$ rpki-client -vvf repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft File: 00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft (raw, json) Hash identifier: UQIiWXpcp/BaaijNNpHAwrBDIw2f9o663uOOb7zsjWs= Subject key identifier: E7:F5:12:49:50:B2:C3:3D:9B:1B:05:01:7B:6A:08:B9:6A:80:EE:48 Authority key identifier: 00:AC:65:E6:1E:49:13:26:8C:5D:0B:8A:FE:8C:7D:91:3B:68:6D:9F Certificate issuer: /CN=00AC65E61E4913268C5D0B8AFE8C7D913B686D9F Certificate serial: 529117FDB65017D9B565390DC3ED2AE8A0C108E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft Manifest number: 0426 Signing time: Sat 27 Apr 2024 22:10:39 +0000 Manifest this update: Sat 27 Apr 2024 22:05:39 +0000 Manifest next update: Wed 01 May 2024 04:55:39 +0000 Files and hashes: 1: 3130332e3131392e3131372e302f32342d3234203d3e20313337333738.roa (hash: Yh+hggoRXloDIAdbERmzb62xS1kVyjCTIppLxSwod5Y=) 2: 3130332e3131392e3131362e302f32342d3234203d3e20313337333738.roa (hash: /EKFOj0t8diKieUzMUvT1QgZFsDnosx01GQC6ERbJSY=) 3: 3130332e3131392e3131382e302f32342d3234203d3e20313337333738.roa (hash: 1ZFjPMO4zrh9Zt76YgZ65gqd6bQnhcwPkrV4zZZVkaw=) 4: 323430333a343334303a3a2f33322d3332203d3e20313337333738.roa (hash: 2BV3EyPfq3Gz4n47aIlvuKCYgncQwFtfKoJ0PKtbJeE=) 5: 3130332e3131392e3131392e302f32342d3234203d3e20313337333738.roa (hash: UkZqcP9RvZ0JJpdnBoOJb+tN3AB7DzIZMERn5ZQmK70=) 6: 00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.crl (hash: 7E51LNORmJ7cTJTVNQutrPLMmLYjzaOazibaMVL5Wj4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.crl rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Apr 2024 21:55:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:91:17:fd:b6:50:17:d9:b5:65:39:0d:c3:ed:2a:e8:a0:c1:08:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00AC65E61E4913268C5D0B8AFE8C7D913B686D9F Validity Not Before: Apr 27 22:05:39 2024 GMT Not After : May 1 04:55:39 2024 GMT Subject: CN=E7F5124950B2C33D9B1B05017B6A08B96A80EE48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f6:46:79:71:ce:24:df:87:5b:ff:c7:5c:7c: 2a:a3:ad:09:b6:c3:56:9e:29:55:f4:69:f8:3c:e4: 91:8e:d1:cd:6e:2b:a9:ee:a7:f2:fa:0b:8c:aa:6e: 4f:df:4b:bc:37:f1:ce:a6:df:27:8e:86:8c:79:2a: 01:3f:1f:da:15:08:3d:6e:37:ef:cf:22:80:a7:1d: 01:38:8d:c2:ec:45:5b:91:20:c0:92:f8:39:e1:37: 55:ef:0c:0c:8d:7f:e8:28:55:e6:91:25:5f:c7:77: 4d:9f:71:87:8d:e8:6a:d3:e3:56:b7:ce:e5:98:31: 10:56:ac:08:16:04:87:1b:91:7e:7d:24:53:48:47: 19:bb:1c:88:45:44:b5:0b:b3:e8:f6:1f:c3:90:71: 9b:9e:d0:87:76:2c:41:01:87:0b:0a:c8:5c:e2:78: 92:d3:63:08:f2:5e:25:3d:95:2f:b0:58:c8:d8:73: 54:19:99:36:3e:51:4d:c7:20:28:60:12:23:27:1a: c8:5a:24:01:d1:65:55:9f:69:1c:a8:94:dd:6c:31: c6:c5:1e:11:2f:bb:b6:1c:cb:a2:55:a8:0d:c5:e8: 60:d5:f4:17:85:71:25:81:8c:ea:61:72:6a:c0:a0: 75:6f:5c:e4:38:be:25:95:ef:ba:ab:a0:b1:05:a6: cd:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:F5:12:49:50:B2:C3:3D:9B:1B:05:01:7B:6A:08:B9:6A:80:EE:48 X509v3 Authority Key Identifier: keyid:00:AC:65:E6:1E:49:13:26:8C:5D:0B:8A:FE:8C:7D:91:3B:68:6D:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:48:5f:a5:2e:22:5f:70:bf:14:e0:20:e6:66:e7:a5:67:65: fd:a0:ea:c4:a1:a0:4f:6f:66:6a:c8:81:0a:43:3f:f2:ce:cd: 98:76:5e:d7:05:08:48:d6:fd:71:71:5f:df:91:96:cf:3a:2c: e4:02:ad:af:a8:ad:1d:ae:23:b5:f4:46:19:3c:c0:48:67:b8: 51:78:53:cb:11:73:f8:94:fd:a8:53:74:c0:0e:80:2d:06:d0: db:8f:eb:8e:ed:09:58:25:c2:d3:a2:51:50:f6:ab:75:f4:83: 2b:0c:8c:51:8d:79:72:06:51:0d:d9:c9:77:e5:0a:0f:6a:01: a9:fa:64:e0:3d:55:82:27:a9:9e:7a:cd:13:e0:49:96:ed:45: 89:6a:3d:ed:d9:86:7c:72:8d:b2:43:f1:a4:93:96:85:f6:45: 39:70:38:38:35:40:b5:9f:07:a2:c5:fb:24:f0:82:b2:43:29: fc:ba:f8:79:99:a6:b6:fb:59:7c:10:70:b0:54:ca:f1:85:5a: 3d:07:aa:03:03:ec:87:29:48:aa:68:2a:70:01:c4:0e:93:66: ba:29:50:4e:de:0b:d6:5c:52:3e:87:92:93:08:5a:c2:36:64: 8d:7f:b5:49:fe:64:23:f7:f9:45:1b:fc:1a:38:2d:e4:8b:7c: b0:7b:a9:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUpEX/bZQF9m1ZTkNw+0q6KDBCOEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBBQzY1RTYxRTQ5MTMyNjhDNUQwQjhBRkU4QzdEOTEz QjY4NkQ5RjAeFw0yNDA0MjcyMjA1MzlaFw0yNDA1MDEwNDU1MzlaMDMxMTAvBgNV BAMTKEU3RjUxMjQ5NTBCMkMzM0Q5QjFCMDUwMTdCNkEwOEI5NkE4MEVFNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX9kZ5cc4k34db/8dcfCqjrQm2 w1aeKVX0afg85JGO0c1uK6nup/L6C4yqbk/fS7w38c6m3yeOhox5KgE/H9oVCD1u N+/PIoCnHQE4jcLsRVuRIMCS+DnhN1XvDAyNf+goVeaRJV/Hd02fcYeN6GrT41a3 zuWYMRBWrAgWBIcbkX59JFNIRxm7HIhFRLULs+j2H8OQcZue0Id2LEEBhwsKyFzi eJLTYwjyXiU9lS+wWMjYc1QZmTY+UU3HIChgEiMnGshaJAHRZVWfaRyolN1sMcbF HhEvu7Ycy6JVqA3F6GDV9BeFcSWBjOphcmrAoHVvXOQ4viWV77qroLEFps3FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5/USSVCywz2bGwUBe2oIuWqA7kgwHwYDVR0j BBgwFoAUAKxl5h5JEyaMXQuK/ox9kTtobZ8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTg5NTBmMC0zYjE0LTRhNmQtYjMwZi03NTM3OWNiMmViY2UvMC8wMEFDNjVFNjFF NDkxMzI2OEM1RDBCOEFGRThDN0Q5MTNCNjg2RDlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDBBQzY1RTYxRTQ5MTMyNjhDNUQwQjhBRkU4QzdEOTEzQjY4 NkQ5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U4OTUwZjAtM2IxNC00YTZkLWIz MGYtNzUzNzljYjJlYmNlLzAvMDBBQzY1RTYxRTQ5MTMyNjhDNUQwQjhBRkU4QzdE OTEzQjY4NkQ5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAtIX6UuIl9wvxTgIOZm56VnZf2g6sShoE9v ZmrIgQpDP/LOzZh2XtcFCEjW/XFxX9+Rls86LOQCra+orR2uI7X0Rhk8wEhnuFF4 U8sRc/iU/ahTdMAOgC0G0NuP647tCVglwtOiUVD2q3X0gysMjFGNeXIGUQ3ZyXfl Cg9qAan6ZOA9VYInqZ56zRPgSZbtRYlqPe3ZhnxyjbJD8aSTloX2RTlwODg1QLWf B6LF+yTwgrJDKfy6+HmZprb7WXwQcLBUyvGFWj0HqgMD7IcpSKpoKnABxA6TZrop UE7eC9ZcUj6HkpMIWsI2ZI1/tUn+ZCP3+UUb/Bo4LeSLfLB7qcM= -----END CERTIFICATE-----Generated at Sat Apr 27 23:14:32 2024 by rpki-client on console-ams.rpki-client.org