$ rpki-client -vvf repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.mft File: 0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.mft (raw, json) Hash identifier: t1fpqQj8IZ0d6aqVm9dY8S22q+uQbtqLLs+8oWrPv+8= Subject key identifier: 18:47:23:44:AE:22:9C:63:21:CF:4B:ED:A4:5B:60:86:3A:22:4F:E6 Authority key identifier: 0D:5D:CD:54:46:94:BB:E8:DB:99:D2:D8:DA:B9:83:14:74:5C:D9:7F Certificate issuer: /CN=0D5DCD544694BBE8DB99D2D8DAB98314745CD97F Certificate serial: 5548492C4DB5534CD8BDF8677FEACED0FDC4FC78 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.mft Manifest number: 042A Signing time: Tue 30 Apr 2024 08:20:03 +0000 Manifest this update: Tue 30 Apr 2024 08:15:03 +0000 Manifest next update: Fri 03 May 2024 19:49:03 +0000 Files and hashes: 1: 0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.crl (hash: +fMym7V8B8sJS1vA9IHlYV016zl2Ehh5tV+GEZCPIxQ=) 2: 3130332e3134302e3130392e302f32342d3234203d3e203538333639.roa (hash: C4ULlijs0615MQkEcxidZ2zWEwgQt+DkpkKA4CbjOao=) 3: 3130332e3134302e3130382e302f32332d3233203d3e203538333639.roa (hash: hOVv2VX8dEy5rVV9uCZfuadEk8vAwLXczR702glVMaA=) 4: 3130332e3134302e3130382e302f32342d3234203d3e203538333639.roa (hash: xtvn9cf8t6uGKP5QZrkzCc4vQIF0w09euvXE1P8N5fA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.crl rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 16:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:48:49:2c:4d:b5:53:4c:d8:bd:f8:67:7f:ea:ce:d0:fd:c4:fc:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D5DCD544694BBE8DB99D2D8DAB98314745CD97F Validity Not Before: Apr 30 08:15:03 2024 GMT Not After : May 3 19:49:03 2024 GMT Subject: CN=18472344AE229C6321CF4BEDA45B60863A224FE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:22:47:c5:69:0d:35:03:a0:ee:72:07:8a:18: 36:8b:d8:b8:51:94:1d:a1:19:4d:2c:b0:76:af:f1: 99:bd:35:bc:66:2c:bc:4e:2b:9d:3c:d5:13:23:eb: 6c:17:f8:50:5d:0a:32:bc:b2:90:c9:8a:e7:ce:ef: 36:50:b7:bb:e0:05:8e:b0:9c:4e:38:f0:74:73:65: 68:0e:e5:c7:1f:94:93:11:86:bf:98:de:9d:33:1a: 15:8a:46:34:e4:5c:fe:e8:4e:15:7b:c7:59:37:e8: a1:39:0d:05:93:a0:76:8a:b5:68:30:83:4b:ef:8e: 99:76:d2:bd:80:7c:6c:70:19:fe:fe:3a:22:77:17: d7:06:cf:20:0d:75:e5:94:73:9c:46:29:f2:77:6a: 61:c9:04:90:2d:6b:8d:00:15:d1:40:88:8f:cb:e3: e7:87:ef:6d:08:2d:9b:4d:1c:c4:63:9c:71:b2:fb: 2a:f1:4c:6b:00:a6:85:a4:55:77:46:15:f9:49:39: 17:ad:4f:c0:9c:3d:4f:ca:71:cc:e6:ed:08:44:25: 09:fd:0b:e1:0e:fd:64:e3:92:69:30:39:bc:6b:30: 7b:aa:ab:f2:e0:bd:69:f3:26:e1:6e:9e:08:4a:f2: dd:fe:06:61:1e:e4:15:97:d9:5b:7f:1a:34:e5:0f: 8a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:47:23:44:AE:22:9C:63:21:CF:4B:ED:A4:5B:60:86:3A:22:4F:E6 X509v3 Authority Key Identifier: keyid:0D:5D:CD:54:46:94:BB:E8:DB:99:D2:D8:DA:B9:83:14:74:5C:D9:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:60:91:0e:d2:3e:e6:c7:b0:f5:6a:8c:41:95:e8:f6:35:60: d6:83:a6:dd:61:7f:45:9b:02:3c:c9:c7:4c:a2:cb:bd:ea:03: 71:4c:fa:6c:60:3e:c5:92:88:5a:49:da:1e:87:c2:11:f1:e8: 6c:ff:ae:ca:c0:43:5a:1e:65:d9:6a:6b:45:5d:e2:e7:cb:33: 46:8b:03:e9:8c:05:51:fb:54:37:50:fa:d4:2d:62:4a:08:a1: 01:95:06:2e:18:a7:0b:ba:04:15:51:18:b0:08:13:e2:df:11: 06:a3:2c:f9:0a:80:20:0a:18:b6:9d:68:c2:5c:4c:4e:6b:4a: e4:a8:82:33:36:12:da:72:36:0e:52:82:ee:04:f3:0f:7a:11: f3:ab:28:64:54:8b:7f:c5:a3:65:c0:e5:ac:f5:a3:bf:8a:4a: 40:8c:e8:d7:35:98:18:76:63:7a:49:d3:2a:f8:f8:1d:61:2c: 66:9e:b9:cf:c9:eb:da:4d:98:81:7e:81:32:f4:fb:e8:e6:25: 9b:8f:89:e5:7c:2e:e7:88:ed:da:18:e2:b7:a6:6b:a0:c8:ae: 9a:ea:08:53:07:6c:ea:92:30:74:bb:34:4b:5c:f1:55:28:72: 31:52:d2:c5:21:08:58:b2:d1:46:f0:fe:c7:b1:4e:70:45:02: e8:70:18:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVUhJLE21U0zYvfhnf+rO0P3E/HgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQ1RENENTQ0Njk0QkJFOERCOTlEMkQ4REFCOTgzMTQ3 NDVDRDk3RjAeFw0yNDA0MzAwODE1MDNaFw0yNDA1MDMxOTQ5MDNaMDMxMTAvBgNV BAMTKDE4NDcyMzQ0QUUyMjlDNjMyMUNGNEJFREE0NUI2MDg2M0EyMjRGRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnIkfFaQ01A6DucgeKGDaL2LhR lB2hGU0ssHav8Zm9NbxmLLxOK5081RMj62wX+FBdCjK8spDJiufO7zZQt7vgBY6w nE448HRzZWgO5ccflJMRhr+Y3p0zGhWKRjTkXP7oThV7x1k36KE5DQWToHaKtWgw g0vvjpl20r2AfGxwGf7+OiJ3F9cGzyANdeWUc5xGKfJ3amHJBJAta40AFdFAiI/L 4+eH720ILZtNHMRjnHGy+yrxTGsApoWkVXdGFflJORetT8CcPU/Kcczm7QhEJQn9 C+EO/WTjkmkwObxrMHuqq/LgvWnzJuFunghK8t3+BmEe5BWX2Vt/GjTlD4rNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGEcjRK4inGMhz0vtpFtghjoiT+YwHwYDVR0j BBgwFoAUDV3NVEaUu+jbmdLY2rmDFHRc2X8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTRhMjFiOS1mOTEyLTQxZjMtYjYyYy0xMjE3NTgxYzk0OGEvMC8wRDVEQ0Q1NDQ2 OTRCQkU4REI5OUQyRDhEQUI5ODMxNDc0NUNEOTdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEQ1RENENTQ0Njk0QkJFOERCOTlEMkQ4REFCOTgzMTQ3NDVD RDk3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE0YTIxYjktZjkxMi00MWYzLWI2 MmMtMTIxNzU4MWM5NDhhLzAvMEQ1RENENTQ0Njk0QkJFOERCOTlEMkQ4REFCOTgz MTQ3NDVDRDk3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKRgkQ7SPubHsPVqjEGV6PY1YNaDpt1hf0Wb AjzJx0yiy73qA3FM+mxgPsWSiFpJ2h6HwhHx6Gz/rsrAQ1oeZdlqa0Vd4ufLM0aL A+mMBVH7VDdQ+tQtYkoIoQGVBi4Ypwu6BBVRGLAIE+LfEQajLPkKgCAKGLadaMJc TE5rSuSogjM2EtpyNg5Sgu4E8w96EfOrKGRUi3/Fo2XA5az1o7+KSkCM6Nc1mBh2 Y3pJ0yr4+B1hLGaeuc/J69pNmIF+gTL0++jmJZuPieV8LueI7doY4rema6DIrprq CFMHbOqSMHS7NEtc8VUocjFS0sUhCFiy0Ubw/sexTnBFAuhwGIs= -----END CERTIFICATE-----Generated at Tue Apr 30 19:12:28 2024 by rpki-client on console-ams.rpki-client.org