$ rpki-client -vvf repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.mft File: 146B42876A5C2AB0705F67F1A3918D76984989AF.mft (raw, json) Hash identifier: GsYSiXbzb11r+U6cKCmJZcDuwb5OXykSrihlrCW+nT8= Subject key identifier: 13:05:E5:1B:A5:D0:7C:C9:74:B6:50:C7:11:F5:2D:1F:0C:BC:57:68 Authority key identifier: 14:6B:42:87:6A:5C:2A:B0:70:5F:67:F1:A3:91:8D:76:98:49:89:AF Certificate issuer: /CN=146B42876A5C2AB0705F67F1A3918D76984989AF Certificate serial: 14823C853A50284DB80A13C0FE48547DBAE28D71 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146B42876A5C2AB0705F67F1A3918D76984989AF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.mft Manifest number: 0128 Signing time: Tue 28 May 2024 13:21:13 +0000 Manifest this update: Tue 28 May 2024 13:16:13 +0000 Manifest next update: Fri 31 May 2024 22:34:13 +0000 Files and hashes: 1: 3130332e3139302e33302e302f32342d3234203d3e20313439383931.roa (hash: ibsSj/TLnX41tM6h4ZWZDwTjWs41uxmFYWnYL8TI2i4=) 2: 146B42876A5C2AB0705F67F1A3918D76984989AF.crl (hash: FLJsMTmp3QdzX+XS96Jcy8hDD2O3x7ps4wYaOcynAPU=) 3: 3130332e3139302e33312e302f32342d3234203d3e20313439383931.roa (hash: vgSJOZijG8F840g+vXqyXtkNcdCyGxB8PWHs8kOuy+A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.crl rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146B42876A5C2AB0705F67F1A3918D76984989AF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 May 2024 17:07:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:82:3c:85:3a:50:28:4d:b8:0a:13:c0:fe:48:54:7d:ba:e2:8d:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=146B42876A5C2AB0705F67F1A3918D76984989AF Validity Not Before: May 28 13:16:13 2024 GMT Not After : May 31 22:34:13 2024 GMT Subject: CN=1305E51BA5D07CC974B650C711F52D1F0CBC5768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:11:4f:1b:37:5f:de:18:57:74:70:28:76:7a: 22:d4:53:fb:56:a7:7f:ad:cd:ab:26:bf:0a:5c:61: 99:c2:92:06:24:27:34:08:22:f4:6e:d5:ea:fc:6b: e4:c2:06:11:84:97:24:66:18:9a:44:53:8d:f5:0c: e9:82:81:c2:f4:f8:45:4c:8d:43:28:c7:b4:7e:d2: 88:a6:7d:22:20:9b:f2:f4:d2:d6:4d:66:89:58:3f: da:63:de:6b:aa:43:7a:18:2a:a5:b8:16:b8:65:0c: b8:79:3a:5c:3a:40:c7:71:2f:70:1f:09:c7:dd:96: 09:f6:b5:19:d2:c6:70:77:56:62:a6:99:9d:52:0d: 7b:f0:cb:e6:a4:d2:94:ff:cd:3c:0b:bf:fb:be:43: 95:9a:b3:62:66:7e:14:12:5c:6d:2e:f8:ee:1f:9d: f7:a1:0f:8c:4a:7e:fb:e8:62:c3:25:8c:44:64:c6: a6:b5:2a:a1:0a:f6:ab:ec:7d:f4:6f:e0:58:66:2a: a7:9c:12:a2:60:9f:f2:73:bc:6f:84:9a:8e:96:4a: e5:44:b3:e9:b2:a9:e9:79:fe:6a:b6:12:22:36:45: 73:5f:cd:a0:93:b7:f0:35:76:58:c1:87:59:ba:c0: 75:01:9c:eb:bd:a0:73:cb:84:31:6c:a6:27:e9:a3: eb:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:05:E5:1B:A5:D0:7C:C9:74:B6:50:C7:11:F5:2D:1F:0C:BC:57:68 X509v3 Authority Key Identifier: keyid:14:6B:42:87:6A:5C:2A:B0:70:5F:67:F1:A3:91:8D:76:98:49:89:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146B42876A5C2AB0705F67F1A3918D76984989AF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:ee:d4:54:b8:bc:51:48:24:40:e0:66:ce:bd:58:e4:b9:0e: e1:d2:39:cc:91:6d:45:c1:ea:ad:2d:a1:18:e8:61:c7:2e:15: cb:b6:26:6c:03:01:e1:d9:4f:c0:3d:6e:93:1b:00:d1:eb:25: e0:24:66:fb:33:0e:a5:21:61:39:4b:a1:d5:49:64:4e:9a:96: e7:ea:ba:ab:57:8b:56:35:49:f1:f5:be:9d:f0:fa:45:54:60: fd:02:0e:cf:28:7f:c2:ce:b9:8a:3f:ba:4d:70:e9:b3:c7:be: 50:6f:fb:15:29:0b:47:98:ad:6f:9f:a6:0e:96:db:66:a6:59: c5:1d:bb:b9:63:dd:5c:85:09:de:81:61:f9:df:97:bc:a5:a9: 06:7b:20:f1:a0:b1:0a:bc:62:ab:04:bf:1d:36:a1:f1:ec:44: c0:c5:38:2f:9e:90:33:28:f6:fe:5b:00:c5:98:fe:b1:c1:27: 36:f0:39:63:59:7d:ba:11:6f:e8:ea:b5:ca:bd:7d:d9:c9:f9: ac:82:71:46:ac:cb:a1:3d:4d:5c:6a:ab:94:83:a5:58:cb:5e: 27:9d:fa:47:7e:f9:bc:87:38:35:c8:87:27:ab:94:4a:96:41: b5:d7:24:e1:a5:79:5d:6a:4f:ac:9a:a5:d5:0c:d2:6b:77:8c: 80:f5:a6:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFII8hTpQKE24ChPA/khUfbrijXEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ2QjQyODc2QTVDMkFCMDcwNUY2N0YxQTM5MThENzY5 ODQ5ODlBRjAeFw0yNDA1MjgxMzE2MTNaFw0yNDA1MzEyMjM0MTNaMDMxMTAvBgNV BAMTKDEzMDVFNTFCQTVEMDdDQzk3NEI2NTBDNzExRjUyRDFGMENCQzU3NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3EU8bN1/eGFd0cCh2eiLUU/tW p3+tzasmvwpcYZnCkgYkJzQIIvRu1er8a+TCBhGElyRmGJpEU431DOmCgcL0+EVM jUMox7R+0oimfSIgm/L00tZNZolYP9pj3muqQ3oYKqW4FrhlDLh5Olw6QMdxL3Af Ccfdlgn2tRnSxnB3VmKmmZ1SDXvwy+ak0pT/zTwLv/u+Q5Was2JmfhQSXG0u+O4f nfehD4xKfvvoYsMljERkxqa1KqEK9qvsffRv4FhmKqecEqJgn/JzvG+Emo6WSuVE s+myqel5/mq2EiI2RXNfzaCTt/A1dljBh1m6wHUBnOu9oHPLhDFspifpo+sJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEwXlG6XQfMl0tlDHEfUtHwy8V2gwHwYDVR0j BBgwFoAUFGtCh2pcKrBwX2fxo5GNdphJia8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGVlMTI2Zi04MTkyLTRkMjgtYjI1ZS1kZWFiZGI3OWViMjEvMC8xNDZCNDI4NzZB NUMyQUIwNzA1RjY3RjFBMzkxOEQ3Njk4NDk4OUFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTQ2QjQyODc2QTVDMkFCMDcwNUY2N0YxQTM5MThENzY5ODQ5 ODlBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWRlZTEyNmYtODE5Mi00ZDI4LWIy NWUtZGVhYmRiNzllYjIxLzAvMTQ2QjQyODc2QTVDMkFCMDcwNUY2N0YxQTM5MThE NzY5ODQ5ODlBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGfu1FS4vFFIJEDgZs69WOS5DuHSOcyRbUXB 6q0toRjoYccuFcu2JmwDAeHZT8A9bpMbANHrJeAkZvszDqUhYTlLodVJZE6alufq uqtXi1Y1SfH1vp3w+kVUYP0CDs8of8LOuYo/uk1w6bPHvlBv+xUpC0eYrW+fpg6W 22amWcUdu7lj3VyFCd6BYfnfl7ylqQZ7IPGgsQq8YqsEvx02ofHsRMDFOC+ekDMo 9v5bAMWY/rHBJzbwOWNZfboRb+jqtcq9fdnJ+ayCcUasy6E9TVxqq5SDpVjLXied +kd++byHODXIhyerlEqWQbXXJOGleV1qT6yapdUM0mt3jID1po4= -----END CERTIFICATE-----Generated at Tue May 28 15:18:18 2024 by rpki-client on console-ams.rpki-client.org