$ rpki-client -vvf repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft File: 4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft (raw, json) Hash identifier: X2WdVDPCa9rm9KnQUE2mod5+6KrbowBNM+bxoSGy6dk= Subject key identifier: 27:CD:14:2B:22:96:2F:26:6B:D0:A7:7C:7A:90:80:16:F6:1A:28:A9 Authority key identifier: 4D:D0:C9:5B:43:B8:B6:53:60:1F:ED:39:AB:01:0E:1D:D0:DC:17:F2 Certificate issuer: /CN=4DD0C95B43B8B653601FED39AB010E1DD0DC17F2 Certificate serial: 77813965AC95F22C980DE76748007D392372A8F4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft Manifest number: 0429 Signing time: Thu 02 May 2024 09:40:57 +0000 Manifest this update: Thu 02 May 2024 09:35:57 +0000 Manifest next update: Sun 05 May 2024 17:25:57 +0000 Files and hashes: 1: 3130332e36362e35352e302f32342d3234203d3e20313335343537.roa (hash: ONsBPExlFbykItHijaoPrdUzlUXFNHLKUsxMHqiRNDY=) 2: 323030313a6466323a626530303a3a2f34382d3438203d3e20313335343537.roa (hash: qJDqaZW0vE3bv1Adkjpvd0ZsZoczhdAe78FZKRPFQPA=) 3: 4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.crl (hash: ZSiib6Pkyv0jtRbePO+yupCqG9P1eCgsGh/e7PUQzIw=) 4: 34352e3132302e3234342e302f32322d3234203d3e20313335343537.roa (hash: Snpfp2Omnn1E3MHdKJtGFyzgjYDT292w/OwKU0FJjj4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.crl rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 May 2024 17:25:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:81:39:65:ac:95:f2:2c:98:0d:e7:67:48:00:7d:39:23:72:a8:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DD0C95B43B8B653601FED39AB010E1DD0DC17F2 Validity Not Before: May 2 09:35:57 2024 GMT Not After : May 5 17:25:57 2024 GMT Subject: CN=27CD142B22962F266BD0A77C7A908016F61A28A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c8:7e:55:4d:ea:9d:86:46:a2:19:cb:58:17: cb:d7:68:d0:e8:cc:af:d6:59:b6:a6:1e:74:fa:0b: 8f:63:27:08:d5:13:fb:06:de:22:6e:38:2e:47:9d: c7:ff:ec:07:bc:6e:44:39:79:d5:4c:f7:55:5a:17: c7:c3:df:47:7f:9a:63:3c:4f:9d:7d:8c:64:e0:13: 74:47:1b:98:f1:f2:25:b6:42:7b:f8:58:c1:ad:4f: 14:fd:79:28:71:10:a5:3a:2c:a8:a3:3e:3b:ab:83: 31:37:03:1d:9c:02:35:b7:00:db:df:3e:1b:77:7d: 43:75:11:22:49:60:f2:c5:17:8d:1f:f1:39:c9:25: 16:57:d6:fe:eb:32:85:06:cd:02:b4:a2:2e:d3:48: 98:1c:61:fa:68:fd:75:ed:1f:6e:35:ab:20:12:6f: b9:eb:ec:36:d7:42:60:67:43:e6:d9:15:f7:66:29: e3:7f:a6:f6:12:06:de:aa:48:1a:e9:b7:e6:d3:bd: 07:58:c7:c8:e2:d8:05:80:d8:41:fc:8c:26:58:c0: 7d:3f:17:5c:ab:c4:3a:be:7b:ea:fe:9b:89:c1:87: 7b:49:80:10:d5:2d:57:3c:99:f1:5e:e5:e5:95:3d: bd:17:eb:a5:84:62:b8:51:b9:0c:bd:30:1c:be:c8: 87:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:CD:14:2B:22:96:2F:26:6B:D0:A7:7C:7A:90:80:16:F6:1A:28:A9 X509v3 Authority Key Identifier: keyid:4D:D0:C9:5B:43:B8:B6:53:60:1F:ED:39:AB:01:0E:1D:D0:DC:17:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:57:73:89:b6:e3:96:67:b9:89:ac:16:b9:b7:26:0b:8c:67: 10:eb:c4:f1:2f:cd:0b:50:0f:d1:42:68:c9:5d:18:58:a2:8f: 4e:39:9c:19:4a:5c:2a:2c:27:6b:e6:09:02:48:d6:25:0d:5d: dc:c5:b7:2b:69:f8:d1:62:df:fd:ee:83:4b:68:d8:da:0d:7d: de:d8:f1:84:d0:b1:cc:04:98:28:25:fc:6b:d0:03:30:71:8e: 4e:b2:9d:07:a5:49:1e:78:1c:10:3e:03:06:ae:0e:11:ab:00: 0d:8c:60:f5:bd:1b:ed:78:9d:21:9d:b0:a1:0e:bb:ef:76:68: f3:7e:5d:53:6b:8b:b3:f4:47:13:9c:f8:8d:fb:eb:c6:bb:90: 8b:82:bf:7f:dc:2c:9e:7f:87:35:3f:3a:7a:71:92:6f:73:69: 4e:ff:91:54:2d:6f:bd:32:aa:d5:64:64:a6:43:20:e3:85:87: 16:c0:1d:cf:46:c2:ea:34:8f:e4:36:83:c9:a9:d1:58:08:8b: 4a:23:1e:4f:16:35:db:69:b5:5f:70:31:82:21:7d:d8:0f:49: 1f:73:2d:a7:eb:27:cb:90:dd:86:aa:61:82:b1:0d:a8:c8:3c: 98:59:8e:71:f0:97:76:5a:4c:f5:3c:9d:88:c1:c3:83:3d:fa: 87:5a:e4:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd4E5ZayV8iyYDednSAB9OSNyqPQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEREMEM5NUI0M0I4QjY1MzYwMUZFRDM5QUIwMTBFMURE MERDMTdGMjAeFw0yNDA1MDIwOTM1NTdaFw0yNDA1MDUxNzI1NTdaMDMxMTAvBgNV BAMTKDI3Q0QxNDJCMjI5NjJGMjY2QkQwQTc3QzdBOTA4MDE2RjYxQTI4QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8yH5VTeqdhkaiGctYF8vXaNDo zK/WWbamHnT6C49jJwjVE/sG3iJuOC5Hncf/7Ae8bkQ5edVM91VaF8fD30d/mmM8 T519jGTgE3RHG5jx8iW2Qnv4WMGtTxT9eShxEKU6LKijPjurgzE3Ax2cAjW3ANvf Pht3fUN1ESJJYPLFF40f8TnJJRZX1v7rMoUGzQK0oi7TSJgcYfpo/XXtH241qyAS b7nr7DbXQmBnQ+bZFfdmKeN/pvYSBt6qSBrpt+bTvQdYx8ji2AWA2EH8jCZYwH0/ F1yrxDq+e+r+m4nBh3tJgBDVLVc8mfFe5eWVPb0X66WEYrhRuQy9MBy+yIcRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ80UKyKWLyZr0Kd8epCAFvYaKKkwHwYDVR0j BBgwFoAUTdDJW0O4tlNgH+05qwEOHdDcF/IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Mjc4MGY4NS1lZjJmLTRjZjgtYTRiOC01MjI1YzQ1Yjk2YTEvMC80REQwQzk1QjQz QjhCNjUzNjAxRkVEMzlBQjAxMEUxREQwREMxN0YyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEREMEM5NUI0M0I4QjY1MzYwMUZFRDM5QUIwMTBFMUREMERD MTdGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODI3ODBmODUtZWYyZi00Y2Y4LWE0 YjgtNTIyNWM0NWI5NmExLzAvNEREMEM5NUI0M0I4QjY1MzYwMUZFRDM5QUIwMTBF MUREMERDMTdGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADBXc4m245ZnuYmsFrm3JguMZxDrxPEvzQtQ D9FCaMldGFiij045nBlKXCosJ2vmCQJI1iUNXdzFtytp+NFi3/3ug0to2NoNfd7Y 8YTQscwEmCgl/GvQAzBxjk6ynQelSR54HBA+AwauDhGrAA2MYPW9G+14nSGdsKEO u+92aPN+XVNri7P0RxOc+I3768a7kIuCv3/cLJ5/hzU/Onpxkm9zaU7/kVQtb70y qtVkZKZDIOOFhxbAHc9Gwuo0j+Q2g8mp0VgIi0ojHk8WNdtptV9wMYIhfdgPSR9z LafrJ8uQ3YaqYYKxDajIPJhZjnHwl3ZaTPU8nYjBw4M9+oda5Bk= -----END CERTIFICATE-----Generated at Thu May 2 10:16:53 2024 by rpki-client on console-ams.rpki-client.org