$ rpki-client -vvf repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.mft File: 4ACFA054E26D225A10C6B0FD316D21263924491E.mft (raw, json) Hash identifier: idoTr4OgrT2evMd3hsqqPBbv5AwAuZla03eX0qmZu/Y= Subject key identifier: FE:26:91:8D:02:37:C0:A4:C2:55:A9:8E:54:79:58:CA:06:F2:9E:D0 Authority key identifier: 4A:CF:A0:54:E2:6D:22:5A:10:C6:B0:FD:31:6D:21:26:39:24:49:1E Certificate issuer: /CN=4ACFA054E26D225A10C6B0FD316D21263924491E Certificate serial: 08FCA0B5B38104B7811385AB8D2C1C4DC345ABD1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.mft Manifest number: 0425 Signing time: Wed 24 Apr 2024 14:01:02 +0000 Manifest this update: Wed 24 Apr 2024 13:56:02 +0000 Manifest next update: Sat 27 Apr 2024 16:31:02 +0000 Files and hashes: 1: 3130332e32342e3231352e302f32342d3234203d3e20313332363439.roa (hash: uhVUr2bQ2PkO+v3yEhps1syM90xq8oHW7FUN4KG6PxI=) 2: 3130332e32342e3231322e302f32322d3232203d3e20313332363439.roa (hash: gbhdhMcQ8OnuKOgRSfWyA3ffmR7bnm8Nrhgo3BFN04c=) 3: 3130332e32342e3231332e302f32342d3234203d3e20313332363439.roa (hash: 0wK1G7R3H7ZWJ+WMnO9yy1WeCnxA8kqP9RaBD/oOr7U=) 4: 4ACFA054E26D225A10C6B0FD316D21263924491E.crl (hash: FtWM5A6T131zqHymt+DIpcslb9MjTXJM0ZTrhSS4xrI=) 5: 323430363a653930303a3a2f34382d3438203d3e20313332363439.roa (hash: f5hCEgTcdSLpwAEqtQkxZyqio10msk7w3eWkMk9K6yw=) 6: 3130332e32342e3231322e302f32342d3234203d3e20313332363439.roa (hash: ai95DI56uArXfxg9+eT9Y26F1pCqk3cq236XCu7N39Y=) 7: 3130332e32342e3231342e302f32342d3234203d3e20313332363439.roa (hash: JItEHoor78bk8eKE6uIWHGxot7yqmmgrVWLEENpjLZI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.crl rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Apr 2024 15:38:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:fc:a0:b5:b3:81:04:b7:81:13:85:ab:8d:2c:1c:4d:c3:45:ab:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ACFA054E26D225A10C6B0FD316D21263924491E Validity Not Before: Apr 24 13:56:02 2024 GMT Not After : Apr 27 16:31:02 2024 GMT Subject: CN=FE26918D0237C0A4C255A98E547958CA06F29ED0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ae:25:9c:83:2a:81:ab:63:57:50:78:7b:db: 9d:8b:9b:f8:fd:af:c8:18:46:1c:0b:5e:18:b2:ad: 18:c2:cc:ee:0f:64:36:68:7b:e6:df:1f:96:55:12: 87:58:b0:e7:6b:c1:ba:0f:e7:20:3e:e7:97:7e:8b: 3d:d5:ab:e7:d9:11:d0:dd:2a:ee:ee:72:70:59:f2: db:f6:a4:bb:67:24:4f:e4:48:bd:3c:25:e0:fd:8b: f6:eb:b5:11:cb:0d:00:f1:65:80:ae:47:4d:82:9d: a7:0c:59:1f:ad:5a:c3:de:0d:38:72:81:82:5f:db: 23:48:f0:05:0f:e0:8f:8c:56:b4:55:0c:3a:27:59: a5:bd:95:21:c0:1e:d5:a8:62:14:ea:02:5a:db:3c: 86:c1:bc:f2:91:3d:04:8f:eb:6f:20:60:b9:bf:8c: 5a:e5:cb:8a:1f:28:8d:51:f3:d0:ac:13:6e:a1:63: bf:1e:74:21:b3:b9:7a:a7:19:79:d1:e4:89:4d:08: 88:92:9f:a5:71:c2:08:52:0a:5d:83:85:07:03:c0: ef:80:da:e3:ff:af:9b:84:39:61:58:a4:cc:f9:e7: 7c:76:dd:76:29:07:64:32:bb:c2:54:75:c2:1a:07: 79:f8:ed:c1:2d:e6:4c:b0:22:06:9a:28:a0:5c:d1: 7d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:26:91:8D:02:37:C0:A4:C2:55:A9:8E:54:79:58:CA:06:F2:9E:D0 X509v3 Authority Key Identifier: keyid:4A:CF:A0:54:E2:6D:22:5A:10:C6:B0:FD:31:6D:21:26:39:24:49:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:80:08:63:9a:f4:ed:b4:22:c8:57:ad:5c:5b:5e:c9:13:c8: c1:c8:cd:f9:b8:26:53:26:6b:2a:b2:c6:f1:8c:ef:a4:33:02: e4:1b:37:0a:8a:b7:1f:70:37:22:d1:ca:93:46:3c:4a:dc:52: b9:c5:88:2b:3b:84:84:97:6c:ec:05:6d:2b:c6:51:e8:4b:2f: b8:27:53:a9:5b:3c:80:13:06:27:a7:30:de:a0:39:d0:f9:0f: e4:b6:5a:5d:e5:72:7b:d5:7d:4d:50:05:0e:d2:03:61:b5:22: f8:1f:05:61:ac:a3:9f:ad:64:2d:66:f0:0b:31:ec:87:c0:5d: 68:01:c4:4e:3b:53:53:6d:9f:6e:4d:97:2f:e4:13:90:bd:70: 04:6f:f0:db:68:c1:3e:3f:a5:5a:bf:4f:6c:0d:35:cb:fb:3d: 8b:50:74:93:9f:0c:0c:35:c0:0b:b1:9a:9e:b0:14:ec:16:05: 34:da:d4:80:88:5a:74:4e:8f:e6:75:ac:a1:c5:a4:3a:5c:21: de:00:26:d9:3c:75:aa:18:e8:1a:56:6c:b2:15:04:e2:9b:21: 1c:75:8f:4d:75:cd:34:2a:02:d7:34:67:8f:0b:ac:cb:7e:2d: 57:83:46:0c:80:a3:f2:eb:c6:6c:54:79:5b:9d:17:d0:9d:b0: b8:51:8b:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCPygtbOBBLeBE4WrjSwcTcNFq9EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFDRkEwNTRFMjZEMjI1QTEwQzZCMEZEMzE2RDIxMjYz OTI0NDkxRTAeFw0yNDA0MjQxMzU2MDJaFw0yNDA0MjcxNjMxMDJaMDMxMTAvBgNV BAMTKEZFMjY5MThEMDIzN0MwQTRDMjU1QTk4RTU0Nzk1OENBMDZGMjlFRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRriWcgyqBq2NXUHh7252Lm/j9 r8gYRhwLXhiyrRjCzO4PZDZoe+bfH5ZVEodYsOdrwboP5yA+55d+iz3Vq+fZEdDd Ku7ucnBZ8tv2pLtnJE/kSL08JeD9i/brtRHLDQDxZYCuR02CnacMWR+tWsPeDThy gYJf2yNI8AUP4I+MVrRVDDonWaW9lSHAHtWoYhTqAlrbPIbBvPKRPQSP628gYLm/ jFrly4ofKI1R89CsE26hY78edCGzuXqnGXnR5IlNCIiSn6VxwghSCl2DhQcDwO+A 2uP/r5uEOWFYpMz553x23XYpB2Qyu8JUdcIaB3n47cEt5kywIgaaKKBc0X0nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/iaRjQI3wKTCVamOVHlYygbyntAwHwYDVR0j BBgwFoAUSs+gVOJtIloQxrD9MW0hJjkkSR4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZTQ2YTMwNS1kZjc3LTQ1ODctODcwMy1hOTA1YzUzNzc5YWMvMC80QUNGQTA1NEUy NkQyMjVBMTBDNkIwRkQzMTZEMjEyNjM5MjQ0OTFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEFDRkEwNTRFMjZEMjI1QTEwQzZCMEZEMzE2RDIxMjYzOTI0 NDkxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGU0NmEzMDUtZGY3Ny00NTg3LTg3 MDMtYTkwNWM1Mzc3OWFjLzAvNEFDRkEwNTRFMjZEMjI1QTEwQzZCMEZEMzE2RDIx MjYzOTI0NDkxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJKACGOa9O20IshXrVxbXskTyMHIzfm4JlMm ayqyxvGM76QzAuQbNwqKtx9wNyLRypNGPErcUrnFiCs7hISXbOwFbSvGUehLL7gn U6lbPIATBienMN6gOdD5D+S2Wl3lcnvVfU1QBQ7SA2G1IvgfBWGso5+tZC1m8Asx 7IfAXWgBxE47U1Ntn25Nly/kE5C9cARv8NtowT4/pVq/T2wNNcv7PYtQdJOfDAw1 wAuxmp6wFOwWBTTa1ICIWnROj+Z1rKHFpDpcId4AJtk8daoY6BpWbLIVBOKbIRx1 j011zTQqAtc0Z48LrMt+LVeDRgyAo/LrxmxUeVudF9CdsLhRi80= -----END CERTIFICATE-----Generated at Wed Apr 24 15:47:54 2024 by rpki-client on console-ams.rpki-client.org