$ rpki-client -vvf repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft File: C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft (raw, json) Hash identifier: WmweVgMaHgIPGS4DNSYBpBBYcjIRD3VD7TQ0CBo+OIs= Subject key identifier: 7D:60:19:70:FF:CA:D4:3B:7F:13:ED:67:A1:E1:F9:82:19:09:84:35 Authority key identifier: C1:4E:48:96:FB:75:28:EE:44:29:5A:13:8C:BF:1B:65:D9:4B:02:A7 Certificate issuer: /CN=C14E4896FB7528EE44295A138CBF1B65D94B02A7 Certificate serial: 369B7F6182A8A4200491781BF8A08CC1C3CD4BC9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C14E4896FB7528EE44295A138CBF1B65D94B02A7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft Manifest number: 02B6 Signing time: Sat 18 May 2024 10:10:53 +0000 Manifest this update: Sat 18 May 2024 10:05:53 +0000 Manifest next update: Tue 21 May 2024 20:18:53 +0000 Files and hashes: 1: C14E4896FB7528EE44295A138CBF1B65D94B02A7.crl (hash: a3ewiFKPEKAgkxb5ZkR7HqM7fsnf9bM/bO+g9FS1Jes=) 2: 3130332e3136392e3231302e302f32332d3234203d3e203538383230.roa (hash: OSsyybAUMPUEKNEvDuD5IZwkifGl3d3mlIDqjGe2c5s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.crl rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C14E4896FB7528EE44295A138CBF1B65D94B02A7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 14:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:9b:7f:61:82:a8:a4:20:04:91:78:1b:f8:a0:8c:c1:c3:cd:4b:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C14E4896FB7528EE44295A138CBF1B65D94B02A7 Validity Not Before: May 18 10:05:53 2024 GMT Not After : May 21 20:18:53 2024 GMT Subject: CN=7D601970FFCAD43B7F13ED67A1E1F98219098435 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1d:db:8f:93:81:c6:ef:b0:f2:0a:d6:aa:6d: 50:ff:9c:1c:fa:a2:f6:17:c3:3e:d6:14:29:b0:1f: cc:be:8a:d4:ec:7b:a6:46:28:e9:1a:32:0f:98:61: fa:c6:ed:61:d2:e3:3c:dc:99:85:84:ba:41:2b:54: 86:cc:ee:d1:9d:f4:d0:e2:fa:91:31:5d:9c:6f:c6: c3:dc:2e:8f:3f:d4:c2:26:a6:fb:29:f2:fa:1c:03: 55:b4:99:e1:c1:44:21:d5:d2:9e:52:9f:f0:dc:e8: f4:dc:1d:86:cc:88:65:1f:22:e5:3e:62:4f:ac:ff: 63:54:93:0f:8c:72:d0:f4:79:99:e5:40:81:44:9b: 41:b4:ca:f8:70:06:d7:fc:20:96:8d:6c:76:b1:46: c3:7c:8e:01:4b:cb:18:3f:50:c9:99:24:f2:d8:28: cf:ec:03:28:c9:86:48:3b:aa:cf:d0:f2:28:66:af: 73:36:ab:1c:04:3e:5e:4e:6f:31:65:91:38:ad:c9: 8f:e5:19:17:c2:db:35:03:7e:4c:71:18:f7:cb:74: a1:ac:de:3b:b6:14:f9:bb:a3:d4:03:36:b1:0e:7f: 58:8b:e5:71:30:29:54:0a:00:f2:55:77:53:db:c0: e6:43:75:f7:d8:1e:5b:d2:03:38:d7:8a:9a:23:84: 47:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:60:19:70:FF:CA:D4:3B:7F:13:ED:67:A1:E1:F9:82:19:09:84:35 X509v3 Authority Key Identifier: keyid:C1:4E:48:96:FB:75:28:EE:44:29:5A:13:8C:BF:1B:65:D9:4B:02:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C14E4896FB7528EE44295A138CBF1B65D94B02A7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:21:99:e6:b2:be:65:cf:13:83:29:07:bd:f8:9b:06:b4:fd: ac:44:c8:88:e4:9a:33:b2:d9:08:39:a4:19:23:ba:8c:fe:78: 64:e1:5b:55:f8:39:9c:45:cd:d4:c4:a7:40:22:7a:cf:87:fc: 2b:33:f2:69:ca:99:52:a8:d4:8e:12:d2:f1:3f:60:e8:e3:29: e9:6e:c9:67:68:e4:8c:72:bf:2d:a1:14:f8:e2:61:38:d0:fc: e3:3c:e6:fb:fc:aa:44:33:25:4b:0e:9f:7d:0c:f4:5b:d7:47: 9e:dc:75:93:1c:b2:89:67:71:08:43:31:e4:f2:8a:19:22:9d: e4:1e:fe:7f:43:97:28:88:5f:9b:3a:f3:2c:cc:f8:18:85:6b: c2:79:7d:9b:55:a7:6f:ac:6c:62:c2:47:95:52:bd:26:c3:91: ee:fe:08:0d:73:3a:d7:69:b6:00:4e:69:93:3a:4b:97:b6:54: bf:9c:a6:4d:2b:80:82:93:55:7c:ff:8a:f9:7d:f0:9f:5c:49: 0b:03:59:8c:da:e6:cb:3e:31:d5:d4:96:c7:76:ef:c5:82:60: 39:1e:46:36:94:1f:cd:1a:ba:2e:01:70:61:8e:72:27:1f:7f: 73:b5:84:45:8d:4b:4d:15:78:3f:7d:b1:52:5c:fb:c2:49:08: 5c:f9:b9:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNpt/YYKopCAEkXgb+KCMwcPNS8kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE0RTQ4OTZGQjc1MjhFRTQ0Mjk1QTEzOENCRjFCNjVE OTRCMDJBNzAeFw0yNDA1MTgxMDA1NTNaFw0yNDA1MjEyMDE4NTNaMDMxMTAvBgNV BAMTKDdENjAxOTcwRkZDQUQ0M0I3RjEzRUQ2N0ExRTFGOTgyMTkwOTg0MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5HduPk4HG77DyCtaqbVD/nBz6 ovYXwz7WFCmwH8y+itTse6ZGKOkaMg+YYfrG7WHS4zzcmYWEukErVIbM7tGd9NDi +pExXZxvxsPcLo8/1MImpvsp8vocA1W0meHBRCHV0p5Sn/Dc6PTcHYbMiGUfIuU+ Yk+s/2NUkw+MctD0eZnlQIFEm0G0yvhwBtf8IJaNbHaxRsN8jgFLyxg/UMmZJPLY KM/sAyjJhkg7qs/Q8ihmr3M2qxwEPl5ObzFlkTityY/lGRfC2zUDfkxxGPfLdKGs 3ju2FPm7o9QDNrEOf1iL5XEwKVQKAPJVd1PbwOZDdffYHlvSAzjXipojhEfVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfWAZcP/K1Dt/E+1noeH5ghkJhDUwHwYDVR0j BBgwFoAUwU5Ilvt1KO5EKVoTjL8bZdlLAqcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZmEwZGRlZC0xYWNmLTQ0MmQtOTY1OS05NWFlY2Q4ZjhlYTkvMC9DMTRFNDg5NkZC NzUyOEVFNDQyOTVBMTM4Q0JGMUI2NUQ5NEIwMkE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzE0RTQ4OTZGQjc1MjhFRTQ0Mjk1QTEzOENCRjFCNjVEOTRC MDJBNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmZhMGRkZWQtMWFjZi00NDJkLTk2 NTktOTVhZWNkOGY4ZWE5LzAvQzE0RTQ4OTZGQjc1MjhFRTQ0Mjk1QTEzOENCRjFC NjVEOTRCMDJBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHMhmeayvmXPE4MpB734mwa0/axEyIjkmjOy 2Qg5pBkjuoz+eGThW1X4OZxFzdTEp0Aies+H/Csz8mnKmVKo1I4S0vE/YOjjKelu yWdo5Ixyvy2hFPjiYTjQ/OM85vv8qkQzJUsOn30M9FvXR57cdZMcsolncQhDMeTy ihkineQe/n9DlyiIX5s68yzM+BiFa8J5fZtVp2+sbGLCR5VSvSbDke7+CA1zOtdp tgBOaZM6S5e2VL+cpk0rgIKTVXz/ivl98J9cSQsDWYza5ss+MdXUlsd278WCYDke RjaUH80aui4BcGGOcicff3O1hEWNS00VeD99sVJc+8JJCFz5ue0= -----END CERTIFICATE-----Generated at Sat May 18 10:34:20 2024 by rpki-client on console-fra.rpki-client.org