$ rpki-client -vvf repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft File: 917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft (raw, json) Hash identifier: fKPMfNErjx9nhBDrNdcyW/U1UhV6TSZLyQilk7rrQmE= Subject key identifier: AB:B7:CD:9D:56:03:68:B6:D1:95:1C:6B:E9:1B:B6:E2:67:A2:CC:36 Authority key identifier: 91:7A:9D:24:BF:1E:AD:6F:A4:A1:F8:FD:81:D5:31:37:EF:52:E7:84 Certificate issuer: /CN=917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784 Certificate serial: 69A415CEC751B27429BB7424D151DB2269B26044 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft Manifest number: 0170 Signing time: Wed 15 May 2024 22:40:33 +0000 Manifest this update: Wed 15 May 2024 22:35:33 +0000 Manifest next update: Sun 19 May 2024 06:12:33 +0000 Files and hashes: 1: 323430303a346265303a3a2f33322d3438203d3e20313431383938.roa (hash: S55zRlGilXygBYC5qEatQFr1/e7oBd/mOOgpaU3S3b0=) 2: 3130332e3136342e31322e302f32332d3234203d3e20313431383938.roa (hash: 2DnAzq4eNmybDo6MKnn8o1XNX0aZDPzrJzf4nXdg4cY=) 3: 917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.crl (hash: mD/sZ+E2470jAfbMpSLBTgHfDz88JNxygBk/FExpysI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.crl rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 May 2024 06:12:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:a4:15:ce:c7:51:b2:74:29:bb:74:24:d1:51:db:22:69:b2:60:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784 Validity Not Before: May 15 22:35:33 2024 GMT Not After : May 19 06:12:33 2024 GMT Subject: CN=ABB7CD9D560368B6D1951C6BE91BB6E267A2CC36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:93:3d:61:78:3b:f6:97:09:4f:b8:49:11:ae: 9b:ca:6d:1f:98:93:4c:4f:5d:bb:c5:bb:1d:29:bc: 5d:4e:b3:7d:67:5a:44:79:79:41:e8:d6:f7:3e:9c: f2:59:b7:9f:72:26:42:31:55:6c:e2:f4:f6:a7:f6: 92:f2:23:98:7b:87:dc:2a:d5:0d:20:14:df:cf:dc: 74:ff:00:ed:f1:d0:ea:75:84:19:1b:bb:c8:ce:48: 52:d2:4b:cb:a1:5e:06:c0:6d:fa:eb:d5:a5:35:07: dc:22:72:74:54:26:53:ec:b9:22:64:3d:e7:74:3c: f3:18:a2:00:43:35:54:b8:04:8c:15:a3:5d:9e:79: 5f:b7:db:b6:2a:49:71:45:79:75:ac:cf:ae:59:6d: 7d:e1:f9:cc:dc:03:b2:37:fd:21:64:7e:e7:8e:2d: b9:df:26:fb:a2:6b:61:93:c5:3c:6a:26:40:d0:88: e3:a3:e6:51:61:d6:da:f8:97:6f:c0:4c:fb:02:33: 06:4f:b7:d0:58:63:9d:31:2d:b3:7e:f2:46:fd:a5: 3d:aa:f6:25:4b:f2:67:d4:2f:b4:c6:64:5f:ab:43: b0:be:6d:3e:57:b2:a6:f3:06:e5:3e:85:17:b3:38: 0e:48:eb:d4:19:6f:f4:29:a5:05:91:cd:a8:6a:b3: 41:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:B7:CD:9D:56:03:68:B6:D1:95:1C:6B:E9:1B:B6:E2:67:A2:CC:36 X509v3 Authority Key Identifier: keyid:91:7A:9D:24:BF:1E:AD:6F:A4:A1:F8:FD:81:D5:31:37:EF:52:E7:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:a3:0e:13:b9:d5:0c:8c:71:dd:36:4a:02:fe:bf:50:43:b0: 4a:75:e6:90:f8:ea:35:ce:ea:26:ae:59:1c:3c:cb:68:ba:0d: 17:a5:d8:9d:43:e2:36:78:b5:05:22:7b:7d:a2:1d:24:ef:9a: 6b:da:24:ce:99:91:d2:5f:22:94:fe:42:a4:57:aa:c9:ac:2a: 42:f7:7f:7f:37:04:c2:8f:09:1b:b9:51:33:23:4b:0b:22:79: ab:6f:66:5e:78:96:e5:78:22:92:13:9f:51:fc:ab:03:a1:e9: 84:5f:d0:23:5d:93:56:4b:fa:a0:65:91:2d:f1:4b:39:40:5f: 73:c7:a9:8b:b1:2d:fd:63:35:5d:94:3c:bb:2c:c2:95:3e:bc: f7:ec:11:85:9f:71:39:11:17:b5:e6:37:c6:6b:36:f2:e8:c4: 0b:f5:9f:10:f9:50:ff:60:2e:66:5f:44:36:1c:56:f6:5d:cc: 1d:71:65:dc:b0:bc:66:bc:a8:0f:d5:f7:ed:5f:7a:cf:98:d7: 6b:fb:fc:4a:68:88:af:ac:a8:13:34:3a:38:c4:a4:81:7b:9b: da:b5:8d:1f:1c:ce:cf:0c:fc:36:7d:4e:ad:2a:c4:d8:8e:98: 91:9a:86:85:b8:80:e5:5b:f1:7c:ae:7d:6e:76:36:02:32:c0: 95:43:e3:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaaQVzsdRsnQpu3Qk0VHbImmyYEQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE3QTlEMjRCRjFFQUQ2RkE0QTFGOEZEODFENTMxMzdF RjUyRTc4NDAeFw0yNDA1MTUyMjM1MzNaFw0yNDA1MTkwNjEyMzNaMDMxMTAvBgNV BAMTKEFCQjdDRDlENTYwMzY4QjZEMTk1MUM2QkU5MUJCNkUyNjdBMkNDMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCkz1heDv2lwlPuEkRrpvKbR+Y k0xPXbvFux0pvF1Os31nWkR5eUHo1vc+nPJZt59yJkIxVWzi9Pan9pLyI5h7h9wq 1Q0gFN/P3HT/AO3x0Op1hBkbu8jOSFLSS8uhXgbAbfrr1aU1B9wicnRUJlPsuSJk Ped0PPMYogBDNVS4BIwVo12eeV+327YqSXFFeXWsz65ZbX3h+czcA7I3/SFkfueO LbnfJvuia2GTxTxqJkDQiOOj5lFh1tr4l2/ATPsCMwZPt9BYY50xLbN+8kb9pT2q 9iVL8mfUL7TGZF+rQ7C+bT5XsqbzBuU+hRezOA5I69QZb/QppQWRzahqs0G5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq7fNnVYDaLbRlRxr6Ru24meizDYwHwYDVR0j BBgwFoAUkXqdJL8erW+kofj9gdUxN+9S54QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmRmZjgxOS0yYmFkLTQ4M2QtOWZhOC1iNmViYzQ4NDAzMWEvMC85MTdBOUQyNEJG MUVBRDZGQTRBMUY4RkQ4MUQ1MzEzN0VGNTJFNzg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTE3QTlEMjRCRjFFQUQ2RkE0QTFGOEZEODFENTMxMzdFRjUy RTc4NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkZmY4MTktMmJhZC00ODNkLTlm YTgtYjZlYmM0ODQwMzFhLzAvOTE3QTlEMjRCRjFFQUQ2RkE0QTFGOEZEODFENTMx MzdFRjUyRTc4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK2jDhO51QyMcd02SgL+v1BDsEp15pD46jXO 6iauWRw8y2i6DRel2J1D4jZ4tQUie32iHSTvmmvaJM6ZkdJfIpT+QqRXqsmsKkL3 f383BMKPCRu5UTMjSwsieatvZl54luV4IpITn1H8qwOh6YRf0CNdk1ZL+qBlkS3x SzlAX3PHqYuxLf1jNV2UPLsswpU+vPfsEYWfcTkRF7XmN8ZrNvLoxAv1nxD5UP9g LmZfRDYcVvZdzB1xZdywvGa8qA/V9+1fes+Y12v7/EpoiK+sqBM0OjjEpIF7m9q1 jR8czs8M/DZ9Tq0qxNiOmJGahoW4gOVb8XyufW52NgIywJVD4w0= -----END CERTIFICATE-----Generated at Wed May 15 23:05:46 2024 by rpki-client on console-fra.rpki-client.org