$ rpki-client -vvf repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.mft File: 45164C20EAF7FAB583FB12C81727150895FCEC70.mft (raw, json) Hash identifier: ynh4Z5hkq0k0BGRFNtFQHOyGR5u6+ese/4/ihsKNv2Q= Subject key identifier: BF:D2:06:4F:FD:E4:65:F4:C4:96:3E:76:E0:45:9F:EF:9B:B7:3D:8A Authority key identifier: 45:16:4C:20:EA:F7:FA:B5:83:FB:12:C8:17:27:15:08:95:FC:EC:70 Certificate issuer: /CN=45164C20EAF7FAB583FB12C81727150895FCEC70 Certificate serial: 202A7DA451E3862C433ADD7CFA8CA5B54064FE6B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45164C20EAF7FAB583FB12C81727150895FCEC70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.mft Manifest number: 4C Signing time: Wed 15 May 2024 07:31:56 +0000 Manifest this update: Wed 15 May 2024 07:26:56 +0000 Manifest next update: Sat 18 May 2024 15:38:56 +0000 Files and hashes: 1: 3130332e3130382e3135362e302f32322d3234203d3e20313430343534.roa (hash: 00Medh3iJDdM+GaZSfxwXYeXsE2k/jJy5x2ACG+4emI=) 2: 45164C20EAF7FAB583FB12C81727150895FCEC70.crl (hash: p9T0BWAOwYp/I3Cgvox5VVSPOX4fIrcQFWAnHSpPoeM=) 3: 3130332e3135332e34302e302f32332d3234203d3e20313430343534.roa (hash: 2e3QgDlhYOehP7JMHixNNgkTFaMcLEB73HdIACQiL5c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.crl rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45164C20EAF7FAB583FB12C81727150895FCEC70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 May 2024 15:38:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:2a:7d:a4:51:e3:86:2c:43:3a:dd:7c:fa:8c:a5:b5:40:64:fe:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45164C20EAF7FAB583FB12C81727150895FCEC70 Validity Not Before: May 15 07:26:56 2024 GMT Not After : May 18 15:38:56 2024 GMT Subject: CN=BFD2064FFDE465F4C4963E76E0459FEF9BB73D8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:0a:16:43:5f:99:53:f9:96:3f:75:9e:4f:b9: d9:34:f1:30:96:61:14:93:5a:b2:af:6d:37:6b:4d: fd:af:3f:21:05:8e:34:39:de:7e:3c:f7:93:42:86: 08:d5:e6:be:c3:4e:1a:fb:8d:69:60:d2:b4:1a:b5: c0:9f:06:df:74:4c:e8:a0:33:bf:0a:34:84:6e:3e: 5d:0f:7f:c9:54:ea:77:24:dc:a5:4f:78:ed:92:88: 6a:1c:a5:f6:9b:26:2d:82:bf:10:bb:44:b1:8a:10: 83:0d:3b:65:0d:f0:94:52:96:00:12:e8:0b:9d:f4: 61:d0:4d:93:a3:5a:8c:10:6f:3f:c1:6d:a3:78:d6: f5:79:1b:e8:37:22:4b:90:ca:54:ad:a5:fe:27:a4: fe:ae:b9:45:ee:33:74:72:7d:5f:23:c2:6f:9b:72: 0e:05:48:38:0f:db:d1:16:43:ff:12:c8:25:68:1e: 9d:e0:ec:bc:6a:c8:95:bf:bc:cf:d6:d3:12:a7:ac: ad:ae:67:72:8f:e6:f9:83:30:1d:1b:f6:f3:ab:4c: 34:e5:b2:8d:e9:61:01:7e:1d:32:2a:e2:e8:4a:fc: cb:52:02:df:4d:12:6d:6e:3c:05:0a:00:17:41:97: 85:8a:e3:d4:31:43:8e:6e:0e:e1:f6:1f:96:2a:2e: a6:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:D2:06:4F:FD:E4:65:F4:C4:96:3E:76:E0:45:9F:EF:9B:B7:3D:8A X509v3 Authority Key Identifier: keyid:45:16:4C:20:EA:F7:FA:B5:83:FB:12:C8:17:27:15:08:95:FC:EC:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45164C20EAF7FAB583FB12C81727150895FCEC70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:e3:c1:df:ea:78:ac:a0:74:43:d0:21:85:a6:70:c6:01:a2: 8b:ff:80:f6:a7:df:a2:1a:4f:ba:5b:79:c7:11:41:e1:ae:b1: 91:2e:b5:47:9b:d3:e9:4d:0a:97:56:e2:be:8d:04:59:87:10: 50:a6:7c:65:77:2e:3a:f9:87:ff:9b:ff:36:cc:ed:60:e3:ec: 80:bb:4a:1a:16:33:1d:28:da:bd:5f:b8:cb:dc:23:15:f0:02: e8:9d:cb:1f:b9:33:ef:eb:30:e3:4a:57:5a:91:43:1b:54:a4: 8b:83:ff:1f:f3:10:0b:a7:f5:4f:a2:bc:a0:aa:77:c8:03:fc: f4:9c:60:b8:77:9f:a5:5d:a4:c4:1d:cc:00:9d:28:bc:2c:6b: 3e:42:86:0a:d6:ea:c6:e1:b2:b0:46:40:82:8c:03:a6:16:4b: ee:08:6e:da:6f:c8:38:96:8e:5d:c8:b5:4f:d6:1e:16:86:6e: 03:a1:57:60:c7:bd:78:74:2b:f8:2a:c1:f8:c2:78:ec:39:de: e5:ad:75:7b:9e:62:37:b2:11:47:c7:33:e9:66:fe:69:58:e7: 06:47:0e:81:65:0d:04:76:00:d7:eb:a9:b6:b2:9a:40:d8:a3: 56:69:53:f2:c3:fa:10:bc:73:d4:5b:3b:10:e8:97:b2:66:dc: ff:4e:29:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUICp9pFHjhixDOt18+oyltUBk/mswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUxNjRDMjBFQUY3RkFCNTgzRkIxMkM4MTcyNzE1MDg5 NUZDRUM3MDAeFw0yNDA1MTUwNzI2NTZaFw0yNDA1MTgxNTM4NTZaMDMxMTAvBgNV BAMTKEJGRDIwNjRGRkRFNDY1RjRDNDk2M0U3NkUwNDU5RkVGOUJCNzNEOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMChZDX5lT+ZY/dZ5Pudk08TCW YRSTWrKvbTdrTf2vPyEFjjQ53n4895NChgjV5r7DThr7jWlg0rQatcCfBt90TOig M78KNIRuPl0Pf8lU6nck3KVPeO2SiGocpfabJi2CvxC7RLGKEIMNO2UN8JRSlgAS 6Aud9GHQTZOjWowQbz/BbaN41vV5G+g3IkuQylStpf4npP6uuUXuM3RyfV8jwm+b cg4FSDgP29EWQ/8SyCVoHp3g7LxqyJW/vM/W0xKnrK2uZ3KP5vmDMB0b9vOrTDTl so3pYQF+HTIq4uhK/MtSAt9NEm1uPAUKABdBl4WK49QxQ45uDuH2H5YqLqajAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv9IGT/3kZfTElj524EWf75u3PYowHwYDVR0j BBgwFoAURRZMIOr3+rWD+xLIFycVCJX87HAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MWFlMTJmYS05OGZkLTRlNTEtOTgwZS1hZDVmNWI5MGQ3YTYvMC80NTE2NEMyMEVB RjdGQUI1ODNGQjEyQzgxNzI3MTUwODk1RkNFQzcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDUxNjRDMjBFQUY3RkFCNTgzRkIxMkM4MTcyNzE1MDg5NUZD RUM3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjFhZTEyZmEtOThmZC00ZTUxLTk4 MGUtYWQ1ZjViOTBkN2E2LzAvNDUxNjRDMjBFQUY3RkFCNTgzRkIxMkM4MTcyNzE1 MDg5NUZDRUM3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALXjwd/qeKygdEPQIYWmcMYBoov/gPan36Ia T7pbeccRQeGusZEutUeb0+lNCpdW4r6NBFmHEFCmfGV3Ljr5h/+b/zbM7WDj7IC7 ShoWMx0o2r1fuMvcIxXwAuidyx+5M+/rMONKV1qRQxtUpIuD/x/zEAun9U+ivKCq d8gD/PScYLh3n6VdpMQdzACdKLwsaz5ChgrW6sbhsrBGQIKMA6YWS+4IbtpvyDiW jl3ItU/WHhaGbgOhV2DHvXh0K/gqwfjCeOw53uWtdXueYjeyEUfHM+lm/mlY5wZH DoFlDQR2ANfrqbaymkDYo1ZpU/LD+hC8c9RbOxDol7Jm3P9OKRI= -----END CERTIFICATE-----Generated at Wed May 15 09:25:21 2024 by rpki-client on console-fra.rpki-client.org