$ rpki-client -vvf repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.mft File: 8955B36815B4084BAFC7908A639810631BEED49F.mft (raw, json) Hash identifier: wehvX5JmoZNRMSUElhjZqaCpdX36l6//xpHNPnOCRv8= Subject key identifier: A3:7D:33:27:05:24:69:50:1F:39:21:09:BC:D6:88:76:C0:8E:32:6C Authority key identifier: 89:55:B3:68:15:B4:08:4B:AF:C7:90:8A:63:98:10:63:1B:EE:D4:9F Certificate issuer: /CN=8955B36815B4084BAFC7908A639810631BEED49F Certificate serial: 453B89CFB236620B2073264125D99A0DA8BD5807 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8955B36815B4084BAFC7908A639810631BEED49F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.mft Manifest number: 0416 Signing time: Wed 24 Apr 2024 00:40:38 +0000 Manifest this update: Wed 24 Apr 2024 00:35:38 +0000 Manifest next update: Sat 27 Apr 2024 00:40:38 +0000 Files and hashes: 1: 8955B36815B4084BAFC7908A639810631BEED49F.crl (hash: qVN0jPlFhP3OpRK8o+4Ldv3dfjBoBnWnY27Iaa1xhDM=) 2: 3130332e3135332e3234342e302f32342d3234203d3e20313430343734.roa (hash: CAQbaG0cgnjxCEY2659t5ukDr0/Uv4PTfKSEFPIWLSk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.crl rsync://repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8955B36815B4084BAFC7908A639810631BEED49F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Apr 2024 00:40:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:3b:89:cf:b2:36:62:0b:20:73:26:41:25:d9:9a:0d:a8:bd:58:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8955B36815B4084BAFC7908A639810631BEED49F Validity Not Before: Apr 24 00:35:38 2024 GMT Not After : Apr 27 00:40:38 2024 GMT Subject: CN=A37D3327052469501F392109BCD68876C08E326C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:ba:60:d5:3a:19:9b:2a:52:e3:c7:6d:22:87: 85:47:7f:d1:b5:97:c3:bf:b9:55:a1:28:4d:6c:17: d9:9a:43:7d:6a:ba:46:cf:3a:57:b2:b4:f8:aa:12: 1f:88:a0:3a:f5:30:01:a5:88:77:dd:2c:c6:9a:7d: 60:17:25:6f:61:b7:ac:b7:49:2a:43:eb:a0:98:17: 69:83:29:81:9a:74:c8:2a:25:93:30:5c:42:e2:7d: 4a:a3:62:35:0f:e7:6e:11:ed:1e:85:cf:af:49:89: 3c:69:65:fc:92:61:e7:03:94:d0:2b:1b:f1:9c:a3: a0:d9:54:0a:65:1c:35:35:c8:01:36:6b:eb:85:bc: 74:15:1a:4d:aa:6f:01:04:48:31:6e:d5:16:6a:91: 49:15:75:73:a2:8e:5e:1a:2a:f6:87:11:e6:71:89: 45:4c:47:a6:58:4a:6f:e9:cb:03:2f:8e:b1:e7:dd: 0e:f7:8f:88:10:cf:08:ef:cf:fd:27:a1:6a:0f:8f: 5c:64:16:75:59:f8:0e:1c:54:32:76:f6:6a:09:2c: fd:f2:52:e8:26:37:f3:cc:57:c5:75:18:d3:e2:94: 7a:cf:4e:87:93:f1:8e:f5:e1:1d:b0:dd:20:dd:0a: 14:ce:17:6b:14:cf:0f:20:61:9e:9d:e6:81:22:6e: 81:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:7D:33:27:05:24:69:50:1F:39:21:09:BC:D6:88:76:C0:8E:32:6C X509v3 Authority Key Identifier: keyid:89:55:B3:68:15:B4:08:4B:AF:C7:90:8A:63:98:10:63:1B:EE:D4:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8955B36815B4084BAFC7908A639810631BEED49F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:12:28:19:ce:cb:34:e7:22:29:e7:87:82:3d:f3:a5:c5:7d: 3c:31:31:86:3e:dc:62:61:54:16:f8:1a:6f:d2:a4:43:28:4b: 59:d6:c0:33:25:09:72:ca:6f:91:c7:f0:13:cf:4a:16:6a:d9: 49:06:92:10:0d:c4:42:e7:d9:ab:24:27:46:32:39:99:8f:1e: ae:eb:fc:39:5a:ef:35:f7:55:6c:96:68:4f:c0:3d:cc:45:71: 50:68:2e:bb:ec:34:8d:24:44:19:ea:20:a5:12:71:66:2d:e4: 3b:3f:17:54:b3:27:bb:52:1c:09:d2:dc:2e:90:6c:d6:a0:79: 5c:d0:96:50:56:f8:70:de:b5:92:85:97:a2:f5:e4:ef:1d:bf: f2:f1:98:6f:95:9e:ca:3a:eb:d3:8f:be:0e:5c:1a:dd:bf:ad: 29:fa:f3:ba:fa:01:af:15:cd:c7:8c:03:1c:30:4f:e8:2c:05: 29:e4:77:46:da:d9:68:e6:32:05:1d:84:1b:ef:17:1b:44:bd: 9c:e7:c1:b7:40:5b:e6:13:b9:82:21:2d:24:2f:d1:2a:e7:08: aa:91:11:c6:a2:29:2a:6b:e5:57:30:d2:45:c9:16:6b:84:78: 7f:9c:f8:94:23:d7:74:7c:a1:61:cf:3b:06:fd:73:08:92:af: 83:11:eb:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURTuJz7I2YgsgcyZBJdmaDai9WAcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk1NUIzNjgxNUI0MDg0QkFGQzc5MDhBNjM5ODEwNjMx QkVFRDQ5RjAeFw0yNDA0MjQwMDM1MzhaFw0yNDA0MjcwMDQwMzhaMDMxMTAvBgNV BAMTKEEzN0QzMzI3MDUyNDY5NTAxRjM5MjEwOUJDRDY4ODc2QzA4RTMyNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoumDVOhmbKlLjx20ih4VHf9G1 l8O/uVWhKE1sF9maQ31qukbPOleytPiqEh+IoDr1MAGliHfdLMaafWAXJW9ht6y3 SSpD66CYF2mDKYGadMgqJZMwXELifUqjYjUP524R7R6Fz69JiTxpZfySYecDlNAr G/Gco6DZVAplHDU1yAE2a+uFvHQVGk2qbwEESDFu1RZqkUkVdXOijl4aKvaHEeZx iUVMR6ZYSm/pywMvjrHn3Q73j4gQzwjvz/0noWoPj1xkFnVZ+A4cVDJ29moJLP3y UugmN/PMV8V1GNPilHrPToeT8Y714R2w3SDdChTOF2sUzw8gYZ6d5oEiboEPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo30zJwUkaVAfOSEJvNaIdsCOMmwwHwYDVR0j BBgwFoAUiVWzaBW0CEuvx5CKY5gQYxvu1J8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x N2UyNmFhMy0zMDczLTQyNzYtYmQ3NC1hZDg2ZjA5OWMyNTMvMC84OTU1QjM2ODE1 QjQwODRCQUZDNzkwOEE2Mzk4MTA2MzFCRUVENDlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODk1NUIzNjgxNUI0MDg0QkFGQzc5MDhBNjM5ODEwNjMxQkVF RDQ5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTdlMjZhYTMtMzA3My00Mjc2LWJk NzQtYWQ4NmYwOTljMjUzLzAvODk1NUIzNjgxNUI0MDg0QkFGQzc5MDhBNjM5ODEw NjMxQkVFRDQ5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKQSKBnOyzTnIinnh4I986XFfTwxMYY+3GJh VBb4Gm/SpEMoS1nWwDMlCXLKb5HH8BPPShZq2UkGkhANxELn2askJ0YyOZmPHq7r /Dla7zX3VWyWaE/APcxFcVBoLrvsNI0kRBnqIKUScWYt5Ds/F1SzJ7tSHAnS3C6Q bNageVzQllBW+HDetZKFl6L15O8dv/LxmG+Vnso669OPvg5cGt2/rSn687r6Aa8V zceMAxwwT+gsBSnkd0ba2WjmMgUdhBvvFxtEvZznwbdAW+YTuYIhLSQv0SrnCKqR EcaiKSpr5Vcw0kXJFmuEeH+c+JQj13R8oWHPOwb9cwiSr4MR65I= -----END CERTIFICATE-----Generated at Wed Apr 24 01:48:20 2024 by rpki-client on console-fra.rpki-client.org