$ rpki-client -vvf repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.mft File: 4E52504397B6835784BD4E67D8048C0D1CE3B242.mft (raw, json) Hash identifier: A61HhYUAMyvfiDkctvFlKdshGQRoHff0jMiKecaLgs8= Subject key identifier: 88:FD:A2:B7:C0:6E:03:AC:C7:7B:35:0B:8B:AE:F1:6F:49:F0:26:CB Authority key identifier: 4E:52:50:43:97:B6:83:57:84:BD:4E:67:D8:04:8C:0D:1C:E3:B2:42 Certificate issuer: /CN=4E52504397B6835784BD4E67D8048C0D1CE3B242 Certificate serial: 50A2B98B58F79538DD56FA9C587A6059CA46D9BE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E52504397B6835784BD4E67D8048C0D1CE3B242.cer Subject info access: rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.mft Manifest number: 0428 Signing time: Fri 26 Apr 2024 06:01:53 +0000 Manifest this update: Fri 26 Apr 2024 05:56:53 +0000 Manifest next update: Mon 29 Apr 2024 10:47:53 +0000 Files and hashes: 1: 3130332e32392e3134382e302f32322d3234203d3e203538333736.roa (hash: QoAVfdASj6D8T0CMnu+YHXTIwvRtbw5aH8lE5/mRzrU=) 2: 323430333a653630303a3a2f33322d3332203d3e203538333736.roa (hash: cG/qRiVO8XZpJR2pnd55F8E6Q6uysG6sWyyzi0UdGZ8=) 3: 34332e3234352e3138382e302f32322d3234203d3e203538333736.roa (hash: VMPZ5L66xVw8XFPJfATRvasXZxh8TUn2qALiFpXxjyw=) 4: 323430333a653630303a6630303a3a2f34302d3430203d3e203538333736.roa (hash: BsGdZY71kM9WGVRu7WRUBvpeo5E9H6fYoH5n+xgCUaw=) 5: 4E52504397B6835784BD4E67D8048C0D1CE3B242.crl (hash: 0q4m3gsy46oLSPPDh/EmxUoW2rZqgBHBoCO8hpL9jKA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.crl rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E52504397B6835784BD4E67D8048C0D1CE3B242.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Apr 2024 10:47:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:a2:b9:8b:58:f7:95:38:dd:56:fa:9c:58:7a:60:59:ca:46:d9:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E52504397B6835784BD4E67D8048C0D1CE3B242 Validity Not Before: Apr 26 05:56:53 2024 GMT Not After : Apr 29 10:47:53 2024 GMT Subject: CN=88FDA2B7C06E03ACC77B350B8BAEF16F49F026CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:4b:95:77:c3:99:fd:59:94:88:b2:93:d0:26: 76:f1:bd:17:9c:bb:1e:57:93:00:4d:07:1a:12:d8: 3b:2e:ed:a4:60:fd:9e:53:f0:5e:ab:01:1f:93:8d: 38:0e:3e:8e:b7:64:c4:97:02:e3:a2:2f:f9:a6:b9: 1b:b9:60:20:35:b8:cd:04:0f:b3:e5:18:34:aa:b5: 99:b3:e2:fd:1b:25:bf:b4:23:3a:eb:e6:4a:e2:66: 7b:c4:5a:09:f2:c0:e6:e1:bb:31:7d:aa:9a:e1:31: 7b:d0:c1:c9:00:45:d6:cc:ce:92:6d:e7:26:a0:cc: ac:90:de:40:91:31:55:24:87:15:b6:dd:7e:81:c6: ed:87:06:7c:f6:4f:98:92:12:25:35:d6:cf:dc:b8: f8:39:5c:e2:7a:e2:39:b7:e8:f5:41:eb:ad:aa:ac: 82:2d:77:27:4c:5d:2a:1c:9c:25:10:15:51:26:d9: ad:08:87:e3:e6:d1:3c:40:0d:08:f6:f7:be:78:d1: 34:5f:26:76:35:97:6e:0f:26:23:dd:78:d2:b7:a7: 17:74:ec:61:05:c4:8c:c7:1e:b5:3f:a9:20:3e:2a: cc:1f:c8:aa:38:59:69:28:4c:47:91:44:e1:4d:10: 7a:77:a2:da:d1:5d:e6:0b:55:58:46:21:24:81:22: 00:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:FD:A2:B7:C0:6E:03:AC:C7:7B:35:0B:8B:AE:F1:6F:49:F0:26:CB X509v3 Authority Key Identifier: keyid:4E:52:50:43:97:B6:83:57:84:BD:4E:67:D8:04:8C:0D:1C:E3:B2:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E52504397B6835784BD4E67D8048C0D1CE3B242.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:1d:31:d9:c7:e3:67:45:b4:ec:24:52:2a:70:6b:4a:ef:d9: 4e:2f:c7:76:75:b4:34:97:31:82:12:fc:fb:c4:4d:8d:60:49: 4c:c3:14:a8:21:ea:33:d9:f2:67:1d:34:ad:98:0e:c8:75:c2: 3c:4d:4e:33:8d:57:ce:a3:63:b3:0b:fc:6a:5a:a2:34:39:f8: cd:7a:54:35:12:6f:90:73:a8:de:99:76:6d:7d:c8:2d:23:89: 9c:50:b0:3e:06:a0:ad:22:ab:cf:e0:75:71:39:54:75:dd:4c: e8:a4:63:33:ad:a0:86:9b:c3:cf:a8:fc:0a:2e:a3:2b:71:34: f5:b5:2e:ae:de:f9:c3:ed:df:15:c0:e0:2d:0e:82:3c:fd:ec: b4:7a:30:5c:9a:4c:71:25:53:81:b6:f2:7c:e7:f0:3e:fe:3a: ca:00:80:22:32:b2:c9:e6:5c:1b:76:67:06:fa:bf:c5:29:dc: 05:43:54:78:66:a3:38:b8:d5:25:b3:8f:aa:81:e8:cb:da:b9: 2f:5c:6f:08:6b:19:76:ba:e2:85:c2:33:33:32:22:f5:d8:1f: 13:02:82:44:64:09:c3:c9:2d:db:2a:81:9d:e6:47:21:99:bb: 4e:1f:6f:5d:35:23:e3:ed:f0:d4:f2:ba:6d:9f:09:78:57:de: 86:a1:0d:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUKK5i1j3lTjdVvqcWHpgWcpG2b4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEU1MjUwNDM5N0I2ODM1Nzg0QkQ0RTY3RDgwNDhDMEQx Q0UzQjI0MjAeFw0yNDA0MjYwNTU2NTNaFw0yNDA0MjkxMDQ3NTNaMDMxMTAvBgNV BAMTKDg4RkRBMkI3QzA2RTAzQUNDNzdCMzUwQjhCQUVGMTZGNDlGMDI2Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXS5V3w5n9WZSIspPQJnbxvRec ux5XkwBNBxoS2Dsu7aRg/Z5T8F6rAR+TjTgOPo63ZMSXAuOiL/mmuRu5YCA1uM0E D7PlGDSqtZmz4v0bJb+0Izrr5kriZnvEWgnywObhuzF9qprhMXvQwckARdbMzpJt 5yagzKyQ3kCRMVUkhxW23X6Bxu2HBnz2T5iSEiU11s/cuPg5XOJ64jm36PVB662q rIItdydMXSocnCUQFVEm2a0Ih+Pm0TxADQj297540TRfJnY1l24PJiPdeNK3pxd0 7GEFxIzHHrU/qSA+KswfyKo4WWkoTEeRROFNEHp3otrRXeYLVVhGISSBIgDpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiP2it8BuA6zHezULi67xb0nwJsswHwYDVR0j BBgwFoAUTlJQQ5e2g1eEvU5n2ASMDRzjskIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OTFkM2MzMC05NWRjLTRiNzItYWUxYi1hZDFlOThiMGUxNzkvMC80RTUyNTA0Mzk3 QjY4MzU3ODRCRDRFNjdEODA0OEMwRDFDRTNCMjQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEU1MjUwNDM5N0I2ODM1Nzg0QkQ0RTY3RDgwNDhDMEQxQ0Uz QjI0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODkxZDNjMzAtOTVkYy00YjcyLWFl MWItYWQxZTk4YjBlMTc5LzAvNEU1MjUwNDM5N0I2ODM1Nzg0QkQ0RTY3RDgwNDhD MEQxQ0UzQjI0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHIdMdnH42dFtOwkUipwa0rv2U4vx3Z1tDSX MYIS/PvETY1gSUzDFKgh6jPZ8mcdNK2YDsh1wjxNTjONV86jY7ML/GpaojQ5+M16 VDUSb5BzqN6Zdm19yC0jiZxQsD4GoK0iq8/gdXE5VHXdTOikYzOtoIabw8+o/Aou oytxNPW1Lq7e+cPt3xXA4C0Ogjz97LR6MFyaTHElU4G28nzn8D7+OsoAgCIyssnm XBt2Zwb6v8Up3AVDVHhmozi41SWzj6qB6MvauS9cbwhrGXa64oXCMzMyIvXYHxMC gkRkCcPJLdsqgZ3mRyGZu04fb101I+Pt8NTyum2fCXhX3oahDRg= -----END CERTIFICATE-----Generated at Sat Apr 27 10:12:53 2024 by rpki-client on console-ams.rpki-client.org