$ rpki-client -vvf repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft File: 846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft (raw, json) Hash identifier: RoVZUBwUAyF+sHS3XoztnH83qFY4NCEIYmq3XPinUO0= Subject key identifier: FE:8C:A0:DA:25:83:1D:8A:BF:21:6C:DB:54:42:C5:6F:F6:DE:13:DA Authority key identifier: 84:6B:CB:85:C1:E1:AA:59:03:7B:0A:2A:C5:9E:D1:E8:E7:42:0E:D0 Certificate issuer: /CN=846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0 Certificate serial: 3B3B2A20FF4B977C351ECE844B0E8F3105EABB2F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft Manifest number: 0297 Signing time: Fri 17 May 2024 22:51:40 +0000 Manifest this update: Fri 17 May 2024 22:46:40 +0000 Manifest next update: Tue 21 May 2024 08:34:40 +0000 Files and hashes: 1: 846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.crl (hash: tiza0k3PfCGYa1joN3nY3cvIsY/+sAf9QJsKm3pW+t0=) 2: 3130332e3136392e3133382e302f32332d3234203d3e20313432333433.roa (hash: XrO+qd1BLoaQBLZxMj2i0RtL9NTY4yJgufeeYQXCG4g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.crl rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 05:59:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:3b:2a:20:ff:4b:97:7c:35:1e:ce:84:4b:0e:8f:31:05:ea:bb:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0 Validity Not Before: May 17 22:46:40 2024 GMT Not After : May 21 08:34:40 2024 GMT Subject: CN=FE8CA0DA25831D8ABF216CDB5442C56FF6DE13DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:10:2e:08:b1:d6:56:c0:f8:de:74:d8:58:e9: 04:74:57:9f:5a:ed:10:5c:22:f6:6d:4c:77:77:88: 4e:28:aa:98:4c:6d:26:54:20:57:9a:6c:43:6b:54: de:af:0d:aa:68:8f:b8:06:77:89:1d:c7:ea:05:e5: bb:0b:98:75:9d:82:12:f8:ae:59:7e:a5:2c:a4:43: 42:fc:61:be:8e:04:98:5d:2d:0b:98:d9:85:a1:f1: f3:82:c6:9f:a5:12:e5:6d:d5:3c:0d:2e:05:62:59: e2:3d:1a:ac:37:b7:27:8a:5b:d9:e3:a7:0f:5b:9f: 48:89:de:d0:b2:5b:88:fe:26:3c:14:cd:76:cd:ec: c3:1d:24:e3:8e:dc:64:84:a5:ed:8e:d6:d9:b2:bf: 7d:48:55:36:58:d4:88:3a:97:25:47:0c:a5:03:22: c4:d3:6c:0c:02:8c:4a:9d:d1:4c:af:36:54:bf:f3: ba:bc:68:a3:f7:e7:a0:f3:38:04:7a:d8:13:8b:b4: 9a:2f:3c:10:b0:e2:37:b7:be:f8:01:a9:e0:d1:08: 7f:10:a8:e9:f8:a8:43:98:7e:fa:18:cd:c3:35:64: b5:32:21:3b:34:83:00:c9:68:42:9c:4e:e3:3c:5f: 20:44:e0:8b:77:4e:83:b4:f6:7f:bb:0f:33:1c:8b: 88:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:8C:A0:DA:25:83:1D:8A:BF:21:6C:DB:54:42:C5:6F:F6:DE:13:DA X509v3 Authority Key Identifier: keyid:84:6B:CB:85:C1:E1:AA:59:03:7B:0A:2A:C5:9E:D1:E8:E7:42:0E:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:fd:81:b3:82:c5:73:74:f8:ea:7e:a4:14:e4:f1:c5:2c:a0: 8c:7b:79:97:ca:61:2f:33:87:00:95:b8:e9:15:c5:20:48:9f: 6a:c2:df:01:f6:27:d6:b8:81:0a:a1:27:f7:3e:ae:4f:9c:7f: 14:46:28:5f:a1:70:08:24:f3:07:ba:1a:80:70:47:c5:31:2e: 48:8c:76:98:9d:6a:7d:2a:bb:f3:c3:4e:ad:73:aa:b0:08:94: 06:5e:66:7b:f6:1c:22:c9:12:93:e2:e6:2e:7f:26:ed:92:e4: a5:17:02:92:80:b2:31:68:97:78:27:c8:2f:61:98:9d:bd:7e: 2e:28:38:66:5e:c0:d0:87:0a:11:75:09:6a:c2:f7:14:e9:13: 21:ad:7e:97:09:01:55:f0:26:91:bd:98:5a:e8:20:fb:1d:41: 05:21:30:34:b2:6c:f9:76:bc:4f:49:69:e7:80:30:e9:58:d1: d3:6f:fc:3d:73:75:35:60:3f:fa:9e:57:fe:cd:14:dd:b4:1f: f7:fa:69:c0:bf:df:84:2f:9a:79:2f:19:7c:d9:49:de:1b:b3: 5e:ab:b4:cc:09:9e:d6:d7:b9:2a:8f:b0:2c:79:0d:05:2c:20: 78:5a:71:1b:ca:f5:b3:1d:1d:94:75:e9:20:d9:9a:7f:ba:ee: 2e:e6:bc:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOzsqIP9Ll3w1Hs6ESw6PMQXquy8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ2QkNCODVDMUUxQUE1OTAzN0IwQTJBQzU5RUQxRThF NzQyMEVEMDAeFw0yNDA1MTcyMjQ2NDBaFw0yNDA1MjEwODM0NDBaMDMxMTAvBgNV BAMTKEZFOENBMERBMjU4MzFEOEFCRjIxNkNEQjU0NDJDNTZGRjZERTEzREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+EC4IsdZWwPjedNhY6QR0V59a 7RBcIvZtTHd3iE4oqphMbSZUIFeabENrVN6vDapoj7gGd4kdx+oF5bsLmHWdghL4 rll+pSykQ0L8Yb6OBJhdLQuY2YWh8fOCxp+lEuVt1TwNLgViWeI9Gqw3tyeKW9nj pw9bn0iJ3tCyW4j+JjwUzXbN7MMdJOOO3GSEpe2O1tmyv31IVTZY1Ig6lyVHDKUD IsTTbAwCjEqd0UyvNlS/87q8aKP356DzOAR62BOLtJovPBCw4je3vvgBqeDRCH8Q qOn4qEOYfvoYzcM1ZLUyITs0gwDJaEKcTuM8XyBE4It3ToO09n+7DzMci4hpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/oyg2iWDHYq/IWzbVELFb/beE9owHwYDVR0j BBgwFoAUhGvLhcHhqlkDewoqxZ7R6OdCDtAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NGNhNTg2OC01N2U5LTQ5YjktYmZlMS00OGQ3ODMzNGExOGMvMC84NDZCQ0I4NUMx RTFBQTU5MDM3QjBBMkFDNTlFRDFFOEU3NDIwRUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ2QkNCODVDMUUxQUE1OTAzN0IwQTJBQzU5RUQxRThFNzQy MEVEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDRjYTU4NjgtNTdlOS00OWI5LWJm ZTEtNDhkNzgzMzRhMThjLzAvODQ2QkNCODVDMUUxQUE1OTAzN0IwQTJBQzU5RUQx RThFNzQyMEVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACn9gbOCxXN0+Op+pBTk8cUsoIx7eZfKYS8z hwCVuOkVxSBIn2rC3wH2J9a4gQqhJ/c+rk+cfxRGKF+hcAgk8we6GoBwR8UxLkiM dpidan0qu/PDTq1zqrAIlAZeZnv2HCLJEpPi5i5/Ju2S5KUXApKAsjFol3gnyC9h mJ29fi4oOGZewNCHChF1CWrC9xTpEyGtfpcJAVXwJpG9mFroIPsdQQUhMDSybPl2 vE9JaeeAMOlY0dNv/D1zdTVgP/qeV/7NFN20H/f6acC/34QvmnkvGXzZSd4bs16r tMwJntbXuSqPsCx5DQUsIHhacRvK9bMdHZR16SDZmn+67i7mvH0= -----END CERTIFICATE-----Generated at Fri May 17 23:37:26 2024 by rpki-client on console-ams.rpki-client.org