$ rpki-client -vvf repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft File: 9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft (raw, json) Hash identifier: e2g6U4tgL4lZeD9XPf92Vj0NLryaTfdw+IFPstL+UNk= Subject key identifier: 0A:DD:D8:DF:0C:20:5D:8F:4D:D0:E2:78:F0:40:E4:6D:7B:56:2D:17 Authority key identifier: 9A:D7:12:7E:C4:30:A4:C9:B6:1F:6A:F6:09:6D:6D:B6:F5:1E:FE:34 Certificate issuer: /CN=9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34 Certificate serial: 4E3540AD3F25C864540B4D040C6C2627F535F0BF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.cer Subject info access: rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft Manifest number: 020B Signing time: Mon 20 May 2024 01:41:00 +0000 Manifest this update: Mon 20 May 2024 01:36:00 +0000 Manifest next update: Thu 23 May 2024 02:45:00 +0000 Files and hashes: 1: 9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.crl (hash: 60kG4qc4PwU6DLV2zxzyUfNQ72Y8fjAJnVuBaxRADHI=) 2: 3130332e3136352e3135352e302f32342d3234203d3e20313431393231.roa (hash: o91zPp4ayAOJNN4yhRZb0XTHvD+8eIDU00sluDrc0OI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.crl rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 19:53:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:35:40:ad:3f:25:c8:64:54:0b:4d:04:0c:6c:26:27:f5:35:f0:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34 Validity Not Before: May 20 01:36:00 2024 GMT Not After : May 23 02:45:00 2024 GMT Subject: CN=0ADDD8DF0C205D8F4DD0E278F040E46D7B562D17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:cf:f3:35:12:cb:ba:af:f7:50:81:d0:ff:32: 33:d0:83:14:99:00:7e:3b:92:ba:14:9f:e1:b6:e6: ae:77:0f:6f:f5:17:51:11:a4:70:b5:86:e5:e0:98: ec:11:be:39:55:17:8d:95:7f:89:15:ee:82:98:d9: ea:26:48:b3:4e:b7:49:8d:03:be:d0:e9:1b:b7:ce: d5:07:13:c3:98:d1:17:77:da:75:59:b3:92:5a:9c: 56:a5:82:d2:73:fa:51:31:ef:8d:6b:bc:d9:04:b4: 8f:1b:03:4d:2e:5b:7b:44:80:10:cd:3e:5b:68:e1: d5:e1:6c:3b:9c:2c:9f:5f:36:b4:bf:67:a9:fe:49: 7c:20:38:4c:bd:e4:60:63:7e:7b:c9:4b:52:c4:51: 4e:1f:f0:21:93:44:ba:ae:0e:72:45:fa:a0:cf:55: d9:91:af:e1:14:36:39:f2:58:23:79:b9:a8:39:31: e2:56:4a:d6:19:6e:f5:23:63:29:cc:b5:3b:42:29: 8b:a9:e5:a3:53:eb:b2:01:41:43:9c:b0:7a:c4:62: 51:9f:51:80:4f:33:43:6e:7b:2e:63:12:8c:74:52: 0b:02:05:1e:f5:bb:95:8d:64:fd:49:f4:09:45:2c: d1:81:1a:eb:80:d4:c3:52:d7:b0:4b:6c:0c:b5:3e: 86:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:DD:D8:DF:0C:20:5D:8F:4D:D0:E2:78:F0:40:E4:6D:7B:56:2D:17 X509v3 Authority Key Identifier: keyid:9A:D7:12:7E:C4:30:A4:C9:B6:1F:6A:F6:09:6D:6D:B6:F5:1E:FE:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:bc:3d:0f:18:e5:79:43:46:c8:96:b8:67:20:1d:6b:dd:e2: 0e:02:a7:79:6b:37:62:2e:c2:c5:f6:37:61:7b:5f:bf:47:a5: 92:8e:60:0e:3c:82:1d:c1:96:f3:81:cc:97:77:77:7f:70:55: 74:86:56:2c:e8:cd:12:23:c7:70:de:28:5a:eb:50:25:cd:fb: f7:70:c7:98:54:3a:00:e4:f3:db:29:58:f4:73:e1:a4:f7:d5: d6:2a:6a:c8:35:72:27:56:09:ae:c6:d7:a5:92:14:39:36:19: 28:85:92:df:87:74:83:cb:97:a4:0d:e0:ff:00:a7:41:8f:6f: cd:c8:ee:14:32:53:a3:0c:1e:44:f2:da:71:6d:34:f1:83:ac: 18:f9:dc:e4:fb:4f:33:f9:f3:8d:6b:cf:6f:c6:15:18:04:81: 47:96:15:ad:a1:bf:19:08:2e:85:34:23:3d:6b:49:8d:68:51: 32:ba:67:05:b4:4f:bb:5f:99:a1:91:b7:f3:e2:31:17:d8:f2: 00:a2:7c:63:ec:0b:83:c8:f7:7c:4b:43:25:a4:e1:c4:70:a2: 42:4f:08:91:78:a5:95:8d:9a:2e:97:18:5f:cc:06:54:9a:36: 21:95:f8:2a:32:54:a7:4b:ea:16:70:f6:f1:50:e2:c5:10:32: aa:60:0f:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTjVArT8lyGRUC00EDGwmJ/U18L8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFENzEyN0VDNDMwQTRDOUI2MUY2QUY2MDk2RDZEQjZG NTFFRkUzNDAeFw0yNDA1MjAwMTM2MDBaFw0yNDA1MjMwMjQ1MDBaMDMxMTAvBgNV BAMTKDBBREREOERGMEMyMDVEOEY0REQwRTI3OEYwNDBFNDZEN0I1NjJEMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRz/M1Esu6r/dQgdD/MjPQgxSZ AH47kroUn+G25q53D2/1F1ERpHC1huXgmOwRvjlVF42Vf4kV7oKY2eomSLNOt0mN A77Q6Ru3ztUHE8OY0Rd32nVZs5JanFalgtJz+lEx741rvNkEtI8bA00uW3tEgBDN Plto4dXhbDucLJ9fNrS/Z6n+SXwgOEy95GBjfnvJS1LEUU4f8CGTRLquDnJF+qDP VdmRr+EUNjnyWCN5uag5MeJWStYZbvUjYynMtTtCKYup5aNT67IBQUOcsHrEYlGf UYBPM0Nuey5jEox0UgsCBR71u5WNZP1J9AlFLNGBGuuA1MNS17BLbAy1PoZDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCt3Y3wwgXY9N0OJ48EDkbXtWLRcwHwYDVR0j BBgwFoAUmtcSfsQwpMm2H2r2CW1ttvUe/jQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjBmZTJhYy0yOWY2LTQzYTItYmU2NC0wNmEzYWU5ZDhkMjAvMC85QUQ3MTI3RUM0 MzBBNEM5QjYxRjZBRjYwOTZENkRCNkY1MUVGRTM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUFENzEyN0VDNDMwQTRDOUI2MUY2QUY2MDk2RDZEQjZGNTFF RkUzNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTYwZmUyYWMtMjlmNi00M2EyLWJl NjQtMDZhM2FlOWQ4ZDIwLzAvOUFENzEyN0VDNDMwQTRDOUI2MUY2QUY2MDk2RDZE QjZGNTFFRkUzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIy8PQ8Y5XlDRsiWuGcgHWvd4g4Cp3lrN2Iu wsX2N2F7X79HpZKOYA48gh3BlvOBzJd3d39wVXSGVizozRIjx3DeKFrrUCXN+/dw x5hUOgDk89spWPRz4aT31dYqasg1cidWCa7G16WSFDk2GSiFkt+HdIPLl6QN4P8A p0GPb83I7hQyU6MMHkTy2nFtNPGDrBj53OT7TzP5841rz2/GFRgEgUeWFa2hvxkI LoU0Iz1rSY1oUTK6ZwW0T7tfmaGRt/PiMRfY8gCifGPsC4PI93xLQyWk4cRwokJP CJF4pZWNmi6XGF/MBlSaNiGV+CoyVKdL6hZw9vFQ4sUQMqpgD0w= -----END CERTIFICATE-----Generated at Mon May 20 02:37:08 2024 by rpki-client on console-fra.rpki-client.org