$ rpki-client -vvf repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft File: A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft (raw, json) Hash identifier: 39BPTMZLb50RQydf3HHzNiVm/XRdDCUpVzhcNYVNYts= Subject key identifier: 76:53:90:B9:53:65:89:E7:5C:42:E1:5C:89:3C:C0:9B:43:1A:37:BF Authority key identifier: A0:DE:21:A0:35:CF:60:1B:CB:D9:D5:C9:8B:D4:7D:D9:5F:99:34:64 Certificate issuer: /CN=A0DE21A035CF601BCBD9D5C98BD47DD95F993464 Certificate serial: 38098CA8916B7DF3E78FC73D08294D51F9C11A4B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer Subject info access: rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft Manifest number: 0143 Signing time: Sat 18 May 2024 14:01:58 +0000 Manifest this update: Sat 18 May 2024 13:56:58 +0000 Manifest next update: Tue 21 May 2024 22:51:58 +0000 Files and hashes: 1: A0DE21A035CF601BCBD9D5C98BD47DD95F993464.crl (hash: EFqpoEouJ5CBbYlQf+wi5M8ygLoQv2RgSS19n/E7lik=) 2: 34322e36322e3137392e302f32342d3234203d3e203535363930.roa (hash: 3hwpy39XhirYg2tadrZdtMSMp8YXWHScWmYnSuAnOF4=) 3: 34322e36322e3137382e302f32342d3234203d3e203535363930.roa (hash: 1ZKcpMmJqaU3gGp5GNF27GAvGl7mJPmDYDXPl0ljM1I=) 4: 34322e36322e3137372e302f32342d3234203d3e203535363930.roa (hash: ZyanuioIHQaI4mSBy6JTMl2QMK0GNmd4kXf9qIrKvRc=) 5: 34322e36322e3137362e302f32342d3234203d3e203535363930.roa (hash: TBYiidUmRB4B4AnNGe8/OkhNHvV8B02mLtlF0GlENt0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.crl rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:09:8c:a8:91:6b:7d:f3:e7:8f:c7:3d:08:29:4d:51:f9:c1:1a:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0DE21A035CF601BCBD9D5C98BD47DD95F993464 Validity Not Before: May 18 13:56:58 2024 GMT Not After : May 21 22:51:58 2024 GMT Subject: CN=765390B9536589E75C42E15C893CC09B431A37BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a0:ef:15:bd:cf:30:6d:4e:a2:bc:f6:f7:cf: af:ff:65:21:7c:b7:c4:02:0b:38:96:97:27:84:de: c4:72:e9:38:d7:e5:bc:06:01:89:fc:b6:0a:b6:34: c2:39:13:27:dd:13:29:5a:8e:de:6f:34:24:e2:af: de:63:be:a1:0e:c0:80:b1:05:6b:04:b7:0a:45:96: 04:c1:28:17:e5:c6:59:11:a3:33:08:82:0d:6f:5d: 0e:fc:8e:ed:59:c5:ec:5a:6a:f2:48:d9:e1:bd:fe: 7a:73:ed:a2:b0:b4:35:9d:8a:40:33:cd:e6:ae:09: ae:2c:ee:3b:65:ca:d6:80:72:57:ae:59:bc:d2:a4: d9:91:0a:f1:cc:e4:1f:31:6a:20:94:10:43:93:c6: 39:e7:b1:50:ed:91:5f:ff:13:40:2a:f1:b8:27:57: f2:ab:2b:37:23:ad:a7:f7:22:29:90:c1:09:a2:15: 98:e0:d0:7a:02:de:31:47:93:2a:13:e5:d9:f5:41: ff:f5:19:22:ec:04:94:dc:a4:db:9b:c5:7c:05:5b: 14:9c:c9:06:b2:4a:3a:b1:6b:09:75:6b:87:cb:92: bd:35:fa:02:ac:ff:c0:17:d7:72:39:73:41:28:c6: 01:bf:8f:c7:2d:e3:34:95:f9:e7:1e:f6:cb:20:89: a0:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:53:90:B9:53:65:89:E7:5C:42:E1:5C:89:3C:C0:9B:43:1A:37:BF X509v3 Authority Key Identifier: keyid:A0:DE:21:A0:35:CF:60:1B:CB:D9:D5:C9:8B:D4:7D:D9:5F:99:34:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:d8:13:94:8c:a0:2e:ed:80:48:65:1f:e0:ce:4f:03:95:fe: 5a:57:37:d3:eb:97:6e:4a:ae:68:1e:12:0e:cf:75:fc:39:07: 8e:a4:1c:ad:70:ed:4f:50:7b:8a:07:53:94:79:48:88:a2:5f: 6b:31:54:20:d7:c2:3c:48:87:cc:af:21:08:57:35:0e:ba:ad: 3f:cb:a0:ac:f3:61:8d:ef:ee:d2:d5:74:b1:3e:40:82:3b:22: 3f:f8:0a:27:f9:88:31:53:ea:5f:54:0f:77:6f:d7:22:e2:b4: e3:9b:12:24:55:8b:69:38:7d:1d:4f:b2:7c:94:45:66:eb:75: ed:81:f3:67:71:20:95:da:3b:9f:20:28:87:a2:a6:d6:05:eb: 1f:18:c9:7f:03:04:8d:4b:c9:b1:59:ac:41:9a:a4:5a:5b:e0: 45:92:5b:9e:dc:26:43:b4:2f:d2:ef:ac:86:bc:ea:47:4b:0d: 87:5c:de:65:f4:0a:ad:5b:40:91:71:24:94:85:6f:04:80:c6: 97:be:8d:dd:de:6d:73:b5:55:f5:16:dd:67:66:e8:4d:75:15: 35:e5:1a:0d:4f:22:f2:7f:c7:5f:f7:39:a3:1a:f1:1e:51:9a: ed:af:dd:e7:8a:19:80:f7:90:56:51:1a:8e:ab:70:8b:98:98: 6b:8d:41:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOAmMqJFrffPnj8c9CClNUfnBGkswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBERTIxQTAzNUNGNjAxQkNCRDlENUM5OEJENDdERDk1 Rjk5MzQ2NDAeFw0yNDA1MTgxMzU2NThaFw0yNDA1MjEyMjUxNThaMDMxMTAvBgNV BAMTKDc2NTM5MEI5NTM2NTg5RTc1QzQyRTE1Qzg5M0NDMDlCNDMxQTM3QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUoO8Vvc8wbU6ivPb3z6//ZSF8 t8QCCziWlyeE3sRy6TjX5bwGAYn8tgq2NMI5EyfdEylajt5vNCTir95jvqEOwICx BWsEtwpFlgTBKBflxlkRozMIgg1vXQ78ju1ZxexaavJI2eG9/npz7aKwtDWdikAz zeauCa4s7jtlytaAcleuWbzSpNmRCvHM5B8xaiCUEEOTxjnnsVDtkV//E0Aq8bgn V/KrKzcjraf3IimQwQmiFZjg0HoC3jFHkyoT5dn1Qf/1GSLsBJTcpNubxXwFWxSc yQaySjqxawl1a4fLkr01+gKs/8AX13I5c0EoxgG/j8ct4zSV+ece9ssgiaDzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdlOQuVNliedcQuFciTzAm0MaN78wHwYDVR0j BBgwFoAUoN4hoDXPYBvL2dXJi9R92V+ZNGQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w N2Y4ZjZhNC04ZDg3LTRlZjMtYjRkYy01MmMyNWNiNTc3YzIvMC9BMERFMjFBMDM1 Q0Y2MDFCQ0JEOUQ1Qzk4QkQ0N0REOTVGOTkzNDY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTBERTIxQTAzNUNGNjAxQkNCRDlENUM5OEJENDdERDk1Rjk5 MzQ2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDdmOGY2YTQtOGQ4Ny00ZWYzLWI0 ZGMtNTJjMjVjYjU3N2MyLzAvQTBERTIxQTAzNUNGNjAxQkNCRDlENUM5OEJENDdE RDk1Rjk5MzQ2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABzYE5SMoC7tgEhlH+DOTwOV/lpXN9Prl25K rmgeEg7Pdfw5B46kHK1w7U9Qe4oHU5R5SIiiX2sxVCDXwjxIh8yvIQhXNQ66rT/L oKzzYY3v7tLVdLE+QII7Ij/4Cif5iDFT6l9UD3dv1yLitOObEiRVi2k4fR1PsnyU RWbrde2B82dxIJXaO58gKIeiptYF6x8YyX8DBI1LybFZrEGapFpb4EWSW57cJkO0 L9LvrIa86kdLDYdc3mX0Cq1bQJFxJJSFbwSAxpe+jd3ebXO1VfUW3Wdm6E11FTXl Gg1PIvJ/x1/3OaMa8R5Rmu2v3eeKGYD3kFZRGo6rcIuYmGuNQcs= -----END CERTIFICATE-----Generated at Sat May 18 15:57:28 2024 by rpki-client on console-ams.rpki-client.org