$ rpki-client -vvf repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft File: 4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft (raw, json) Hash identifier: 4PWAYIyVZ3Pp/TC93tciaZfMptHQbC6Y78ugXTTx3RU= Subject key identifier: CA:8C:7C:BD:46:4B:E8:CE:25:9B:3E:75:3C:99:85:21:F1:28:20:1C Authority key identifier: 4A:9E:8C:61:BE:36:70:D8:65:B8:A7:9D:7D:32:79:85:50:E6:4F:2B Certificate issuer: /CN=4A9E8C61BE3670D865B8A79D7D32798550E64F2B Certificate serial: 7C3ACBD3AD745824613C32F30B9B2660B4ACAA32 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft Manifest number: 5D Signing time: Sun 19 May 2024 12:12:04 +0000 Manifest this update: Sun 19 May 2024 12:07:04 +0000 Manifest next update: Wed 22 May 2024 22:50:04 +0000 Files and hashes: 1: 323030313a6466323a656434303a3a2f34382d3438203d3e203535363838.roa (hash: X0UMWkxgVZNkrtQ2paeqeH5GA2dE2MM2bedsBqpV/OQ=) 2: 3130332e3234352e33382e302f32332d3234203d3e203535363838.roa (hash: oGbgr5rAuO5/J6hihuXmCT2HWwKFHcNvVH06dZqJ3NM=) 3: 4A9E8C61BE3670D865B8A79D7D32798550E64F2B.crl (hash: hIFt8GFmJzNFgCJ6o11kOULjywy2uekYByPo136ECX8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.crl rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 03:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:3a:cb:d3:ad:74:58:24:61:3c:32:f3:0b:9b:26:60:b4:ac:aa:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A9E8C61BE3670D865B8A79D7D32798550E64F2B Validity Not Before: May 19 12:07:04 2024 GMT Not After : May 22 22:50:04 2024 GMT Subject: CN=CA8C7CBD464BE8CE259B3E753C998521F128201C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ca:a9:0b:c4:0a:e9:01:52:f5:00:6f:e8:56: a9:2f:4d:d2:34:cc:85:79:6c:5b:dd:76:98:5f:eb: c7:52:02:58:b9:69:6f:1e:bf:18:9a:11:92:0f:71: 0c:1a:49:df:a0:ed:0a:cf:7f:28:85:c7:f8:3a:fe: 47:11:f1:b9:25:d9:08:5d:7a:0f:d3:43:a8:55:e6: c9:1b:da:c9:4b:01:0b:f6:50:7f:c0:bb:54:92:8f: a1:99:e0:52:93:ab:aa:bf:98:64:ae:bb:13:72:13: 61:f6:7c:05:53:62:b3:1c:58:75:f3:17:98:35:28: 73:64:ca:d6:0b:a2:8d:c5:62:a2:84:dc:40:9b:01: 9e:7e:2d:a4:7f:0b:47:63:2c:d6:ef:bc:40:59:d4: d9:ef:24:3c:ad:bf:90:02:12:10:17:cd:aa:a9:29: de:b5:24:35:28:27:19:8c:e9:4d:02:0e:49:75:03: fe:d2:19:88:f0:ef:f6:48:38:40:ef:80:f9:5d:c2: eb:e6:07:ee:40:27:98:fe:93:e7:b0:f5:5e:25:67: f9:ad:46:f2:4f:66:9c:e4:53:bb:d9:ce:96:5e:05: d1:eb:26:66:9d:de:92:a2:5d:ba:9d:82:6a:04:e9: af:bc:e4:74:09:7e:49:87:60:24:a8:de:16:24:a8: 86:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:8C:7C:BD:46:4B:E8:CE:25:9B:3E:75:3C:99:85:21:F1:28:20:1C X509v3 Authority Key Identifier: keyid:4A:9E:8C:61:BE:36:70:D8:65:B8:A7:9D:7D:32:79:85:50:E6:4F:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:53:68:b5:41:e8:21:71:33:fe:b1:c7:a8:1f:7e:3a:bc:16: 52:80:f0:ae:33:9e:dd:e6:ff:fc:7c:7e:f2:5f:44:1e:50:be: ca:23:be:ac:95:9b:0d:c1:64:e4:f7:94:c9:5b:25:11:60:ea: 7f:b5:b2:71:96:20:4c:95:42:29:d0:aa:d8:07:12:ad:72:5c: c9:4b:b0:0c:27:9d:83:49:46:3b:55:92:d1:7a:dc:50:3a:83: 09:7c:53:75:b3:07:2b:18:2f:99:af:c3:56:e7:91:0f:2c:70: f6:40:bc:21:a2:07:f2:f6:e7:84:b0:d1:8c:b0:8e:af:fa:93: b1:3c:23:b9:29:5d:2f:ea:ac:23:7d:10:cb:9c:70:e6:26:9c: 96:f1:1f:f0:48:2f:75:61:e0:a1:81:d2:e3:92:d7:65:b9:e4: 34:d7:21:c5:fa:ac:b7:4f:3a:86:c2:8a:6c:6d:b2:a1:19:78: 86:6a:c7:b8:e6:62:ab:6e:3a:f8:0f:ad:d2:ce:b0:48:e0:82: c7:a5:f5:a5:7e:84:96:de:18:67:98:22:28:85:ab:4a:ca:ff: a8:ef:51:57:57:e2:a9:31:69:1a:46:4a:3c:b3:83:69:af:89: 51:9d:9f:dd:3d:84:fb:3e:6d:41:9c:96:53:e8:93:11:9f:b3: 6a:29:17:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfDrL0610WCRhPDLzC5smYLSsqjIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE5RThDNjFCRTM2NzBEODY1QjhBNzlEN0QzMjc5ODU1 MEU2NEYyQjAeFw0yNDA1MTkxMjA3MDRaFw0yNDA1MjIyMjUwMDRaMDMxMTAvBgNV BAMTKENBOEM3Q0JENDY0QkU4Q0UyNTlCM0U3NTNDOTk4NTIxRjEyODIwMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgyqkLxArpAVL1AG/oVqkvTdI0 zIV5bFvddphf68dSAli5aW8evxiaEZIPcQwaSd+g7QrPfyiFx/g6/kcR8bkl2Qhd eg/TQ6hV5skb2slLAQv2UH/Au1SSj6GZ4FKTq6q/mGSuuxNyE2H2fAVTYrMcWHXz F5g1KHNkytYLoo3FYqKE3ECbAZ5+LaR/C0djLNbvvEBZ1NnvJDytv5ACEhAXzaqp Kd61JDUoJxmM6U0CDkl1A/7SGYjw7/ZIOEDvgPldwuvmB+5AJ5j+k+ew9V4lZ/mt RvJPZpzkU7vZzpZeBdHrJmad3pKiXbqdgmoE6a+85HQJfkmHYCSo3hYkqIbNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyox8vUZL6M4lmz51PJmFIfEoIBwwHwYDVR0j BBgwFoAUSp6MYb42cNhluKedfTJ5hVDmTyswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YzQ5MzVkOC05NmEyLTQ1NjQtODVhMy0zMmE1MzE4OTM2N2UvMC80QTlFOEM2MUJF MzY3MEQ4NjVCOEE3OUQ3RDMyNzk4NTUwRTY0RjJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEE5RThDNjFCRTM2NzBEODY1QjhBNzlEN0QzMjc5ODU1MEU2 NEYyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2M0OTM1ZDgtOTZhMi00NTY0LTg1 YTMtMzJhNTMxODkzNjdlLzAvNEE5RThDNjFCRTM2NzBEODY1QjhBNzlEN0QzMjc5 ODU1MEU2NEYyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABhTaLVB6CFxM/6xx6gffjq8FlKA8K4znt3m //x8fvJfRB5QvsojvqyVmw3BZOT3lMlbJRFg6n+1snGWIEyVQinQqtgHEq1yXMlL sAwnnYNJRjtVktF63FA6gwl8U3WzBysYL5mvw1bnkQ8scPZAvCGiB/L254Sw0Yyw jq/6k7E8I7kpXS/qrCN9EMuccOYmnJbxH/BIL3Vh4KGB0uOS12W55DTXIcX6rLdP OobCimxtsqEZeIZqx7jmYqtuOvgPrdLOsEjggsel9aV+hJbeGGeYIiiFq0rK/6jv UVdX4qkxaRpGSjyzg2mviVGdn909hPs+bUGcllPokxGfs2opF9E= -----END CERTIFICATE-----Generated at Sun May 19 13:35:05 2024 by rpki-client on console-ams.rpki-client.org