$ rpki-client -vvf repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft File: 989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft (raw, json) Hash identifier: 0Ybr3X0p8h5jNNIt9W5NsfjkvZbXLoiqSRwfEiSxp84= Subject key identifier: 61:9B:19:6A:B7:86:2D:FC:18:26:97:36:70:84:D6:14:F3:EC:55:CB Authority key identifier: 98:9B:87:D4:0F:7C:9F:1B:A5:4A:BC:AE:9B:C7:97:A3:E6:B2:57:48 Certificate issuer: /CN=989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748 Certificate serial: 4C628C2409B153A059013BF7B034441B75E097E5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft Manifest number: 042A Signing time: Mon 29 Apr 2024 19:30:51 +0000 Manifest this update: Mon 29 Apr 2024 19:25:51 +0000 Manifest next update: Thu 02 May 2024 23:43:51 +0000 Files and hashes: 1: 323030313a6466363a313330303a3a2f34382d3438203d3e20313338313137.roa (hash: oMAibsF/HSF01HB9Mc9eDrDFN2BAhTYv/0qePxd7r6o=) 2: 3130332e3132302e3132342e302f32332d3234203d3e20313338313137.roa (hash: eb7haQ80VO6GiMtqcegs9ObpRWuup+b23vRuFcKC+WU=) 3: 989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.crl (hash: jAprqDx8Xjh1TPnP4MWRgt4cyJ3O1zkJ2DIHN/KpoQA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.crl rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 18:06:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:62:8c:24:09:b1:53:a0:59:01:3b:f7:b0:34:44:1b:75:e0:97:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748 Validity Not Before: Apr 29 19:25:51 2024 GMT Not After : May 2 23:43:51 2024 GMT Subject: CN=619B196AB7862DFC182697367084D614F3EC55CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c7:42:be:b7:09:8a:10:b7:25:e4:76:50:f9: 8e:b0:19:b6:84:f6:2e:79:75:0a:d9:21:b3:86:df: 9f:42:53:9c:28:ae:b8:5e:dd:cf:05:d7:cb:ab:69: bf:2d:b6:4d:b4:53:85:4d:b1:ee:5e:9b:2b:1c:cf: 1e:a7:33:c9:2a:99:57:f4:cb:45:21:cc:1b:62:46: 07:01:8b:6f:90:08:e9:18:12:7d:55:aa:57:aa:44: 25:c3:87:67:36:8f:7b:59:bd:2e:c5:21:1b:35:64: 4d:02:78:b7:62:0d:c0:2d:3a:14:2a:30:ea:46:73: 21:9a:77:a5:57:1b:d8:b1:21:94:03:96:e7:9c:08: 16:8e:40:b4:bf:83:e6:73:07:0a:e4:fc:f6:80:c4: 66:a4:85:ae:97:23:b3:37:59:aa:53:04:d8:ac:a5: 25:da:06:77:b2:58:48:c7:b2:ab:70:cd:9f:2c:ac: 73:52:c6:e7:00:13:64:bd:fd:b9:63:2d:82:49:07: d0:9c:4c:f6:e6:05:b7:d3:75:c3:02:52:7d:38:3d: 69:e4:dd:11:87:fd:4a:11:52:aa:f5:29:8c:b1:6f: 08:fa:24:24:f1:cf:45:52:9b:f6:0c:92:4c:32:64: 02:da:33:76:95:c8:64:d8:dc:0a:9a:df:f8:68:6f: 14:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:9B:19:6A:B7:86:2D:FC:18:26:97:36:70:84:D6:14:F3:EC:55:CB X509v3 Authority Key Identifier: keyid:98:9B:87:D4:0F:7C:9F:1B:A5:4A:BC:AE:9B:C7:97:A3:E6:B2:57:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:92:4f:7a:3e:f6:60:27:ae:ae:d9:58:cc:d3:d4:d2:a0:3d: 8a:fa:49:82:7a:70:5f:19:a3:96:31:4a:81:da:c9:74:07:53: e0:68:37:75:b2:1c:06:f8:cc:16:bb:db:a2:c0:d6:93:7c:53: 13:4a:76:79:20:a8:fc:a3:3c:c2:83:4d:d8:de:ad:f5:83:2c: 48:06:8f:d2:c4:26:10:51:b2:b1:86:58:cb:37:6b:a0:06:68: 0e:9c:54:14:73:bc:4c:49:ab:6e:cd:c4:cc:5d:35:5a:e4:88: ee:b9:8a:34:d3:89:59:d0:ea:2f:7e:b8:9a:41:21:c3:a4:48: 29:6d:a6:5a:bc:09:34:7a:17:68:bf:94:86:a7:da:0e:5a:d2: 3f:02:0a:2b:e1:e4:60:20:32:36:21:64:65:cf:e0:6e:1d:20: 43:95:5b:54:05:49:55:2b:d6:d6:32:0a:3e:50:c3:c4:b8:c4: c8:cd:a3:17:eb:53:ed:c7:e3:7a:c3:26:bd:7b:3c:f1:73:3f: 18:c3:a9:3b:33:f8:29:80:53:bf:25:8e:6a:47:4e:c1:d6:9d: 7f:60:4e:62:25:c6:be:4d:54:0b:4b:c5:c0:60:66:24:f1:43: b3:7d:07:9b:74:c7:7f:91:0e:2f:1d:9a:17:68:23:7e:83:3e: 16:2a:0a:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTGKMJAmxU6BZATv3sDREG3Xgl+UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg5Qjg3RDQwRjdDOUYxQkE1NEFCQ0FFOUJDNzk3QTNF NkIyNTc0ODAeFw0yNDA0MjkxOTI1NTFaFw0yNDA1MDIyMzQzNTFaMDMxMTAvBgNV BAMTKDYxOUIxOTZBQjc4NjJERkMxODI2OTczNjcwODRENjE0RjNFQzU1Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDex0K+twmKELcl5HZQ+Y6wGbaE 9i55dQrZIbOG359CU5worrhe3c8F18urab8ttk20U4VNse5emysczx6nM8kqmVf0 y0UhzBtiRgcBi2+QCOkYEn1VqleqRCXDh2c2j3tZvS7FIRs1ZE0CeLdiDcAtOhQq MOpGcyGad6VXG9ixIZQDluecCBaOQLS/g+ZzBwrk/PaAxGakha6XI7M3WapTBNis pSXaBneyWEjHsqtwzZ8srHNSxucAE2S9/bljLYJJB9CcTPbmBbfTdcMCUn04PWnk 3RGH/UoRUqr1KYyxbwj6JCTxz0VSm/YMkkwyZALaM3aVyGTY3Aqa3/hobxSdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYZsZareGLfwYJpc2cITWFPPsVcswHwYDVR0j BBgwFoAUmJuH1A98nxulSryum8eXo+ayV0gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZTUwNjBiOC1mNTcwLTQyZDYtODZmZi0zM2VhN2ZkZjI1MTUvMC85ODlCODdENDBG N0M5RjFCQTU0QUJDQUU5QkM3OTdBM0U2QjI1NzQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg5Qjg3RDQwRjdDOUYxQkE1NEFCQ0FFOUJDNzk3QTNFNkIy NTc0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWU1MDYwYjgtZjU3MC00MmQ2LTg2 ZmYtMzNlYTdmZGYyNTE1LzAvOTg5Qjg3RDQwRjdDOUYxQkE1NEFCQ0FFOUJDNzk3 QTNFNkIyNTc0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGaST3o+9mAnrq7ZWMzT1NKgPYr6SYJ6cF8Z o5YxSoHayXQHU+BoN3WyHAb4zBa726LA1pN8UxNKdnkgqPyjPMKDTdjerfWDLEgG j9LEJhBRsrGGWMs3a6AGaA6cVBRzvExJq27NxMxdNVrkiO65ijTTiVnQ6i9+uJpB IcOkSCltplq8CTR6F2i/lIan2g5a0j8CCivh5GAgMjYhZGXP4G4dIEOVW1QFSVUr 1tYyCj5Qw8S4xMjNoxfrU+3H43rDJr17PPFzPxjDqTsz+CmAU78ljmpHTsHWnX9g TmIlxr5NVAtLxcBgZiTxQ7N9B5t0x3+RDi8dmhdoI36DPhYqCkc= -----END CERTIFICATE-----Generated at Mon Apr 29 20:25:26 2024 by rpki-client on console-fra.rpki-client.org