$ rpki-client -vvf repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft File: A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft (raw, json) Hash identifier: 9LJpcy62iWiCf8c3tODKksQJfRENExQU90T9SSoTYwo= Subject key identifier: D9:56:85:D5:ED:2A:A0:7C:B8:63:F2:04:06:CF:6A:F6:FD:B3:E5:04 Authority key identifier: A0:8B:1B:14:AA:5B:65:12:42:4E:DF:86:50:A9:84:94:2F:27:A4:EF Certificate issuer: /CN=A08B1B14AA5B6512424EDF8650A984942F27A4EF Certificate serial: 4FC51974D40FC1A86B9378E72035EB452F9B7205 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A08B1B14AA5B6512424EDF8650A984942F27A4EF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft Manifest number: 03C0 Signing time: Wed 01 May 2024 10:11:28 +0000 Manifest this update: Wed 01 May 2024 10:06:28 +0000 Manifest next update: Sat 04 May 2024 16:32:28 +0000 Files and hashes: 1: 3130332e3130302e3234362e302f32342d3234203d3e20313336383432.roa (hash: HlgbW9gkz13icnKW2d2xBb3AX+CGjyH3NCrEPNHBPP4=) 2: 3130332e3130302e3234372e302f32342d3234203d3e20313336383432.roa (hash: uqCh8mmq1SyOB/prekWD5dH02WBMnbkB0MskyKy2aO8=) 3: A08B1B14AA5B6512424EDF8650A984942F27A4EF.crl (hash: AKtIGKlzGC8Lm2/W0pii4/DWMa9Akesb2mLCUsVsasI=) 4: 323430353a6263303a3a2f33332d3438203d3e20313336383432.roa (hash: vmPt8l0J5Y6aAaBkJCpUnRFWAMU/e2Oat6QgsrAej24=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.crl rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A08B1B14AA5B6512424EDF8650A984942F27A4EF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 15:16:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:c5:19:74:d4:0f:c1:a8:6b:93:78:e7:20:35:eb:45:2f:9b:72:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A08B1B14AA5B6512424EDF8650A984942F27A4EF Validity Not Before: May 1 10:06:28 2024 GMT Not After : May 4 16:32:28 2024 GMT Subject: CN=D95685D5ED2AA07CB863F20406CF6AF6FDB3E504 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3a:1d:46:71:3f:5f:1f:65:38:a6:e1:cf:a3: b7:7e:81:b0:0a:76:9e:5a:61:d3:aa:b4:ed:62:8e: 0c:ea:cd:4d:24:cb:41:6a:d8:f1:88:48:7f:08:df: 90:bd:68:d9:c8:eb:1b:bd:98:cc:1b:b4:ad:4c:59: 0c:a4:09:5e:fe:fa:5b:11:68:d0:74:ac:45:c4:64: 3a:a6:2b:7e:76:3e:11:ca:23:a8:79:eb:15:e4:1c: a3:4b:3e:db:0e:77:1f:76:47:b4:2c:84:5b:95:51: 48:0c:62:d5:35:6c:76:cb:22:ea:ea:8b:d6:16:08: c2:73:a6:3a:7a:b8:ed:9e:13:35:4d:97:6d:1e:e9: db:7e:b0:c1:cf:15:f6:d6:ff:5c:f9:58:ad:1b:4e: 28:f0:38:7f:ef:a1:10:a3:88:62:fd:99:41:86:36: 91:bc:85:4e:5a:70:91:aa:22:5e:c3:67:f5:e2:08: 2e:06:0f:32:df:d9:1e:4d:81:28:5a:33:46:4c:e6: a7:97:7f:91:63:62:51:e1:ce:a8:95:bb:4f:dc:6a: a5:06:24:2a:0e:98:97:cc:9e:51:1d:51:5c:2c:7b: 91:1a:04:9d:ce:d5:52:e1:7e:9a:3b:d6:62:14:f1: 78:ae:df:5c:36:de:ee:7c:f3:c0:7d:bd:e4:63:f9: b8:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:56:85:D5:ED:2A:A0:7C:B8:63:F2:04:06:CF:6A:F6:FD:B3:E5:04 X509v3 Authority Key Identifier: keyid:A0:8B:1B:14:AA:5B:65:12:42:4E:DF:86:50:A9:84:94:2F:27:A4:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A08B1B14AA5B6512424EDF8650A984942F27A4EF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e1:1e:67:1f:3c:e9:9e:8a:14:67:d8:e6:89:73:45:d1:b7:36: ae:94:55:db:ff:b7:55:70:00:5c:c7:6a:31:f0:3c:af:8a:32: 11:b5:de:80:9c:9c:36:32:85:c5:ba:54:7d:e9:8e:22:97:ec: 26:df:fb:ff:83:b1:4f:eb:88:f6:5e:a6:86:21:79:d9:58:48: 38:f1:a3:ca:e7:5b:a5:a0:33:4e:1e:2d:20:63:ff:ff:fe:da: 01:b7:b2:3e:e5:9d:6f:6b:93:a7:73:f7:34:d8:78:1d:b5:a0: e3:32:a4:1c:8d:07:65:b1:18:89:22:a9:be:ea:c7:c4:73:f8: 2b:19:b9:53:75:75:26:fc:2d:e3:3b:e2:66:3a:8d:b5:84:6f: e0:f6:a2:6d:67:0d:0d:62:dc:b0:4f:f2:48:23:68:d4:39:df: 65:6f:e8:cf:9f:80:42:7e:cc:cd:61:18:2b:cc:35:cd:cd:75: 3c:7f:67:7b:e0:0c:c0:3a:3d:d9:6f:f9:43:06:20:67:b4:61: 1b:81:f3:a0:1d:71:3e:e1:8c:bb:6d:67:00:40:93:6c:81:fa: 75:19:cd:9c:d0:34:02:3e:b9:8f:5c:c6:f0:90:93:a2:00:d2: a1:e1:1d:1e:2d:b9:fc:ee:dc:87:b5:0b:7d:fd:ea:ce:b7:1e: de:b1:ec:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT8UZdNQPwahrk3jnIDXrRS+bcgUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTA4QjFCMTRBQTVCNjUxMjQyNEVERjg2NTBBOTg0OTQy RjI3QTRFRjAeFw0yNDA1MDExMDA2MjhaFw0yNDA1MDQxNjMyMjhaMDMxMTAvBgNV BAMTKEQ5NTY4NUQ1RUQyQUEwN0NCODYzRjIwNDA2Q0Y2QUY2RkRCM0U1MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjOh1GcT9fH2U4puHPo7d+gbAK dp5aYdOqtO1ijgzqzU0ky0Fq2PGISH8I35C9aNnI6xu9mMwbtK1MWQykCV7++lsR aNB0rEXEZDqmK352PhHKI6h56xXkHKNLPtsOdx92R7QshFuVUUgMYtU1bHbLIurq i9YWCMJzpjp6uO2eEzVNl20e6dt+sMHPFfbW/1z5WK0bTijwOH/voRCjiGL9mUGG NpG8hU5acJGqIl7DZ/XiCC4GDzLf2R5NgShaM0ZM5qeXf5FjYlHhzqiVu0/caqUG JCoOmJfMnlEdUVwse5EaBJ3O1VLhfpo71mIU8Xiu31w23u5888B9veRj+biLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2VaF1e0qoHy4Y/IEBs9q9v2z5QQwHwYDVR0j BBgwFoAUoIsbFKpbZRJCTt+GUKmElC8npO8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTk3YmNmNC1lMWFhLTQ3ZDYtYmRlNi0yZTY2N2I5ZDYxMzQvMC9BMDhCMUIxNEFB NUI2NTEyNDI0RURGODY1MEE5ODQ5NDJGMjdBNEVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTA4QjFCMTRBQTVCNjUxMjQyNEVERjg2NTBBOTg0OTQyRjI3 QTRFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE5N2JjZjQtZTFhYS00N2Q2LWJk ZTYtMmU2NjdiOWQ2MTM0LzAvQTA4QjFCMTRBQTVCNjUxMjQyNEVERjg2NTBBOTg0 OTQyRjI3QTRFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOEeZx886Z6KFGfY5olzRdG3Nq6UVdv/t1Vw AFzHajHwPK+KMhG13oCcnDYyhcW6VH3pjiKX7Cbf+/+DsU/riPZepoYhedlYSDjx o8rnW6WgM04eLSBj///+2gG3sj7lnW9rk6dz9zTYeB21oOMypByNB2WxGIkiqb7q x8Rz+CsZuVN1dSb8LeM74mY6jbWEb+D2om1nDQ1i3LBP8kgjaNQ532Vv6M+fgEJ+ zM1hGCvMNc3NdTx/Z3vgDMA6Pdlv+UMGIGe0YRuB86AdcT7hjLttZwBAk2yB+nUZ zZzQNAI+uY9cxvCQk6IA0qHhHR4tufzu3Ie1C3396s63Ht6x7E8= -----END CERTIFICATE-----Generated at Wed May 1 13:28:04 2024 by rpki-client on console-fra.rpki-client.org