$ rpki-client -vvf repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.mft File: 10CA1776EFA8AF35292E76AE2B09C23427C191A6.mft (raw, json) Hash identifier: jlutE44nOON38V+pBrxvhX50iOeiqsCV1UGjD5aUV74= Subject key identifier: 43:B8:2A:47:37:E7:DB:92:53:28:D1:63:9B:63:E0:DD:7A:93:AA:AE Authority key identifier: 10:CA:17:76:EF:A8:AF:35:29:2E:76:AE:2B:09:C2:34:27:C1:91:A6 Certificate issuer: /CN=10CA1776EFA8AF35292E76AE2B09C23427C191A6 Certificate serial: 22C7CF0BB9E28CD9107882FE39E9E63FE1FA118B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.mft Manifest number: 0424 Signing time: Tue 30 Apr 2024 05:50:49 +0000 Manifest this update: Tue 30 Apr 2024 05:45:49 +0000 Manifest next update: Fri 03 May 2024 09:27:49 +0000 Files and hashes: 1: 3130332e32382e3134392e302f32342d3234203d3e203538343737.roa (hash: reN04t0gV2lp+6zZN5d0RWMbvDY2OURdiLu4ml495SA=) 2: 34352e36342e39392e302f32342d3234203d3e203538343737.roa (hash: 3c5Ja4TgTzrAAShWBJGTlNg+76vMnJ51J59sbambI7E=) 3: 3130332e32382e3134382e302f32342d3234203d3e203538343737.roa (hash: U3o9BQeYChXJ+0vmQJSkGGv7NcvxQseEIi+/CE0Bl/Q=) 4: 34352e36342e39372e302f32342d3234203d3e20313335333630.roa (hash: yaMOQE+GIE5dBL7kDlXQjcbuyQ2t5GddvDcBn6rZ/h4=) 5: 10CA1776EFA8AF35292E76AE2B09C23427C191A6.crl (hash: t4V6T2rc0o18SyCWwln0Pq8bQezKtngsnXnCUdnF4bk=) 6: 3130332e33312e3235312e302f32342d3234203d3e203538343737.roa (hash: 0IeURkURCpWgS6uNMT/joXSCdMH85OIKxL2ZLMj1Iws=) 7: 3130332e33312e3235302e302f32342d3234203d3e203538343737.roa (hash: J9RyaaTNCRmU97L0q9iRAICyoIS0qwuYrWC5xmDY390=) 8: 323030313a6466303a3237333a3a2f34382d3438203d3e203538343737.roa (hash: Iok7hRcXztwp7EYcC+amZvIxSAW4YSXF50wFcAjVtJU=) 9: 34352e36342e39362e302f32342d3234203d3e203538343737.roa (hash: CVdXRKY+HaSnbV209mW/YevCbF0J4nrt8WHxJ6sG1GE=) 10: 34352e36342e39382e302f32342d3234203d3e203538343737.roa (hash: 0vpdE6DHegrqNT+/Qsn3DBQqx5M0mPohxF+mKaNGZ3U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.crl rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 04:41:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:c7:cf:0b:b9:e2:8c:d9:10:78:82:fe:39:e9:e6:3f:e1:fa:11:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10CA1776EFA8AF35292E76AE2B09C23427C191A6 Validity Not Before: Apr 30 05:45:49 2024 GMT Not After : May 3 09:27:49 2024 GMT Subject: CN=43B82A4737E7DB925328D1639B63E0DD7A93AAAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:57:3d:5b:e8:55:df:7e:4f:1e:13:49:c2:e2: 41:a5:cc:e3:79:55:5a:e9:34:82:6a:e1:1d:b0:09: 48:40:75:be:5c:29:a5:1a:65:41:ab:6c:18:1c:11: e9:67:b0:db:9e:de:87:1d:65:58:8a:23:3a:00:51: bf:3a:c8:f2:63:94:c3:1a:2a:74:30:eb:01:82:54: 27:d6:05:f3:2e:cc:54:31:0c:ca:14:da:80:47:93: 08:91:b6:61:88:14:6a:23:5c:32:27:22:e6:01:6c: 7b:d2:33:c2:fb:35:ac:57:fa:34:a6:38:65:ab:dd: 56:ea:6f:79:25:34:3f:f7:53:4c:e4:1e:20:d6:4b: 71:99:12:67:ec:be:a0:20:bf:ce:8c:f6:cb:41:d3: 34:af:4d:49:9e:b7:5c:28:e4:f8:e2:e9:8d:e9:3e: 7e:3e:e7:dc:a3:15:4e:0b:43:bc:c3:a3:3d:c7:25: 09:e5:64:0a:b9:cb:ba:a2:d8:b5:3f:fc:7e:83:b4: aa:f2:b6:90:9c:8e:e7:fb:e5:52:b5:c8:55:51:ad: e2:0c:ca:69:36:60:53:19:5f:ba:59:83:0a:a9:76: 5f:af:e6:cb:80:68:f1:82:3e:ca:c1:3b:5f:8f:dc: 62:27:8e:0d:84:7f:fd:4c:de:c0:a4:a9:59:06:53: 50:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:B8:2A:47:37:E7:DB:92:53:28:D1:63:9B:63:E0:DD:7A:93:AA:AE X509v3 Authority Key Identifier: keyid:10:CA:17:76:EF:A8:AF:35:29:2E:76:AE:2B:09:C2:34:27:C1:91:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:5a:c4:29:93:17:1c:c2:be:97:d1:ba:69:f4:81:27:22:9d: 36:4b:e8:27:70:a8:5a:98:a0:04:66:f2:76:54:0f:16:c3:89: fd:68:55:79:68:42:2a:18:2e:93:7b:fd:8c:e7:35:12:f7:6d: 8f:05:8e:72:b2:cd:20:8a:42:38:94:27:78:ea:be:b4:35:47: 2b:f6:6f:65:4b:57:68:9a:b9:7f:5b:dd:0c:7c:bd:49:38:1a: 68:f7:5e:5b:cd:6f:c0:57:b3:04:36:98:b8:fd:54:ae:3e:94: be:61:5f:6d:77:c7:91:aa:02:ad:11:88:b1:1c:d5:f7:60:99: 7f:4b:bf:d3:4e:1e:1e:ef:3c:6c:fe:68:a5:03:d0:d7:31:c0: f1:14:81:a8:df:85:24:1b:97:b5:73:b2:6f:29:df:15:83:e2: 88:d1:95:df:35:55:9d:ff:83:e7:51:d7:4f:9c:9b:a8:33:02: f3:7e:11:4c:2a:1a:48:b9:1d:e6:31:0e:e2:eb:41:e7:9a:be: f5:0c:c3:ce:87:fe:3c:01:70:76:9e:6f:34:c1:91:64:da:65: 74:34:01:1b:39:a4:58:38:53:78:e7:be:62:c6:60:d3:39:87: 62:2d:7c:36:7c:ad:43:83:28:58:5c:5e:f1:fc:fb:38:90:cd: cb:c8:d0:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIsfPC7nijNkQeIL+OenmP+H6EYswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBDQTE3NzZFRkE4QUYzNTI5MkU3NkFFMkIwOUMyMzQy N0MxOTFBNjAeFw0yNDA0MzAwNTQ1NDlaFw0yNDA1MDMwOTI3NDlaMDMxMTAvBgNV BAMTKDQzQjgyQTQ3MzdFN0RCOTI1MzI4RDE2MzlCNjNFMEREN0E5M0FBQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3Vz1b6FXffk8eE0nC4kGlzON5 VVrpNIJq4R2wCUhAdb5cKaUaZUGrbBgcEelnsNue3ocdZViKIzoAUb86yPJjlMMa KnQw6wGCVCfWBfMuzFQxDMoU2oBHkwiRtmGIFGojXDInIuYBbHvSM8L7NaxX+jSm OGWr3Vbqb3klND/3U0zkHiDWS3GZEmfsvqAgv86M9stB0zSvTUmet1wo5Pji6Y3p Pn4+59yjFU4LQ7zDoz3HJQnlZAq5y7qi2LU//H6DtKrytpCcjuf75VK1yFVRreIM ymk2YFMZX7pZgwqpdl+v5suAaPGCPsrBO1+P3GInjg2Ef/1M3sCkqVkGU1D3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ7gqRzfn25JTKNFjm2Pg3XqTqq4wHwYDVR0j BBgwFoAUEMoXdu+orzUpLnauKwnCNCfBkaYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmM2YWEwMy0xYjRkLTQzOGUtYTlmMy1lZmVhYWU2YjA5MjEvMC8xMENBMTc3NkVG QThBRjM1MjkyRTc2QUUyQjA5QzIzNDI3QzE5MUE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBDQTE3NzZFRkE4QUYzNTI5MkU3NkFFMkIwOUMyMzQyN0Mx OTFBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJjNmFhMDMtMWI0ZC00MzhlLWE5 ZjMtZWZlYWFlNmIwOTIxLzAvMTBDQTE3NzZFRkE4QUYzNTI5MkU3NkFFMkIwOUMy MzQyN0MxOTFBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC5axCmTFxzCvpfRumn0gScinTZL6CdwqFqY oARm8nZUDxbDif1oVXloQioYLpN7/YznNRL3bY8FjnKyzSCKQjiUJ3jqvrQ1Ryv2 b2VLV2iauX9b3Qx8vUk4Gmj3XlvNb8BXswQ2mLj9VK4+lL5hX213x5GqAq0RiLEc 1fdgmX9Lv9NOHh7vPGz+aKUD0NcxwPEUgajfhSQbl7Vzsm8p3xWD4ojRld81VZ3/ g+dR10+cm6gzAvN+EUwqGki5HeYxDuLrQeeavvUMw86H/jwBcHaebzTBkWTaZXQ0 ARs5pFg4U3jnvmLGYNM5h2ItfDZ8rUODKFhcXvH8+ziQzcvI0B8= -----END CERTIFICATE-----Generated at Tue Apr 30 07:33:40 2024 by rpki-client on console-fra.rpki-client.org