$ rpki-client -vvf repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.mft File: 43A0899A11D5A51202F1304338672AF19B201A74.mft (raw, json) Hash identifier: HHvj9hpCJcj4a+BUgGEHCQcyJxE2yeaNpPvkoKfFuHI= Subject key identifier: 28:91:7E:12:5F:2C:9A:A3:1A:87:8D:A3:50:FE:6E:E7:C4:47:47:6B Authority key identifier: 43:A0:89:9A:11:D5:A5:12:02:F1:30:43:38:67:2A:F1:9B:20:1A:74 Certificate issuer: /CN=43A0899A11D5A51202F1304338672AF19B201A74 Certificate serial: 61B2D35B4E6AE48E29C1DE9C294808F3AA7ACCC7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43A0899A11D5A51202F1304338672AF19B201A74.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.mft Manifest number: 0309 Signing time: Sat 18 May 2024 07:01:47 +0000 Manifest this update: Sat 18 May 2024 06:56:47 +0000 Manifest next update: Tue 21 May 2024 09:34:47 +0000 Files and hashes: 1: 43A0899A11D5A51202F1304338672AF19B201A74.crl (hash: TMVl5aUbF8LspUwOrhimWNFAh9eFqDVnLD5AmxQcHy0=) 2: 3130332e32392e3231322e302f32322d3234203d3e203538333737.roa (hash: 2zg3+ojc2ldWr1hYGPlN7pWiEGKSHVQx8tzBkq6ETPg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.crl rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43A0899A11D5A51202F1304338672AF19B201A74.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 09:34:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:b2:d3:5b:4e:6a:e4:8e:29:c1:de:9c:29:48:08:f3:aa:7a:cc:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43A0899A11D5A51202F1304338672AF19B201A74 Validity Not Before: May 18 06:56:47 2024 GMT Not After : May 21 09:34:47 2024 GMT Subject: CN=28917E125F2C9AA31A878DA350FE6EE7C447476B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:cc:42:88:75:a2:81:78:16:02:02:ef:3b:bb: f7:4c:ba:1c:f5:ad:08:bd:be:2b:b5:c4:2d:93:e1: 8e:db:c6:bb:38:ab:01:84:94:fe:88:67:f6:40:2c: 3c:78:81:5b:c4:8c:32:2c:9e:21:c4:ad:40:93:bb: 15:19:54:33:e5:fb:d8:14:0d:16:e4:f4:a0:60:2c: c5:48:06:85:4c:00:a5:80:5c:e4:71:99:41:7d:b0: 4d:fb:f3:bd:c3:96:62:8e:d8:b4:9f:6f:13:ea:47: cd:9b:98:97:b5:41:02:f6:4b:88:f6:33:bc:49:02: 01:1d:8b:e0:f5:28:b1:9f:34:c9:ce:c6:14:6e:f5: fb:60:e2:0d:33:2f:6b:94:3f:25:c9:97:7e:48:df: ad:8a:82:d6:c6:e5:2e:88:1d:c2:30:75:7b:56:a0: 5f:11:8a:3c:dc:0a:9b:5f:04:93:4a:ba:75:62:4a: e0:a4:4d:e4:23:35:cb:88:c3:99:70:af:0e:54:8f: 2b:81:9f:07:67:6b:87:4a:65:15:82:c1:12:3a:75: d0:2e:43:c8:fd:81:6d:d6:08:2e:6c:29:c9:00:a2: 3e:33:80:5f:ab:03:69:c1:79:55:72:4e:4f:ff:1f: 29:ae:c2:f2:73:b8:12:e4:be:77:b2:14:42:28:99: b0:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:91:7E:12:5F:2C:9A:A3:1A:87:8D:A3:50:FE:6E:E7:C4:47:47:6B X509v3 Authority Key Identifier: keyid:43:A0:89:9A:11:D5:A5:12:02:F1:30:43:38:67:2A:F1:9B:20:1A:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43A0899A11D5A51202F1304338672AF19B201A74.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0401b2d1-01ca-40e8-bf77-986159867a04/0/43A0899A11D5A51202F1304338672AF19B201A74.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:71:1c:41:7a:4c:20:4a:1d:11:0a:2e:06:7e:d7:d9:c6:81: 02:a3:7c:00:29:8f:ba:4a:e3:d5:c6:2c:e2:d7:9f:b8:92:2b: 12:fe:98:d1:6b:21:14:b6:c4:35:88:74:73:4a:2e:31:6d:22: 0e:f0:e5:91:85:40:02:8b:8c:f9:7d:8d:0f:0e:0c:9f:7c:9d: 73:9d:a4:37:f6:1a:51:d5:15:f4:9a:10:24:7d:22:fe:e6:d2: 16:7d:87:77:74:ae:b5:ca:a5:73:f3:3c:03:e7:39:98:45:e6: 75:ce:61:50:8c:f6:22:51:d1:7f:f4:31:95:b0:b3:f2:69:4b: 74:2a:26:80:cf:d9:ec:8b:42:6e:e9:4b:aa:8a:8d:7b:43:82: 82:ff:33:93:64:ab:6c:6e:18:e9:07:6b:ed:d7:d2:05:0f:b0: 69:7a:9c:7b:be:9c:4a:03:92:b8:36:62:43:c0:2d:05:2e:f2: ea:be:24:97:11:ee:20:c2:b3:be:aa:a2:d2:f7:e8:ca:83:cb: 7a:32:05:02:8d:73:a7:f5:31:91:b9:6d:86:ee:36:ad:28:d5: 5e:65:dd:6c:e3:f7:0f:ac:56:0a:08:a1:4e:93:14:0f:55:06: cf:5c:9e:72:84:b1:e9:4f:ee:74:44:19:7a:97:b8:fe:61:ba: 42:1a:fe:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYbLTW05q5I4pwd6cKUgI86p6zMcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNBMDg5OUExMUQ1QTUxMjAyRjEzMDQzMzg2NzJBRjE5 QjIwMUE3NDAeFw0yNDA1MTgwNjU2NDdaFw0yNDA1MjEwOTM0NDdaMDMxMTAvBgNV BAMTKDI4OTE3RTEyNUYyQzlBQTMxQTg3OERBMzUwRkU2RUU3QzQ0NzQ3NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxzEKIdaKBeBYCAu87u/dMuhz1 rQi9viu1xC2T4Y7bxrs4qwGElP6IZ/ZALDx4gVvEjDIsniHErUCTuxUZVDPl+9gU DRbk9KBgLMVIBoVMAKWAXORxmUF9sE37873DlmKO2LSfbxPqR82bmJe1QQL2S4j2 M7xJAgEdi+D1KLGfNMnOxhRu9ftg4g0zL2uUPyXJl35I362KgtbG5S6IHcIwdXtW oF8RijzcCptfBJNKunViSuCkTeQjNcuIw5lwrw5UjyuBnwdna4dKZRWCwRI6ddAu Q8j9gW3WCC5sKckAoj4zgF+rA2nBeVVyTk//HymuwvJzuBLkvneyFEIombAxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKJF+El8smqMah42jUP5u58RHR2swHwYDVR0j BBgwFoAUQ6CJmhHVpRIC8TBDOGcq8ZsgGnQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDAxYjJkMS0wMWNhLTQwZTgtYmY3Ny05ODYxNTk4NjdhMDQvMC80M0EwODk5QTEx RDVBNTEyMDJGMTMwNDMzODY3MkFGMTlCMjAxQTc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDNBMDg5OUExMUQ1QTUxMjAyRjEzMDQzMzg2NzJBRjE5QjIw MUE3NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQwMWIyZDEtMDFjYS00MGU4LWJm NzctOTg2MTU5ODY3YTA0LzAvNDNBMDg5OUExMUQ1QTUxMjAyRjEzMDQzMzg2NzJB RjE5QjIwMUE3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH5xHEF6TCBKHREKLgZ+19nGgQKjfAApj7pK 49XGLOLXn7iSKxL+mNFrIRS2xDWIdHNKLjFtIg7w5ZGFQAKLjPl9jQ8ODJ98nXOd pDf2GlHVFfSaECR9Iv7m0hZ9h3d0rrXKpXPzPAPnOZhF5nXOYVCM9iJR0X/0MZWw s/JpS3QqJoDP2eyLQm7pS6qKjXtDgoL/M5Nkq2xuGOkHa+3X0gUPsGl6nHu+nEoD krg2YkPALQUu8uq+JJcR7iDCs76qotL36MqDy3oyBQKNc6f1MZG5bYbuNq0o1V5l 3Wzj9w+sVgoIoU6TFA9VBs9cnnKEselP7nREGXqXuP5hukIa/mk= -----END CERTIFICATE-----Generated at Sat May 18 08:05:07 2024 by rpki-client on console-fra.rpki-client.org