$ rpki-client -vvf repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.mft File: 03EF4149C5DB07AC348E58E4DA39BDDD971426FE.mft (raw, json) Hash identifier: lCGMzcdpEl7dqRucvj7e9KeThZrEvHwvkt4BSkiMXuU= Subject key identifier: DC:AB:EB:84:5F:5B:7F:F2:B0:9C:FA:20:75:54:A4:B3:F0:10:5B:06 Authority key identifier: 03:EF:41:49:C5:DB:07:AC:34:8E:58:E4:DA:39:BD:DD:97:14:26:FE Certificate issuer: /CN=03EF4149C5DB07AC348E58E4DA39BDDD971426FE Certificate serial: 4B2509028A96E1D0F18027C396BBC3AF6B544478 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.mft Manifest number: 02AB Signing time: Thu 09 May 2024 18:50:51 +0000 Manifest this update: Thu 09 May 2024 18:45:51 +0000 Manifest next update: Mon 13 May 2024 02:04:51 +0000 Files and hashes: 1: 3130332e3136362e36362e302f32332d3234203d3e203137393935.roa (hash: CnGxm0RZSknHCwF6AWvzsjsshIEFTRheXNTiNI0Zejw=) 2: 03EF4149C5DB07AC348E58E4DA39BDDD971426FE.crl (hash: m7+gxzvWRWjnQf00EcpRnG8N7VJ5Ib6UckJgqyqCx6Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.crl rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 14:20:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:25:09:02:8a:96:e1:d0:f1:80:27:c3:96:bb:c3:af:6b:54:44:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03EF4149C5DB07AC348E58E4DA39BDDD971426FE Validity Not Before: May 9 18:45:51 2024 GMT Not After : May 13 02:04:51 2024 GMT Subject: CN=DCABEB845F5B7FF2B09CFA207554A4B3F0105B06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:63:06:f9:dd:99:04:1b:8f:13:fb:6b:f4:04: 87:4e:6c:e3:09:7d:e5:fd:48:3e:d7:a9:6f:d9:26: 2a:4c:3d:ea:76:84:f2:66:86:bb:64:df:9b:c1:1b: a6:60:cb:63:c0:b1:b9:fd:7c:69:fb:ff:1b:c7:56: 2d:36:ee:f0:f1:2d:ba:c9:11:cc:0a:a7:84:25:32: 87:d7:e6:15:34:0d:f7:f4:31:f1:c7:eb:1c:3d:27: 0f:7a:98:c8:97:0a:10:49:a3:ca:b1:b5:ff:ec:33: 85:ab:f5:75:d8:0d:67:72:25:4f:48:f1:67:25:f3: 0d:76:59:0e:58:0a:99:c4:33:5c:18:2b:bf:60:5f: 63:93:f1:1e:aa:35:24:b3:24:a7:a8:7f:73:d9:17: 2f:ec:88:3b:82:79:15:fb:1e:5f:9e:75:4b:87:38: 45:4e:7a:c6:9e:03:05:69:27:2b:43:1c:fd:f4:4f: 9e:59:2e:13:74:05:7a:01:2b:6e:9a:c3:6e:da:32: da:80:d3:45:6c:6b:34:6f:5b:f1:02:a6:6c:70:78: 71:76:b2:c0:52:bc:e3:27:02:80:9c:d9:a5:6f:14: 38:e3:d7:3b:8f:6a:0b:95:9a:57:f9:b0:76:bd:14: 88:33:d7:f5:1f:6c:66:77:48:eb:bf:36:87:27:54: 3f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:AB:EB:84:5F:5B:7F:F2:B0:9C:FA:20:75:54:A4:B3:F0:10:5B:06 X509v3 Authority Key Identifier: keyid:03:EF:41:49:C5:DB:07:AC:34:8E:58:E4:DA:39:BD:DD:97:14:26:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:63:30:62:f6:5d:4b:5b:64:1e:86:55:98:f5:70:6d:60:ef: 01:fd:5c:c3:8d:59:79:0f:77:76:f8:1c:18:d5:5b:80:62:44: 0a:ab:1e:29:90:31:63:cc:88:b5:82:cc:7b:d5:92:da:32:71: 95:0a:4d:1d:31:a7:b1:75:4a:9a:1f:49:e7:e0:91:40:b4:ec: 07:f3:23:a8:41:1c:db:10:a3:32:8f:28:5b:d8:90:0e:09:3d: 37:fa:11:01:0a:f7:d0:5c:f4:0e:01:eb:a3:eb:f5:89:84:e6: 04:f6:89:cb:40:8e:6c:09:71:51:0a:69:78:05:a7:ff:0b:41: d0:97:1b:9e:fe:cc:77:17:39:78:a9:17:61:c7:e1:39:dc:60: c3:7a:7b:a5:97:8a:8e:6d:45:ea:70:2a:7d:ac:d9:5b:5a:64: 83:05:64:ee:30:29:22:c2:64:78:62:bc:8d:0b:14:af:69:35: 59:a7:69:a7:68:17:0c:75:b6:87:d1:c9:1f:6a:3a:b3:6e:22: 72:0d:d5:15:8b:f5:9b:6c:d0:3a:73:a5:2e:0e:b9:d0:e4:00: ee:fa:b2:63:61:27:19:d8:03:df:b0:ff:22:e7:bb:08:c8:56: 1f:43:36:4b:28:94:99:c5:e3:44:80:80:68:83:79:50:6e:0e: 6a:ec:6a:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSyUJAoqW4dDxgCfDlrvDr2tURHgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDNFRjQxNDlDNURCMDdBQzM0OEU1OEU0REEzOUJEREQ5 NzE0MjZGRTAeFw0yNDA1MDkxODQ1NTFaFw0yNDA1MTMwMjA0NTFaMDMxMTAvBgNV BAMTKERDQUJFQjg0NUY1QjdGRjJCMDlDRkEyMDc1NTRBNEIzRjAxMDVCMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZYwb53ZkEG48T+2v0BIdObOMJ feX9SD7XqW/ZJipMPep2hPJmhrtk35vBG6Zgy2PAsbn9fGn7/xvHVi027vDxLbrJ EcwKp4QlMofX5hU0Dff0MfHH6xw9Jw96mMiXChBJo8qxtf/sM4Wr9XXYDWdyJU9I 8Wcl8w12WQ5YCpnEM1wYK79gX2OT8R6qNSSzJKeof3PZFy/siDuCeRX7Hl+edUuH OEVOesaeAwVpJytDHP30T55ZLhN0BXoBK26aw27aMtqA00VsazRvW/ECpmxweHF2 ssBSvOMnAoCc2aVvFDjj1zuPaguVmlf5sHa9FIgz1/UfbGZ3SOu/NocnVD/PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3KvrhF9bf/KwnPogdVSks/AQWwYwHwYDVR0j BBgwFoAUA+9BScXbB6w0jljk2jm93ZcUJv4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NTdlNWIwZS01OTY0LTQ2M2YtODA0MS0zMzdmODA1NTY0M2MvMC8wM0VGNDE0OUM1 REIwN0FDMzQ4RTU4RTREQTM5QkRERDk3MTQyNkZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDNFRjQxNDlDNURCMDdBQzM0OEU1OEU0REEzOUJEREQ5NzE0 MjZGRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTU3ZTViMGUtNTk2NC00NjNmLTgw NDEtMzM3ZjgwNTU2NDNjLzAvMDNFRjQxNDlDNURCMDdBQzM0OEU1OEU0REEzOUJE REQ5NzE0MjZGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABRjMGL2XUtbZB6GVZj1cG1g7wH9XMONWXkP d3b4HBjVW4BiRAqrHimQMWPMiLWCzHvVktoycZUKTR0xp7F1SpofSefgkUC07Afz I6hBHNsQozKPKFvYkA4JPTf6EQEK99Bc9A4B66Pr9YmE5gT2ictAjmwJcVEKaXgF p/8LQdCXG57+zHcXOXipF2HH4TncYMN6e6WXio5tRepwKn2s2VtaZIMFZO4wKSLC ZHhivI0LFK9pNVmnaadoFwx1tofRyR9qOrNuInIN1RWL9Zts0DpzpS4OudDkAO76 smNhJxnYA9+w/yLnuwjIVh9DNksolJnF40SAgGiDeVBuDmrsat4= -----END CERTIFICATE-----Generated at Thu May 9 20:54:34 2024 by rpki-client on console-fra.rpki-client.org