$ rpki-client -vvf repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft File: 4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft (raw, json) Hash identifier: EdBgfBX5iS0rND551Hk2gf6CAk5+NYBoaKNRcM6/SDs= Subject key identifier: E3:33:25:64:89:50:B6:03:4A:E0:03:6E:B6:93:04:DA:9C:4B:08:47 Authority key identifier: 4F:29:04:EA:E6:6A:DD:5D:3A:C5:3C:6A:CC:B9:21:33:B4:26:DF:48 Certificate issuer: /CN=4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48 Certificate serial: 6D638501C468D220D3DB83F9969FB959F9715F3F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.cer Subject info access: rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft Manifest number: 0436 Signing time: Tue 28 May 2024 08:01:59 +0000 Manifest this update: Tue 28 May 2024 07:56:59 +0000 Manifest next update: Fri 31 May 2024 19:58:59 +0000 Files and hashes: 1: 3130332e3134362e3138342e302f32332d3234203d3e20313339393637.roa (hash: hmbofighT+Ro/Met01Dk6M1BGgJbv3f8eOGQ1A3WW84=) 2: 323430353a396363303a3a2f33322d3438203d3e20313339393637.roa (hash: hGHZYqsrTotmCOekwKuOxx7mDMYHkZ5rlyLk/n+jEFA=) 3: 4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.crl (hash: iWr2qgsqrT9wDM6eK3Sjg3T0NBRi/cogS0Eh0RucoZU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.crl rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 May 2024 16:41:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:63:85:01:c4:68:d2:20:d3:db:83:f9:96:9f:b9:59:f9:71:5f:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48 Validity Not Before: May 28 07:56:59 2024 GMT Not After : May 31 19:58:59 2024 GMT Subject: CN=E33325648950B6034AE0036EB69304DA9C4B0847 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:74:86:7d:56:9f:26:be:2a:bd:e3:3e:d1:4f: b7:9b:72:5e:a0:17:56:48:ce:02:2e:9d:d1:f6:4b: a6:0c:c2:93:53:e3:4b:9d:1a:c6:1a:b2:91:ed:d1: f4:8b:eb:de:6f:b2:cb:ca:c1:8d:50:6f:54:1f:31: 4a:92:8c:b8:e3:15:70:12:03:6b:dd:35:8a:36:cc: b5:3d:f0:84:04:32:16:13:7d:c4:8d:9a:8f:b4:26: d8:12:56:81:ce:23:c0:22:84:3c:db:b1:f5:39:7e: d6:96:aa:db:64:07:ee:28:7b:f8:2a:bf:0e:82:01: 67:69:96:fc:d3:ae:e0:e2:13:2b:67:23:b1:98:6a: e4:7c:f7:6d:f1:ad:e6:6a:4a:82:e8:7c:10:e1:47: a1:2d:1d:62:7e:3a:9b:8d:e3:49:4b:15:68:e4:98: be:f8:da:4c:d0:68:4b:04:7e:39:3e:1f:d4:2e:33: fb:b4:a7:d4:61:c6:1d:26:64:5f:06:ed:8e:49:19: e8:60:7b:43:4a:d7:87:af:ac:f3:1f:97:9e:a4:55: 72:e0:8c:ab:55:16:56:21:74:a1:98:79:38:10:45: a8:47:b3:43:d8:dd:6e:51:6d:e3:71:7b:84:72:8e: cb:36:df:20:91:0a:6e:03:29:0f:5a:fe:5b:f2:48: e5:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:33:25:64:89:50:B6:03:4A:E0:03:6E:B6:93:04:DA:9C:4B:08:47 X509v3 Authority Key Identifier: keyid:4F:29:04:EA:E6:6A:DD:5D:3A:C5:3C:6A:CC:B9:21:33:B4:26:DF:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:31:cc:0a:4c:4d:ff:ff:d1:4c:d6:26:17:4c:12:f1:0d:5a: e8:45:ab:4f:96:42:8f:97:ac:ed:23:1c:38:af:7d:7c:b6:61: 05:7f:53:e5:d0:a7:44:d6:f0:ea:7f:5a:f8:a5:b8:03:d1:20: 8a:a2:a5:bd:2b:ee:71:c9:b7:b9:26:5d:0f:43:43:ad:0e:9d: b3:c1:4c:08:9e:1f:65:a0:40:9e:79:5a:27:9c:4f:9d:be:5a: d5:0a:26:2c:c2:ce:b5:99:56:d8:71:5f:6c:2c:3d:ab:fa:ea: 1b:ab:69:c9:cb:a9:56:ba:68:3c:95:58:aa:08:65:90:0c:58: e3:e2:0d:9a:6e:37:c4:9e:0d:13:93:f6:c5:a8:09:43:61:0e: b4:ac:52:d2:00:69:bb:9b:5c:3b:ff:bc:5b:37:9d:6e:a5:56: 14:8c:25:a1:00:5b:ae:78:29:c6:07:2b:e8:16:9f:12:3a:32: 0f:c4:d2:e1:d3:27:0b:fa:fe:01:58:17:9d:11:34:60:fa:e3: a3:e5:6b:43:94:f1:68:8b:c4:d4:b1:52:04:12:ac:60:fe:e5: ea:39:db:10:57:3c:7a:2e:57:2e:6a:aa:3f:11:8a:12:87:01: cb:5c:7d:3b:57:27:aa:c6:88:5d:16:40:a3:a4:4f:ef:e3:33: c2:9d:da:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbWOFAcRo0iDT24P5lp+5WflxXz8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEYyOTA0RUFFNjZBREQ1RDNBQzUzQzZBQ0NCOTIxMzNC NDI2REY0ODAeFw0yNDA1MjgwNzU2NTlaFw0yNDA1MzExOTU4NTlaMDMxMTAvBgNV BAMTKEUzMzMyNTY0ODk1MEI2MDM0QUUwMDM2RUI2OTMwNERBOUM0QjA4NDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIdIZ9Vp8mviq94z7RT7ebcl6g F1ZIzgIundH2S6YMwpNT40udGsYaspHt0fSL695vssvKwY1Qb1QfMUqSjLjjFXAS A2vdNYo2zLU98IQEMhYTfcSNmo+0JtgSVoHOI8AihDzbsfU5ftaWqttkB+4oe/gq vw6CAWdplvzTruDiEytnI7GYauR8923xreZqSoLofBDhR6EtHWJ+OpuN40lLFWjk mL742kzQaEsEfjk+H9QuM/u0p9Rhxh0mZF8G7Y5JGehge0NK14evrPMfl56kVXLg jKtVFlYhdKGYeTgQRahHs0PY3W5RbeNxe4Ryjss23yCRCm4DKQ9a/lvySOUXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4zMlZIlQtgNK4ANutpME2pxLCEcwHwYDVR0j BBgwFoAUTykE6uZq3V06xTxqzLkhM7Qm30gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OWM1MzI3Zi0xMGZkLTRjZjAtODUxYy0wY2ZjZDNjM2M2OTcvMC80RjI5MDRFQUU2 NkFERDVEM0FDNTNDNkFDQ0I5MjEzM0I0MjZERjQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEYyOTA0RUFFNjZBREQ1RDNBQzUzQzZBQ0NCOTIxMzNCNDI2 REY0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjljNTMyN2YtMTBmZC00Y2YwLTg1 MWMtMGNmY2QzYzNjNjk3LzAvNEYyOTA0RUFFNjZBREQ1RDNBQzUzQzZBQ0NCOTIx MzNCNDI2REY0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJoxzApMTf//0UzWJhdMEvENWuhFq0+WQo+X rO0jHDivfXy2YQV/U+XQp0TW8Op/WviluAPRIIqipb0r7nHJt7kmXQ9DQ60OnbPB TAieH2WgQJ55WiecT52+WtUKJizCzrWZVthxX2wsPav66huracnLqVa6aDyVWKoI ZZAMWOPiDZpuN8SeDROT9sWoCUNhDrSsUtIAabubXDv/vFs3nW6lVhSMJaEAW654 KcYHK+gWnxI6Mg/E0uHTJwv6/gFYF50RNGD646Pla0OU8WiLxNSxUgQSrGD+5eo5 2xBXPHouVy5qqj8RihKHActcfTtXJ6rGiF0WQKOkT+/jM8Kd2tM= -----END CERTIFICATE-----Generated at Tue May 28 09:05:07 2024 by rpki-client on console-fra.rpki-client.org