$ rpki-client -vvf repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft File: 9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft (raw, json) Hash identifier: bpzgFzQEgC6Vahq7ZG8xsKy2ktqXfHjOW5qJ3rOXKaU= Subject key identifier: B7:C5:7D:69:84:17:69:A2:06:E3:C4:B3:85:E5:7B:38:26:33:AB:1A Authority key identifier: 9F:5E:7C:D1:CF:2E:52:B2:82:C4:03:FC:C0:AF:8B:02:D0:E8:93:12 Certificate issuer: /CN=9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312 Certificate serial: 6D8A286EC75FEE35D18FD2D259F7AB918071AA57 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.cer Subject info access: rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft Manifest number: 042A Signing time: Wed 01 May 2024 03:11:47 +0000 Manifest this update: Wed 01 May 2024 03:06:47 +0000 Manifest next update: Sat 04 May 2024 06:10:47 +0000 Files and hashes: 1: 3130332e3134302e33342e302f32332d3233203d3e203538333639.roa (hash: Ly2WcAdl8FCGes0ivRK2PwJB6QG05Bueh0UeU8Ux16A=) 2: 9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.crl (hash: TGKSmWh+5QeZFJq4EycqeUJ++sEnDH4nNiVPunOTCUY=) 3: 3130332e3134302e33352e302f32342d3234203d3e203538333639.roa (hash: LBYa5y6m0zuBAN3/cc6tCSWcf1rprQ73AVYekSglYHQ=) 4: 3130332e3134302e33342e302f32342d3234203d3e203538333639.roa (hash: vHWbrR/eEXNjZ5ax++YrUQDvEMfCGNSugwoO5OAA+Ac=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.crl rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 06:10:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:8a:28:6e:c7:5f:ee:35:d1:8f:d2:d2:59:f7:ab:91:80:71:aa:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312 Validity Not Before: May 1 03:06:47 2024 GMT Not After : May 4 06:10:47 2024 GMT Subject: CN=B7C57D69841769A206E3C4B385E57B382633AB1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:5e:a9:1c:51:85:e3:05:0e:6b:09:fd:fb:db: 19:1b:cf:49:8e:e4:d9:11:f0:b3:0e:12:93:90:8e: 50:72:31:4d:0f:02:a9:7e:da:47:5e:86:06:c0:96: c2:e5:20:a1:0d:99:27:c1:d9:37:7e:ae:3c:0c:80: 94:cc:ba:47:22:ec:15:51:5f:60:c9:01:12:47:93: 61:19:fd:ff:e3:80:8b:38:91:b7:66:8c:7c:39:d6: 11:44:cf:80:07:ad:31:59:e6:46:ec:5c:3e:db:ff: 93:14:aa:8f:1c:3d:68:08:e5:41:fd:83:5d:26:09: be:e5:df:1a:53:f6:9f:21:d9:25:cf:9a:6f:aa:00: 06:1a:b2:8f:97:34:b8:4e:74:6c:d4:77:d1:46:5b: f5:f7:61:0b:66:01:7c:55:f8:65:33:c9:a8:a7:45: c8:cc:e1:0f:f2:42:0e:5f:ce:35:91:4b:1c:a4:d1: 63:5b:72:a3:a0:a9:bb:20:4b:c2:fa:28:be:98:0b: c4:a3:d1:9d:1d:d7:01:77:dd:2e:12:f6:2e:f7:1b: 19:4d:94:ba:97:95:8c:bf:5b:3b:8c:2a:c6:d7:ea: 43:ea:1d:48:83:6d:8c:59:c3:a3:55:cb:4b:76:e1: 07:47:c6:50:66:2f:2c:0f:d7:b6:82:6d:a3:d7:75: 30:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:C5:7D:69:84:17:69:A2:06:E3:C4:B3:85:E5:7B:38:26:33:AB:1A X509v3 Authority Key Identifier: keyid:9F:5E:7C:D1:CF:2E:52:B2:82:C4:03:FC:C0:AF:8B:02:D0:E8:93:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e2:26:03:dd:be:e5:d7:6f:20:38:e5:3f:9b:44:7d:e2:1d:ff: 71:97:54:4d:36:97:54:60:84:c2:d0:51:50:fd:f7:f7:db:b1: 8a:d3:1b:4a:14:a1:a3:69:f5:f6:1b:fa:c4:80:28:1e:df:86: 33:87:ea:a5:be:5b:e1:c2:bc:d7:38:04:39:61:e1:c8:73:ad: 8a:d1:f3:81:11:8f:77:1d:8a:30:f1:e6:51:26:42:fb:6e:5b: 8b:91:14:02:74:29:d6:45:5b:3d:d3:99:56:7e:62:5d:56:1f: 3f:25:e7:8f:91:de:82:9c:c7:13:0a:db:54:6d:65:9a:88:9a: 67:95:3b:cd:46:40:6d:04:03:58:7f:ac:a6:33:e4:4a:35:c8: ff:b0:5c:dd:55:c5:ac:54:53:f5:ba:b3:e4:9d:28:a5:65:e5: 93:2c:02:52:f4:63:ff:b7:4f:ce:34:3f:2a:9f:c9:2e:aa:1e: 06:a9:0e:c2:2d:1f:62:fa:5e:eb:90:f8:16:92:f8:19:bd:f0: 9d:00:a5:82:a2:39:db:98:d1:21:f6:37:4c:09:03:21:30:a9: 97:a5:35:bf:0f:5b:3d:00:7e:2e:b5:64:6f:e9:b9:e5:31:b3: b3:03:b8:b6:85:90:c6:a1:9d:df:1c:41:8a:a8:e8:d3:52:de: 29:ba:76:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbYoobsdf7jXRj9LSWferkYBxqlcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY1RTdDRDFDRjJFNTJCMjgyQzQwM0ZDQzBBRjhCMDJE MEU4OTMxMjAeFw0yNDA1MDEwMzA2NDdaFw0yNDA1MDQwNjEwNDdaMDMxMTAvBgNV BAMTKEI3QzU3RDY5ODQxNzY5QTIwNkUzQzRCMzg1RTU3QjM4MjYzM0FCMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWXqkcUYXjBQ5rCf372xkbz0mO 5NkR8LMOEpOQjlByMU0PAql+2kdehgbAlsLlIKENmSfB2Td+rjwMgJTMukci7BVR X2DJARJHk2EZ/f/jgIs4kbdmjHw51hFEz4AHrTFZ5kbsXD7b/5MUqo8cPWgI5UH9 g10mCb7l3xpT9p8h2SXPmm+qAAYaso+XNLhOdGzUd9FGW/X3YQtmAXxV+GUzyain RcjM4Q/yQg5fzjWRSxyk0WNbcqOgqbsgS8L6KL6YC8Sj0Z0d1wF33S4S9i73GxlN lLqXlYy/WzuMKsbX6kPqHUiDbYxZw6NVy0t24QdHxlBmLywP17aCbaPXdTA1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt8V9aYQXaaIG48SzheV7OCYzqxowHwYDVR0j BBgwFoAUn1580c8uUrKCxAP8wK+LAtDokxIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NTIyMjZlYS01ZTI2LTRlYTUtYTY4OS00NzU3YWQwNWY5NTIvMC85RjVFN0NEMUNG MkU1MkIyODJDNDAzRkNDMEFGOEIwMkQwRTg5MzEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY1RTdDRDFDRjJFNTJCMjgyQzQwM0ZDQzBBRjhCMDJEMEU4 OTMxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTUyMjI2ZWEtNWUyNi00ZWE1LWE2 ODktNDc1N2FkMDVmOTUyLzAvOUY1RTdDRDFDRjJFNTJCMjgyQzQwM0ZDQzBBRjhC MDJEMEU4OTMxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOImA92+5ddvIDjlP5tEfeId/3GXVE02l1Rg hMLQUVD99/fbsYrTG0oUoaNp9fYb+sSAKB7fhjOH6qW+W+HCvNc4BDlh4chzrYrR 84ERj3cdijDx5lEmQvtuW4uRFAJ0KdZFWz3TmVZ+Yl1WHz8l54+R3oKcxxMK21Rt ZZqImmeVO81GQG0EA1h/rKYz5Eo1yP+wXN1VxaxUU/W6s+SdKKVl5ZMsAlL0Y/+3 T840PyqfyS6qHgapDsItH2L6XuuQ+BaS+Bm98J0ApYKiOduY0SH2N0wJAyEwqZel Nb8PWz0Afi61ZG/pueUxs7MDuLaFkMahnd8cQYqo6NNS3im6dhQ= -----END CERTIFICATE-----Generated at Wed May 1 05:56:37 2024 by rpki-client on console-fra.rpki-client.org