$ rpki-client -vvf repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft File: 42CD38BF795E0099BD3E143DD8383778ADEAE850.mft (raw, json) Hash identifier: Qpn0DuyqOdBwNQcodoDTL2wLmojDXfMeKXstEYho8kw= Subject key identifier: 18:32:8E:DF:37:0C:60:00:7D:54:EC:5D:0B:E5:62:02:A7:96:B2:AD Authority key identifier: 42:CD:38:BF:79:5E:00:99:BD:3E:14:3D:D8:38:37:78:AD:EA:E8:50 Certificate issuer: /CN=42CD38BF795E0099BD3E143DD8383778ADEAE850 Certificate serial: 1BC6B25DD654FF682B2C8E134C5619100DA6D052 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CD38BF795E0099BD3E143DD8383778ADEAE850.cer Subject info access: rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft Manifest number: 0400 Signing time: Sun 19 May 2024 16:21:38 +0000 Manifest this update: Sun 19 May 2024 16:16:38 +0000 Manifest next update: Thu 23 May 2024 01:54:38 +0000 Files and hashes: 1: 42CD38BF795E0099BD3E143DD8383778ADEAE850.crl (hash: HbO/oSJxo+bUhwM6VotMEeveFbpVwIc5npBGQxXvhpw=) 2: 3130332e3135382e39362e302f32342d3234203d3e20313431313330.roa (hash: ZjQFdpco2N0/KeIs/epUGzod3br0O3SVJCGHi6x4Sgc=) 3: 3130332e3135382e39372e302f32342d3234203d3e20313431313330.roa (hash: u1hSAWnz5SqRmBFSSS4zIzFdhz0IY59ri1eW50looD4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.crl rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CD38BF795E0099BD3E143DD8383778ADEAE850.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 19:53:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:c6:b2:5d:d6:54:ff:68:2b:2c:8e:13:4c:56:19:10:0d:a6:d0:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42CD38BF795E0099BD3E143DD8383778ADEAE850 Validity Not Before: May 19 16:16:38 2024 GMT Not After : May 23 01:54:38 2024 GMT Subject: CN=18328EDF370C60007D54EC5D0BE56202A796B2AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d9:c9:c8:ca:71:a0:97:59:1a:8a:23:bc:1b: 2e:31:aa:42:5a:e1:51:1b:e8:37:a7:be:65:d8:58: 99:bb:c3:22:35:ed:c1:a3:1f:40:00:e7:21:5e:87: a4:fb:c9:78:80:43:52:e6:a8:01:e2:96:d6:4f:7a: ea:f9:15:f0:46:6e:c2:ff:22:e8:60:73:ad:ed:7f: 41:06:e7:b4:c8:42:27:5b:63:8e:5f:05:9b:cc:d3: 02:97:b5:c8:b4:4e:81:28:da:20:84:1f:0d:99:dc: 56:50:d0:cc:7b:eb:25:51:a7:d8:d5:d2:09:88:ba: 93:a1:98:4f:cd:65:30:c2:b7:68:e7:45:3a:fc:a7: 5e:1c:30:02:6c:ad:f0:f2:34:ce:d3:7d:4e:55:94: d2:97:b3:c2:f5:be:7c:41:57:a0:e5:f6:05:01:a7: 85:00:19:9b:20:7c:3d:bd:81:d1:32:d1:46:82:77: a0:09:76:19:c0:08:26:84:c5:e3:f2:21:f6:42:5e: bf:4e:45:8a:31:c6:a6:67:6e:60:d6:20:59:3f:5a: 3b:59:d6:bb:e4:c2:33:bb:8b:5a:64:0e:ac:06:76: 2d:38:c4:18:b0:b8:99:2d:5c:85:36:02:e4:43:aa: b2:85:40:15:8f:1c:7f:23:e6:16:5b:1a:02:ad:b4: 28:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:32:8E:DF:37:0C:60:00:7D:54:EC:5D:0B:E5:62:02:A7:96:B2:AD X509v3 Authority Key Identifier: keyid:42:CD:38:BF:79:5E:00:99:BD:3E:14:3D:D8:38:37:78:AD:EA:E8:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CD38BF795E0099BD3E143DD8383778ADEAE850.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:15:42:9a:02:37:79:4a:31:f8:ec:37:34:be:b2:a5:35:50: 8d:95:5a:f2:71:d5:27:ee:38:ec:97:ab:e3:c6:c3:20:e5:14: 8e:09:c8:a6:86:e7:02:ee:2c:19:fa:2e:77:e2:6e:dc:2c:a2: c5:23:5d:b6:7b:f0:ff:a4:81:cd:fe:ee:e1:a2:21:0f:9e:30: 7d:1a:b7:0f:2c:53:65:5e:be:90:6a:6a:8d:73:e9:b0:2d:52: f1:19:d2:be:07:2c:9b:29:92:91:1d:1d:c6:88:b9:da:b0:eb: ac:09:fe:76:fb:42:ec:94:89:bd:8d:80:3e:1f:20:27:7b:c5: 6a:84:bd:2c:7e:cc:66:06:60:22:0c:36:6d:e7:45:65:7a:e7: 4a:f1:de:31:b7:c0:a7:f3:e6:2e:f9:72:4f:12:22:30:01:05: 6a:fb:8d:01:f7:f5:2f:d1:a8:24:35:59:61:a1:2f:c5:49:e2: 0c:81:6b:56:ce:a5:ac:80:27:b3:9a:70:9f:d9:3f:a7:bc:86: ef:8f:97:cd:67:05:fb:4a:5f:21:dc:46:5e:e0:4a:75:b3:03: 09:e3:13:b3:04:02:9d:71:37:d6:22:30:86:12:cc:8c:32:71: 11:21:8c:58:1f:af:07:da:07:7f:08:8d:f4:d3:58:32:fc:54: 11:36:3b:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG8ayXdZU/2grLI4TTFYZEA2m0FIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJDRDM4QkY3OTVFMDA5OUJEM0UxNDNERDgzODM3NzhB REVBRTg1MDAeFw0yNDA1MTkxNjE2MzhaFw0yNDA1MjMwMTU0MzhaMDMxMTAvBgNV BAMTKDE4MzI4RURGMzcwQzYwMDA3RDU0RUM1RDBCRTU2MjAyQTc5NkIyQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn2cnIynGgl1kaiiO8Gy4xqkJa 4VEb6DenvmXYWJm7wyI17cGjH0AA5yFeh6T7yXiAQ1LmqAHiltZPeur5FfBGbsL/ Iuhgc63tf0EG57TIQidbY45fBZvM0wKXtci0ToEo2iCEHw2Z3FZQ0Mx76yVRp9jV 0gmIupOhmE/NZTDCt2jnRTr8p14cMAJsrfDyNM7TfU5VlNKXs8L1vnxBV6Dl9gUB p4UAGZsgfD29gdEy0UaCd6AJdhnACCaExePyIfZCXr9ORYoxxqZnbmDWIFk/WjtZ 1rvkwjO7i1pkDqwGdi04xBiwuJktXIU2AuRDqrKFQBWPHH8j5hZbGgKttCibAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGDKO3zcMYAB9VOxdC+ViAqeWsq0wHwYDVR0j BBgwFoAUQs04v3leAJm9PhQ92Dg3eK3q6FAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTI5MjkxMS1kYTdkLTQ2MzYtYjE1My0wMmE0YjY2MjA1YjUvMC80MkNEMzhCRjc5 NUUwMDk5QkQzRTE0M0REODM4Mzc3OEFERUFFODUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDJDRDM4QkY3OTVFMDA5OUJEM0UxNDNERDgzODM3NzhBREVB RTg1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTEyOTI5MTEtZGE3ZC00NjM2LWIx NTMtMDJhNGI2NjIwNWI1LzAvNDJDRDM4QkY3OTVFMDA5OUJEM0UxNDNERDgzODM3 NzhBREVBRTg1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACkVQpoCN3lKMfjsNzS+sqU1UI2VWvJx1Sfu OOyXq+PGwyDlFI4JyKaG5wLuLBn6LnfibtwsosUjXbZ78P+kgc3+7uGiIQ+eMH0a tw8sU2VevpBqao1z6bAtUvEZ0r4HLJspkpEdHcaIudqw66wJ/nb7QuyUib2NgD4f ICd7xWqEvSx+zGYGYCIMNm3nRWV650rx3jG3wKfz5i75ck8SIjABBWr7jQH39S/R qCQ1WWGhL8VJ4gyBa1bOpayAJ7OacJ/ZP6e8hu+Pl81nBftKXyHcRl7gSnWzAwnj E7MEAp1xN9YiMIYSzIwycREhjFgfrwfaB38IjfTTWDL8VBE2O+A= -----END CERTIFICATE-----Generated at Sun May 19 17:04:58 2024 by rpki-client on console-ams.rpki-client.org