$ rpki-client -vvf repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft File: B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft (raw, json) Hash identifier: B6ojdSlNkugBtXygZZryw6RzKXxrXJEK9YpAKzEd+LA= Subject key identifier: 40:A0:36:ED:E8:57:DA:B8:96:0A:1E:B4:26:4E:1E:18:51:45:60:E4 Authority key identifier: B6:84:7B:92:8C:30:80:02:82:D7:BA:8E:33:74:82:DF:F4:DE:C8:A5 Certificate issuer: /CN=B6847B928C30800282D7BA8E337482DFF4DEC8A5 Certificate serial: 392097D6307948A8724FE1220663CF9A0F5FA38C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6847B928C30800282D7BA8E337482DFF4DEC8A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft Manifest number: 0434 Signing time: Sun 26 May 2024 13:41:16 +0000 Manifest this update: Sun 26 May 2024 13:36:16 +0000 Manifest next update: Thu 30 May 2024 01:38:16 +0000 Files and hashes: 1: 323030313a6466363a343530303a3a2f34382d3438203d3e20313338303539.roa (hash: iW9uYrNS6gR80FVfgn06PqKITi+LJGQRrUvhKT51sJQ=) 2: 3130332e3132312e3132332e302f32342d3234203d3e20313338303539.roa (hash: 19WOcihX3sBNnM0JwVJESitKVCq7qP0/vD2sxBm+0IY=) 3: B6847B928C30800282D7BA8E337482DFF4DEC8A5.crl (hash: Oy0v9O1S3NXoSmrlmTr6dxUKza15s7Ak7h8h2S7A1jY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.crl rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6847B928C30800282D7BA8E337482DFF4DEC8A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 May 2024 17:41:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:20:97:d6:30:79:48:a8:72:4f:e1:22:06:63:cf:9a:0f:5f:a3:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6847B928C30800282D7BA8E337482DFF4DEC8A5 Validity Not Before: May 26 13:36:16 2024 GMT Not After : May 30 01:38:16 2024 GMT Subject: CN=40A036EDE857DAB8960A1EB4264E1E18514560E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:eb:e2:8a:da:7e:6b:e7:e7:a0:7f:dc:7c:2d: 6c:74:ca:19:cf:5d:66:68:60:09:77:08:33:42:cf: f1:d5:80:33:c2:ff:ce:80:3b:6c:f7:7e:dc:ff:a0: a1:2f:39:01:4b:11:ff:f8:4f:f6:18:01:e6:21:29: a4:5c:37:b4:50:6c:8b:b8:88:f6:21:8c:6f:f9:ba: 14:7b:6b:27:ae:90:5e:88:3f:8b:1f:ac:c9:b7:ec: af:4a:c1:a0:41:22:c0:6d:79:25:4f:39:61:3f:f9: 3b:26:52:4f:22:2b:b7:8e:8a:ea:97:7d:10:3c:81: f7:9b:2c:76:98:b6:02:02:cb:ec:4f:e6:d6:ea:d8: 4e:22:58:3f:0a:c5:a0:ff:c0:3d:9b:bf:78:d3:0e: 38:4c:5a:22:67:05:c4:27:c4:c5:76:b3:3c:a6:4c: d4:a8:0d:fe:30:d7:75:de:a3:82:38:45:bb:57:31: 95:8b:10:1c:0e:df:49:21:c3:43:0d:36:f0:9a:eb: df:8b:8c:3c:51:7e:44:f4:be:12:81:8d:d1:c1:5d: b5:4b:b6:8b:c2:d3:07:d1:54:3f:ad:eb:0c:37:65: 4f:96:a4:32:b1:1a:38:6d:f6:bf:db:b6:de:60:96: 68:1f:72:52:be:4a:df:8a:02:09:2c:67:fc:92:16: 87:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:A0:36:ED:E8:57:DA:B8:96:0A:1E:B4:26:4E:1E:18:51:45:60:E4 X509v3 Authority Key Identifier: keyid:B6:84:7B:92:8C:30:80:02:82:D7:BA:8E:33:74:82:DF:F4:DE:C8:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6847B928C30800282D7BA8E337482DFF4DEC8A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:cb:af:7e:ec:17:88:2e:fb:af:a0:81:f5:ce:54:1c:b1:82: 06:d4:9c:c8:dd:fb:b3:ce:a9:66:9e:30:53:f2:b2:c1:c2:bd: bb:64:20:66:12:0f:d4:6e:69:39:2b:fa:71:3c:57:94:fd:d5: a7:fa:ef:40:4e:6f:1a:e8:60:22:ff:e6:b2:72:47:46:37:8e: fa:0e:5b:07:e8:1b:46:24:bd:63:1d:5b:36:c1:d0:26:33:ce: 85:fe:79:d8:83:ce:a2:04:79:c7:fd:3b:32:50:fd:7f:49:c4: d5:04:23:7b:ce:0f:c2:96:1c:87:65:bd:31:ec:32:0c:00:58: b9:61:ce:6b:6b:8b:cb:95:4d:98:76:e0:f8:1f:a2:b2:55:ba: b9:dd:a5:ac:dc:ff:57:7c:ca:a3:1f:c4:fd:31:43:f3:cc:e1: 31:1d:63:af:2e:f7:e9:ea:35:a0:aa:e3:bb:69:ae:1f:f1:17: 09:83:be:3e:68:30:a7:a5:41:00:bd:38:94:af:bb:f8:10:09: f3:e8:62:d8:a8:c4:86:73:cc:13:8c:dc:3e:42:fa:9a:c9:e8: ba:ea:1b:64:c1:de:cc:02:ca:fa:ed:9a:72:17:be:a0:bb:24: 76:79:cc:ab:8c:26:90:48:43:a1:dd:e7:69:21:8d:52:f9:78: 01:2c:44:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOSCX1jB5SKhyT+EiBmPPmg9fo4wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY4NDdCOTI4QzMwODAwMjgyRDdCQThFMzM3NDgyREZG NERFQzhBNTAeFw0yNDA1MjYxMzM2MTZaFw0yNDA1MzAwMTM4MTZaMDMxMTAvBgNV BAMTKDQwQTAzNkVERTg1N0RBQjg5NjBBMUVCNDI2NEUxRTE4NTE0NTYwRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs6+KK2n5r5+egf9x8LWx0yhnP XWZoYAl3CDNCz/HVgDPC/86AO2z3ftz/oKEvOQFLEf/4T/YYAeYhKaRcN7RQbIu4 iPYhjG/5uhR7ayeukF6IP4sfrMm37K9KwaBBIsBteSVPOWE/+TsmUk8iK7eOiuqX fRA8gfebLHaYtgICy+xP5tbq2E4iWD8KxaD/wD2bv3jTDjhMWiJnBcQnxMV2szym TNSoDf4w13Xeo4I4RbtXMZWLEBwO30khw0MNNvCa69+LjDxRfkT0vhKBjdHBXbVL tovC0wfRVD+t6ww3ZU+WpDKxGjht9r/btt5glmgfclK+St+KAgksZ/ySFod/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQKA27ehX2riWCh60Jk4eGFFFYOQwHwYDVR0j BBgwFoAUtoR7kowwgAKC17qOM3SC3/TeyKUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w N2RlZGVkMS1kMTRlLTQxMjMtYjVjOS1jOTNhNTk5N2ZjMzAvMC9CNjg0N0I5MjhD MzA4MDAyODJEN0JBOEUzMzc0ODJERkY0REVDOEE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjY4NDdCOTI4QzMwODAwMjgyRDdCQThFMzM3NDgyREZGNERF QzhBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDdkZWRlZDEtZDE0ZS00MTIzLWI1 YzktYzkzYTU5OTdmYzMwLzAvQjY4NDdCOTI4QzMwODAwMjgyRDdCQThFMzM3NDgy REZGNERFQzhBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACzLr37sF4gu+6+ggfXOVByxggbUnMjd+7PO qWaeMFPyssHCvbtkIGYSD9RuaTkr+nE8V5T91af670BObxroYCL/5rJyR0Y3jvoO WwfoG0YkvWMdWzbB0CYzzoX+ediDzqIEecf9OzJQ/X9JxNUEI3vOD8KWHIdlvTHs MgwAWLlhzmtri8uVTZh24PgforJVurndpazc/1d8yqMfxP0xQ/PM4TEdY68u9+nq NaCq47tprh/xFwmDvj5oMKelQQC9OJSvu/gQCfPoYtioxIZzzBOM3D5C+prJ6Lrq G2TB3swCyvrtmnIXvqC7JHZ5zKuMJpBIQ6Hd52khjVL5eAEsRLg= -----END CERTIFICATE-----Generated at Sun May 26 16:39:30 2024 by rpki-client on console-fra.rpki-client.org