$ rpki-client -vvf repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.mft File: 43A0899A11D5A51202F1304338672AF19B201A74.mft (raw, json) Hash identifier: rZsMm1lXICEtzVA8C/Ze5N+qrA4AoZYYDnnejzKSHXo= Subject key identifier: BA:CF:FE:93:03:71:52:22:92:A3:C8:B3:FD:32:28:C8:A3:B4:D5:F9 Authority key identifier: 43:A0:89:9A:11:D5:A5:12:02:F1:30:43:38:67:2A:F1:9B:20:1A:74 Certificate issuer: /CN=43A0899A11D5A51202F1304338672AF19B201A74 Certificate serial: 666F779013AA84850FE9BDFEB657C52BC139EAFB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43A0899A11D5A51202F1304338672AF19B201A74.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.mft Manifest number: 030E Signing time: Wed 29 May 2024 11:41:49 +0000 Manifest this update: Wed 29 May 2024 11:36:49 +0000 Manifest next update: Sat 01 Jun 2024 12:36:49 +0000 Files and hashes: 1: 3130332e32392e3231322e302f32322d3234203d3e203538333737.roa (hash: 2zg3+ojc2ldWr1hYGPlN7pWiEGKSHVQx8tzBkq6ETPg=) 2: 43A0899A11D5A51202F1304338672AF19B201A74.crl (hash: 6ByoVL9SK+VlUsoRifr9UJDSddL7DZd2Gs7pQ4vcYAE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.crl rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43A0899A11D5A51202F1304338672AF19B201A74.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 12:36:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:6f:77:90:13:aa:84:85:0f:e9:bd:fe:b6:57:c5:2b:c1:39:ea:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43A0899A11D5A51202F1304338672AF19B201A74 Validity Not Before: May 29 11:36:49 2024 GMT Not After : Jun 1 12:36:49 2024 GMT Subject: CN=BACFFE930371522292A3C8B3FD3228C8A3B4D5F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:0b:96:5b:53:a4:79:5b:72:be:8a:11:ac:42: 89:3f:58:34:89:83:77:92:4d:3b:b5:50:62:2c:f1: 7a:6a:db:ef:8f:a9:14:ca:1e:f9:43:d1:09:1f:90: 7e:bb:54:55:d8:ee:c1:78:3f:38:e3:86:de:24:8c: 12:41:ee:49:92:36:2b:cf:8f:8a:0a:44:fe:84:dd: a6:7b:4d:de:02:28:d9:92:be:cc:2d:15:1d:8c:0b: a3:df:9d:47:95:65:71:a4:87:2c:8f:99:69:99:4e: 9d:e9:65:28:19:58:7d:bf:08:a9:e2:1c:b8:ea:1a: 7c:f4:1b:8e:9a:dd:3e:77:d1:52:1e:42:0e:b9:34: 72:e1:1f:b9:99:19:79:e1:fa:99:9a:a1:75:8b:1f: 33:3b:40:72:3e:3f:88:3e:a5:63:4b:b7:ea:44:8a: 96:12:8b:75:6d:6d:5f:68:50:dc:44:e2:f3:56:b9: 8b:1e:50:10:a7:11:61:13:c6:1b:4c:d8:23:4e:fe: 58:89:52:d0:88:ef:64:b1:54:72:04:9d:42:59:c5: 2b:2c:3a:15:68:2d:be:67:18:71:2d:32:57:8e:8a: 91:0d:c9:d8:2a:86:6c:ff:2a:6c:19:85:97:65:80: 6c:f4:69:3e:84:24:bd:53:2c:3a:0c:6e:22:17:10: 62:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:CF:FE:93:03:71:52:22:92:A3:C8:B3:FD:32:28:C8:A3:B4:D5:F9 X509v3 Authority Key Identifier: keyid:43:A0:89:9A:11:D5:A5:12:02:F1:30:43:38:67:2A:F1:9B:20:1A:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43A0899A11D5A51202F1304338672AF19B201A74.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:ae:01:18:e1:c3:59:1e:2f:9e:4a:3f:f1:b9:c3:05:d5:1c: cb:45:c1:b5:c0:9d:47:f1:48:98:c5:02:f4:6a:b9:68:8f:36: ea:cc:82:98:9c:64:1d:9e:a8:65:ee:c7:91:25:da:18:d1:c9: 22:1a:7f:89:06:b7:03:4c:7a:b4:fa:9e:37:81:92:a9:c1:27: 27:5d:d6:7b:97:ef:c8:d6:dd:fc:b4:f5:86:cd:07:d2:f8:8a: 07:a1:d5:8e:35:5b:e6:7f:5c:1f:8a:7b:7e:7e:01:b3:76:d4: 35:74:72:6b:25:00:d1:81:53:69:48:d2:69:eb:dd:2e:88:e2: 10:bf:e5:88:9f:8a:04:fd:73:8e:a7:be:3b:4d:9c:80:ca:aa: b3:e7:af:a3:70:41:0c:60:03:b7:43:7a:d7:58:6d:99:36:78: a7:43:ce:6d:26:bd:85:d5:21:65:2b:83:64:bd:38:d4:f7:b9: 22:2b:f0:8f:11:65:4c:bf:ed:7b:d9:58:66:64:fb:0b:86:d2: 8d:47:9f:61:c7:69:3d:e9:4f:a7:76:58:b5:b6:59:f3:9f:bd: 37:4c:0a:b1:88:e6:91:ec:17:31:97:cc:ab:33:9a:ac:b0:99: 62:d9:7a:17:fe:19:17:d4:ea:46:43:71:b2:5d:21:1b:29:55: 18:12:aa:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZm93kBOqhIUP6b3+tlfFK8E56vswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNBMDg5OUExMUQ1QTUxMjAyRjEzMDQzMzg2NzJBRjE5 QjIwMUE3NDAeFw0yNDA1MjkxMTM2NDlaFw0yNDA2MDExMjM2NDlaMDMxMTAvBgNV BAMTKEJBQ0ZGRTkzMDM3MTUyMjI5MkEzQzhCM0ZEMzIyOEM4QTNCNEQ1RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTC5ZbU6R5W3K+ihGsQok/WDSJ g3eSTTu1UGIs8Xpq2++PqRTKHvlD0QkfkH67VFXY7sF4Pzjjht4kjBJB7kmSNivP j4oKRP6E3aZ7Td4CKNmSvswtFR2MC6PfnUeVZXGkhyyPmWmZTp3pZSgZWH2/CKni HLjqGnz0G46a3T530VIeQg65NHLhH7mZGXnh+pmaoXWLHzM7QHI+P4g+pWNLt+pE ipYSi3VtbV9oUNxE4vNWuYseUBCnEWETxhtM2CNO/liJUtCI72SxVHIEnUJZxSss OhVoLb5nGHEtMleOipENydgqhmz/KmwZhZdlgGz0aT6EJL1TLDoMbiIXEGKVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUus/+kwNxUiKSo8iz/TIoyKO01fkwHwYDVR0j BBgwFoAUQ6CJmhHVpRIC8TBDOGcq8ZsgGnQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDAxYjJkMS0wMWNhLTQwZTgtYmY3Ny05ODYxNTk4NjdhMDQvMC80M0EwODk5QTEx RDVBNTEyMDJGMTMwNDMzODY3MkFGMTlCMjAxQTc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDNBMDg5OUExMUQ1QTUxMjAyRjEzMDQzMzg2NzJBRjE5QjIw MUE3NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQwMWIyZDEtMDFjYS00MGU4LWJm NzctOTg2MTU5ODY3YTA0LzAvNDNBMDg5OUExMUQ1QTUxMjAyRjEzMDQzMzg2NzJB RjE5QjIwMUE3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADGuARjhw1keL55KP/G5wwXVHMtFwbXAnUfx SJjFAvRquWiPNurMgpicZB2eqGXux5El2hjRySIaf4kGtwNMerT6njeBkqnBJydd 1nuX78jW3fy09YbNB9L4igeh1Y41W+Z/XB+Ke35+AbN21DV0cmslANGBU2lI0mnr 3S6I4hC/5YifigT9c46nvjtNnIDKqrPnr6NwQQxgA7dDetdYbZk2eKdDzm0mvYXV IWUrg2S9ONT3uSIr8I8RZUy/7XvZWGZk+wuG0o1Hn2HHaT3pT6d2WLW2WfOfvTdM CrGI5pHsFzGXzKszmqywmWLZehf+GRfU6kZDcbJdIRspVRgSqh4= -----END CERTIFICATE-----Generated at Wed May 29 13:39:46 2024 by rpki-client on console-fra.rpki-client.org