$ rpki-client -vvf repo-rpki.idnic.net/repo/0546183c-d9ef-4c33-be99-e84bedb10b68/0/FC4A38DAAF15E8284373FD82AE59B27383D4A68F.mft File: FC4A38DAAF15E8284373FD82AE59B27383D4A68F.mft (raw, json) Hash identifier: tz0azWsW0Jv9vgxUOqpZBrH0LI9sCLxGaX16lkh4fig= Subject key identifier: 27:D1:1E:7C:51:48:A1:60:E8:51:04:A7:14:DB:22:D0:0D:C9:09:3D Authority key identifier: FC:4A:38:DA:AF:15:E8:28:43:73:FD:82:AE:59:B2:73:83:D4:A6:8F Certificate issuer: /CN=FC4A38DAAF15E8284373FD82AE59B27383D4A68F Certificate serial: 289B575EF32594A13BE7730A0618F89E4F6E148F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC4A38DAAF15E8284373FD82AE59B27383D4A68F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0546183c-d9ef-4c33-be99-e84bedb10b68/0/FC4A38DAAF15E8284373FD82AE59B27383D4A68F.mft Manifest number: 0429 Signing time: Wed 01 May 2024 01:51:04 +0000 Manifest this update: Wed 01 May 2024 01:46:04 +0000 Manifest next update: Sat 04 May 2024 09:44:04 +0000 Files and hashes: 1: 3130332e3133372e3134342e302f32332d3234203d3e20313338383439.roa (hash: l6dcHsM8q9pR31Iz4BIDJk5EP2dSYBd8NQChlZik0as=) 2: FC4A38DAAF15E8284373FD82AE59B27383D4A68F.crl (hash: 0mUwPYTEGCi+j3HmP7rd2uQFknUF2Ef/Q8PWJmu4nU8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0546183c-d9ef-4c33-be99-e84bedb10b68/0/FC4A38DAAF15E8284373FD82AE59B27383D4A68F.crl rsync://repo-rpki.idnic.net/repo/0546183c-d9ef-4c33-be99-e84bedb10b68/0/FC4A38DAAF15E8284373FD82AE59B27383D4A68F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC4A38DAAF15E8284373FD82AE59B27383D4A68F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 06:31:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:9b:57:5e:f3:25:94:a1:3b:e7:73:0a:06:18:f8:9e:4f:6e:14:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC4A38DAAF15E8284373FD82AE59B27383D4A68F Validity Not Before: May 1 01:46:04 2024 GMT Not After : May 4 09:44:04 2024 GMT Subject: CN=27D11E7C5148A160E85104A714DB22D00DC9093D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:21:b5:bc:6a:9f:b7:7b:5a:3c:9e:56:6e:46: 2a:77:24:38:8e:87:c6:70:25:b8:d7:59:61:9a:fa: b5:c7:11:d2:66:37:f1:79:d1:24:2a:d9:97:b5:14: 9f:83:4a:b6:e8:8b:9e:73:3f:15:d0:a8:14:4c:0d: bf:13:e6:13:c8:9f:b1:f3:5b:2a:6f:3e:21:87:d4: b1:09:f8:56:73:02:a7:b0:12:11:38:a6:74:eb:4d: 5a:8a:c6:e4:64:68:9b:10:42:0d:05:35:b7:08:68: e3:ac:31:3f:86:75:50:e6:a3:df:e6:63:75:4f:b8: 91:cf:fe:fc:37:e0:c5:ff:87:b1:7b:00:56:40:81: f5:fb:d4:62:3f:9d:65:8c:ca:0c:c5:27:d1:90:31: 16:e3:d8:c2:70:6f:2a:32:18:ca:f9:68:06:b5:20: 5d:c5:90:41:70:ef:e4:d3:93:12:10:ad:17:b7:14: eb:1e:f7:2e:3d:48:46:eb:0f:92:c7:ca:9e:83:90: 90:c2:b9:57:57:37:52:f4:41:b4:13:55:b2:f2:bc: d0:bc:ec:96:be:8a:91:69:22:76:68:79:5f:d8:f8: d4:75:87:e0:77:11:0c:02:e5:53:5a:90:6a:36:48: aa:98:9f:c9:79:aa:c3:48:87:b7:88:cc:3e:48:79: 2c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:D1:1E:7C:51:48:A1:60:E8:51:04:A7:14:DB:22:D0:0D:C9:09:3D X509v3 Authority Key Identifier: keyid:FC:4A:38:DA:AF:15:E8:28:43:73:FD:82:AE:59:B2:73:83:D4:A6:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0546183c-d9ef-4c33-be99-e84bedb10b68/0/FC4A38DAAF15E8284373FD82AE59B27383D4A68F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC4A38DAAF15E8284373FD82AE59B27383D4A68F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0546183c-d9ef-4c33-be99-e84bedb10b68/0/FC4A38DAAF15E8284373FD82AE59B27383D4A68F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:03:6c:cb:7a:f7:1c:cb:f7:94:84:82:a2:b2:2e:31:a3:dc: 41:4e:e8:54:74:61:19:f0:97:d5:50:72:86:59:8a:75:06:f4: 96:68:0e:e3:53:a5:b3:bf:96:d8:72:e6:6b:98:b5:f9:ab:f9: 22:10:7f:54:2c:ed:68:cb:e7:f3:c9:03:03:0a:93:f0:05:7a: 0a:18:71:fb:4f:7d:00:51:67:e6:ad:e3:c5:97:80:cf:35:a2: 2b:a3:bd:f9:6f:87:53:f4:17:34:03:d8:d1:2d:91:76:84:06: ce:7b:bb:fc:79:66:67:21:ec:27:f1:63:1a:27:62:2d:fb:2b: a2:df:49:5d:5a:fe:56:aa:d9:6f:f3:69:b5:a7:df:05:85:59: 43:46:c8:af:4c:6c:e5:4c:a7:5d:65:4b:3c:fc:49:ef:77:b4: 97:95:c3:3b:b8:5d:21:ef:56:30:cd:51:f4:95:36:be:83:e4: 33:3e:65:9d:20:78:c0:15:e0:97:54:15:ac:f6:31:d0:7e:b6: 24:bd:3c:0c:79:2b:9a:7c:de:72:ed:f2:92:0c:ed:45:28:1e: 6e:ae:4c:13:72:52:ca:0f:99:4b:28:40:70:af:df:5b:4c:65: 7e:46:90:14:51:0b:a3:69:c2:2d:3a:5e:1d:63:5f:93:94:a7: 37:d9:7a:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKJtXXvMllKE753MKBhj4nk9uFI8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkM0QTM4REFBRjE1RTgyODQzNzNGRDgyQUU1OUIyNzM4 M0Q0QTY4RjAeFw0yNDA1MDEwMTQ2MDRaFw0yNDA1MDQwOTQ0MDRaMDMxMTAvBgNV BAMTKDI3RDExRTdDNTE0OEExNjBFODUxMDRBNzE0REIyMkQwMERDOTA5M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiIbW8ap+3e1o8nlZuRip3JDiO h8ZwJbjXWWGa+rXHEdJmN/F50SQq2Ze1FJ+DSrboi55zPxXQqBRMDb8T5hPIn7Hz WypvPiGH1LEJ+FZzAqewEhE4pnTrTVqKxuRkaJsQQg0FNbcIaOOsMT+GdVDmo9/m Y3VPuJHP/vw34MX/h7F7AFZAgfX71GI/nWWMygzFJ9GQMRbj2MJwbyoyGMr5aAa1 IF3FkEFw7+TTkxIQrRe3FOse9y49SEbrD5LHyp6DkJDCuVdXN1L0QbQTVbLyvNC8 7Ja+ipFpInZoeV/Y+NR1h+B3EQwC5VNakGo2SKqYn8l5qsNIh7eIzD5IeSzFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ9EefFFIoWDoUQSnFNsi0A3JCT0wHwYDVR0j BBgwFoAU/Eo42q8V6ChDc/2Crlmyc4PUpo8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTQ2MTgzYy1kOWVmLTRjMzMtYmU5OS1lODRiZWRiMTBiNjgvMC9GQzRBMzhEQUFG MTVFODI4NDM3M0ZEODJBRTU5QjI3MzgzRDRBNjhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkM0QTM4REFBRjE1RTgyODQzNzNGRDgyQUU1OUIyNzM4M0Q0 QTY4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU0NjE4M2MtZDllZi00YzMzLWJl OTktZTg0YmVkYjEwYjY4LzAvRkM0QTM4REFBRjE1RTgyODQzNzNGRDgyQUU1OUIy NzM4M0Q0QTY4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEkDbMt69xzL95SEgqKyLjGj3EFO6FR0YRnw l9VQcoZZinUG9JZoDuNTpbO/lthy5muYtfmr+SIQf1Qs7WjL5/PJAwMKk/AFegoY cftPfQBRZ+at48WXgM81oiujvflvh1P0FzQD2NEtkXaEBs57u/x5Zmch7CfxYxon Yi37K6LfSV1a/laq2W/zabWn3wWFWUNGyK9MbOVMp11lSzz8Se93tJeVwzu4XSHv VjDNUfSVNr6D5DM+ZZ0geMAV4JdUFaz2MdB+tiS9PAx5K5p83nLt8pIM7UUoHm6u TBNyUsoPmUsoQHCv31tMZX5GkBRRC6Npwi06Xh1jX5OUpzfZepc= -----END CERTIFICATE-----Generated at Wed May 1 03:18:53 2024 by rpki-client on console-fra.rpki-client.org