$ rpki-client -vvf repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft File: 2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft (raw, json) Hash identifier: 4+x+YP5071dhpThebfZNCjKtx5PKd2PyZhUEXWE0Fxw= Subject key identifier: 39:A9:24:20:86:28:82:CC:99:3A:3A:74:8A:3A:92:93:2E:81:01:FF Authority key identifier: 2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9 Certificate issuer: /CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9 Certificate serial: 205F984C6C31766F577EB4D3F6C7004902F889F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft Manifest number: 0420 Signing time: Thu 18 Apr 2024 12:41:37 +0000 Manifest this update: Thu 18 Apr 2024 12:36:37 +0000 Manifest next update: Sun 21 Apr 2024 20:05:37 +0000 Files and hashes: 1: 3138302e3231342e3234352e302f32342d3234203d3e203338313530.roa (hash: S5eSils4d384ioRO036RcDiPVRLOwYYNlnQ8Voe35dE=) 2: 3230322e39312e31312e302f32342d3234203d3e203338313530.roa (hash: Kmk1bYf5LPoFfevreX5sLBvETUPummqnU2rsratjd1Y=) 3: 3138302e3231342e3235322e302f32342d3234203d3e203338313530.roa (hash: 2dVJiZlf3veI9BsuqMirzL0JJaTXGI3l6ihDTMARuYU=) 4: 3230322e39312e31342e302f32342d3234203d3e203338313530.roa (hash: G2ZztnDdKwiaplDqiuhniBFNp8XnGZIOV+q5lfFOBPg=) 5: 323430323a663038303a623a3a2f34382d3438203d3e203338313530.roa (hash: fGBhI0T0qIl2Hev094tCJVa6CfRImeM6fsB8dTfex64=) 6: 323430323a663038303a313a3a2f34382d3438203d3e203338313530.roa (hash: 0gji0fcCs6ZnnvkUkhJPHtarz2Jql2Bn/mknQlm/60c=) 7: 3138302e3231342e3234342e302f32342d3234203d3e203338313530.roa (hash: qfNZaPpjbn+lOdRoyygIkaP26+PT1Q75G7ifSejUsTU=) 8: 323430323a663038303a613a3a2f34382d3438203d3e203338313530.roa (hash: MXEutTJCQxw0frNVmuYRGeiep6S6kmkEZGe7mbSQhgI=) 9: 3230322e39312e382e302f32342d3234203d3e203338313530.roa (hash: UrTP8Qy6dfeFbn3IOkCWh6FIe1cgBAh4bv6WmOCzFok=) 10: 3138302e3231342e3234372e302f32342d3234203d3e203338313530.roa (hash: o3DnACARiXk8MGsB09WCoJv54QU42+msRc7JDYFmXrc=) 11: 323430323a663038303a633a3a2f34382d3438203d3e203338313530.roa (hash: 585BJ3J3cNHuj6QA8ttgX+zZjFYfyYwDHVrfQb5Tnxg=) 12: 3138302e3231342e3234302e302f32342d3234203d3e203338313530.roa (hash: evWmKZ5iBppxwAEKQvFk2NaenTdztTC3bMriLERuzJI=) 13: 3138302e3231342e3234392e302f32342d3234203d3e203338313530.roa (hash: HoZNLtlvwm0jdiqI7BNWsDInlYK8XZyhOBMgpl3Cq6Y=) 14: 323430323a663038303a3a2f34382d3438203d3e203338313530.roa (hash: bQJM9NFkGI388ubXMNPDtEfo8Xr5pDXscx3MPZoT2M8=) 15: 3138302e3231342e3234312e302f32342d3234203d3e203338313530.roa (hash: Odkgqp9hs44vVZIC7P+BSjNtXB8Lpm9riWpb9SJkfoo=) 16: 3138302e3231342e3234382e302f32342d3234203d3e203338313530.roa (hash: 4D+kXQcBBKIsY563yHxSJpkkxOxnjEFD3DqlBNy2NX8=) 17: 3138302e3231342e3235342e302f32342d3234203d3e203338313530.roa (hash: GRKZOEKSXFeTINPQ81I4C5sxHhbzEbzWnmiE6d5KieI=) 18: 3230322e39312e31332e302f32342d3234203d3e203338313530.roa (hash: 4vF6Q8c5aJy0aw6FQBGbQaSVIZC34x38zgk6936Tsiw=) 19: 3230322e39312e31322e302f32342d3234203d3e203338313530.roa (hash: UrBHpNvPUMt8pUbibo5q7snQWRrk3L82uEr66CpmGlY=) 20: 2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl (hash: AqQqNdFhScw/aA4xI1XDdPadcGEwmxwnC27R6MjpP4o=) 21: 3138302e3231342e3234362e302f32342d3234203d3e203338313530.roa (hash: UWJ096mpdu54FxPxWzuSNTx8Vt0UTXATMvPn5/z0OLI=) 22: 3230322e39312e31352e302f32342d3234203d3e203338313530.roa (hash: RuWtxo3BuKqmF9TrTu8Lvn5FloDPVTt7y5Cq7E4FGpc=) 23: 3138302e3231342e3234322e302f32342d3234203d3e203338313530.roa (hash: 645ltWiUY0bql53JMSKTbQIP9Pojy50xGihwyYwC65Q=) 24: 3138302e3231342e3234332e302f32342d3234203d3e203338313530.roa (hash: /JNzWFIW1XdefWaVFPEsjDgCDvB/VF+ezOMyWu5r2Ck=) 25: 323430323a663038303a323a3a2f34382d3438203d3e203338313530.roa (hash: Aga3n5Q7YkcuYEdMNJLY1P6xuMrdjjJdE0HXaP68TdY=) 26: 3138302e3231342e3235332e302f32342d3234203d3e203338313530.roa (hash: a2yQRkv46gDTg7EBJUodVaxGXax2M3CvgVNOPY6BfdY=) 27: 3230322e39312e31302e302f32342d3234203d3e203338313530.roa (hash: m0VT3dinUs8ceKgItEEXwZ92b+KRZavB7qYQmOjNdhc=) 28: 3138302e3231342e3235352e302f32342d3234203d3e203338313530.roa (hash: tvjhexGXpSO7wuXjwm6qesuL1mCCAS1JQj5RFE6BDNY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Apr 2024 19:36:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:5f:98:4c:6c:31:76:6f:57:7e:b4:d3:f6:c7:00:49:02:f8:89:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9 Validity Not Before: Apr 18 12:36:37 2024 GMT Not After : Apr 21 20:05:37 2024 GMT Subject: CN=39A92420862882CC993A3A748A3A92932E8101FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d3:ca:5e:c7:1e:1b:30:2a:77:41:4c:00:b2: 2e:f2:4f:32:1b:60:e9:60:eb:86:f3:74:48:1d:40: 3a:16:05:0f:d5:99:2c:d3:4e:a0:ed:06:11:88:20: 90:50:4e:d8:25:c3:19:52:a1:ce:f0:f7:58:2e:1d: 9c:2f:fc:40:de:b0:6f:fc:86:e1:91:0f:95:9d:e3: df:7c:a3:45:9e:9d:44:1f:91:7a:e5:3c:f9:bc:3f: 76:a7:3c:71:66:97:7c:67:53:ff:d2:d0:ae:64:b5: ee:01:9a:6a:73:fe:bb:0c:40:57:ea:1a:8d:fc:af: f2:fa:9d:cc:a2:e7:19:6b:9d:c8:d9:1f:64:fd:4b: 6d:f3:0e:71:3f:93:b3:83:74:72:a0:cc:4f:e4:69: 96:e1:d2:81:a4:7d:19:af:ff:40:00:dd:76:8b:0c: 7a:68:74:a1:1b:e4:dd:05:67:7a:13:96:11:ee:32: 17:ae:29:9b:94:65:50:95:26:15:e1:45:57:66:6e: aa:b1:d0:d2:9c:70:f2:0b:fc:0b:fb:69:93:08:37: 3d:be:98:29:c9:5c:e8:6f:f5:ee:ac:4a:1e:de:4d: 43:3d:4b:09:93:0b:7f:8f:c9:9c:b3:2b:22:3d:61: d2:98:18:b2:74:fb:40:08:91:1b:11:c4:ad:1a:a0: 08:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:A9:24:20:86:28:82:CC:99:3A:3A:74:8A:3A:92:93:2E:81:01:FF X509v3 Authority Key Identifier: keyid:2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:22:88:46:b4:c0:7e:6a:be:a5:08:fb:42:cd:09:4d:f3:bc: 45:66:7b:55:3f:c1:ba:79:46:5e:4f:ff:c2:97:0a:29:74:f8: 0f:6f:f7:51:ba:af:d6:4d:30:2d:e7:d6:da:e1:4c:eb:b8:8c: 8c:0a:61:6f:23:f4:77:8c:4a:7e:3f:1e:6f:d1:ff:61:fb:69: d2:28:e7:46:0b:f1:97:b1:c5:10:5f:db:97:e0:fb:c0:59:34: 03:96:ad:5b:48:8f:7b:2a:27:e0:c2:c8:51:6b:b9:d2:db:1e: 84:ea:23:6d:ba:c9:9c:14:02:82:fd:81:18:fe:c5:a5:6d:3f: 99:8b:f4:e0:91:41:c3:73:5f:7f:40:e6:84:e0:01:6d:da:b0: da:30:c9:22:73:ed:6f:b2:93:7a:c9:49:a2:ae:b3:cd:67:3e: 94:f7:da:21:db:4c:c7:d0:1f:41:5c:7d:53:c2:fd:1a:59:6f: 2e:36:49:04:ec:82:b0:b4:be:3a:b9:d6:9b:79:0a:80:b2:d7: 1d:e6:70:23:3b:88:d3:2c:d7:8a:3b:d0:70:a3:df:7d:22:09: 7f:b6:29:fc:12:d1:3f:ca:c1:d9:be:55:dc:6d:f4:06:e0:58: ec:22:28:f8:8f:06:44:66:17:ad:cc:59:65:7e:1c:2c:89:66: 22:35:57:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIF+YTGwxdm9XfrTT9scASQL4ifMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNBNDc0ODdGNzI3ODE3MzMzMzBBMzhDOTVGRjhBNURG NjhDREJCOTAeFw0yNDA0MTgxMjM2MzdaFw0yNDA0MjEyMDA1MzdaMDMxMTAvBgNV BAMTKDM5QTkyNDIwODYyODgyQ0M5OTNBM0E3NDhBM0E5MjkzMkU4MTAxRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ08pexx4bMCp3QUwAsi7yTzIb YOlg64bzdEgdQDoWBQ/VmSzTTqDtBhGIIJBQTtglwxlSoc7w91guHZwv/EDesG/8 huGRD5Wd4998o0WenUQfkXrlPPm8P3anPHFml3xnU//S0K5kte4Bmmpz/rsMQFfq Go38r/L6ncyi5xlrncjZH2T9S23zDnE/k7ODdHKgzE/kaZbh0oGkfRmv/0AA3XaL DHpodKEb5N0FZ3oTlhHuMheuKZuUZVCVJhXhRVdmbqqx0NKccPIL/Av7aZMINz2+ mCnJXOhv9e6sSh7eTUM9SwmTC3+PyZyzKyI9YdKYGLJ0+0AIkRsRxK0aoAj9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOakkIIYogsyZOjp0ijqSky6BAf8wHwYDVR0j BBgwFoAULKR0h/cngXMzMKOMlf+KXfaM27kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x N2U2NWI2Ny05MDVjLTQwM2MtOGM3OS0yMzE1NjU5NjY4YWEvMC8yQ0E0NzQ4N0Y3 Mjc4MTczMzMzMEEzOEM5NUZGOEE1REY2OENEQkI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkNBNDc0ODdGNzI3ODE3MzMzMzBBMzhDOTVGRjhBNURGNjhD REJCOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTdlNjViNjctOTA1Yy00MDNjLThj NzktMjMxNTY1OTY2OGFhLzAvMkNBNDc0ODdGNzI3ODE3MzMzMzBBMzhDOTVGRjhB NURGNjhDREJCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIEiiEa0wH5qvqUI+0LNCU3zvEVme1U/wbp5 Rl5P/8KXCil0+A9v91G6r9ZNMC3n1trhTOu4jIwKYW8j9HeMSn4/Hm/R/2H7adIo 50YL8ZexxRBf25fg+8BZNAOWrVtIj3sqJ+DCyFFrudLbHoTqI226yZwUAoL9gRj+ xaVtP5mL9OCRQcNzX39A5oTgAW3asNowySJz7W+yk3rJSaKus81nPpT32iHbTMfQ H0FcfVPC/RpZby42SQTsgrC0vjq51pt5CoCy1x3mcCM7iNMs14o70HCj330iCX+2 KfwS0T/Kwdm+Vdxt9AbgWOwiKPiPBkRmF63MWWV+HCyJZiI1VyA= -----END CERTIFICATE-----Generated at Thu Apr 18 14:06:39 2024 by rpki-client on console-fra.rpki-client.org