$ rpki-client -vvf repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft File: 9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft (raw, json) Hash identifier: kOS68+vd2hzgBhGEN5Cp0eNm1bvEv8Ld05XMgqv4Ero= Subject key identifier: 64:94:62:EB:34:47:F9:D9:3B:40:7A:58:E1:02:F5:EF:2D:58:1E:FB Authority key identifier: 9C:A6:DB:3A:7A:C1:4D:26:87:52:64:79:3F:B5:D4:88:BC:F0:1F:45 Certificate issuer: /CN=9CA6DB3A7AC14D26875264793FB5D488BCF01F45 Certificate serial: 555A745B02879B0B78371B8AA2DA755D9B1CC33D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft Manifest number: 0426 Signing time: Sat 27 Apr 2024 16:11:49 +0000 Manifest this update: Sat 27 Apr 2024 16:06:49 +0000 Manifest next update: Tue 30 Apr 2024 20:52:49 +0000 Files and hashes: 1: 3130332e3131312e3231372e302f32342d3234203d3e20313337333235.roa (hash: jjtGLiGYhthCgYEl8CAEWMlpk/77XBaG9QDwpzipvb4=) 2: 323030313a6466343a386230303a3a2f34382d3438203d3e20313337333235.roa (hash: LStpTFj38x/DJSHD2unWGKzCQCGq7K64Z3PRgzWrJFc=) 3: 9CA6DB3A7AC14D26875264793FB5D488BCF01F45.crl (hash: TbHIGKhNRJr9zhIqroATYzKnYnhGUW8T2l8vy0hI8hw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.crl rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Apr 2024 20:52:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:5a:74:5b:02:87:9b:0b:78:37:1b:8a:a2:da:75:5d:9b:1c:c3:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CA6DB3A7AC14D26875264793FB5D488BCF01F45 Validity Not Before: Apr 27 16:06:49 2024 GMT Not After : Apr 30 20:52:49 2024 GMT Subject: CN=649462EB3447F9D93B407A58E102F5EF2D581EFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e2:66:dc:90:62:2a:fb:b1:bb:61:5f:31:c9: 15:15:66:cd:92:c7:b1:9c:6a:be:9b:e7:9c:cc:16: d4:96:fa:8d:32:fa:7f:c1:01:70:0e:bd:37:f3:8e: bd:45:44:38:9b:a2:b2:67:06:e6:f9:25:eb:86:c4: b1:5d:97:65:7b:4b:92:84:09:2d:b6:b2:b9:77:6e: 28:d2:98:a0:a7:46:53:d4:57:ae:96:71:89:57:e8: d5:62:8c:48:5c:ca:37:9b:e0:6c:ed:c7:95:2a:5c: c0:f7:9d:04:0f:1a:7a:07:c9:a0:83:8b:dd:d3:60: 54:2b:7f:d0:fc:ca:4a:ac:11:b0:e7:ab:2c:be:04: 44:a5:a6:36:1c:7d:c8:20:22:76:8e:04:7a:13:df: f0:c3:38:ec:66:3e:70:62:ed:2b:6b:36:74:b8:81: d7:ef:c4:49:b2:5b:27:da:b0:b3:61:e4:5b:7b:bc: a6:f0:cc:16:81:5f:78:be:02:56:c8:1f:19:37:05: c6:dd:8f:92:29:7f:96:f1:e2:ab:86:05:14:52:88: eb:06:05:28:0c:57:1a:56:35:82:54:80:b8:54:83: c6:52:10:c0:1a:10:67:39:6a:03:87:8d:f0:f1:6a: c7:f6:25:ed:6f:01:bd:be:2c:c8:2f:de:47:60:28: 4c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:94:62:EB:34:47:F9:D9:3B:40:7A:58:E1:02:F5:EF:2D:58:1E:FB X509v3 Authority Key Identifier: keyid:9C:A6:DB:3A:7A:C1:4D:26:87:52:64:79:3F:B5:D4:88:BC:F0:1F:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:72:b8:9d:4c:c3:2a:c8:7f:8d:96:ee:2d:d0:dd:d5:37:96: a5:d1:28:5e:a8:53:36:a0:34:c3:46:ad:22:64:30:29:d6:ad: 12:99:62:3d:64:69:2a:e0:ec:0f:d3:f5:6e:f5:6a:31:e2:f9: e6:ad:3a:25:c4:14:84:1d:59:b1:5c:38:0f:88:0c:98:84:37: ce:27:84:ab:fb:fc:9e:01:24:9b:48:cf:18:0d:26:04:9f:ff: 02:8d:ab:08:ef:46:92:d9:31:8a:eb:ff:4e:6b:7a:d1:35:b2: 26:e2:36:d2:15:b6:a3:f8:6c:6e:44:43:57:05:23:99:55:f0: b8:9d:b6:34:13:5d:02:f8:4d:63:8c:e7:23:df:e0:81:22:03: 75:91:ac:a9:63:b6:a5:9f:43:a7:dc:1d:bf:84:9c:89:18:44: 3a:79:98:79:07:d0:2f:18:13:7d:99:4e:0b:ac:d3:0e:78:d6: fd:8c:28:af:92:94:6a:dd:ca:94:e9:b3:bb:2f:c6:06:5b:c8: 93:e0:03:a2:e9:ab:a5:54:45:f1:1b:16:22:02:d5:b3:89:a7: 5b:39:69:5f:4a:60:bf:42:c6:48:17:81:6d:a6:17:01:6b:a7: 78:cd:88:ff:88:0a:1d:59:53:ae:a1:91:5b:30:f3:9a:7a:fb: 7d:4c:c2:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVVp0WwKHmwt4NxuKotp1XZscwz0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNBNkRCM0E3QUMxNEQyNjg3NTI2NDc5M0ZCNUQ0ODhC Q0YwMUY0NTAeFw0yNDA0MjcxNjA2NDlaFw0yNDA0MzAyMDUyNDlaMDMxMTAvBgNV BAMTKDY0OTQ2MkVCMzQ0N0Y5RDkzQjQwN0E1OEUxMDJGNUVGMkQ1ODFFRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC04mbckGIq+7G7YV8xyRUVZs2S x7Gcar6b55zMFtSW+o0y+n/BAXAOvTfzjr1FRDiborJnBub5JeuGxLFdl2V7S5KE CS22srl3bijSmKCnRlPUV66WcYlX6NVijEhcyjeb4Gztx5UqXMD3nQQPGnoHyaCD i93TYFQrf9D8ykqsEbDnqyy+BESlpjYcfcggInaOBHoT3/DDOOxmPnBi7StrNnS4 gdfvxEmyWyfasLNh5Ft7vKbwzBaBX3i+AlbIHxk3Bcbdj5Ipf5bx4quGBRRSiOsG BSgMVxpWNYJUgLhUg8ZSEMAaEGc5agOHjfDxasf2Je1vAb2+LMgv3kdgKExxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZJRi6zRH+dk7QHpY4QL17y1YHvswHwYDVR0j BBgwFoAUnKbbOnrBTSaHUmR5P7XUiLzwH0UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDY1MmJjNi04YmI2LTRmMjYtODhiMS0zODBkYWMxOGUyNjgvMC85Q0E2REIzQTdB QzE0RDI2ODc1MjY0NzkzRkI1RDQ4OEJDRjAxRjQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUNBNkRCM0E3QUMxNEQyNjg3NTI2NDc5M0ZCNUQ0ODhCQ0Yw MUY0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTA2NTJiYzYtOGJiNi00ZjI2LTg4 YjEtMzgwZGFjMThlMjY4LzAvOUNBNkRCM0E3QUMxNEQyNjg3NTI2NDc5M0ZCNUQ0 ODhCQ0YwMUY0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIZyuJ1MwyrIf42W7i3Q3dU3lqXRKF6oUzag NMNGrSJkMCnWrRKZYj1kaSrg7A/T9W71ajHi+eatOiXEFIQdWbFcOA+IDJiEN84n hKv7/J4BJJtIzxgNJgSf/wKNqwjvRpLZMYrr/05retE1sibiNtIVtqP4bG5EQ1cF I5lV8LidtjQTXQL4TWOM5yPf4IEiA3WRrKljtqWfQ6fcHb+EnIkYRDp5mHkH0C8Y E32ZTgus0w541v2MKK+SlGrdypTps7svxgZbyJPgA6Lpq6VURfEbFiIC1bOJp1s5 aV9KYL9CxkgXgW2mFwFrp3jNiP+ICh1ZU66hkVsw85p6+31Mws8= -----END CERTIFICATE-----Generated at Sat Apr 27 17:52:59 2024 by rpki-client on console-ams.rpki-client.org