$ rpki-client -vvf repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft File: 9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft (raw, json) Hash identifier: dyk98EMlFQdIskZF0Hg7hVQDYe7EoxXTvPQG/antSR4= Subject key identifier: A4:E7:D3:DD:34:70:36:11:5C:83:BA:E1:E1:60:71:C7:25:75:D3:CB Authority key identifier: 9F:6D:5D:56:49:D0:01:D2:B7:A3:37:8F:99:31:4A:99:2D:48:2E:4A Certificate issuer: /CN=9F6D5D5649D001D2B7A3378F99314A992D482E4A Certificate serial: 2918485DADC45AA5023D0FEF7BA4F64F44C6AEF4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F6D5D5649D001D2B7A3378F99314A992D482E4A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft Manifest number: 0429 Signing time: Thu 02 May 2024 00:30:01 +0000 Manifest this update: Thu 02 May 2024 00:25:01 +0000 Manifest next update: Sun 05 May 2024 08:26:01 +0000 Files and hashes: 1: 323030313a6466323a323130303a3a2f34382d3438203d3e20313336383231.roa (hash: ug52myYAauurbk/pemf4QMx4EMr955PPrR8O9s1hC0g=) 2: 9F6D5D5649D001D2B7A3378F99314A992D482E4A.crl (hash: eZnX3acYmmBKao75oaLb0wT6V8La5CjfhgH4qKHjTNI=) 3: 3130332e39382e3130342e302f32332d3234203d3e20313336383231.roa (hash: NHt6KUniZp5NZ5o+YLn1lZ8+zjnv5kf/uZtCUjWEk8U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.crl rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F6D5D5649D001D2B7A3378F99314A992D482E4A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 May 2024 08:18:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:18:48:5d:ad:c4:5a:a5:02:3d:0f:ef:7b:a4:f6:4f:44:c6:ae:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F6D5D5649D001D2B7A3378F99314A992D482E4A Validity Not Before: May 2 00:25:01 2024 GMT Not After : May 5 08:26:01 2024 GMT Subject: CN=A4E7D3DD347036115C83BAE1E16071C72575D3CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b3:b3:43:02:9c:5e:3a:00:aa:78:74:20:06: ab:19:1f:ec:1f:77:d9:63:07:63:d7:cb:67:70:24: 30:8d:c1:78:34:4d:79:b1:0f:47:f6:dc:17:e5:2a: c8:1e:36:30:80:4e:a1:6e:a2:1d:1d:6d:0f:71:e0: 3b:04:ba:05:44:89:6c:8c:32:3b:9a:87:22:0a:b1: 86:29:01:10:58:28:72:c5:6c:ce:db:ec:0d:9c:36: 1c:0c:ea:5c:e7:a7:b3:0d:07:e5:d1:00:10:59:9d: 8e:e8:40:fd:bd:5f:c6:0c:ab:26:2c:6a:96:ba:5c: ad:80:62:ac:bf:2a:d9:12:ca:d1:96:11:9b:46:47: 1a:72:da:bb:23:74:6e:50:88:4c:fb:a0:56:22:24: 62:4f:5e:86:31:3e:2a:04:d8:f4:2c:7f:9f:5c:ff: 54:71:b2:70:63:f7:49:26:27:60:a5:f4:f4:0d:b3: d5:e5:bc:1e:6e:09:23:74:ca:b8:37:bb:e0:a0:73: d4:b8:0e:fc:8a:72:c3:8e:6a:6b:b5:27:ed:f0:02: de:1e:9b:1c:50:c7:26:1c:bc:36:fe:f1:c6:f5:c0: 55:a7:5d:3e:d8:bd:67:6a:24:35:3f:3e:0c:68:9e: 81:4b:a8:11:d6:a1:16:25:25:1a:d0:7f:86:c6:17: 9f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:E7:D3:DD:34:70:36:11:5C:83:BA:E1:E1:60:71:C7:25:75:D3:CB X509v3 Authority Key Identifier: keyid:9F:6D:5D:56:49:D0:01:D2:B7:A3:37:8F:99:31:4A:99:2D:48:2E:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F6D5D5649D001D2B7A3378F99314A992D482E4A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fd3fc24-75a2-47f6-928e-4e9802b97085/0/9F6D5D5649D001D2B7A3378F99314A992D482E4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:b7:1c:20:46:a5:22:08:e9:0f:4e:27:20:4c:c8:1e:5b:15: b5:2b:a4:3a:f8:a7:56:d0:20:35:87:31:5f:63:a1:1b:d8:1c: f0:f6:3c:23:37:19:57:ba:6a:a0:81:b4:88:25:6e:54:53:55: 15:d9:00:75:4e:b0:c0:d4:c3:a9:6a:55:b3:cf:ea:15:9f:21: 1d:92:cc:00:e9:eb:b8:7b:bf:6d:4e:48:e7:bf:57:a7:5a:39: bd:ca:bb:07:61:d3:9c:b9:27:ef:09:59:0d:e9:9e:a6:e4:e5: 64:9d:37:89:ba:f9:97:71:ad:b9:6d:fd:6b:49:90:f1:1c:4e: 24:d5:66:bc:6d:31:eb:82:67:ac:9d:02:a0:75:b5:b0:e4:56: fe:a5:d5:21:2c:8a:40:27:5c:9c:9c:17:f0:ef:91:9c:80:54: 8e:04:9d:c5:4e:0e:4d:df:16:76:73:d8:94:2e:24:52:b1:9b: 63:6d:86:21:8d:c4:d5:84:9b:60:fb:0b:41:b1:d5:c0:df:75: f5:d4:67:46:bf:0b:e7:8e:88:e6:49:b1:09:2f:4f:e7:4b:fe: 13:ce:79:ed:b5:7d:cb:ba:3d:e6:ef:85:51:47:48:d8:54:af: 29:06:6f:c7:ca:72:9f:51:60:92:4f:88:f3:3e:0f:37:c6:a1: 91:b3:2e:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKRhIXa3EWqUCPQ/ve6T2T0TGrvQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY2RDVENTY0OUQwMDFEMkI3QTMzNzhGOTkzMTRBOTky RDQ4MkU0QTAeFw0yNDA1MDIwMDI1MDFaFw0yNDA1MDUwODI2MDFaMDMxMTAvBgNV BAMTKEE0RTdEM0REMzQ3MDM2MTE1QzgzQkFFMUUxNjA3MUM3MjU3NUQzQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYs7NDApxeOgCqeHQgBqsZH+wf d9ljB2PXy2dwJDCNwXg0TXmxD0f23BflKsgeNjCATqFuoh0dbQ9x4DsEugVEiWyM MjuahyIKsYYpARBYKHLFbM7b7A2cNhwM6lznp7MNB+XRABBZnY7oQP29X8YMqyYs apa6XK2AYqy/KtkSytGWEZtGRxpy2rsjdG5QiEz7oFYiJGJPXoYxPioE2PQsf59c /1RxsnBj90kmJ2Cl9PQNs9XlvB5uCSN0yrg3u+Cgc9S4DvyKcsOOamu1J+3wAt4e mxxQxyYcvDb+8cb1wFWnXT7YvWdqJDU/PgxonoFLqBHWoRYlJRrQf4bGF58vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpOfT3TRwNhFcg7rh4WBxxyV108swHwYDVR0j BBgwFoAUn21dVknQAdK3ozePmTFKmS1ILkowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZmQzZmMyNC03NWEyLTQ3ZjYtOTI4ZS00ZTk4MDJiOTcwODUvMC85RjZENUQ1NjQ5 RDAwMUQyQjdBMzM3OEY5OTMxNEE5OTJENDgyRTRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY2RDVENTY0OUQwMDFEMkI3QTMzNzhGOTkzMTRBOTkyRDQ4 MkU0QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmZkM2ZjMjQtNzVhMi00N2Y2LTky OGUtNGU5ODAyYjk3MDg1LzAvOUY2RDVENTY0OUQwMDFEMkI3QTMzNzhGOTkzMTRB OTkyRDQ4MkU0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEi3HCBGpSII6Q9OJyBMyB5bFbUrpDr4p1bQ IDWHMV9joRvYHPD2PCM3GVe6aqCBtIglblRTVRXZAHVOsMDUw6lqVbPP6hWfIR2S zADp67h7v21OSOe/V6daOb3Kuwdh05y5J+8JWQ3pnqbk5WSdN4m6+Zdxrblt/WtJ kPEcTiTVZrxtMeuCZ6ydAqB1tbDkVv6l1SEsikAnXJycF/DvkZyAVI4EncVODk3f FnZz2JQuJFKxm2NthiGNxNWEm2D7C0Gx1cDfdfXUZ0a/C+eOiOZJsQkvT+dL/hPO ee21fcu6PebvhVFHSNhUrykGb8fKcp9RYJJPiPM+DzfGoZGzLnY= -----END CERTIFICATE-----Generated at Thu May 2 03:10:51 2024 by rpki-client on console-ams.rpki-client.org