$ rpki-client -vvf repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.mft File: 847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.mft (raw, json) Hash identifier: gJfrrDXS8Zi13LPCK4d42R6jkU/NKhWwnMOUzladImY= Subject key identifier: F1:3C:BF:B4:AD:07:DC:09:E2:AF:3B:8D:B5:DB:E8:5C:86:C3:FC:7E Authority key identifier: 84:7E:BE:D5:D2:D5:9F:7F:1F:79:1C:B9:C0:DF:A9:33:AE:F0:67:C5 Certificate issuer: /CN=847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5 Certificate serial: 21DD92E11F3897E7EEFB7953262319131FE5FA07 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.mft Manifest number: 0429 Signing time: Sun 05 May 2024 11:01:51 +0000 Manifest this update: Sun 05 May 2024 10:56:51 +0000 Manifest next update: Wed 08 May 2024 13:53:51 +0000 Files and hashes: 1: 3130332e3135302e3231382e302f32342d3234203d3e20313430343031.roa (hash: y6jFLQ2FkK/iJQ8dnXVYSbw0BlEqv1RLQrMjG78moNI=) 2: 3130332e3135302e3231392e302f32342d3234203d3e20313430343031.roa (hash: toRDYePEusqqMy+Tuvc1VNNrTsAFudxq9bPx/dVypjA=) 3: 3130332e3135302e3231382e302f32332d3233203d3e20313430343031.roa (hash: 71o4NMVLOynETBTiYsgexul5r47ijyMZ1uwVfIn2FfI=) 4: 847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.crl (hash: Cnrb+xfgMLdLOsZ2Vs5AHiAF6BDxtB7tRCC7FYI+IcE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.crl rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 12:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:dd:92:e1:1f:38:97:e7:ee:fb:79:53:26:23:19:13:1f:e5:fa:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5 Validity Not Before: May 5 10:56:51 2024 GMT Not After : May 8 13:53:51 2024 GMT Subject: CN=F13CBFB4AD07DC09E2AF3B8DB5DBE85C86C3FC7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:19:71:1e:18:09:38:db:77:c6:6f:35:29:bb: 52:71:04:8b:79:75:a9:b1:da:80:fc:f5:74:93:b7: c4:50:1f:21:0b:ba:9b:bb:34:49:9e:34:0b:e6:18: 04:99:8f:9f:ea:9c:47:e8:c0:49:6b:22:ba:e0:f6: 2c:18:05:96:02:e4:bb:95:6d:d7:8f:96:da:83:e2: c7:a5:ef:ae:c2:3a:fc:54:9c:db:10:34:ff:ea:b5: c9:8e:1e:af:29:fb:8d:36:da:1c:b4:99:7b:cc:29: b5:51:32:b0:45:97:b9:28:c9:e8:61:b8:bf:4d:c0: ef:2a:fd:09:b5:be:e5:28:19:15:8a:c7:76:e6:01: 73:1d:f9:a2:b3:6d:31:aa:76:b7:00:d9:a0:18:85: 70:34:b4:b1:77:2a:07:88:b4:2f:33:b5:ee:87:1a: 4a:9e:49:d4:73:f4:3c:d2:7c:67:be:b1:ef:0a:aa: 20:35:ae:b9:7e:3a:69:25:a7:00:d8:ea:4e:cb:1b: c6:5c:a4:bd:27:c1:be:a1:21:dc:3f:e5:cd:37:f5: ff:11:cc:0d:93:3a:3c:dc:2f:bf:93:e9:2f:11:9f: 8d:ab:c1:92:c7:7f:30:8e:e3:4a:64:26:9d:13:c7: f9:c0:18:19:36:f6:56:06:c5:74:b2:bb:60:25:33: c5:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:3C:BF:B4:AD:07:DC:09:E2:AF:3B:8D:B5:DB:E8:5C:86:C3:FC:7E X509v3 Authority Key Identifier: keyid:84:7E:BE:D5:D2:D5:9F:7F:1F:79:1C:B9:C0:DF:A9:33:AE:F0:67:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:97:f8:87:6f:e0:2a:a8:29:d7:2d:3e:61:c3:e9:8f:43:ed: f8:24:5a:87:32:37:ba:d9:ca:50:ff:d6:30:42:52:a0:95:7b: 6f:72:5c:ed:a1:46:cf:71:6b:fd:78:0e:31:ee:57:55:16:72: cd:16:1c:c1:9b:e5:46:10:6d:9b:5d:0e:5a:27:a1:65:58:5a: e4:c1:5e:75:ce:7b:4b:c4:f2:fb:43:28:78:ef:68:3d:b2:e1: 8d:8e:aa:48:21:bb:ab:8c:16:57:d7:93:86:4d:89:14:0a:5c: f7:6f:45:a0:3f:40:73:3b:01:01:dc:a5:80:23:5e:ed:24:75: fe:71:d7:63:52:73:33:34:21:73:17:9f:9d:14:de:72:cd:0f: eb:62:9f:de:ec:7e:45:92:ca:09:4b:0e:07:3e:b6:48:21:f9: a8:29:78:7b:e7:41:b1:21:42:8e:fb:c3:90:a8:4f:f6:0b:f9: e6:7c:28:18:02:bd:0f:64:e5:2a:f2:2a:7f:16:a7:ed:23:48: f9:91:9a:58:f9:15:73:81:8e:94:a9:69:02:1f:9b:2a:7a:a3: 5f:e3:18:21:46:aa:f6:3a:b7:04:9c:7a:28:9f:9c:85:b1:da: 09:14:ef:4c:f1:c7:31:ff:27:95:39:1e:a9:1c:09:a7:09:f9: 3a:37:0e:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUId2S4R84l+fu+3lTJiMZEx/l+gcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ3RUJFRDVEMkQ1OUY3RjFGNzkxQ0I5QzBERkE5MzNB RUYwNjdDNTAeFw0yNDA1MDUxMDU2NTFaFw0yNDA1MDgxMzUzNTFaMDMxMTAvBgNV BAMTKEYxM0NCRkI0QUQwN0RDMDlFMkFGM0I4REI1REJFODVDODZDM0ZDN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbGXEeGAk423fGbzUpu1JxBIt5 damx2oD89XSTt8RQHyELupu7NEmeNAvmGASZj5/qnEfowElrIrrg9iwYBZYC5LuV bdePltqD4sel767COvxUnNsQNP/qtcmOHq8p+4022hy0mXvMKbVRMrBFl7koyehh uL9NwO8q/Qm1vuUoGRWKx3bmAXMd+aKzbTGqdrcA2aAYhXA0tLF3KgeItC8zte6H GkqeSdRz9DzSfGe+se8KqiA1rrl+OmklpwDY6k7LG8ZcpL0nwb6hIdw/5c039f8R zA2TOjzcL7+T6S8Rn42rwZLHfzCO40pkJp0Tx/nAGBk29lYGxXSyu2AlM8WtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8Ty/tK0H3AnirzuNtdvoXIbD/H4wHwYDVR0j BBgwFoAUhH6+1dLVn38feRy5wN+pM67wZ8UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjVkNzJmMy0yZGIyLTRiY2MtOWY3Ny1kMTQ0MmI2MzJkMDQvMC84NDdFQkVENUQy RDU5RjdGMUY3OTFDQjlDMERGQTkzM0FFRjA2N0M1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ3RUJFRDVEMkQ1OUY3RjFGNzkxQ0I5QzBERkE5MzNBRUYw NjdDNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2I1ZDcyZjMtMmRiMi00YmNjLTlm NzctZDE0NDJiNjMyZDA0LzAvODQ3RUJFRDVEMkQ1OUY3RjFGNzkxQ0I5QzBERkE5 MzNBRUYwNjdDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABGX+Idv4CqoKdctPmHD6Y9D7fgkWocyN7rZ ylD/1jBCUqCVe29yXO2hRs9xa/14DjHuV1UWcs0WHMGb5UYQbZtdDlonoWVYWuTB XnXOe0vE8vtDKHjvaD2y4Y2Oqkghu6uMFlfXk4ZNiRQKXPdvRaA/QHM7AQHcpYAj Xu0kdf5x12NSczM0IXMXn50U3nLND+tin97sfkWSyglLDgc+tkgh+agpeHvnQbEh Qo77w5CoT/YL+eZ8KBgCvQ9k5SryKn8Wp+0jSPmRmlj5FXOBjpSpaQIfmyp6o1/j GCFGqvY6twSceiifnIWx2gkU70zxxzH/J5U5HqkcCacJ+To3DuQ= -----END CERTIFICATE-----Generated at Sun May 5 12:23:54 2024 by rpki-client on console-fra.rpki-client.org