$ rpki-client -vvf repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft File: 8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft (raw, json) Hash identifier: v675ETHN7pJblJLILDuJqDtPp1EAkewQZjJ4VeBRFos= Subject key identifier: 21:E4:04:AC:04:B0:09:83:D3:72:AD:A7:97:7F:B1:58:8C:20:F3:F5 Authority key identifier: 8A:05:EB:F5:8B:EC:96:D9:46:EE:85:F0:F0:F8:57:01:A0:A7:27:99 Certificate issuer: /CN=8A05EBF58BEC96D946EE85F0F0F85701A0A72799 Certificate serial: 12AAAD456090B2AF502A9029178086326F34CCB1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft Manifest number: 042B Signing time: Fri 03 May 2024 19:10:54 +0000 Manifest this update: Fri 03 May 2024 19:05:54 +0000 Manifest next update: Mon 06 May 2024 21:23:54 +0000 Files and hashes: 1: 3130332e3133392e34372e302f32342d3234203d3e203137393935.roa (hash: frcVSY+wnOb5Kg3e/Ynd1pLfwzJ2MdFs/WH4aaCdrE0=) 2: 8A05EBF58BEC96D946EE85F0F0F85701A0A72799.crl (hash: Gj1F2DTFleRx8NBUgMYMimvGT/UxvUrk1jeJEzIUMDM=) 3: 3130332e3133392e34362e302f32342d3234203d3e203137393935.roa (hash: bJ98Iqs/5dstISBU6icQBhdFSwzyMfXqJH4V9McGY7U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.crl rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 03:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:aa:ad:45:60:90:b2:af:50:2a:90:29:17:80:86:32:6f:34:cc:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A05EBF58BEC96D946EE85F0F0F85701A0A72799 Validity Not Before: May 3 19:05:54 2024 GMT Not After : May 6 21:23:54 2024 GMT Subject: CN=21E404AC04B00983D372ADA7977FB1588C20F3F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9c:14:37:e8:3c:cb:3e:6b:7e:96:5c:91:a8: e4:a4:ad:f3:ab:c2:e3:5c:af:71:92:50:b6:4d:63: df:26:83:25:ed:3a:13:8a:e1:da:7d:1a:3d:5d:4e: ef:05:17:a2:1b:d4:fe:9c:2a:23:af:78:7f:2b:e5: 4c:60:ab:81:86:f7:ab:14:84:03:1a:b1:2a:ca:87: 82:eb:30:db:0c:eb:b7:7f:6e:a2:7c:a5:11:4e:34: 4c:19:1a:49:66:df:6b:67:81:13:f6:65:64:f7:3a: bb:73:5e:37:3e:46:85:53:5e:24:2a:d0:cf:3b:c5: a9:99:04:99:e6:2d:20:a7:b2:5c:e0:16:4e:33:4f: da:81:a9:3b:bf:68:d2:ab:d9:91:30:46:fe:d2:e0: 18:fa:3b:c8:1d:9b:3d:f0:68:e1:51:a0:f4:1b:27: 74:d7:b7:fc:0c:ee:6d:63:76:33:2d:59:77:03:24: 48:f3:de:29:d4:47:6f:b9:b9:e9:5d:5b:ae:b1:d0: 41:73:76:a0:a8:14:b5:2b:d4:73:fe:f5:0c:90:4e: 7e:c0:80:e9:24:af:7a:2c:bd:61:2f:79:de:2f:f0: 17:be:70:83:4e:b6:dc:68:f3:08:74:0c:11:2a:56: fa:a7:41:98:9f:a0:e5:38:de:a0:04:b4:52:37:cb: 83:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:E4:04:AC:04:B0:09:83:D3:72:AD:A7:97:7F:B1:58:8C:20:F3:F5 X509v3 Authority Key Identifier: keyid:8A:05:EB:F5:8B:EC:96:D9:46:EE:85:F0:F0:F8:57:01:A0:A7:27:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:88:dc:2b:e2:b2:77:19:c3:7b:72:43:ca:1e:dc:ab:d0:b1: e9:07:be:0e:e4:3a:54:ec:b8:d9:3d:67:83:73:a0:d0:1c:13: 81:6c:6f:c8:70:28:39:0b:aa:5c:b9:54:44:8c:2a:18:28:a1: 23:e4:3e:a1:b7:0a:cd:7c:95:76:bd:22:7e:36:e8:2f:88:89: db:e6:73:30:16:58:0e:f5:a0:47:94:a7:02:15:16:bc:2d:1e: d0:b2:dd:91:ef:fd:22:ab:fd:01:b5:7f:0b:8e:35:fa:d1:01: ee:a9:79:eb:d4:7d:17:da:36:52:40:42:66:9b:7c:d9:44:c9: 6c:71:60:d4:d4:b2:06:e7:2b:86:0f:b8:c2:9d:d1:2b:7c:83: 37:ff:ac:a5:44:35:d2:44:33:8b:19:27:52:bd:c6:95:70:aa: 33:3a:04:e2:86:b4:c1:28:82:ef:6f:e0:aa:c4:cf:03:2d:4c: 23:45:ea:c2:45:3e:af:da:25:f5:8e:9a:b9:f8:7c:12:b6:c5: 32:a1:01:a1:df:8b:24:06:70:df:de:4c:44:d1:51:62:e0:ac: 6e:72:08:e6:f1:9b:93:11:9e:b6:ef:f4:67:b8:36:22:f4:65: a9:4e:da:69:48:f8:c5:0c:14:7e:ca:09:d0:66:92:fc:09:bf: 7e:03:c4:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEqqtRWCQsq9QKpApF4CGMm80zLEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEEwNUVCRjU4QkVDOTZEOTQ2RUU4NUYwRjBGODU3MDFB MEE3Mjc5OTAeFw0yNDA1MDMxOTA1NTRaFw0yNDA1MDYyMTIzNTRaMDMxMTAvBgNV BAMTKDIxRTQwNEFDMDRCMDA5ODNEMzcyQURBNzk3N0ZCMTU4OEMyMEYzRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKnBQ36DzLPmt+llyRqOSkrfOr wuNcr3GSULZNY98mgyXtOhOK4dp9Gj1dTu8FF6Ib1P6cKiOveH8r5Uxgq4GG96sU hAMasSrKh4LrMNsM67d/bqJ8pRFONEwZGklm32tngRP2ZWT3OrtzXjc+RoVTXiQq 0M87xamZBJnmLSCnslzgFk4zT9qBqTu/aNKr2ZEwRv7S4Bj6O8gdmz3waOFRoPQb J3TXt/wM7m1jdjMtWXcDJEjz3inUR2+5ueldW66x0EFzdqCoFLUr1HP+9QyQTn7A gOkkr3osvWEved4v8Be+cINOttxo8wh0DBEqVvqnQZifoOU43qAEtFI3y4M9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIeQErASwCYPTcq2nl3+xWIwg8/UwHwYDVR0j BBgwFoAUigXr9YvsltlG7oXw8PhXAaCnJ5kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MjMwNzM5MC02ZWYzLTQ0NzYtYTZhYS1kMGM1NzgzZTFmMzcvMC84QTA1RUJGNThC RUM5NkQ5NDZFRTg1RjBGMEY4NTcwMUEwQTcyNzk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEEwNUVCRjU4QkVDOTZEOTQ2RUU4NUYwRjBGODU3MDFBMEE3 Mjc5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTIzMDczOTAtNmVmMy00NDc2LWE2 YWEtZDBjNTc4M2UxZjM3LzAvOEEwNUVCRjU4QkVDOTZEOTQ2RUU4NUYwRjBGODU3 MDFBMEE3Mjc5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABeI3CvisncZw3tyQ8oe3KvQsekHvg7kOlTs uNk9Z4NzoNAcE4Fsb8hwKDkLqly5VESMKhgooSPkPqG3Cs18lXa9In426C+Iidvm czAWWA71oEeUpwIVFrwtHtCy3ZHv/SKr/QG1fwuONfrRAe6peevUfRfaNlJAQmab fNlEyWxxYNTUsgbnK4YPuMKd0St8gzf/rKVENdJEM4sZJ1K9xpVwqjM6BOKGtMEo gu9v4KrEzwMtTCNF6sJFPq/aJfWOmrn4fBK2xTKhAaHfiyQGcN/eTETRUWLgrG5y CObxm5MRnrbv9Ge4NiL0ZalO2mlI+MUMFH7KCdBmkvwJv34DxO4= -----END CERTIFICATE-----Generated at Fri May 3 20:32:17 2024 by rpki-client on console-fra.rpki-client.org