$ rpki-client -vvf repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft File: AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft (raw, json) Hash identifier: ESnb8G1dgY+MEfFzdr30ZxZXmDLM68D9PS55RjMeUXw= Subject key identifier: 13:48:E6:AA:EF:69:D7:A9:1B:10:36:48:DA:00:0C:6D:12:D1:AA:B6 Authority key identifier: AF:7B:93:8E:06:44:E5:5F:E0:20:E7:9C:53:BF:11:FD:4B:14:C9:B7 Certificate issuer: /CN=AF7B938E0644E55FE020E79C53BF11FD4B14C9B7 Certificate serial: 14FD95D22F5E097C364D95C6C84238CC51BF7057 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft Manifest number: 0109 Signing time: Fri 22 Nov 2024 12:22:08 +0000 Manifest this update: Fri 22 Nov 2024 12:17:08 +0000 Manifest next update: Mon 25 Nov 2024 23:28:08 +0000 Files and hashes: 1: AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.crl (hash: Uk5c60N60mLWrdJaDe5ytftYSMc85zOAc7rPFxmOLPM=) 2: 3130332e3138362e35392e302f32342d3234203d3e20313439373034.roa (hash: mvaN8XLvKPCnEJm4vDmbpI0VnR/980VlcmdkNSSA5kU=) 3: 3130332e3138362e35382e302f32342d3234203d3e20313439373034.roa (hash: LsWFyeKdfgBe/iPPZkWGpv1VWX1qt3/E1kTKxdlR6Ys=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.crl rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:fd:95:d2:2f:5e:09:7c:36:4d:95:c6:c8:42:38:cc:51:bf:70:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF7B938E0644E55FE020E79C53BF11FD4B14C9B7 Validity Not Before: Nov 22 12:17:08 2024 GMT Not After : Nov 25 23:28:08 2024 GMT Subject: CN=1348E6AAEF69D7A91B103648DA000C6D12D1AAB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:30:fa:c2:e6:08:a6:f2:bc:38:bb:4b:8b:69: 3e:5e:44:93:b9:5b:f8:c6:eb:d0:89:be:b4:e0:2a: 65:79:ba:3c:a5:43:97:a9:f3:0d:72:b2:fe:a0:cc: be:1a:6c:e3:fd:1e:de:1a:aa:6b:03:87:27:e7:4b: cf:3b:51:78:2a:c8:f9:85:49:82:43:9f:0c:93:e8: 2c:24:70:d2:ab:ed:c3:96:5a:dd:5f:86:2d:ff:b7: 94:c6:d5:5e:5c:6f:6f:68:8f:19:02:4d:13:a1:f7: d9:38:84:16:dc:5f:5e:bd:61:70:fc:c5:3f:c4:98: 0b:7b:ea:1c:78:c6:aa:b1:29:45:f6:b4:6d:d6:7e: fd:09:af:8f:ba:bf:78:ec:d1:35:2b:47:51:97:e1: 0e:7a:2a:07:54:ac:d3:ec:df:1e:1c:94:b7:74:76: 6e:0e:fb:27:c1:aa:8f:7a:01:4e:ed:2d:be:a5:99: c2:39:bd:f9:e1:57:aa:e7:3f:9f:af:1c:80:34:4c: 0e:c9:91:57:f7:91:fc:4a:7f:85:de:f7:cb:65:92: 54:7a:0e:98:53:a1:3a:cb:e4:26:4f:4d:18:0c:a5: b1:75:7b:e4:84:c3:03:e7:43:7d:58:ca:9d:84:80: f7:84:c0:10:8a:ac:cd:b3:52:4c:f3:03:1a:14:1f: 24:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:48:E6:AA:EF:69:D7:A9:1B:10:36:48:DA:00:0C:6D:12:D1:AA:B6 X509v3 Authority Key Identifier: keyid:AF:7B:93:8E:06:44:E5:5F:E0:20:E7:9C:53:BF:11:FD:4B:14:C9:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:b7:13:6d:26:b1:05:0e:ed:1e:d5:80:6d:23:b4:fb:33:18: 84:ac:70:0e:55:9e:d0:2a:fe:c8:9c:d6:c6:64:5a:fa:f3:b7: 06:b6:9c:ac:37:b8:29:51:a0:10:62:e5:0b:2d:c5:8b:6d:e5: e6:a8:dc:92:82:5a:14:f8:36:83:5d:b5:1f:52:28:48:44:b8: bc:7e:d4:69:e0:1d:82:62:ce:be:c1:93:73:87:fe:41:d0:c5: b5:db:69:85:73:30:09:05:15:3c:eb:87:42:89:89:e4:a2:7a: 62:2b:de:75:9c:06:af:4d:a2:b2:49:45:b6:34:08:f4:df:e9: 7d:79:12:6e:5a:fa:59:78:31:42:5b:c7:0f:c1:18:25:4c:13: 0b:13:f2:89:c0:d3:f5:17:29:0b:62:64:ba:40:b6:a9:c9:bc: c9:6e:04:00:81:59:c6:ca:1a:e4:5d:9a:b8:5f:1e:32:cd:90: 68:92:6a:26:71:5c:c9:f7:b4:1e:8f:0c:0e:fe:24:89:6f:f3: b2:d1:39:5c:70:f7:19:71:7e:ea:f1:96:04:d5:f7:3d:05:f0: ef:5d:58:f0:40:1f:e1:7c:ae:0e:77:91:7d:11:99:39:42:80: b2:10:46:aa:80:37:31:86:0a:4f:d3:37:a1:b6:35:62:fe:f2: b4:b8:89:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFP2V0i9eCXw2TZXGyEI4zFG/cFcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY3QjkzOEUwNjQ0RTU1RkUwMjBFNzlDNTNCRjExRkQ0 QjE0QzlCNzAeFw0yNDExMjIxMjE3MDhaFw0yNDExMjUyMzI4MDhaMDMxMTAvBgNV BAMTKDEzNDhFNkFBRUY2OUQ3QTkxQjEwMzY0OERBMDAwQzZEMTJEMUFBQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLMPrC5gim8rw4u0uLaT5eRJO5 W/jG69CJvrTgKmV5ujylQ5ep8w1ysv6gzL4abOP9Ht4aqmsDhyfnS887UXgqyPmF SYJDnwyT6CwkcNKr7cOWWt1fhi3/t5TG1V5cb29ojxkCTROh99k4hBbcX169YXD8 xT/EmAt76hx4xqqxKUX2tG3Wfv0Jr4+6v3js0TUrR1GX4Q56KgdUrNPs3x4clLd0 dm4O+yfBqo96AU7tLb6lmcI5vfnhV6rnP5+vHIA0TA7JkVf3kfxKf4Xe98tlklR6 DphToTrL5CZPTRgMpbF1e+SEwwPnQ31Yyp2EgPeEwBCKrM2zUkzzAxoUHyQ9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE0jmqu9p16kbEDZI2gAMbRLRqrYwHwYDVR0j BBgwFoAUr3uTjgZE5V/gIOecU78R/UsUybcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MTBlZGRjZC03ZDM4LTQ3NjUtYWEyNi03ZTQ1NzY3MDQyM2MvMC9BRjdCOTM4RTA2 NDRFNTVGRTAyMEU3OUM1M0JGMTFGRDRCMTRDOUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY3QjkzOEUwNjQ0RTU1RkUwMjBFNzlDNTNCRjExRkQ0QjE0 QzlCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDEwZWRkY2QtN2QzOC00NzY1LWFh MjYtN2U0NTc2NzA0MjNjLzAvQUY3QjkzOEUwNjQ0RTU1RkUwMjBFNzlDNTNCRjEx RkQ0QjE0QzlCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACy3E20msQUO7R7VgG0jtPszGISscA5VntAq /sic1sZkWvrztwa2nKw3uClRoBBi5QstxYtt5eao3JKCWhT4NoNdtR9SKEhEuLx+ 1GngHYJizr7Bk3OH/kHQxbXbaYVzMAkFFTzrh0KJieSiemIr3nWcBq9NorJJRbY0 CPTf6X15Em5a+ll4MUJbxw/BGCVMEwsT8onA0/UXKQtiZLpAtqnJvMluBACBWcbK GuRdmrhfHjLNkGiSaiZxXMn3tB6PDA7+JIlv87LROVxw9xlxfurxlgTV9z0F8O9d WPBAH+F8rg53kX0RmTlCgLIQRqqANzGGCk/TN6G2NWL+8rS4idA= -----END CERTIFICATE-----Generated at Fri Nov 22 13:31:44 2024 by rpki-client on console-fra.rpki-client.org