$ rpki-client -vvf repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft File: AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft (raw, json) Hash identifier: zlW7z77565Sfn3Tlt7mI3zaK3HFhxPEkbW5ZodKlf+g= Subject key identifier: 63:0A:02:67:0F:4A:F5:60:6F:60:8E:08:D6:1C:D4:95:04:AA:4D:C0 Authority key identifier: AF:95:8D:E0:EC:E8:30:B2:C0:7C:1A:58:CE:91:5F:DB:82:C3:C2:F6 Certificate issuer: /CN=AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6 Certificate serial: 43510FB1F4DBF6159BB4DBD13D3ABD20BC2C2B2E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft Manifest number: 01B7 Signing time: Tue 28 May 2024 01:21:50 +0000 Manifest this update: Tue 28 May 2024 01:16:50 +0000 Manifest next update: Fri 31 May 2024 08:54:50 +0000 Files and hashes: 1: 3130332e3137322e32332e302f32342d3234203d3e20313437313237.roa (hash: HK+OFbgP7Y/zfYNmd82l7gJ57dcCFRvhEoJFxD5grI0=) 2: AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.crl (hash: vWwdN9gNcX3l3p0OKAVD2tRFSYy0SPO38AFVAMdidWM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.crl rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 May 2024 21:55:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:51:0f:b1:f4:db:f6:15:9b:b4:db:d1:3d:3a:bd:20:bc:2c:2b:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6 Validity Not Before: May 28 01:16:50 2024 GMT Not After : May 31 08:54:50 2024 GMT Subject: CN=630A02670F4AF5606F608E08D61CD49504AA4DC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:53:ee:e1:82:0c:9e:e8:f9:29:c1:ae:46:91: e7:b8:d4:ec:be:5b:6e:5a:f4:84:60:e5:c2:b9:39: f0:21:2d:4a:da:18:ab:60:6e:e2:8d:f7:b5:fc:3f: c3:0f:aa:0b:32:cf:ae:c6:6a:f3:36:48:75:43:17: b7:2c:70:6a:31:51:2c:92:ca:3b:e9:b6:09:83:9d: 6a:29:a3:79:a0:8c:40:14:92:8d:09:74:0b:9a:99: f4:e6:65:67:d6:fd:09:51:62:22:f3:88:40:8b:76: 3e:17:8c:3b:c4:c7:98:7c:a8:7b:fc:3c:6f:09:3f: 00:bd:49:de:e3:7d:37:c1:4b:dc:48:6b:f1:40:c4: 79:d9:3e:df:54:a9:df:97:f5:d4:9e:7d:88:d7:5d: c4:4e:3d:5d:40:62:10:26:b3:ea:d0:00:a5:7d:5f: f1:13:0b:5f:07:14:ad:db:c6:84:98:fb:ef:9f:fe: fb:7e:cb:b2:72:08:57:65:ff:ba:2a:cc:20:1b:d3: d5:2c:03:c7:eb:6f:df:ea:55:2f:f4:07:38:2b:3d: e6:0b:c2:18:48:90:46:65:7b:d8:b1:5b:43:54:b3: fa:12:d7:65:07:21:96:74:6d:c9:66:77:8e:6f:e1: 72:bc:7e:00:98:91:53:be:44:46:ac:78:11:9d:52: d1:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:0A:02:67:0F:4A:F5:60:6F:60:8E:08:D6:1C:D4:95:04:AA:4D:C0 X509v3 Authority Key Identifier: keyid:AF:95:8D:E0:EC:E8:30:B2:C0:7C:1A:58:CE:91:5F:DB:82:C3:C2:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:05:ef:b5:5b:be:86:87:2d:94:c1:c2:e8:c6:96:90:3a:37: cd:5b:bb:c2:77:a3:84:68:28:3c:81:16:58:d3:82:e1:ba:de: 47:f6:d4:42:44:03:89:85:ec:9a:32:a9:fb:c9:87:8b:57:44: 96:75:0c:93:02:8f:71:4b:d4:67:81:68:8e:57:88:0e:5a:83: e1:7c:4e:02:39:8e:97:b5:4c:d4:ea:58:7b:04:30:d5:db:0d: 40:9b:e9:61:c0:a6:1f:51:8b:92:8d:b4:ab:d1:7f:eb:ec:9e: 03:fc:f3:de:c0:f4:0f:fd:a9:5e:45:a2:b1:c1:8b:83:81:d1: 28:67:58:1a:65:60:c3:3a:77:b8:7d:cc:9b:5d:4e:90:c0:43: 5e:ac:98:6b:ef:9d:cb:84:96:bb:ac:76:02:52:44:d4:5e:db: 86:21:31:74:81:c9:8e:ba:05:e2:13:70:fc:46:7e:e5:87:47: 59:97:0e:4a:c0:32:f2:e8:9a:46:7d:ab:93:fa:ae:85:79:32: ed:b8:7f:51:11:8e:a9:16:8a:be:1b:5c:c5:99:17:70:ac:ab: a9:62:61:8c:b5:69:4a:3f:37:7e:64:a2:aa:4d:a9:b3:65:76: 01:9b:c1:72:ff:b6:ee:77:08:a4:bb:04:a1:0d:dd:39:22:7c: 14:bf:d9:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ1EPsfTb9hWbtNvRPTq9ILwsKy4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY5NThERTBFQ0U4MzBCMkMwN0MxQTU4Q0U5MTVGREI4 MkMzQzJGNjAeFw0yNDA1MjgwMTE2NTBaFw0yNDA1MzEwODU0NTBaMDMxMTAvBgNV BAMTKDYzMEEwMjY3MEY0QUY1NjA2RjYwOEUwOEQ2MUNENDk1MDRBQTREQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4U+7hggye6Pkpwa5Gkee41Oy+ W25a9IRg5cK5OfAhLUraGKtgbuKN97X8P8MPqgsyz67GavM2SHVDF7cscGoxUSyS yjvptgmDnWopo3mgjEAUko0JdAuamfTmZWfW/QlRYiLziECLdj4XjDvEx5h8qHv8 PG8JPwC9Sd7jfTfBS9xIa/FAxHnZPt9Uqd+X9dSefYjXXcROPV1AYhAms+rQAKV9 X/ETC18HFK3bxoSY+++f/vt+y7JyCFdl/7oqzCAb09UsA8frb9/qVS/0BzgrPeYL whhIkEZle9ixW0NUs/oS12UHIZZ0bclmd45v4XK8fgCYkVO+REaseBGdUtHbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYwoCZw9K9WBvYI4I1hzUlQSqTcAwHwYDVR0j BBgwFoAUr5WN4OzoMLLAfBpYzpFf24LDwvYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OWRlMGMzOS04NGQ1LTQ0MDUtOTU0ZC00ZDNkNzEyNjkzY2UvMC9BRjk1OERFMEVD RTgzMEIyQzA3QzFBNThDRTkxNUZEQjgyQzNDMkY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY5NThERTBFQ0U4MzBCMkMwN0MxQTU4Q0U5MTVGREI4MkMz QzJGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzlkZTBjMzktODRkNS00NDA1LTk1 NGQtNGQzZDcxMjY5M2NlLzAvQUY5NThERTBFQ0U4MzBCMkMwN0MxQTU4Q0U5MTVG REI4MkMzQzJGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFAF77VbvoaHLZTBwujGlpA6N81bu8J3o4Ro KDyBFljTguG63kf21EJEA4mF7JoyqfvJh4tXRJZ1DJMCj3FL1GeBaI5XiA5ag+F8 TgI5jpe1TNTqWHsEMNXbDUCb6WHAph9Ri5KNtKvRf+vsngP8897A9A/9qV5ForHB i4OB0ShnWBplYMM6d7h9zJtdTpDAQ16smGvvncuElrusdgJSRNRe24YhMXSByY66 BeITcPxGfuWHR1mXDkrAMvLomkZ9q5P6roV5Mu24f1ERjqkWir4bXMWZF3Csq6li YYy1aUo/N35koqpNqbNldgGbwXL/tu53CKS7BKEN3TkifBS/2cw= -----END CERTIFICATE-----Generated at Tue May 28 02:06:45 2024 by rpki-client on console-ams.rpki-client.org