$ rpki-client -vvf repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft File: 9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft (raw, json) Hash identifier: 0hs86STfgW/t45IZG6PjXA782O4T7FuzaJINpTIF33U= Subject key identifier: 7A:41:A2:55:04:8A:D2:CD:BC:E0:69:0B:A4:37:99:AC:B3:DB:6C:16 Authority key identifier: 9F:5E:7C:D1:CF:2E:52:B2:82:C4:03:FC:C0:AF:8B:02:D0:E8:93:12 Certificate issuer: /CN=9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312 Certificate serial: 6462B2DF3B1850438ECDBB7B011FCA5B5B9B7603 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.cer Subject info access: rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft Manifest number: 0433 Signing time: Tue 21 May 2024 09:31:50 +0000 Manifest this update: Tue 21 May 2024 09:26:50 +0000 Manifest next update: Fri 24 May 2024 11:31:50 +0000 Files and hashes: 1: 3130332e3134302e33352e302f32342d3234203d3e203538333639.roa (hash: LBYa5y6m0zuBAN3/cc6tCSWcf1rprQ73AVYekSglYHQ=) 2: 3130332e3134302e33342e302f32342d3234203d3e203538333639.roa (hash: vHWbrR/eEXNjZ5ax++YrUQDvEMfCGNSugwoO5OAA+Ac=) 3: 3130332e3134302e33342e302f32332d3233203d3e203538333639.roa (hash: Ly2WcAdl8FCGes0ivRK2PwJB6QG05Bueh0UeU8Ux16A=) 4: 9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.crl (hash: bv+fVEyTO/zGbH5IhRqCDc5+SJamgc3ns6JyK8+I/ps=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.crl rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 11:31:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:62:b2:df:3b:18:50:43:8e:cd:bb:7b:01:1f:ca:5b:5b:9b:76:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312 Validity Not Before: May 21 09:26:50 2024 GMT Not After : May 24 11:31:50 2024 GMT Subject: CN=7A41A255048AD2CDBCE0690BA43799ACB3DB6C16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:1d:4e:02:b7:52:bc:7a:3e:5f:c3:a3:81:50: 2f:b6:3c:71:49:41:2d:97:33:4d:c9:15:6c:37:75: 17:35:0f:9d:0c:8e:07:ca:24:87:8f:f5:7d:fc:fa: fa:b5:f6:bb:fb:fe:f9:72:5f:46:cd:75:98:c0:47: 67:1e:1e:31:cf:29:ba:95:82:a1:09:28:0b:92:22: b1:07:13:28:eb:e5:82:de:4d:59:0c:59:2e:f9:aa: eb:1d:7a:16:fc:86:90:b9:71:79:4b:87:37:cc:55: 2b:37:21:ce:36:dd:b4:0a:12:a7:9d:49:b6:be:8c: 35:d0:a6:92:5c:1c:87:c1:a0:a9:4e:60:61:36:00: 92:13:86:29:fe:f4:37:6b:05:05:15:5a:af:6b:3b: fe:53:ac:6d:63:67:b7:ea:ad:4d:dd:9c:2f:d4:a7: cd:b6:92:a2:22:50:94:2d:db:92:b3:c7:f1:5d:d5: 0a:c2:5d:72:3d:0a:25:a9:c9:1a:27:d0:f9:22:44: e6:ea:53:ce:c8:57:03:57:a0:24:6c:bf:7a:60:05: 91:5d:ad:48:c4:e3:9e:05:43:31:1d:92:76:43:d9: ee:c9:10:48:ff:dc:46:9e:5e:a5:e9:5d:b0:d6:06: e2:8c:57:1d:2f:1e:49:4b:89:a6:a5:d2:98:eb:1f: c8:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:41:A2:55:04:8A:D2:CD:BC:E0:69:0B:A4:37:99:AC:B3:DB:6C:16 X509v3 Authority Key Identifier: keyid:9F:5E:7C:D1:CF:2E:52:B2:82:C4:03:FC:C0:AF:8B:02:D0:E8:93:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:72:e9:17:03:7a:2e:08:9f:6d:5e:ec:58:10:6f:9e:c7:28: 93:99:13:d2:79:2b:74:61:30:90:fa:fe:ec:3f:51:8c:3a:7c: fd:6a:26:c9:ad:21:dc:ef:89:14:61:7e:d7:fe:d3:49:e0:3b: de:07:4a:87:a4:d4:a8:ec:38:19:97:1b:de:38:b6:b0:0b:65: ce:0a:0d:0c:fe:12:58:1f:4a:c2:e2:bf:51:ed:0e:fe:26:b9: 5e:41:e5:9a:c3:7a:a1:77:b7:8a:a4:45:1c:7d:e7:7e:2b:05: 51:f2:71:e7:b6:c2:3f:9a:12:01:c6:12:0d:14:4b:01:24:8d: 9a:0d:63:d7:2c:ce:15:f8:c1:6e:e2:fb:09:71:29:16:c4:2f: f7:00:d9:22:65:75:e6:2c:bf:24:63:e3:38:38:fe:db:8d:6a: a1:45:4a:a9:ca:ec:c7:17:dc:ee:ce:c5:f2:1f:fa:7a:c0:21: 3f:d9:46:e4:1e:73:b7:6b:bd:9f:1c:78:9e:ae:17:61:f7:74: 06:02:37:23:96:15:9d:3f:11:2c:27:1d:19:64:f6:24:d0:a9: b1:86:99:e2:9e:7c:71:f5:dd:34:d6:c0:7e:6a:5c:c4:1f:87: 77:8b:9e:bf:d9:45:a0:c9:d0:ad:c2:0c:5e:7c:a8:c3:4b:63: b0:d0:fd:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZGKy3zsYUEOOzbt7AR/KW1ubdgMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY1RTdDRDFDRjJFNTJCMjgyQzQwM0ZDQzBBRjhCMDJE MEU4OTMxMjAeFw0yNDA1MjEwOTI2NTBaFw0yNDA1MjQxMTMxNTBaMDMxMTAvBgNV BAMTKDdBNDFBMjU1MDQ4QUQyQ0RCQ0UwNjkwQkE0Mzc5OUFDQjNEQjZDMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcHU4Ct1K8ej5fw6OBUC+2PHFJ QS2XM03JFWw3dRc1D50MjgfKJIeP9X38+vq19rv7/vlyX0bNdZjAR2ceHjHPKbqV gqEJKAuSIrEHEyjr5YLeTVkMWS75qusdehb8hpC5cXlLhzfMVSs3Ic423bQKEqed Sba+jDXQppJcHIfBoKlOYGE2AJIThin+9DdrBQUVWq9rO/5TrG1jZ7fqrU3dnC/U p822kqIiUJQt25Kzx/Fd1QrCXXI9CiWpyRon0PkiRObqU87IVwNXoCRsv3pgBZFd rUjE454FQzEdknZD2e7JEEj/3EaeXqXpXbDWBuKMVx0vHklLiaal0pjrH8hHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUekGiVQSK0s284GkLpDeZrLPbbBYwHwYDVR0j BBgwFoAUn1580c8uUrKCxAP8wK+LAtDokxIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NTIyMjZlYS01ZTI2LTRlYTUtYTY4OS00NzU3YWQwNWY5NTIvMC85RjVFN0NEMUNG MkU1MkIyODJDNDAzRkNDMEFGOEIwMkQwRTg5MzEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY1RTdDRDFDRjJFNTJCMjgyQzQwM0ZDQzBBRjhCMDJEMEU4 OTMxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTUyMjI2ZWEtNWUyNi00ZWE1LWE2 ODktNDc1N2FkMDVmOTUyLzAvOUY1RTdDRDFDRjJFNTJCMjgyQzQwM0ZDQzBBRjhC MDJEMEU4OTMxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHdy6RcDei4In21e7FgQb57HKJOZE9J5K3Rh MJD6/uw/UYw6fP1qJsmtIdzviRRhftf+00ngO94HSoek1KjsOBmXG944trALZc4K DQz+ElgfSsLiv1HtDv4muV5B5ZrDeqF3t4qkRRx9534rBVHycee2wj+aEgHGEg0U SwEkjZoNY9cszhX4wW7i+wlxKRbEL/cA2SJldeYsvyRj4zg4/tuNaqFFSqnK7McX 3O7OxfIf+nrAIT/ZRuQec7drvZ8ceJ6uF2H3dAYCNyOWFZ0/ESwnHRlk9iTQqbGG meKefHH13TTWwH5qXMQfh3eLnr/ZRaDJ0K3CDF58qMNLY7DQ/ao= -----END CERTIFICATE-----Generated at Tue May 21 10:36:28 2024 by rpki-client on console-fra.rpki-client.org