$ rpki-client -vvf repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.mft File: AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.mft (raw, json) Hash identifier: OtAlGyVmWBUC/eZp43JOtiKBGZPH96JKqfCmzgFaNUE= Subject key identifier: 88:F1:51:EE:B1:3B:91:03:A4:6E:D6:60:C5:14:9A:62:1A:5B:08:DB Authority key identifier: AA:E0:29:EA:D3:C6:E5:CB:19:BC:9C:E1:41:DB:76:79:A4:23:D3:18 Certificate issuer: /CN=AAE029EAD3C6E5CB19BC9CE141DB7679A423D318 Certificate serial: 20B552886AE161726BB2917B72EBEA2FEA1A3FF1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.mft Manifest number: 02B4 Signing time: Mon 27 May 2024 10:51:08 +0000 Manifest this update: Mon 27 May 2024 10:46:08 +0000 Manifest next update: Thu 30 May 2024 22:20:08 +0000 Files and hashes: 1: AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.crl (hash: d5XMb8beZE7UuFXtRuZnfn15ZK6NDksBMFpRmOJQ9WQ=) 2: 3130332e3136362e362e302f32332d3234203d3e203137393935.roa (hash: E7O5MGSAXZTCefSeFMICE1iHqKkmO3VLWrxq/dbTzoI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.crl rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 May 2024 15:21:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:b5:52:88:6a:e1:61:72:6b:b2:91:7b:72:eb:ea:2f:ea:1a:3f:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AAE029EAD3C6E5CB19BC9CE141DB7679A423D318 Validity Not Before: May 27 10:46:08 2024 GMT Not After : May 30 22:20:08 2024 GMT Subject: CN=88F151EEB13B9103A46ED660C5149A621A5B08DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:fa:86:45:b7:a9:cc:97:51:03:b3:f1:b4:25: 4b:2b:cd:2e:cc:b1:d5:a0:fd:ae:cc:8e:37:81:60: 43:91:d0:33:de:9e:06:db:24:55:91:59:26:45:24: 72:92:9e:b3:b7:1b:5c:91:b7:75:ab:4a:a8:8f:34: ee:3f:09:1e:8b:1d:58:9a:f1:00:5b:07:b4:7d:29: fe:3b:f3:2e:ed:30:db:de:81:b0:b6:9c:f5:50:94: d8:6a:73:37:79:2d:cb:af:6f:cd:ef:6f:4a:40:f2: 37:af:64:8f:77:2b:a1:64:24:07:35:60:0f:08:28: 31:fb:ad:3d:b9:b4:dc:e9:a2:2c:11:49:f2:80:7c: b1:48:ee:62:9f:1c:36:f8:5e:88:3d:f3:7a:53:09: e7:80:cb:13:28:da:bc:c4:51:5a:6a:7f:e6:77:38: 4d:95:0a:1c:9f:22:1e:bf:27:85:9d:45:65:34:12: 3d:7c:d9:c2:f2:9a:b6:d0:df:98:e1:8c:f9:e1:8d: f5:21:38:48:9a:04:93:93:27:56:78:14:4a:4c:3c: e6:4f:c1:83:53:d2:ba:48:d1:bf:87:7f:96:ce:aa: 37:18:93:4a:7b:05:f2:47:fe:bf:97:6d:9b:16:68: 82:c4:27:14:00:5c:95:16:d2:70:9b:61:b8:c1:09: 48:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:F1:51:EE:B1:3B:91:03:A4:6E:D6:60:C5:14:9A:62:1A:5B:08:DB X509v3 Authority Key Identifier: keyid:AA:E0:29:EA:D3:C6:E5:CB:19:BC:9C:E1:41:DB:76:79:A4:23:D3:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:b9:08:e1:6e:b2:bf:63:69:cd:2b:4a:ca:a3:90:87:a6:71: d1:67:81:3b:11:d9:7a:20:35:bf:64:81:53:da:cd:55:2f:7a: 2f:aa:6c:b3:25:5e:05:39:71:36:16:fe:92:76:e4:75:6b:72: c3:31:d9:6d:56:05:cb:37:b5:41:1d:16:98:c8:ad:65:7a:d8: ca:e0:8e:21:6d:be:ae:f0:16:e8:44:4c:08:3e:c6:7f:b4:97: 81:92:d8:c2:8e:57:d6:b7:f5:42:ee:5f:d1:62:31:cc:7a:18: e1:3a:ae:bd:cb:06:28:8f:09:03:fc:76:77:b9:7f:7f:aa:0d: 28:9d:8f:05:80:cf:3b:be:60:d5:3d:c6:1b:3e:61:43:0f:4a: 1d:48:8f:92:38:29:b9:17:4a:c3:cd:7c:28:71:7c:90:bc:57: b0:43:31:70:3c:76:da:51:6b:c0:61:f7:80:47:11:b4:f4:a4: 12:48:6c:bf:e8:6c:10:9f:df:c9:0a:dc:be:d3:a7:03:2e:81: 33:05:27:b8:02:61:cf:a1:93:a3:32:b9:83:be:6e:73:5c:25: 9f:6d:50:40:83:7e:7f:1c:f4:e4:de:e3:fa:d4:45:f1:20:e0: a1:ae:bc:ad:e1:6e:f1:04:30:a8:d2:5c:ab:e4:0c:0e:78:84: 52:05:b9:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUILVSiGrhYXJrspF7cuvqL+oaP/EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUFFMDI5RUFEM0M2RTVDQjE5QkM5Q0UxNDFEQjc2NzlB NDIzRDMxODAeFw0yNDA1MjcxMDQ2MDhaFw0yNDA1MzAyMjIwMDhaMDMxMTAvBgNV BAMTKDg4RjE1MUVFQjEzQjkxMDNBNDZFRDY2MEM1MTQ5QTYyMUE1QjA4REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDt+oZFt6nMl1EDs/G0JUsrzS7M sdWg/a7MjjeBYEOR0DPengbbJFWRWSZFJHKSnrO3G1yRt3WrSqiPNO4/CR6LHVia 8QBbB7R9Kf478y7tMNvegbC2nPVQlNhqczd5Lcuvb83vb0pA8jevZI93K6FkJAc1 YA8IKDH7rT25tNzpoiwRSfKAfLFI7mKfHDb4Xog983pTCeeAyxMo2rzEUVpqf+Z3 OE2VChyfIh6/J4WdRWU0Ej182cLymrbQ35jhjPnhjfUhOEiaBJOTJ1Z4FEpMPOZP wYNT0rpI0b+Hf5bOqjcYk0p7BfJH/r+XbZsWaILEJxQAXJUW0nCbYbjBCUhBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiPFR7rE7kQOkbtZgxRSaYhpbCNswHwYDVR0j BBgwFoAUquAp6tPG5csZvJzhQdt2eaQj0xgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZGI5MmU4OS05MmQ1LTQwNjQtOTUxMS0wNjdlMzUzNjc5Y2UvMC9BQUUwMjlFQUQz QzZFNUNCMTlCQzlDRTE0MURCNzY3OUE0MjNEMzE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUFFMDI5RUFEM0M2RTVDQjE5QkM5Q0UxNDFEQjc2NzlBNDIz RDMxOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGRiOTJlODktOTJkNS00MDY0LTk1 MTEtMDY3ZTM1MzY3OWNlLzAvQUFFMDI5RUFEM0M2RTVDQjE5QkM5Q0UxNDFEQjc2 NzlBNDIzRDMxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD25COFusr9jac0rSsqjkIemcdFngTsR2Xog Nb9kgVPazVUvei+qbLMlXgU5cTYW/pJ25HVrcsMx2W1WBcs3tUEdFpjIrWV62Mrg jiFtvq7wFuhETAg+xn+0l4GS2MKOV9a39ULuX9FiMcx6GOE6rr3LBiiPCQP8dne5 f3+qDSidjwWAzzu+YNU9xhs+YUMPSh1Ij5I4KbkXSsPNfChxfJC8V7BDMXA8dtpR a8Bh94BHEbT0pBJIbL/obBCf38kK3L7TpwMugTMFJ7gCYc+hk6MyuYO+bnNcJZ9t UECDfn8c9OTe4/rURfEg4KGuvK3hbvEEMKjSXKvkDA54hFIFucg= -----END CERTIFICATE-----Generated at Mon May 27 12:23:09 2024 by rpki-client on console-fra.rpki-client.org