$ rpki-client -vvf repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.mft File: ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.mft (raw, json) Hash identifier: hhYiE/CfM2jrjgqneiJdQyVqx9z5jv2w75+HDgg5tas= Subject key identifier: C6:6F:5D:D0:54:16:88:69:A3:DC:92:2C:B7:53:69:55:64:F4:F2:FF Authority key identifier: AC:C3:D7:9A:B1:BE:F6:2B:C0:09:5B:6F:6A:C3:F3:44:6A:A9:03:53 Certificate issuer: /CN=ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353 Certificate serial: 4EC15FA4A306C3B8BBF5818377D51ED385D0F41F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.mft Manifest number: 0428 Signing time: Wed 01 May 2024 01:20:49 +0000 Manifest this update: Wed 01 May 2024 01:15:49 +0000 Manifest next update: Sat 04 May 2024 05:19:49 +0000 Files and hashes: 1: 3130312e35302e302e302f32322d3234203d3e203535363838.roa (hash: FiQnpu5OE+HpaI42os6RcPZZIuH3AwzrGlamDj9hGqU=) 2: ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.crl (hash: ViwU5NoVVPADci1MV1eIF5Ele0wqkh4P5fzJxszIHWw=) 3: 3130332e35362e3134382e302f32332d3234203d3e203535363838.roa (hash: 9eIs6FCsirZKarXXGaRn5pWG/cKv6OiQaMXMmT4dHzY=) 4: 323030313a6466343a336230303a3a2f34382d3438203d3e203535363838.roa (hash: vEA4pWJZcOTy0Ne56MZk6t2oWMjbzCkei5Y3lK0bhTk=) 5: 3130332e32372e3230362e302f32332d3234203d3e203535363838.roa (hash: 6sn1IVw1eIhaHfpBQapDJPCxqkms0Xi4zlimi+ErLnQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.crl rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 05:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:c1:5f:a4:a3:06:c3:b8:bb:f5:81:83:77:d5:1e:d3:85:d0:f4:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353 Validity Not Before: May 1 01:15:49 2024 GMT Not After : May 4 05:19:49 2024 GMT Subject: CN=C66F5DD054168869A3DC922CB753695564F4F2FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:bd:4b:d6:d2:69:5f:cc:dd:5a:a3:70:31:5c: 6a:a6:9f:fc:7e:14:06:4f:ed:3d:8a:69:40:79:ac: 60:82:74:e5:a3:d2:bb:97:38:8a:62:68:0f:bd:53: 8e:5a:94:77:69:52:a9:18:af:57:4e:58:5f:ac:0b: f6:90:f4:cb:c4:ae:35:55:da:17:8c:6b:cc:79:89: d0:5c:e8:93:a8:f8:06:a7:cd:b2:00:7f:6d:ef:e6: 49:57:df:4e:3e:9a:84:58:62:c2:24:3f:06:a8:8c: 9f:7a:b5:e2:76:2f:a2:d5:be:d9:3c:4e:42:db:24: 83:56:5d:37:2b:b8:49:b8:c9:62:c6:bc:ed:b2:e7: f1:53:00:2e:fa:34:ca:7a:98:f8:a0:bf:fc:6e:e2: ac:be:0e:39:ba:51:ce:5e:64:02:7e:0d:03:4a:68: ea:41:92:44:25:a2:30:5e:16:20:91:e8:89:40:2d: c2:da:7b:32:21:4c:4e:ab:7a:14:0f:9a:35:64:8f: 50:99:d4:61:23:9a:c7:2e:2a:9b:aa:8b:e3:51:86: a3:90:76:9f:a2:1f:09:0c:74:7a:05:52:01:49:09: e0:ae:6f:d6:b8:3f:bd:9e:88:f0:8a:88:e1:9a:d9: 52:55:49:4a:63:14:6f:11:70:2f:5e:4a:b8:45:5c: ec:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:6F:5D:D0:54:16:88:69:A3:DC:92:2C:B7:53:69:55:64:F4:F2:FF X509v3 Authority Key Identifier: keyid:AC:C3:D7:9A:B1:BE:F6:2B:C0:09:5B:6F:6A:C3:F3:44:6A:A9:03:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:64:e5:c7:cf:42:ba:dc:d9:56:81:43:d0:1e:93:cf:5f:49: f9:28:25:20:5b:bd:3f:05:ec:37:d5:db:86:b0:77:f6:2e:9a: 78:6d:e4:c8:8b:9e:bc:a0:52:ef:8c:31:49:cf:28:0c:a9:ea: b8:5d:6c:cd:52:6c:ae:96:83:9d:3a:f8:a4:b9:59:f2:9b:ea: 43:d2:56:39:cf:58:f7:f6:1d:9b:6e:a7:45:d9:30:5f:26:fd: b9:dd:f2:03:49:d6:ff:c1:4e:03:d6:a0:9c:83:1e:27:3c:eb: 17:05:e1:23:1d:8e:c6:02:eb:33:99:12:53:fb:12:0c:0e:18: 12:d9:48:55:e3:83:bc:e8:2d:27:19:e8:2b:18:31:e4:c9:26: 1c:d3:25:27:39:be:02:46:4b:b0:98:ac:7b:20:06:2e:a2:29: d5:c4:33:43:03:af:25:d0:5e:c2:6f:c8:22:d0:e9:80:2d:02: f8:73:f8:d0:5e:3a:c8:81:d8:e9:25:36:ad:1e:f2:56:77:91: 35:88:97:91:21:60:0b:f8:07:5c:a2:06:69:9a:e4:e7:c9:6c: 01:39:c2:4d:a9:a7:f2:bd:94:70:b9:67:18:f1:d2:07:ef:b0: b9:3f:23:c7:81:83:b6:98:d4:a4:dd:f2:f7:18:14:98:0e:0c: d7:fd:dd:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTsFfpKMGw7i79YGDd9Ue04XQ9B8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUNDM0Q3OUFCMUJFRjYyQkMwMDk1QjZGNkFDM0YzNDQ2 QUE5MDM1MzAeFw0yNDA1MDEwMTE1NDlaFw0yNDA1MDQwNTE5NDlaMDMxMTAvBgNV BAMTKEM2NkY1REQwNTQxNjg4NjlBM0RDOTIyQ0I3NTM2OTU1NjRGNEYyRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPvUvW0mlfzN1ao3AxXGqmn/x+ FAZP7T2KaUB5rGCCdOWj0ruXOIpiaA+9U45alHdpUqkYr1dOWF+sC/aQ9MvErjVV 2heMa8x5idBc6JOo+AanzbIAf23v5klX304+moRYYsIkPwaojJ96teJ2L6LVvtk8 TkLbJINWXTcruEm4yWLGvO2y5/FTAC76NMp6mPigv/xu4qy+Djm6Uc5eZAJ+DQNK aOpBkkQlojBeFiCR6IlALcLaezIhTE6rehQPmjVkj1CZ1GEjmscuKpuqi+NRhqOQ dp+iHwkMdHoFUgFJCeCub9a4P72eiPCKiOGa2VJVSUpjFG8RcC9eSrhFXOwVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxm9d0FQWiGmj3JIst1NpVWT08v8wHwYDVR0j BBgwFoAUrMPXmrG+9ivACVtvasPzRGqpA1MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NzU4YzgwZS1hMzI4LTRmOGMtYTAzZi05MWMzYzI2MjE0YTIvMC9BQ0MzRDc5QUIx QkVGNjJCQzAwOTVCNkY2QUMzRjM0NDZBQTkwMzUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUNDM0Q3OUFCMUJFRjYyQkMwMDk1QjZGNkFDM0YzNDQ2QUE5 MDM1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTc1OGM4MGUtYTMyOC00ZjhjLWEw M2YtOTFjM2MyNjIxNGEyLzAvQUNDM0Q3OUFCMUJFRjYyQkMwMDk1QjZGNkFDM0Yz NDQ2QUE5MDM1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAFk5cfPQrrc2VaBQ9Aek89fSfkoJSBbvT8F 7DfV24awd/Yumnht5MiLnrygUu+MMUnPKAyp6rhdbM1SbK6Wg506+KS5WfKb6kPS VjnPWPf2HZtup0XZMF8m/bnd8gNJ1v/BTgPWoJyDHic86xcF4SMdjsYC6zOZElP7 EgwOGBLZSFXjg7zoLScZ6CsYMeTJJhzTJSc5vgJGS7CYrHsgBi6iKdXEM0MDryXQ XsJvyCLQ6YAtAvhz+NBeOsiB2OklNq0e8lZ3kTWIl5EhYAv4B1yiBmma5OfJbAE5 wk2pp/K9lHC5Zxjx0gfvsLk/I8eBg7aY1KTd8vcYFJgODNf93R8= -----END CERTIFICATE-----Generated at Wed May 1 02:45:13 2024 by rpki-client on console-ams.rpki-client.org