$ rpki-client -vvf repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft File: 129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft (raw, json) Hash identifier: rOjaoldY0p7RprQxeqevfwTHEWz5JkEsT2kvMScBpR8= Subject key identifier: 20:4A:18:75:16:67:D0:8C:98:3E:E4:6A:E8:F1:68:10:8B:56:9B:23 Authority key identifier: 12:9A:AE:FC:08:D2:04:E9:BE:54:39:C8:07:FF:84:0D:C3:CE:57:F9 Certificate issuer: /CN=129AAEFC08D204E9BE5439C807FF840DC3CE57F9 Certificate serial: 09C76C3D65DA3BA3E0A8F4CFF7C47C4E6766A3BE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft Manifest number: 0146 Signing time: Fri 17 May 2024 18:10:46 +0000 Manifest this update: Fri 17 May 2024 18:05:46 +0000 Manifest next update: Mon 20 May 2024 21:49:46 +0000 Files and hashes: 1: 3130332e39312e302e302f32322d3234203d3e203338343936.roa (hash: i87TyACWQ7ZhbVvoIz5FiY6rt+QM7cK6vcvZ8nf5D/w=) 2: 34352e3131332e3232382e302f32322d3234203d3e20313339333936.roa (hash: Ot4At1+tUgvIlqttQWFd4UQN09/rD5hlu+pQJL/AHeA=) 3: 129AAEFC08D204E9BE5439C807FF840DC3CE57F9.crl (hash: 7ZLueropQoVal4YwRlscPFVeEZEtop7yOh3CGxMmkb0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.crl rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 May 2024 21:49:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:c7:6c:3d:65:da:3b:a3:e0:a8:f4:cf:f7:c4:7c:4e:67:66:a3:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=129AAEFC08D204E9BE5439C807FF840DC3CE57F9 Validity Not Before: May 17 18:05:46 2024 GMT Not After : May 20 21:49:46 2024 GMT Subject: CN=204A18751667D08C983EE46AE8F168108B569B23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:fd:7c:ed:d2:45:b5:f8:f1:de:88:fb:f7:50: 3b:c7:17:f5:c0:4d:ba:0a:20:ef:22:80:d4:a1:3c: fa:bc:8a:f5:09:60:70:52:a4:c9:37:73:77:e1:09: d6:fe:0d:34:39:a4:cc:d2:4c:e5:aa:24:16:e5:fc: 46:8e:f8:1d:73:3e:c8:01:ba:3c:d6:f4:8a:98:05: 93:d1:71:71:fa:47:ba:5a:ff:69:d3:00:e9:0b:c1: a0:cd:54:ce:fb:35:3d:4e:e8:20:db:37:d9:45:14: a5:14:a3:f9:93:bd:65:33:b2:b3:47:e5:6f:f6:5a: dd:dc:b1:4f:ba:a7:8e:7b:72:d0:9c:aa:68:7f:d2: cd:65:8e:b4:3d:a8:87:94:df:76:4b:bd:cc:4f:c3: d1:fe:d9:6c:2e:fc:4b:3d:c1:eb:be:34:ca:35:06: a2:9f:07:2c:55:98:89:8f:22:ab:1f:9b:38:fc:71: f1:7c:35:e4:87:65:9a:da:b5:f4:44:b1:ed:cd:f4: 01:5d:12:55:5e:20:aa:c3:9c:3e:f3:29:7d:a2:96: 53:c9:a7:b1:8c:be:34:30:3b:08:9c:f8:0b:ae:94: 95:30:65:87:92:ab:b8:06:dd:5e:61:c8:54:c3:b3: da:da:42:af:c5:a3:66:a6:d9:03:01:1b:49:5f:66: 06:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:4A:18:75:16:67:D0:8C:98:3E:E4:6A:E8:F1:68:10:8B:56:9B:23 X509v3 Authority Key Identifier: keyid:12:9A:AE:FC:08:D2:04:E9:BE:54:39:C8:07:FF:84:0D:C3:CE:57:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:f4:c7:5d:e2:9e:89:f5:69:17:c0:06:67:4e:f5:f1:1a:57: e2:ba:64:fd:0c:6d:13:38:22:7f:3f:8c:1b:81:b7:2e:d3:c2: 92:12:11:5b:15:b1:71:49:24:1c:b1:8a:f2:71:fd:bf:4c:5f: 82:09:ca:8a:1a:fe:6e:59:63:e0:f9:bb:6d:ba:85:01:20:7b: 0a:ad:d0:fa:98:6b:9e:b9:ca:c5:51:5a:a4:4d:d7:0b:77:b0: ca:a8:38:20:03:20:5a:b8:1d:45:90:07:d2:61:55:43:eb:95: 4f:1a:29:69:a7:01:5d:36:56:5e:c0:32:20:cd:11:ca:59:a8: ac:11:d5:ff:99:d3:87:61:79:c1:75:a8:e5:fd:83:13:15:58: f0:e7:06:ce:fa:b2:28:19:1d:cf:94:3f:36:06:8f:bd:78:30: ab:5d:4d:c3:d0:f9:05:e2:5d:6e:fe:77:e4:25:a6:95:e9:86: 1b:c4:7d:de:4c:dc:32:76:56:d9:89:f0:1c:b1:8b:e5:b1:00: 24:5e:26:26:fb:a4:88:e6:93:02:53:5a:1c:98:2f:40:a0:69: 91:8b:7d:4e:ff:c2:b6:e6:db:01:0e:21:20:ec:b9:c0:af:39: c8:dd:62:28:de:b8:27:87:e1:e6:5a:6d:86:85:cf:27:69:1b: d5:5e:40:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCcdsPWXaO6PgqPTP98R8Tmdmo74wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTI5QUFFRkMwOEQyMDRFOUJFNTQzOUM4MDdGRjg0MERD M0NFNTdGOTAeFw0yNDA1MTcxODA1NDZaFw0yNDA1MjAyMTQ5NDZaMDMxMTAvBgNV BAMTKDIwNEExODc1MTY2N0QwOEM5ODNFRTQ2QUU4RjE2ODEwOEI1NjlCMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa/Xzt0kW1+PHeiPv3UDvHF/XA TboKIO8igNShPPq8ivUJYHBSpMk3c3fhCdb+DTQ5pMzSTOWqJBbl/EaO+B1zPsgB ujzW9IqYBZPRcXH6R7pa/2nTAOkLwaDNVM77NT1O6CDbN9lFFKUUo/mTvWUzsrNH 5W/2Wt3csU+6p457ctCcqmh/0s1ljrQ9qIeU33ZLvcxPw9H+2Wwu/Es9weu+NMo1 BqKfByxVmImPIqsfmzj8cfF8NeSHZZratfREse3N9AFdElVeIKrDnD7zKX2illPJ p7GMvjQwOwic+AuulJUwZYeSq7gG3V5hyFTDs9raQq/Fo2am2QMBG0lfZgZDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIEoYdRZn0IyYPuRq6PFoEItWmyMwHwYDVR0j BBgwFoAUEpqu/AjSBOm+VDnIB/+EDcPOV/kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjM2NTVmMS0zOGI2LTQ0MTUtOGZhZi0yYjViOTE1M2U1MmQvMC8xMjlBQUVGQzA4 RDIwNEU5QkU1NDM5QzgwN0ZGODQwREMzQ0U1N0Y5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTI5QUFFRkMwOEQyMDRFOUJFNTQzOUM4MDdGRjg0MERDM0NF NTdGOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTYzNjU1ZjEtMzhiNi00NDE1LThm YWYtMmI1YjkxNTNlNTJkLzAvMTI5QUFFRkMwOEQyMDRFOUJFNTQzOUM4MDdGRjg0 MERDM0NFNTdGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC/0x13inon1aRfABmdO9fEaV+K6ZP0MbRM4 In8/jBuBty7TwpISEVsVsXFJJByxivJx/b9MX4IJyooa/m5ZY+D5u226hQEgewqt 0PqYa565ysVRWqRN1wt3sMqoOCADIFq4HUWQB9JhVUPrlU8aKWmnAV02Vl7AMiDN EcpZqKwR1f+Z04dhecF1qOX9gxMVWPDnBs76sigZHc+UPzYGj714MKtdTcPQ+QXi XW7+d+QlppXphhvEfd5M3DJ2VtmJ8Byxi+WxACReJib7pIjmkwJTWhyYL0CgaZGL fU7/wrbm2wEOISDsucCvOcjdYijeuCeH4eZabYaFzydpG9VeQGU= -----END CERTIFICATE-----Generated at Fri May 17 20:09:56 2024 by rpki-client on console-fra.rpki-client.org