$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.mft File: AC555447BA62C39107F16BF572F82A417F728DBF.mft (raw, json) Hash identifier: kgNl5GVbofaz4SHsouSTkM18c+SmLWUqDQZHRXUviZY= Subject key identifier: ED:7E:73:C9:70:F5:31:5D:BE:52:3D:8F:EF:07:C8:D9:C5:23:AD:81 Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF Certificate issuer: /CN=AC555447BA62C39107F16BF572F82A417F728DBF Certificate serial: 546B926E27B5A33631C6CC359BDF96CAFCFF419D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.mft Manifest number: 052A Signing time: Wed 17 Apr 2024 10:06:49 +0000 Manifest this update: Wed 17 Apr 2024 10:01:49 +0000 Manifest next update: Sat 20 Apr 2024 14:53:49 +0000 Files and hashes: 1: AS45493.roa (hash: LUAAO71mQwsLtRLWyoHb0w0ifRn30AFZP2ZxQ05wNSM=) 2: AS38482.roa (hash: sJmX4BJtBEA24zr2/KbNtfDUkvfnp1j2N9VP6NJOCTM=) 3: AS17451.roa (hash: 4TSK5OjBFFdStqDb3r9YXkNmSTFGRh6Zkp2HIVmDghc=) 4: AC555447BA62C39107F16BF572F82A417F728DBF.crl (hash: kcPO4kNErt7Gb82nqzqZAczltvlQ/25kBxPExR94pwc=) 5: AS38060.roa (hash: 5jA0xh/2xXIzVpC/CIPOCCViuLF7rR73fndYS1aZyX8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Apr 2024 14:53:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:6b:92:6e:27:b5:a3:36:31:c6:cc:35:9b:df:96:ca:fc:ff:41:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF Validity Not Before: Apr 17 10:01:49 2024 GMT Not After : Apr 20 14:53:49 2024 GMT Subject: CN=ED7E73C970F5315DBE523D8FEF07C8D9C523AD81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:0e:6f:f6:7e:ff:fc:90:76:8a:33:87:df:f3: 2d:e4:38:f9:e6:cc:fc:c5:f7:74:27:b2:f7:02:b6: 4e:db:01:55:02:45:19:8c:f4:92:6d:ac:07:b2:47: b9:56:a6:2e:f0:1a:54:64:b5:02:11:89:3a:72:8d: d5:6c:a5:53:d2:a5:bc:c6:24:ac:35:e7:45:4b:d3: 54:d3:02:3b:63:3e:7d:c3:8a:b7:a4:b2:6d:73:45: 0e:d3:76:79:1c:4c:ab:0a:ff:29:ba:22:b0:c4:92: 83:aa:ad:df:7a:45:c1:26:53:49:b0:e3:02:4a:0a: c5:5b:23:fb:b1:43:38:4e:96:bb:cc:5c:ef:02:2d: 5b:05:09:8c:e5:3f:fd:b2:b6:2e:07:51:10:4d:9f: 48:27:df:2e:7d:16:91:d4:fa:bd:67:ad:0a:36:8d: 1f:44:92:d5:c1:f6:4f:2e:b5:43:5a:65:7c:c1:c4: 56:97:43:96:49:e1:2e:1f:11:ff:26:c7:fb:e2:3f: a2:7c:1b:5e:72:73:e6:34:de:09:c3:d8:1e:e0:2c: 1f:88:ea:94:1f:62:40:88:d2:d8:41:9d:83:a8:f5: 87:04:81:28:81:c1:48:eb:68:d2:36:ee:90:6e:ea: d6:85:09:e3:76:d6:ec:36:fd:74:f6:ce:0a:47:f8: 50:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:7E:73:C9:70:F5:31:5D:BE:52:3D:8F:EF:07:C8:D9:C5:23:AD:81 X509v3 Authority Key Identifier: keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:34:f8:42:4b:7c:7c:f0:2f:af:d5:f2:fd:01:d9:45:74:e6: 1f:75:44:76:55:6f:41:c2:f9:9b:b4:81:d6:e4:da:2d:bf:6b: 0b:73:d4:97:0c:e2:aa:a1:13:5f:39:a4:17:9c:53:fa:89:e9: c4:92:19:01:0a:18:12:81:99:b4:77:bb:c2:0c:bf:3e:74:ba: c2:e5:2b:60:c0:40:d0:f9:6b:26:3a:4a:91:1a:66:4a:6f:84: dd:1a:a7:c0:cc:77:84:a5:92:1a:55:ae:cb:3e:c1:bc:56:de: 1e:fc:ab:29:8f:79:d1:84:ea:22:bd:0c:27:b0:92:e8:3a:86: 56:3e:fe:b4:2f:eb:75:e0:15:31:a2:7a:e1:0d:4c:d7:7d:f8: ac:6a:1f:19:70:e5:22:53:58:0e:4b:a7:75:d6:5c:9f:f6:da: 00:d9:27:5c:5e:13:f4:85:91:02:65:8b:d6:2f:08:f7:08:6c: 57:dd:3b:95:07:cd:a8:b4:01:78:65:0b:bd:fb:f2:61:a7:90: 41:15:34:27:5d:29:7b:75:e3:20:9d:be:44:52:3d:d9:ec:89: c8:a9:64:4c:ea:c0:e4:a5:2c:0e:3f:bf:07:eb:e6:f5:a0:cc: a4:20:35:6d:21:72:a3:fd:5f:02:4f:06:10:5f:7a:5e:9d:09: 46:e5:ce:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVGuSbie1ozYxxsw1m9+Wyvz/QZ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3 RjcyOERCRjAeFw0yNDA0MTcxMDAxNDlaFw0yNDA0MjAxNDUzNDlaMDMxMTAvBgNV BAMTKEVEN0U3M0M5NzBGNTMxNURCRTUyM0Q4RkVGMDdDOEQ5QzUyM0FEODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjDm/2fv/8kHaKM4ff8y3kOPnm zPzF93QnsvcCtk7bAVUCRRmM9JJtrAeyR7lWpi7wGlRktQIRiTpyjdVspVPSpbzG JKw150VL01TTAjtjPn3Direksm1zRQ7TdnkcTKsK/ym6IrDEkoOqrd96RcEmU0mw 4wJKCsVbI/uxQzhOlrvMXO8CLVsFCYzlP/2yti4HURBNn0gn3y59FpHU+r1nrQo2 jR9EktXB9k8utUNaZXzBxFaXQ5ZJ4S4fEf8mx/viP6J8G15yc+Y03gnD2B7gLB+I 6pQfYkCI0thBnYOo9YcEgSiBwUjraNI27pBu6taFCeN21uw2/XT2zgpH+FDRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7X5zyXD1MV2+Uj2P7wfI2cUjrYEwHwYDVR0j BBgwFoAUrFVUR7piw5EH8Wv1cvgqQX9yjb8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC9BQzU1NTQ0N0JB NjJDMzkxMDdGMTZCRjU3MkY4MkE0MTdGNzI4REJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3Rjcy OERCRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB NDE3RjcyOERCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIY0+EJLfHzwL6/V8v0B2UV05h91RHZVb0HC +Zu0gdbk2i2/awtz1JcM4qqhE185pBecU/qJ6cSSGQEKGBKBmbR3u8IMvz50usLl K2DAQND5ayY6SpEaZkpvhN0ap8DMd4SlkhpVrss+wbxW3h78qymPedGE6iK9DCew kug6hlY+/rQv63XgFTGieuENTNd9+KxqHxlw5SJTWA5Lp3XWXJ/22gDZJ1xeE/SF kQJli9YvCPcIbFfdO5UHzai0AXhlC7378mGnkEEVNCddKXt14yCdvkRSPdnsicip ZEzqwOSlLA4/vwfr5vWgzKQgNW0hcqP9XwJPBhBfel6dCUblzos= -----END CERTIFICATE-----Generated at Wed Apr 17 10:35:06 2024 by rpki-client on console-ams.rpki-client.org