$ rpki-client -vvf repo-rpki.idnic.net/repo/ec2fc1d4-37a6-4943-b4c6-6d8e9b4e5591/0/432AE9E2B00941EF8925409E82CA40508A4688B1.mft File: 432AE9E2B00941EF8925409E82CA40508A4688B1.mft (raw, json) Hash identifier: yX++D+JamYLJmnuqF4kMWnIIFt0l273TSlAgTNlyQk8= Subject key identifier: E7:E1:C3:82:77:9B:53:63:AC:A6:32:4E:6A:62:06:F9:31:37:3D:EC Authority key identifier: 43:2A:E9:E2:B0:09:41:EF:89:25:40:9E:82:CA:40:50:8A:46:88:B1 Certificate issuer: /CN=432AE9E2B00941EF8925409E82CA40508A4688B1 Certificate serial: 13C666BA3CE6F3C5D91AD0A0321FEDECD26BEA9D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/432AE9E2B00941EF8925409E82CA40508A4688B1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ec2fc1d4-37a6-4943-b4c6-6d8e9b4e5591/0/432AE9E2B00941EF8925409E82CA40508A4688B1.mft Manifest number: 3A Signing time: Thu 16 May 2024 22:31:44 +0000 Manifest this update: Thu 16 May 2024 22:26:44 +0000 Manifest next update: Sun 19 May 2024 22:39:44 +0000 Files and hashes: 1: 3135372e31302e3136302e302f32332d3234203d3e20313336303532.roa (hash: JvWayg5dc2xDP/4DFHc9KwfldN6lyp17KnD2mXZm0oQ=) 2: 432AE9E2B00941EF8925409E82CA40508A4688B1.crl (hash: rTuCOGw6YOppmp5+I4mk2Ep9quHhyC5ndkxzY4pOrLw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ec2fc1d4-37a6-4943-b4c6-6d8e9b4e5591/0/432AE9E2B00941EF8925409E82CA40508A4688B1.crl rsync://repo-rpki.idnic.net/repo/ec2fc1d4-37a6-4943-b4c6-6d8e9b4e5591/0/432AE9E2B00941EF8925409E82CA40508A4688B1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/432AE9E2B00941EF8925409E82CA40508A4688B1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 May 2024 15:49:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:c6:66:ba:3c:e6:f3:c5:d9:1a:d0:a0:32:1f:ed:ec:d2:6b:ea:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=432AE9E2B00941EF8925409E82CA40508A4688B1 Validity Not Before: May 16 22:26:44 2024 GMT Not After : May 19 22:39:44 2024 GMT Subject: CN=E7E1C382779B5363ACA6324E6A6206F931373DEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:94:56:21:e3:42:97:d1:17:ba:9a:2e:e6:79: de:16:da:6b:33:ff:f2:ad:e6:0f:34:7c:7b:75:63: 68:4d:b3:a5:6a:ab:38:de:c3:ff:1e:9c:33:b8:f2: ac:b5:c3:95:6f:3c:35:ba:7c:08:9f:c0:e5:07:6d: 51:97:08:52:43:52:e1:55:cb:6c:88:d8:42:42:76: bc:ef:45:77:2b:81:3f:e8:00:c3:9b:84:fc:9f:9b: 0b:11:49:e8:e4:21:51:f0:5e:eb:90:52:b6:dd:c1: a3:f3:09:9a:b6:9b:e3:d4:3f:86:31:b2:be:22:6c: 0a:a8:f1:ee:a0:30:f8:60:69:09:ad:77:64:bd:f0: 77:3f:5c:db:e8:1b:dc:79:38:70:9f:a2:5d:76:93: d9:00:94:c1:73:6c:9b:c5:b7:7c:fe:fb:0d:dd:18: f2:e0:02:84:d1:1c:68:4e:ef:ca:5f:89:56:9b:f3: 36:0a:28:87:f3:7c:66:88:0f:72:c1:f2:26:62:a7: 52:7a:95:7f:65:68:a1:29:d8:6a:06:d8:67:21:b3: c9:da:05:0e:39:9c:61:73:72:2e:46:db:38:38:71: 3e:e4:8d:e1:ba:8a:51:72:bf:c7:c2:38:53:d5:1e: c3:e9:45:40:de:62:81:3e:1f:1f:c0:ee:51:63:a3: 2d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:E1:C3:82:77:9B:53:63:AC:A6:32:4E:6A:62:06:F9:31:37:3D:EC X509v3 Authority Key Identifier: keyid:43:2A:E9:E2:B0:09:41:EF:89:25:40:9E:82:CA:40:50:8A:46:88:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ec2fc1d4-37a6-4943-b4c6-6d8e9b4e5591/0/432AE9E2B00941EF8925409E82CA40508A4688B1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/432AE9E2B00941EF8925409E82CA40508A4688B1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec2fc1d4-37a6-4943-b4c6-6d8e9b4e5591/0/432AE9E2B00941EF8925409E82CA40508A4688B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:f2:fe:6c:fc:78:6b:43:21:d9:2f:d8:4b:d1:75:2f:a1:29: 29:5b:18:74:0e:83:6e:88:24:96:98:68:4a:7d:9c:72:be:86: 94:3e:28:14:81:d2:a0:1b:4b:2e:27:ed:5a:93:6d:db:5a:fc: b0:87:e0:ea:13:4b:91:d6:6c:05:79:b0:a0:fa:17:b4:84:a2: 3e:62:ab:e0:52:91:78:b9:cd:a0:6c:5d:50:10:67:27:c0:d0: ae:bd:cd:1f:cc:cf:1a:e2:1e:c2:87:7c:c8:65:2c:85:96:33: 77:c8:b5:1b:44:b2:1c:55:98:c3:66:a7:75:5a:16:6b:fd:b1: f3:73:c4:49:d1:07:03:64:04:e7:b3:c7:e2:7d:a2:b5:0d:89: 01:b7:7f:3a:66:0e:15:9b:85:da:e5:81:71:eb:d1:4a:ab:6e: b2:f8:3b:93:51:f5:e4:c3:2a:f9:ab:a8:06:55:a1:a8:65:41: 7a:b9:c3:2d:ef:c7:c1:35:2a:b7:20:01:53:fa:70:a0:57:d5: 90:a7:e9:84:5e:2b:c4:be:94:bb:14:e2:f2:74:03:41:82:ea: ca:cd:6f:04:2d:06:89:a7:23:74:df:5f:57:a8:09:59:ef:83: 0c:28:12:53:82:56:ae:9d:87:e6:24:cf:4d:86:81:02:44:f1: a2:ca:36:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE8Zmujzm88XZGtCgMh/t7NJr6p0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDMyQUU5RTJCMDA5NDFFRjg5MjU0MDlFODJDQTQwNTA4 QTQ2ODhCMTAeFw0yNDA1MTYyMjI2NDRaFw0yNDA1MTkyMjM5NDRaMDMxMTAvBgNV BAMTKEU3RTFDMzgyNzc5QjUzNjNBQ0E2MzI0RTZBNjIwNkY5MzEzNzNERUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCplFYh40KX0Re6mi7med4W2msz //Kt5g80fHt1Y2hNs6Vqqzjew/8enDO48qy1w5VvPDW6fAifwOUHbVGXCFJDUuFV y2yI2EJCdrzvRXcrgT/oAMObhPyfmwsRSejkIVHwXuuQUrbdwaPzCZq2m+PUP4Yx sr4ibAqo8e6gMPhgaQmtd2S98Hc/XNvoG9x5OHCfol12k9kAlMFzbJvFt3z++w3d GPLgAoTRHGhO78pfiVab8zYKKIfzfGaID3LB8iZip1J6lX9laKEp2GoG2Gchs8na BQ45nGFzci5G2zg4cT7kjeG6ilFyv8fCOFPVHsPpRUDeYoE+Hx/A7lFjoy3DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5+HDgnebU2OspjJOamIG+TE3PewwHwYDVR0j BBgwFoAUQyrp4rAJQe+JJUCegspAUIpGiLEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YzJmYzFkNC0zN2E2LTQ5NDMtYjRjNi02ZDhlOWI0ZTU1OTEvMC80MzJBRTlFMkIw MDk0MUVGODkyNTQwOUU4MkNBNDA1MDhBNDY4OEIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDMyQUU5RTJCMDA5NDFFRjg5MjU0MDlFODJDQTQwNTA4QTQ2 ODhCMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWMyZmMxZDQtMzdhNi00OTQzLWI0 YzYtNmQ4ZTliNGU1NTkxLzAvNDMyQUU5RTJCMDA5NDFFRjg5MjU0MDlFODJDQTQw NTA4QTQ2ODhCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAzy/mz8eGtDIdkv2EvRdS+hKSlbGHQOg26I JJaYaEp9nHK+hpQ+KBSB0qAbSy4n7VqTbdta/LCH4OoTS5HWbAV5sKD6F7SEoj5i q+BSkXi5zaBsXVAQZyfA0K69zR/MzxriHsKHfMhlLIWWM3fItRtEshxVmMNmp3Va Fmv9sfNzxEnRBwNkBOezx+J9orUNiQG3fzpmDhWbhdrlgXHr0UqrbrL4O5NR9eTD KvmrqAZVoahlQXq5wy3vx8E1KrcgAVP6cKBX1ZCn6YReK8S+lLsU4vJ0A0GC6srN bwQtBomnI3TfX1eoCVnvgwwoElOCVq6dh+Ykz02GgQJE8aLKNp8= -----END CERTIFICATE-----Generated at Thu May 16 22:57:55 2024 by rpki-client on console-fra.rpki-client.org