$ rpki-client -vvf repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.mft File: 1095EA78703826ACF5FA2241EB2B1B66A2C4485A.mft (raw, json) Hash identifier: +bDZm7qYs2YEEcbB2SzSN7cHzV+rmlOrC7bXfd3Y3DI= Subject key identifier: 06:4D:0D:23:E5:03:95:C1:AC:5F:2F:DB:28:AC:08:23:BE:BE:8E:50 Authority key identifier: 10:95:EA:78:70:38:26:AC:F5:FA:22:41:EB:2B:1B:66:A2:C4:48:5A Certificate issuer: /CN=1095EA78703826ACF5FA2241EB2B1B66A2C4485A Certificate serial: 79EBC0266C4FA60BEE034ADAAC9EF718E55E40E4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.mft Manifest number: 0428 Signing time: Wed 01 May 2024 19:22:38 +0000 Manifest this update: Wed 01 May 2024 19:17:38 +0000 Manifest next update: Sun 05 May 2024 04:56:38 +0000 Files and hashes: 1: 1095EA78703826ACF5FA2241EB2B1B66A2C4485A.crl (hash: mFoIfZo5CkgAn6GEmFQ/X7Os/iV0cS0MR1kTrlNbd5o=) 2: 3130332e3231342e3131322e302f32332d3234203d3e20313336303532.roa (hash: gGZP+rpRJYoNqx6hBHbvNYirWhhUIWGaIEesRlltJc0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.crl rsync://repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 22:45:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:eb:c0:26:6c:4f:a6:0b:ee:03:4a:da:ac:9e:f7:18:e5:5e:40:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1095EA78703826ACF5FA2241EB2B1B66A2C4485A Validity Not Before: May 1 19:17:38 2024 GMT Not After : May 5 04:56:38 2024 GMT Subject: CN=064D0D23E50395C1AC5F2FDB28AC0823BEBE8E50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:8a:d5:54:d0:61:63:15:f3:06:6f:d9:72:ca: a9:e4:07:b3:a7:ce:46:df:04:90:64:38:73:6f:8c: 66:b2:a2:c8:cd:77:32:df:0d:80:fc:9b:15:73:2c: cf:e3:87:74:10:c8:79:60:88:8a:6c:30:2e:58:8c: 15:f3:7d:26:ea:76:65:8c:74:2c:e7:05:3a:51:87: 6e:b2:49:60:43:dd:a3:58:ad:ec:72:b0:0f:39:14: 63:9b:c5:2a:5d:ae:ea:0b:90:15:0c:16:61:e8:7a: d4:00:8b:01:40:53:74:53:40:25:eb:34:21:54:13: ef:84:98:bc:eb:8f:c5:dc:99:53:06:a5:ed:f1:a9: e4:2f:ec:fb:42:7f:0d:8c:1f:84:46:5f:9b:d5:7a: 85:ba:15:09:da:87:2b:6e:e3:39:8e:46:5f:64:31: 0a:9f:97:15:a4:fb:eb:32:cd:aa:75:c2:cc:6f:e7: 58:c0:47:d6:09:57:7d:96:85:5e:1d:cc:fd:b2:52: 8b:00:d0:62:bf:2c:cb:3f:2b:30:d1:65:8e:0b:d9: bc:49:d5:bc:69:93:b8:12:43:58:95:cb:c2:9b:84: 2e:85:6b:21:ea:ff:54:44:1c:71:56:a4:85:22:18: 1a:2b:cf:8c:d8:78:0b:1e:b5:62:9f:46:60:19:b7: 5d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:4D:0D:23:E5:03:95:C1:AC:5F:2F:DB:28:AC:08:23:BE:BE:8E:50 X509v3 Authority Key Identifier: keyid:10:95:EA:78:70:38:26:AC:F5:FA:22:41:EB:2B:1B:66:A2:C4:48:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:ee:e0:96:e5:9a:dd:4f:fc:41:b5:9e:06:b8:0c:18:0a:38: 71:6d:84:60:97:54:0d:c4:c5:29:40:39:dd:e3:5d:2d:c1:f2: 6b:11:74:75:50:a4:67:72:81:af:8a:68:5e:e4:aa:c6:21:6b: fe:f7:03:93:b9:d7:aa:f5:77:52:00:84:85:2a:96:b7:87:f1: b5:c1:5a:53:a3:05:3d:8f:21:38:cc:05:6a:19:55:bb:c6:3c: f7:c3:f5:1a:8f:2a:1c:4c:70:82:55:0e:9a:5f:73:1e:21:52: 7b:77:7b:86:6b:2d:82:b9:e3:1a:29:d3:70:51:e0:fa:4d:35: 64:fd:c8:d8:1c:6d:66:27:a9:1d:a3:86:f8:69:a8:02:c6:17: 5b:c0:ef:56:4d:84:2d:cb:c7:2a:eb:4a:2c:c1:61:ae:44:47: 9a:6f:11:81:6a:da:93:36:74:02:90:c3:fb:b2:e8:d7:36:09: 92:2c:dc:bd:5f:d6:c0:73:72:e2:50:8e:f5:7a:f6:58:4c:6d: 75:fe:3b:c1:a7:45:49:45:58:4e:1a:3a:dc:7b:19:9d:3d:e3: 83:eb:a7:3a:d3:9d:7c:49:13:17:de:c5:d4:98:b3:37:5b:0a: cd:d2:33:f0:6c:ee:68:17:be:1e:15:4c:2a:64:3a:b6:9f:bc: 8e:a3:71:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeevAJmxPpgvuA0rarJ73GOVeQOQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA5NUVBNzg3MDM4MjZBQ0Y1RkEyMjQxRUIyQjFCNjZB MkM0NDg1QTAeFw0yNDA1MDExOTE3MzhaFw0yNDA1MDUwNDU2MzhaMDMxMTAvBgNV BAMTKDA2NEQwRDIzRTUwMzk1QzFBQzVGMkZEQjI4QUMwODIzQkVCRThFNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD+itVU0GFjFfMGb9lyyqnkB7On zkbfBJBkOHNvjGayosjNdzLfDYD8mxVzLM/jh3QQyHlgiIpsMC5YjBXzfSbqdmWM dCznBTpRh26ySWBD3aNYrexysA85FGObxSpdruoLkBUMFmHoetQAiwFAU3RTQCXr NCFUE++EmLzrj8XcmVMGpe3xqeQv7PtCfw2MH4RGX5vVeoW6FQnahytu4zmORl9k MQqflxWk++syzap1wsxv51jAR9YJV32WhV4dzP2yUosA0GK/LMs/KzDRZY4L2bxJ 1bxpk7gSQ1iVy8KbhC6FayHq/1REHHFWpIUiGBorz4zYeAsetWKfRmAZt13DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBk0NI+UDlcGsXy/bKKwII76+jlAwHwYDVR0j BBgwFoAUEJXqeHA4Jqz1+iJB6ysbZqLESFowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OTVkZDU3My0zMWY0LTQxNmMtYTFiNy02OThkNmIxNjk3YWQvMC8xMDk1RUE3ODcw MzgyNkFDRjVGQTIyNDFFQjJCMUI2NkEyQzQ0ODVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA5NUVBNzg3MDM4MjZBQ0Y1RkEyMjQxRUIyQjFCNjZBMkM0 NDg1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTk1ZGQ1NzMtMzFmNC00MTZjLWEx YjctNjk4ZDZiMTY5N2FkLzAvMTA5NUVBNzg3MDM4MjZBQ0Y1RkEyMjQxRUIyQjFC NjZBMkM0NDg1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHTu4Jblmt1P/EG1nga4DBgKOHFthGCXVA3E xSlAOd3jXS3B8msRdHVQpGdyga+KaF7kqsYha/73A5O516r1d1IAhIUqlreH8bXB WlOjBT2PITjMBWoZVbvGPPfD9RqPKhxMcIJVDppfcx4hUnt3e4ZrLYK54xop03BR 4PpNNWT9yNgcbWYnqR2jhvhpqALGF1vA71ZNhC3LxyrrSizBYa5ER5pvEYFq2pM2 dAKQw/uy6Nc2CZIs3L1f1sBzcuJQjvV69lhMbXX+O8GnRUlFWE4aOtx7GZ0944Pr pzrTnXxJExfexdSYszdbCs3SM/Bs7mgXvh4VTCpkOrafvI6jcT0= -----END CERTIFICATE-----Generated at Wed May 1 22:05:26 2024 by rpki-client on console-fra.rpki-client.org