHKzx9aaoqVG7y3AL1GVXP5m/0GqsYfq2Fb vml6zowVr4r+5cmSjvbAtlRUpWmW+UbDR003U0piwnshbs58QghMKqV/p+3V5t57 i6ePqLBpj1t+OhYGTqK4uy4oopnKBC7gt+0FN1zaZ2GJzJoVQK4= -----END CERTIFICATE-----Generated at Sat Jun 1 04:58:29 2024 by rpki-client on console-fra.rpki-client.org