$ rpki-client -vvf repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft File: AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft (raw, json) Hash identifier: ZybcsJQTTz2U949f44W7Qwm6KY46WGgyOUX1suoPnkA= Subject key identifier: 3C:82:2F:0A:E6:0E:91:E8:84:73:10:A9:FE:A0:5D:5C:B3:0F:FA:20 Authority key identifier: AF:CE:E1:D4:39:DB:14:41:C4:F2:12:23:91:8A:C0:81:1E:65:D5:6F Certificate issuer: /CN=AFCEE1D439DB1441C4F21223918AC0811E65D56F Certificate serial: 7EAFB0B963C25E9E8E2860696CDCCE1B5A027736 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCEE1D439DB1441C4F21223918AC0811E65D56F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft Manifest number: 01DF Signing time: Thu 30 May 2024 20:11:21 +0000 Manifest this update: Thu 30 May 2024 20:06:21 +0000 Manifest next update: Sun 02 Jun 2024 22:36:21 +0000 Files and hashes: 1: 3130332e3137352e3138382e302f32332d3234203d3e20313334363538.roa (hash: KTRHLJJjBOC7tc8RhpsbsW5kfNNxmta//9ragq7/KSs=) 2: AFCEE1D439DB1441C4F21223918AC0811E65D56F.crl (hash: gWV/Nd+PhABfu+IiB23EqK95wsN/ge1I4I1AmCimEM8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.crl rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCEE1D439DB1441C4F21223918AC0811E65D56F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 22:36:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:af:b0:b9:63:c2:5e:9e:8e:28:60:69:6c:dc:ce:1b:5a:02:77:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFCEE1D439DB1441C4F21223918AC0811E65D56F Validity Not Before: May 30 20:06:21 2024 GMT Not After : Jun 2 22:36:21 2024 GMT Subject: CN=3C822F0AE60E91E8847310A9FEA05D5CB30FFA20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:8e:d8:a5:1d:ee:b4:be:7c:c0:91:9a:32:f4: 25:5a:13:e8:0d:ad:08:8f:67:18:d0:50:59:36:73: 1b:21:50:a5:9d:62:a2:e7:81:10:60:cc:2b:3f:1f: c2:c8:2a:59:4e:9f:9b:e1:35:16:49:a8:a0:78:69: 51:14:9e:9e:a3:a6:e3:5e:30:c6:42:04:83:7a:4f: e0:cd:83:2a:c2:20:a7:82:fc:fb:f3:cd:cc:e1:d9: 59:83:98:a9:37:80:ca:fc:ea:c6:8b:4e:94:eb:ca: 36:40:a4:7e:e6:43:f0:76:78:45:60:ea:3c:f2:41: 1d:d4:75:43:4a:fa:08:e9:45:4f:78:07:f6:4f:cc: 58:c2:ee:35:62:bd:d5:ff:9e:2c:12:7e:11:73:fb: b3:85:cb:dd:a1:7f:07:06:24:99:bf:e9:0a:ac:2f: f5:e5:e4:d3:21:2e:47:37:6a:e6:09:11:1c:13:74: 21:1d:0d:b9:49:1f:f9:f4:99:3e:2a:c9:b1:be:8e: d1:3c:ea:b3:a1:a3:79:cf:44:e9:67:63:ca:aa:a1: 8f:49:d3:ad:88:75:1d:bc:76:27:c5:63:36:ba:56: ab:6a:3a:e2:f6:fa:90:32:d9:31:2f:93:8d:f5:f3: cc:c6:e2:f1:7e:7c:6c:c0:35:31:4f:9f:9a:3e:78: 52:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:82:2F:0A:E6:0E:91:E8:84:73:10:A9:FE:A0:5D:5C:B3:0F:FA:20 X509v3 Authority Key Identifier: keyid:AF:CE:E1:D4:39:DB:14:41:C4:F2:12:23:91:8A:C0:81:1E:65:D5:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCEE1D439DB1441C4F21223918AC0811E65D56F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:82:46:78:cf:2e:9e:69:e0:ad:3c:b7:f2:87:4f:1b:19:f9: 1b:64:c9:6d:73:88:db:28:20:c3:d3:0a:5a:98:43:db:4b:66: a0:ce:12:b6:de:e1:9b:fa:2e:f8:ad:e0:54:9b:db:66:b3:01: 06:7e:da:0d:ec:b2:32:05:19:2c:fb:bf:c6:03:af:00:ab:22: 36:2f:16:b0:2e:b8:07:e2:9c:99:1a:68:33:28:3f:b6:94:18: b8:49:9c:56:d7:77:32:52:ce:d3:1c:ee:c6:e8:cc:2d:ad:80: 2b:8e:23:45:72:8f:8e:1e:6b:d1:5a:ed:ac:3f:98:86:5b:81: 27:5a:75:0b:d0:ff:20:c5:ad:18:58:90:bf:f5:12:92:12:ab: 0d:6f:f6:9f:d6:27:b8:26:99:2e:7a:1f:a5:89:6c:2c:d6:f1: e5:f4:9e:11:52:98:6f:d9:d8:61:89:3d:e3:de:83:67:0c:c1: 44:fb:74:9d:63:45:d9:0e:56:96:cf:0d:c5:05:ff:48:5f:c2: a9:03:c1:aa:1c:79:34:5d:ee:52:a7:d7:55:a1:e4:57:16:d3: 56:b1:4e:e9:bd:bd:44:b8:35:06:f7:ff:7e:44:13:53:aa:ce: 8f:d2:3d:5a:82:86:10:44:f4:72:1c:a7:fa:fe:62:ba:78:6b: 49:3f:55:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfq+wuWPCXp6OKGBpbNzOG1oCdzYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZDRUUxRDQzOURCMTQ0MUM0RjIxMjIzOTE4QUMwODEx RTY1RDU2RjAeFw0yNDA1MzAyMDA2MjFaFw0yNDA2MDIyMjM2MjFaMDMxMTAvBgNV BAMTKDNDODIyRjBBRTYwRTkxRTg4NDczMTBBOUZFQTA1RDVDQjMwRkZBMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbjtilHe60vnzAkZoy9CVaE+gN rQiPZxjQUFk2cxshUKWdYqLngRBgzCs/H8LIKllOn5vhNRZJqKB4aVEUnp6jpuNe MMZCBIN6T+DNgyrCIKeC/Pvzzczh2VmDmKk3gMr86saLTpTryjZApH7mQ/B2eEVg 6jzyQR3UdUNK+gjpRU94B/ZPzFjC7jVivdX/niwSfhFz+7OFy92hfwcGJJm/6Qqs L/Xl5NMhLkc3auYJERwTdCEdDblJH/n0mT4qybG+jtE86rOho3nPROlnY8qqoY9J 062IdR28difFYza6VqtqOuL2+pAy2TEvk43188zG4vF+fGzANTFPn5o+eFJNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPIIvCuYOkeiEcxCp/qBdXLMP+iAwHwYDVR0j BBgwFoAUr87h1DnbFEHE8hIjkYrAgR5l1W8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OWY2MDkyNy0xZjM0LTRjNTQtOTY3NC1mOWRlYWY3NWMyZmMvMC9BRkNFRTFENDM5 REIxNDQxQzRGMjEyMjM5MThBQzA4MTFFNjVENTZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUZDRUUxRDQzOURCMTQ0MUM0RjIxMjIzOTE4QUMwODExRTY1 RDU2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjlmNjA5MjctMWYzNC00YzU0LTk2 NzQtZjlkZWFmNzVjMmZjLzAvQUZDRUUxRDQzOURCMTQ0MUM0RjIxMjIzOTE4QUMw ODExRTY1RDU2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHGCRnjPLp5p4K08t/KHTxsZ+RtkyW1ziNso IMPTClqYQ9tLZqDOErbe4Zv6Lvit4FSb22azAQZ+2g3ssjIFGSz7v8YDrwCrIjYv FrAuuAfinJkaaDMoP7aUGLhJnFbXdzJSztMc7sbozC2tgCuOI0Vyj44ea9Fa7aw/ mIZbgSdadQvQ/yDFrRhYkL/1EpISqw1v9p/WJ7gmmS56H6WJbCzW8eX0nhFSmG/Z 2GGJPePeg2cMwUT7dJ1jRdkOVpbPDcUF/0hfwqkDwaoceTRd7lKn11Wh5FcW01ax Tum9vUS4NQb3/35EE1Oqzo/SPVqChhBE9HIcp/r+Yrp4a0k/VY4= -----END CERTIFICATE-----Generated at Thu May 30 20:34:53 2024 by rpki-client on console-fra.rpki-client.org