$ rpki-client -vvf repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.mft File: 0FA41B65D1881666013C9683E40575E68E5DC0A5.mft (raw, json) Hash identifier: VKAOwNpH+Ojvok+Y4ix7XgB9HXwSrW8G84Zhm6bbNUw= Subject key identifier: 97:99:D5:46:C7:5C:77:80:EB:38:71:AE:CA:20:63:18:B9:2E:C4:2C Authority key identifier: 0F:A4:1B:65:D1:88:16:66:01:3C:96:83:E4:05:75:E6:8E:5D:C0:A5 Certificate issuer: /CN=0FA41B65D1881666013C9683E40575E68E5DC0A5 Certificate serial: 42DC4D3FFC80AB6F7EBC23E9E1596DF2E6221466 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FA41B65D1881666013C9683E40575E68E5DC0A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.mft Manifest number: 043A Signing time: Wed 01 May 2024 03:30:55 +0000 Manifest this update: Wed 01 May 2024 03:25:55 +0000 Manifest next update: Sat 04 May 2024 11:43:55 +0000 Files and hashes: 1: 3130332e3232302e34372e302f32342d3234203d3e20313431313037.roa (hash: QVZuPq3BUFL5N2WHZJeGql3KDEfbvUsECXHeyyQQoV0=) 2: 0FA41B65D1881666013C9683E40575E68E5DC0A5.crl (hash: CJ9LFCR2Ct0EILLdB2+PRg4S3O6CgtF7/uRqvtGoYiA=) 3: 3130332e3231362e3138382e302f32342d3234203d3e20313431313037.roa (hash: J+QZPa0iRBadwQdN4R9X8cYET2owXIaBqYuZ7epKyC0=) 4: 323030313a6466313a666530303a3a2f34382d3438203d3e20313431313037.roa (hash: M99xhdoZnUSArNFQBcH8UXTf7qQpf114JTc+bpmm89I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.crl rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FA41B65D1881666013C9683E40575E68E5DC0A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 11:43:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:dc:4d:3f:fc:80:ab:6f:7e:bc:23:e9:e1:59:6d:f2:e6:22:14:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FA41B65D1881666013C9683E40575E68E5DC0A5 Validity Not Before: May 1 03:25:55 2024 GMT Not After : May 4 11:43:55 2024 GMT Subject: CN=9799D546C75C7780EB3871AECA206318B92EC42C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fc:20:ad:06:86:4c:d2:1a:0a:5c:8d:6f:cc: e5:ec:e2:40:2f:73:b6:f8:e2:40:2a:a7:7b:01:96: 37:db:dd:5b:43:9a:65:7a:81:c7:50:d7:80:0c:8b: 2d:50:2f:7b:20:18:39:0a:0c:94:42:9b:f3:69:fb: b1:39:0a:07:e3:33:e1:bc:4e:3a:2d:a5:4b:aa:04: 14:9c:53:3f:0d:cb:d6:af:05:45:97:f3:d5:65:c5: bf:a9:1e:8d:6e:46:e4:1c:18:eb:9f:fd:05:5b:c4: 52:aa:02:f2:8e:57:f1:30:df:6a:7b:e5:50:19:47: d1:0a:9a:67:e1:21:01:ad:33:94:31:7f:36:e8:4e: 60:1d:ff:db:96:02:21:36:69:79:21:81:78:b8:9e: b5:14:54:c9:f1:ed:b5:dd:66:c8:c9:27:42:26:dc: 7a:67:91:40:90:7a:fc:33:4c:c3:b2:5d:0f:cd:f5: c7:a2:ed:51:bd:48:ef:90:8c:20:7c:ea:e3:34:7f: 3b:05:47:2e:2d:c5:3e:81:b3:f8:95:ea:58:e6:fb: 5b:e5:ba:a2:1e:be:53:d3:d9:a1:9a:3c:9a:7a:70: 9b:a5:ad:c0:54:bf:c7:72:8c:54:d9:2c:8a:76:75: a4:d6:4b:51:b7:fb:57:18:93:71:73:03:5b:82:cd: cc:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:99:D5:46:C7:5C:77:80:EB:38:71:AE:CA:20:63:18:B9:2E:C4:2C X509v3 Authority Key Identifier: keyid:0F:A4:1B:65:D1:88:16:66:01:3C:96:83:E4:05:75:E6:8E:5D:C0:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FA41B65D1881666013C9683E40575E68E5DC0A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:37:c1:9f:dd:60:e9:1e:e3:c5:cc:de:2f:13:4a:9d:45:01: 0f:86:45:fa:8c:58:84:26:54:61:65:40:17:55:a4:78:ce:bf: a3:4e:ba:7d:8a:89:b6:02:07:7e:72:c2:8a:4e:97:fd:e4:8f: 82:f7:c0:31:59:8f:9c:54:40:20:7c:d8:4b:a8:0a:64:b7:7c: 67:15:bf:ca:91:5e:fc:2a:9c:ea:3e:88:ff:cf:a8:12:89:e8: c9:13:af:66:8b:dd:9e:e0:97:12:7b:e3:0c:10:48:46:57:a4: 46:5a:2a:81:eb:9e:72:b1:f5:cf:fe:85:09:0e:01:46:c2:c8: 50:bd:b4:b0:50:75:ed:8a:50:4b:2a:c2:94:5e:e1:6b:ba:ea: 5e:a0:a0:ad:51:cd:a3:fb:4d:34:f6:82:65:19:1d:63:b1:90: 68:2f:17:9b:70:34:6c:ae:fc:8a:3b:e5:4b:51:cf:44:ac:9d: 2e:6a:cb:d1:eb:f9:25:3c:1d:f6:c9:3d:36:36:a4:f5:e7:9b: c8:e6:0b:a0:67:c9:73:1c:31:c4:49:a8:a6:7a:24:98:07:3f: 6f:96:3c:c8:93:4b:11:67:33:83:bc:a2:4f:ef:0c:8d:6a:a2: 86:fa:38:20:15:e3:50:f9:3b:d6:1d:9f:73:17:aa:78:22:4b: 66:fd:87:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQtxNP/yAq29+vCPp4Vlt8uYiFGYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZBNDFCNjVEMTg4MTY2NjAxM0M5NjgzRTQwNTc1RTY4 RTVEQzBBNTAeFw0yNDA1MDEwMzI1NTVaFw0yNDA1MDQxMTQzNTVaMDMxMTAvBgNV BAMTKDk3OTlENTQ2Qzc1Qzc3ODBFQjM4NzFBRUNBMjA2MzE4QjkyRUM0MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3/CCtBoZM0hoKXI1vzOXs4kAv c7b44kAqp3sBljfb3VtDmmV6gcdQ14AMiy1QL3sgGDkKDJRCm/Np+7E5CgfjM+G8 TjotpUuqBBScUz8Ny9avBUWX89Vlxb+pHo1uRuQcGOuf/QVbxFKqAvKOV/Ew32p7 5VAZR9EKmmfhIQGtM5QxfzboTmAd/9uWAiE2aXkhgXi4nrUUVMnx7bXdZsjJJ0Im 3HpnkUCQevwzTMOyXQ/N9cei7VG9SO+QjCB86uM0fzsFRy4txT6Bs/iV6ljm+1vl uqIevlPT2aGaPJp6cJulrcBUv8dyjFTZLIp2daTWS1G3+1cYk3FzA1uCzcyFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl5nVRsdcd4DrOHGuyiBjGLkuxCwwHwYDVR0j BBgwFoAUD6QbZdGIFmYBPJaD5AV15o5dwKUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OTk0ZDM3NS1mYzdkLTRkYzctYTFmMS1lMGIzYTU5ZmRmNzgvMC8wRkE0MUI2NUQx ODgxNjY2MDEzQzk2ODNFNDA1NzVFNjhFNURDMEE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEZBNDFCNjVEMTg4MTY2NjAxM0M5NjgzRTQwNTc1RTY4RTVE QzBBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzk5NGQzNzUtZmM3ZC00ZGM3LWEx ZjEtZTBiM2E1OWZkZjc4LzAvMEZBNDFCNjVEMTg4MTY2NjAxM0M5NjgzRTQwNTc1 RTY4RTVEQzBBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADI3wZ/dYOke48XM3i8TSp1FAQ+GRfqMWIQm VGFlQBdVpHjOv6NOun2KibYCB35ywopOl/3kj4L3wDFZj5xUQCB82EuoCmS3fGcV v8qRXvwqnOo+iP/PqBKJ6MkTr2aL3Z7glxJ74wwQSEZXpEZaKoHrnnKx9c/+hQkO AUbCyFC9tLBQde2KUEsqwpRe4Wu66l6goK1RzaP7TTT2gmUZHWOxkGgvF5twNGyu /Io75UtRz0SsnS5qy9Hr+SU8HfbJPTY2pPXnm8jmC6BnyXMcMcRJqKZ6JJgHP2+W PMiTSxFnM4O8ok/vDI1qoob6OCAV41D5O9Ydn3MXqngiS2b9h98= -----END CERTIFICATE-----Generated at Wed May 1 05:56:38 2024 by rpki-client on console-fra.rpki-client.org