$ rpki-client -vvf repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.mft File: AA97B959271291FBE142491B81063AD5B04487FA.mft (raw, json) Hash identifier: gWTAqoYGafk1HCBLfjccpgpHXgebcuZGiB/yZscgue4= Subject key identifier: 14:C0:45:4E:DE:ED:DB:DE:A7:F6:1A:41:D5:6A:CD:86:2C:0B:18:52 Authority key identifier: AA:97:B9:59:27:12:91:FB:E1:42:49:1B:81:06:3A:D5:B0:44:87:FA Certificate issuer: /CN=AA97B959271291FBE142491B81063AD5B04487FA Certificate serial: 36B119A2C1DD2466C16E93820760BB2D4D8E47E5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA97B959271291FBE142491B81063AD5B04487FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.mft Manifest number: 1A Signing time: Fri 31 May 2024 08:30:33 +0000 Manifest this update: Fri 31 May 2024 08:25:33 +0000 Manifest next update: Mon 03 Jun 2024 13:52:33 +0000 Files and hashes: 1: AA97B959271291FBE142491B81063AD5B04487FA.crl (hash: P3RLfYSzTLSR93jX1YWdDleuFit865wC6IFWK8J7zLI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.crl rsync://repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA97B959271291FBE142491B81063AD5B04487FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 09:22:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:b1:19:a2:c1:dd:24:66:c1:6e:93:82:07:60:bb:2d:4d:8e:47:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA97B959271291FBE142491B81063AD5B04487FA Validity Not Before: May 31 08:25:33 2024 GMT Not After : Jun 3 13:52:33 2024 GMT Subject: CN=14C0454EDEEDDBDEA7F61A41D56ACD862C0B1852 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:fb:19:24:b3:db:b5:89:08:d4:52:c4:47:ed: 42:8b:07:20:16:a0:b2:6d:57:31:d7:a6:0a:a5:a1: 78:10:29:04:5d:93:45:9c:a4:b7:1c:c8:11:1c:50: 91:30:94:b8:be:4e:6e:e8:f8:2d:cf:5d:16:04:76: 26:b7:f9:b0:47:df:01:94:85:17:5b:0a:8c:1f:11: bd:95:c3:38:ec:85:15:12:f0:c0:18:b4:ff:16:e9: 4c:09:e9:8e:1e:89:82:85:81:53:e4:e1:37:92:de: a5:be:ad:49:ca:0d:fa:9b:62:ea:ba:10:46:f6:3e: fc:dd:27:5c:ac:74:c3:50:63:4e:25:64:4f:4d:62: 3c:76:67:0d:82:c8:d1:f2:e7:b2:62:39:b0:c0:ea: df:12:3d:ec:74:a8:37:e4:40:3d:f7:9e:67:7f:8b: a9:31:6c:86:d8:d8:db:37:2a:54:ce:80:f3:e8:0b: 87:04:39:14:5d:26:84:80:d1:dc:d0:eb:9f:f3:7f: 3b:ba:42:6a:30:b0:36:f2:79:97:f6:80:f0:b7:9c: 62:84:3f:7b:93:4c:43:be:61:00:c5:c2:0c:aa:be: bf:54:8b:90:98:79:10:77:88:53:7f:12:8d:5c:9e: cf:16:32:b8:28:5b:c2:2a:3c:b5:49:89:b4:e0:33: 76:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:C0:45:4E:DE:ED:DB:DE:A7:F6:1A:41:D5:6A:CD:86:2C:0B:18:52 X509v3 Authority Key Identifier: keyid:AA:97:B9:59:27:12:91:FB:E1:42:49:1B:81:06:3A:D5:B0:44:87:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA97B959271291FBE142491B81063AD5B04487FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:c9:23:55:7b:80:ea:cc:94:c0:44:99:56:6c:3e:b9:b2:a2: c0:21:99:c4:6c:e6:39:a0:fb:b2:be:f9:94:52:89:e6:5f:fa: 6d:10:bf:36:0a:8d:a6:96:36:16:6a:7a:be:a6:6f:c6:b5:3c: 40:b6:3d:1d:e9:c2:73:21:df:5f:0d:37:bb:65:46:fe:39:29: f5:c5:f6:88:10:d3:3f:bf:2c:ae:35:64:65:54:8f:c6:49:b0: 8e:79:a1:bd:cd:6c:9c:8d:60:40:74:62:4d:70:73:cd:c0:11: 5f:6c:2e:74:77:f7:73:11:6d:4b:21:f0:81:b4:33:f7:c6:9b: 80:0b:9c:eb:5a:7f:23:ab:2f:5f:7e:66:de:f2:02:92:63:06: 21:e8:85:97:3c:5c:77:cb:0e:50:71:ec:3e:5d:0b:14:eb:2f: ef:6c:32:7d:0f:dc:e9:7f:32:59:12:39:2b:c5:8c:48:d2:dd: 03:e9:60:21:e1:40:8a:bf:00:5d:b1:89:58:d3:56:61:1f:2c: 13:02:d5:d9:b1:bd:60:d6:b5:71:16:00:7f:68:16:c2:02:7a: 4d:16:4a:46:31:9f:8a:10:33:2f:8a:79:cf:71:ee:a5:15:0a: 7c:2f:68:39:8e:70:4f:8e:a2:ae:1f:0f:72:da:64:37:33:aa: f6:88:6a:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNrEZosHdJGbBbpOCB2C7LU2OR+UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE5N0I5NTkyNzEyOTFGQkUxNDI0OTFCODEwNjNBRDVC MDQ0ODdGQTAeFw0yNDA1MzEwODI1MzNaFw0yNDA2MDMxMzUyMzNaMDMxMTAvBgNV BAMTKDE0QzA0NTRFREVFRERCREVBN0Y2MUE0MUQ1NkFDRDg2MkMwQjE4NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH+xkks9u1iQjUUsRH7UKLByAW oLJtVzHXpgqloXgQKQRdk0WcpLccyBEcUJEwlLi+Tm7o+C3PXRYEdia3+bBH3wGU hRdbCowfEb2VwzjshRUS8MAYtP8W6UwJ6Y4eiYKFgVPk4TeS3qW+rUnKDfqbYuq6 EEb2PvzdJ1ysdMNQY04lZE9NYjx2Zw2CyNHy57JiObDA6t8SPex0qDfkQD33nmd/ i6kxbIbY2Ns3KlTOgPPoC4cEORRdJoSA0dzQ65/zfzu6QmowsDbyeZf2gPC3nGKE P3uTTEO+YQDFwgyqvr9Ui5CYeRB3iFN/Eo1cns8WMrgoW8IqPLVJibTgM3abAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFMBFTt7t296n9hpB1WrNhiwLGFIwHwYDVR0j BBgwFoAUqpe5WScSkfvhQkkbgQY61bBEh/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZGU4Y2NiOS0wYTYzLTQ5YTktYWE4YS1lZDAxNmVlMzUxZjAvMC9BQTk3Qjk1OTI3 MTI5MUZCRTE0MjQ5MUI4MTA2M0FENUIwNDQ4N0ZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUE5N0I5NTkyNzEyOTFGQkUxNDI0OTFCODEwNjNBRDVCMDQ0 ODdGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWRlOGNjYjktMGE2My00OWE5LWFh OGEtZWQwMTZlZTM1MWYwLzAvQUE5N0I5NTkyNzEyOTFGQkUxNDI0OTFCODEwNjNB RDVCMDQ0ODdGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAnJI1V7gOrMlMBEmVZsPrmyosAhmcRs5jmg +7K++ZRSieZf+m0QvzYKjaaWNhZqer6mb8a1PEC2PR3pwnMh318NN7tlRv45KfXF 9ogQ0z+/LK41ZGVUj8ZJsI55ob3NbJyNYEB0Yk1wc83AEV9sLnR393MRbUsh8IG0 M/fGm4ALnOtafyOrL19+Zt7yApJjBiHohZc8XHfLDlBx7D5dCxTrL+9sMn0P3Ol/ MlkSOSvFjEjS3QPpYCHhQIq/AF2xiVjTVmEfLBMC1dmxvWDWtXEWAH9oFsICek0W SkYxn4oQMy+Kec9x7qUVCnwvaDmOcE+Ooq4fD3LaZDczqvaIaiI= -----END CERTIFICATE-----Generated at Fri May 31 10:00:19 2024 by rpki-client on console-ams.rpki-client.org