$ rpki-client -vvf repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft File: AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft (raw, json) Hash identifier: DVcX+KxM0TXC+sGwYy53t7JhK66+SrWuGQpyml5YLYE= Subject key identifier: 92:92:F1:47:12:40:DC:71:B6:82:12:90:28:62:5E:E9:2A:75:95:D5 Authority key identifier: AF:7B:93:8E:06:44:E5:5F:E0:20:E7:9C:53:BF:11:FD:4B:14:C9:B7 Certificate issuer: /CN=AF7B938E0644E55FE020E79C53BF11FD4B14C9B7 Certificate serial: 3DFED9EFABB5269F3EF864B86A23BC145415DEDD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft Manifest number: B6 Signing time: Sat 18 May 2024 09:31:45 +0000 Manifest this update: Sat 18 May 2024 09:26:45 +0000 Manifest next update: Tue 21 May 2024 20:10:45 +0000 Files and hashes: 1: AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.crl (hash: 7aQcDTdoSmRBTSjTxLUSPgaWLJRAJJfLo2dGLYIocR4=) 2: 3130332e3138362e35382e302f32342d3234203d3e20313439373034.roa (hash: LsWFyeKdfgBe/iPPZkWGpv1VWX1qt3/E1kTKxdlR6Ys=) 3: 3130332e3138362e35392e302f32342d3234203d3e20313439373034.roa (hash: mvaN8XLvKPCnEJm4vDmbpI0VnR/980VlcmdkNSSA5kU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.crl rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 14:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:fe:d9:ef:ab:b5:26:9f:3e:f8:64:b8:6a:23:bc:14:54:15:de:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF7B938E0644E55FE020E79C53BF11FD4B14C9B7 Validity Not Before: May 18 09:26:45 2024 GMT Not After : May 21 20:10:45 2024 GMT Subject: CN=9292F1471240DC71B682129028625EE92A7595D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c4:04:37:c1:1f:f1:95:05:c5:2b:07:ca:d8: 88:e8:e9:1a:a8:7c:dd:e6:63:c0:8c:32:0f:04:14: 1e:f8:e1:0f:b0:06:1c:17:7d:6a:cd:cb:d5:e4:3d: 76:9d:0f:90:3a:7e:db:0d:68:64:70:46:ff:4c:e7: 69:65:ae:ce:eb:22:60:f8:26:58:5c:93:66:c2:84: 48:3a:c1:06:6b:1d:90:95:47:20:56:31:a4:3a:33: 83:9b:7e:5c:a4:60:b0:64:69:15:97:f8:4e:d4:35: cb:c2:b3:de:18:83:47:c1:3a:62:03:0a:9a:d6:2d: 3c:eb:ea:f5:9c:0e:12:b3:8d:ac:e2:b9:95:6a:f0: 5e:52:f1:f7:ec:bd:ce:3d:dd:dd:9c:2b:b2:37:56: 0b:1d:d0:17:7a:f2:93:13:51:81:0b:59:04:35:79: 6d:d6:d9:38:6b:0d:22:02:10:34:d0:b6:8a:7b:d2: c0:b4:89:a3:2b:cb:37:fe:49:e1:e9:f4:88:3d:85: 2b:94:89:5f:43:b7:e6:87:d2:f6:bb:42:c1:0c:21: 01:c0:48:4f:b7:9c:ce:a4:6a:8b:56:de:45:4b:0b: 4e:67:6b:5d:ac:e0:37:47:6a:ff:8e:55:9a:35:7e: 8b:e4:63:68:bd:ba:b5:4a:89:f7:c9:79:1a:7a:cb: 21:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:92:F1:47:12:40:DC:71:B6:82:12:90:28:62:5E:E9:2A:75:95:D5 X509v3 Authority Key Identifier: keyid:AF:7B:93:8E:06:44:E5:5F:E0:20:E7:9C:53:BF:11:FD:4B:14:C9:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:86:31:df:15:95:64:b2:17:db:ab:43:30:32:4c:14:0d:b4: 3f:8b:f9:09:9a:0b:ff:05:32:6e:3c:aa:13:55:ac:24:78:04: 91:1d:98:df:cd:0c:2c:6d:9e:5a:81:14:cd:79:91:6d:3d:f6: 5b:1c:21:1c:ba:43:64:b3:3f:e1:44:84:ca:da:aa:97:ec:6f: 33:3a:5a:dc:13:30:f8:c9:50:0b:4e:76:06:c4:6b:83:a7:a5: a2:1a:65:9b:3b:ea:82:b1:2a:23:8e:56:96:97:d5:b7:12:ef: 1e:e7:a6:a3:17:c5:fe:8a:30:9c:f8:e7:05:0b:5d:73:d0:02: 4a:0f:b1:02:b0:66:97:87:a5:29:79:be:cd:b5:e7:b7:bd:16: fc:01:7e:e5:9a:26:dc:ea:ba:02:20:42:2a:3a:cd:bb:c9:94: e6:64:b7:80:c2:18:fd:82:f5:a4:07:72:df:1f:f7:38:f7:26: d6:00:9c:fb:83:c3:b1:6a:a0:17:0a:e5:c7:ec:b1:56:a3:c8: 96:9d:d3:96:45:84:3c:7a:ee:aa:89:a1:72:12:a8:f8:a8:47: f8:7c:6c:40:86:37:6d:fc:5c:42:4c:ef:b9:6d:be:54:3a:5d: 23:cb:cc:2d:48:06:c7:e6:66:4d:0c:ba:30:a2:bd:5e:73:1a: 8a:2b:78:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPf7Z76u1Jp8++GS4aiO8FFQV3t0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY3QjkzOEUwNjQ0RTU1RkUwMjBFNzlDNTNCRjExRkQ0 QjE0QzlCNzAeFw0yNDA1MTgwOTI2NDVaFw0yNDA1MjEyMDEwNDVaMDMxMTAvBgNV BAMTKDkyOTJGMTQ3MTI0MERDNzFCNjgyMTI5MDI4NjI1RUU5MkE3NTk1RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRxAQ3wR/xlQXFKwfK2Ijo6Rqo fN3mY8CMMg8EFB744Q+wBhwXfWrNy9XkPXadD5A6ftsNaGRwRv9M52llrs7rImD4 Jlhck2bChEg6wQZrHZCVRyBWMaQ6M4ObflykYLBkaRWX+E7UNcvCs94Yg0fBOmID CprWLTzr6vWcDhKzjaziuZVq8F5S8ffsvc493d2cK7I3Vgsd0Bd68pMTUYELWQQ1 eW3W2ThrDSICEDTQtop70sC0iaMryzf+SeHp9Ig9hSuUiV9Dt+aH0va7QsEMIQHA SE+3nM6kaotW3kVLC05na12s4DdHav+OVZo1fovkY2i9urVKiffJeRp6yyE5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkpLxRxJA3HG2ghKQKGJe6Sp1ldUwHwYDVR0j BBgwFoAUr3uTjgZE5V/gIOecU78R/UsUybcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MTBlZGRjZC03ZDM4LTQ3NjUtYWEyNi03ZTQ1NzY3MDQyM2MvMC9BRjdCOTM4RTA2 NDRFNTVGRTAyMEU3OUM1M0JGMTFGRDRCMTRDOUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY3QjkzOEUwNjQ0RTU1RkUwMjBFNzlDNTNCRjExRkQ0QjE0 QzlCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDEwZWRkY2QtN2QzOC00NzY1LWFh MjYtN2U0NTc2NzA0MjNjLzAvQUY3QjkzOEUwNjQ0RTU1RkUwMjBFNzlDNTNCRjEx RkQ0QjE0QzlCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADeGMd8VlWSyF9urQzAyTBQNtD+L+QmaC/8F Mm48qhNVrCR4BJEdmN/NDCxtnlqBFM15kW099lscIRy6Q2SzP+FEhMraqpfsbzM6 WtwTMPjJUAtOdgbEa4OnpaIaZZs76oKxKiOOVpaX1bcS7x7npqMXxf6KMJz45wUL XXPQAkoPsQKwZpeHpSl5vs2157e9FvwBfuWaJtzqugIgQio6zbvJlOZkt4DCGP2C 9aQHct8f9zj3JtYAnPuDw7FqoBcK5cfssVajyJad05ZFhDx67qqJoXISqPioR/h8 bECGN238XEJM77ltvlQ6XSPLzC1IBsfmZk0MujCivV5zGooreJs= -----END CERTIFICATE-----Generated at Sat May 18 10:26:12 2024 by rpki-client on console-ams.rpki-client.org