$ rpki-client -vvf repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.mft File: AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.mft (raw, json) Hash identifier: kJA8EEqfbbPsucHBZv2n7XdGDz8TD9E7vyub2nBrkuQ= Subject key identifier: 95:46:B8:F9:EC:84:A7:76:D9:7B:E1:43:35:EE:99:FE:5D:B2:F5:64 Authority key identifier: AB:58:72:11:82:B4:EA:A8:FE:CD:4A:D8:80:8C:EE:F5:CD:DD:1B:06 Certificate issuer: /CN=AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06 Certificate serial: 1513948B62EA84EA139598714E49DF29761AD5EB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.mft Manifest number: 0422 Signing time: Sat 20 Apr 2024 11:11:01 +0000 Manifest this update: Sat 20 Apr 2024 11:06:01 +0000 Manifest next update: Tue 23 Apr 2024 21:44:01 +0000 Files and hashes: 1: 3130332e3234352e3132332e302f32342d3234203d3e203436303536.roa (hash: nneooXPaIrH4zqrLr1J8eKBYR1yVEb34+Gdwbaa0/Jk=) 2: AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.crl (hash: VIH1bha5+wYV5T3AHHuQ2yVSXP6c+X1NNCIO5g9PfpY=) 3: 323030313a6466303a3434613a3a2f34382d3438203d3e203436303536.roa (hash: ZuvFKOhEYhPI4UjTn9RnjZ5Np6+LrbBOag3o5U6IqVU=) 4: 3130332e3234352e3132322e302f32342d3234203d3e203436303536.roa (hash: HKtwbicytQIJJiMszVY+S2rprix+jn6jwCQJJEixkWQ=) 5: 3230322e35322e35302e302f32342d3234203d3e203436303536.roa (hash: uoHRAsCzTto3OL/zQ4X4VpOzlGUOZetV7RZewI7SNjY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.crl rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Apr 2024 07:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:13:94:8b:62:ea:84:ea:13:95:98:71:4e:49:df:29:76:1a:d5:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06 Validity Not Before: Apr 20 11:06:01 2024 GMT Not After : Apr 23 21:44:01 2024 GMT Subject: CN=9546B8F9EC84A776D97BE14335EE99FE5DB2F564 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ec:83:8a:35:ee:fc:be:c0:64:b7:b2:46:40: 07:2d:28:1f:89:0c:f6:ee:70:80:a7:75:25:2f:80: 9c:ca:1a:05:73:ea:94:48:4f:a8:9e:82:af:e5:82: 8b:3c:17:b4:26:07:81:21:22:22:2d:59:74:06:c7: 21:45:47:5d:45:73:24:3d:7a:84:5e:37:ba:24:54: ef:44:13:66:d7:96:3e:1f:36:9a:64:3b:08:f5:a1: 75:4c:79:0a:cf:6e:82:29:d6:6b:19:e4:11:ab:b5: d7:11:52:6d:69:3e:9d:44:68:0a:5b:be:e9:6f:80: 6f:4c:47:ad:6e:7c:1b:78:0f:c2:20:f4:69:57:62: 1e:ac:2b:e8:f2:d4:6b:fb:9e:a4:37:dd:03:20:bf: 7c:b6:37:23:4f:48:2f:82:d7:3b:23:1b:4a:b0:42: f8:c5:b3:83:36:1b:8e:5b:6d:0f:1a:a8:3a:38:d4: b5:80:d8:38:48:b7:9b:b1:ed:31:c2:d4:5b:66:ae: 6f:84:ef:45:ce:e3:a5:28:84:3f:73:fe:52:83:60: 66:f4:ea:13:57:d3:ab:6d:bb:40:a9:4c:ea:8e:1a: c7:15:32:5e:bb:f4:38:8c:89:9f:6f:14:f3:22:4e: a3:3b:e6:d7:89:e8:6a:20:b6:56:84:b0:af:4e:27: ba:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:46:B8:F9:EC:84:A7:76:D9:7B:E1:43:35:EE:99:FE:5D:B2:F5:64 X509v3 Authority Key Identifier: keyid:AB:58:72:11:82:B4:EA:A8:FE:CD:4A:D8:80:8C:EE:F5:CD:DD:1B:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:4d:43:92:a5:94:bb:b5:e9:0c:f1:0f:71:67:8f:37:e7:6e: a0:0b:0b:a7:84:6b:7b:4c:15:2a:cc:81:b3:a9:58:af:66:43: 55:69:7d:df:51:44:2b:c7:95:c5:52:d4:de:4f:58:2e:81:85: 0d:53:41:38:98:7b:2b:c1:50:ba:19:1c:f4:4c:01:68:8a:95: 91:39:ac:8a:9c:15:76:1f:f2:de:11:0a:1e:a7:8a:15:b4:7c: 57:08:04:59:6a:f6:b5:fa:63:e2:61:04:05:8f:a8:c0:57:ae: d6:7d:76:1f:9c:d0:6f:e5:ef:4e:c0:70:42:d1:54:56:3e:22: 97:96:a9:8a:42:fa:8c:eb:b1:27:86:99:82:80:c0:04:6b:18: 96:08:c6:f9:14:9a:3a:02:ec:8e:16:de:ad:e8:8a:58:3a:23: c5:40:b7:62:ab:c2:41:f2:66:0c:e0:68:70:30:41:5c:80:3f: 37:ee:7b:8c:6e:7c:d5:a7:40:c1:55:c1:69:5c:e1:8a:9a:a4: 4e:89:c0:0e:e8:f2:cc:8a:ba:ca:1e:91:95:90:fa:fd:6b:fc: 3c:c8:ae:cf:be:54:30:3f:f2:e6:2d:f5:63:4d:17:d6:30:c7: 87:36:d4:4d:d9:84:65:2f:9a:fa:80:28:b6:14:fa:fc:d8:10: 52:c8:34:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFROUi2LqhOoTlZhxTknfKXYa1eswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUI1ODcyMTE4MkI0RUFBOEZFQ0Q0QUQ4ODA4Q0VFRjVD REREMUIwNjAeFw0yNDA0MjAxMTA2MDFaFw0yNDA0MjMyMTQ0MDFaMDMxMTAvBgNV BAMTKDk1NDZCOEY5RUM4NEE3NzZEOTdCRTE0MzM1RUU5OUZFNURCMkY1NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP7IOKNe78vsBkt7JGQActKB+J DPbucICndSUvgJzKGgVz6pRIT6iegq/lgos8F7QmB4EhIiItWXQGxyFFR11FcyQ9 eoReN7okVO9EE2bXlj4fNppkOwj1oXVMeQrPboIp1msZ5BGrtdcRUm1pPp1EaApb vulvgG9MR61ufBt4D8Ig9GlXYh6sK+jy1Gv7nqQ33QMgv3y2NyNPSC+C1zsjG0qw QvjFs4M2G45bbQ8aqDo41LWA2DhIt5ux7THC1Ftmrm+E70XO46UohD9z/lKDYGb0 6hNX06ttu0CpTOqOGscVMl679DiMiZ9vFPMiTqM75teJ6GogtlaEsK9OJ7qlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlUa4+eyEp3bZe+FDNe6Z/l2y9WQwHwYDVR0j BBgwFoAUq1hyEYK06qj+zUrYgIzu9c3dGwYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NDEwZmE0My0wYmUzLTQ3MWEtOWMyMC04MTA0NjI5MWNhMTEvMC9BQjU4NzIxMTgy QjRFQUE4RkVDRDRBRDg4MDhDRUVGNUNEREQxQjA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUI1ODcyMTE4MkI0RUFBOEZFQ0Q0QUQ4ODA4Q0VFRjVDRERE MUIwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjQxMGZhNDMtMGJlMy00NzFhLTlj MjAtODEwNDYyOTFjYTExLzAvQUI1ODcyMTE4MkI0RUFBOEZFQ0Q0QUQ4ODA4Q0VF RjVDREREMUIwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL9NQ5KllLu16QzxD3FnjzfnbqALC6eEa3tM FSrMgbOpWK9mQ1Vpfd9RRCvHlcVS1N5PWC6BhQ1TQTiYeyvBULoZHPRMAWiKlZE5 rIqcFXYf8t4RCh6nihW0fFcIBFlq9rX6Y+JhBAWPqMBXrtZ9dh+c0G/l707AcELR VFY+IpeWqYpC+ozrsSeGmYKAwARrGJYIxvkUmjoC7I4W3q3oilg6I8VAt2KrwkHy ZgzgaHAwQVyAPzfue4xufNWnQMFVwWlc4YqapE6JwA7o8syKusoekZWQ+v1r/DzI rs++VDA/8uYt9WNNF9Ywx4c21E3ZhGUvmvqAKLYU+vzYEFLINMc= -----END CERTIFICATE-----Generated at Sat Apr 20 12:27:03 2024 by rpki-client on console-ams.rpki-client.org