$ rpki-client -vvf repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft File: 401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft (raw, json) Hash identifier: gDtxlQKPoLAeAnMwYcSHsBbAnIQWlmq6hMEk1OPQ/cA= Subject key identifier: 32:96:2E:A7:1D:5E:12:9F:A4:24:07:8E:08:3B:BE:11:0A:69:87:7B Authority key identifier: 40:1A:A5:6A:F5:99:CC:A2:CD:71:A6:84:FF:CF:53:FF:F9:DD:E3:DD Certificate issuer: /CN=401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD Certificate serial: 4F1C69A5832DE241F28BD07B712069CC082C8CED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft Manifest number: 010C Signing time: Wed 08 May 2024 12:41:40 +0000 Manifest this update: Wed 08 May 2024 12:36:40 +0000 Manifest next update: Sat 11 May 2024 14:24:40 +0000 Files and hashes: 1: 401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.crl (hash: Qn7ZlHZrMcxz9reEDYvvChJpwINzXspm62VDreOaTvI=) 2: 3130332e3136302e36392e302f32342d3234203d3e20313431363037.roa (hash: xK4b1jUjZ9jqJFWlefkvy2QdSELPFB6yDik606inff4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.crl rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 14:24:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:1c:69:a5:83:2d:e2:41:f2:8b:d0:7b:71:20:69:cc:08:2c:8c:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD Validity Not Before: May 8 12:36:40 2024 GMT Not After : May 11 14:24:40 2024 GMT Subject: CN=32962EA71D5E129FA424078E083BBE110A69877B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:77:1a:20:29:76:5e:0e:8f:76:12:b9:29:c3: f5:a0:dd:12:da:4b:a8:2b:cb:6e:36:ca:e5:01:e5: 38:7b:86:d1:6c:0b:a2:7a:b1:33:0d:ae:a1:ac:8a: 08:68:3c:ef:eb:83:73:4d:5c:74:fa:bd:24:a8:a4: cb:1d:9f:a7:c8:ac:7e:d3:ba:71:a2:17:ee:c7:b5: 5a:a9:53:8d:3a:2b:4a:d3:a8:6a:e5:6f:9b:10:6a: 88:02:49:ad:54:f6:82:04:ba:c8:5c:0f:ca:2d:c8: b5:86:bb:8c:2d:00:b6:70:e6:19:8b:d8:58:8f:19: 91:c6:a5:ed:01:31:17:17:18:3e:f1:44:31:f0:19: 6d:00:5a:d5:9a:31:29:87:3e:18:f4:0e:53:be:4a: 14:2b:2b:0e:69:0f:18:b7:d6:d0:93:05:a6:93:2d: ff:c3:03:bc:21:cf:74:6b:0f:2e:22:ad:e0:62:9f: c4:fa:dc:9c:fa:1d:a3:63:6b:b7:7e:3e:19:9e:aa: f4:0c:bf:23:32:97:57:45:83:b6:84:3c:7b:82:3a: 54:5d:72:20:97:61:aa:f4:9e:ef:28:d7:e0:06:15: c5:d3:bb:b3:f1:c6:e8:ee:11:27:2e:f5:d7:bf:5b: b0:ee:b3:e8:a5:6e:35:b3:d4:bb:6e:7c:58:93:00: 42:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:96:2E:A7:1D:5E:12:9F:A4:24:07:8E:08:3B:BE:11:0A:69:87:7B X509v3 Authority Key Identifier: keyid:40:1A:A5:6A:F5:99:CC:A2:CD:71:A6:84:FF:CF:53:FF:F9:DD:E3:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:24:46:d5:7d:41:86:d2:f9:9c:b9:59:7e:71:f5:aa:70:65: 2a:7f:b2:66:7c:83:6a:ee:2d:6b:42:e0:79:ee:a9:84:77:17: 83:6b:f2:8f:06:d2:04:72:e9:31:a6:ac:d7:38:04:6c:5a:07: 06:15:da:14:95:6e:66:c0:a9:22:7b:ed:4a:92:ed:78:28:a6: 07:0c:57:36:1a:6f:b8:ab:68:01:47:73:10:95:6e:70:f6:de: 88:6b:4c:62:5e:3b:1a:1d:f4:62:eb:e1:f3:b0:2a:aa:17:ca: 84:11:48:64:a8:ea:bd:eb:5f:9f:71:88:63:61:1f:92:32:28: b5:dd:be:a9:17:38:0c:26:cc:f0:d6:4c:df:0a:6c:93:01:16: e5:d6:45:d1:da:9d:78:af:8b:80:8c:fa:e6:67:ed:6d:20:89: 98:b7:55:79:39:d3:7d:2a:49:a1:30:f9:69:fb:07:1c:f6:4e: 8e:d6:c1:88:94:63:87:e9:cc:a6:7d:f6:4c:60:f8:e8:cb:74: e4:ca:e9:54:4b:e6:8c:16:74:4c:3f:fa:c7:d6:44:44:dd:a2: 64:2f:ac:67:89:6e:42:42:c0:60:d6:34:2e:c6:5e:2f:83:e1: a4:1c:de:bd:af:10:fe:00:4f:46:4f:bd:1e:b1:b5:e1:f8:3a: 29:be:6d:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTxxppYMt4kHyi9B7cSBpzAgsjO0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDAxQUE1NkFGNTk5Q0NBMkNENzFBNjg0RkZDRjUzRkZG OURERTNERDAeFw0yNDA1MDgxMjM2NDBaFw0yNDA1MTExNDI0NDBaMDMxMTAvBgNV BAMTKDMyOTYyRUE3MUQ1RTEyOUZBNDI0MDc4RTA4M0JCRTExMEE2OTg3N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5dxogKXZeDo92Erkpw/Wg3RLa S6gry242yuUB5Th7htFsC6J6sTMNrqGsighoPO/rg3NNXHT6vSSopMsdn6fIrH7T unGiF+7HtVqpU406K0rTqGrlb5sQaogCSa1U9oIEushcD8otyLWGu4wtALZw5hmL 2FiPGZHGpe0BMRcXGD7xRDHwGW0AWtWaMSmHPhj0DlO+ShQrKw5pDxi31tCTBaaT Lf/DA7whz3RrDy4ireBin8T63Jz6HaNja7d+PhmeqvQMvyMyl1dFg7aEPHuCOlRd ciCXYar0nu8o1+AGFcXTu7PxxujuEScu9de/W7Dus+ilbjWz1LtufFiTAEK3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMpYupx1eEp+kJAeOCDu+EQpph3swHwYDVR0j BBgwFoAUQBqlavWZzKLNcaaE/89T//nd490wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWM3OWZiZS00NzkwLTQ2YmUtYjliMi0wMzU5YjFhMThlMzMvMC80MDFBQTU2QUY1 OTlDQ0EyQ0Q3MUE2ODRGRkNGNTNGRkY5RERFM0RELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDAxQUE1NkFGNTk5Q0NBMkNENzFBNjg0RkZDRjUzRkZGOURE RTNERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFjNzlmYmUtNDc5MC00NmJlLWI5 YjItMDM1OWIxYTE4ZTMzLzAvNDAxQUE1NkFGNTk5Q0NBMkNENzFBNjg0RkZDRjUz RkZGOURERTNERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFIkRtV9QYbS+Zy5WX5x9apwZSp/smZ8g2ru LWtC4HnuqYR3F4Nr8o8G0gRy6TGmrNc4BGxaBwYV2hSVbmbAqSJ77UqS7XgopgcM VzYab7iraAFHcxCVbnD23ohrTGJeOxod9GLr4fOwKqoXyoQRSGSo6r3rX59xiGNh H5IyKLXdvqkXOAwmzPDWTN8KbJMBFuXWRdHanXivi4CM+uZn7W0giZi3VXk5030q SaEw+Wn7Bxz2To7WwYiUY4fpzKZ99kxg+OjLdOTK6VRL5owWdEw/+sfWRETdomQv rGeJbkJCwGDWNC7GXi+D4aQc3r2vEP4AT0ZPvR6xteH4Oim+bWs= -----END CERTIFICATE-----Generated at Wed May 8 15:17:50 2024 by rpki-client on console-fra.rpki-client.org