$ rpki-client -vvf repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft File: 0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft (raw, json) Hash identifier: 706eyNAokYckz1HD+2MSo92VpTrxK0HxyTODEpOAmZY= Subject key identifier: D9:BB:0E:23:B4:83:88:21:4D:75:F3:EC:EA:BE:3A:69:7B:7E:0C:60 Authority key identifier: 0A:7E:22:2F:0C:3C:89:14:35:14:04:FC:05:DB:0F:DD:9C:D4:EB:20 Certificate issuer: /CN=0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20 Certificate serial: 33F9EF068FFD51DD44C915559198477117542968 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft Manifest number: 38 Signing time: Sat 18 May 2024 08:20:51 +0000 Manifest this update: Sat 18 May 2024 08:15:51 +0000 Manifest next update: Tue 21 May 2024 14:42:51 +0000 Files and hashes: 1: 3130332e3136352e3135342e302f32342d3234203d3e20313431393635.roa (hash: bcb8ETQxI9OLPd2+ZZ5YZBTV5uhcRb0JH1Q8izlXLhc=) 2: 0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.crl (hash: lPJEMJd7MtdHzm8acj8xXJcO0xEdPdHCMgy+JIWQ6kM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.crl rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 14:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:f9:ef:06:8f:fd:51:dd:44:c9:15:55:91:98:47:71:17:54:29:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20 Validity Not Before: May 18 08:15:51 2024 GMT Not After : May 21 14:42:51 2024 GMT Subject: CN=D9BB0E23B48388214D75F3ECEABE3A697B7E0C60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ce:15:5a:a8:c9:55:22:8c:7e:d0:94:6d:e6: ed:c9:07:4b:58:f0:f3:44:0d:9a:bf:10:1d:9e:c6: 01:2d:b2:0e:55:65:05:db:f5:3e:72:34:32:07:84: 9f:84:d4:18:73:99:2b:58:21:c0:03:29:ec:f1:be: e7:39:07:45:22:32:f5:3c:84:cb:14:bc:a8:b3:f6: 5d:cd:fd:ae:36:8f:29:02:cb:8d:de:ee:9a:42:ce: d3:7c:b4:31:9a:66:c2:93:c8:20:88:fe:19:96:54: 9b:ce:aa:5f:d5:1e:ca:18:cf:b7:9d:3a:0e:e6:67: a3:f4:b7:8b:d9:20:21:d0:a8:1a:72:1c:4b:29:78: e4:b6:e2:ad:df:1c:08:0a:b2:78:07:dd:d0:a5:4a: b6:f9:db:c9:49:01:56:98:fb:e9:f8:40:9c:61:6f: 30:df:e4:00:2a:21:dd:3f:5e:d5:0a:c3:48:04:10: af:75:88:34:62:99:2c:40:17:74:8b:35:ce:78:2a: 1b:fb:16:f0:4c:ba:b6:4f:a8:3c:1d:93:ec:2d:9e: c0:92:8f:2f:66:e1:16:26:c5:ce:74:43:c6:bb:d1: 52:45:00:49:fb:73:bd:88:55:7c:0d:2a:64:23:19: aa:73:4d:5f:b1:77:75:68:ff:7f:b2:a9:1c:6c:d5: f7:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:BB:0E:23:B4:83:88:21:4D:75:F3:EC:EA:BE:3A:69:7B:7E:0C:60 X509v3 Authority Key Identifier: keyid:0A:7E:22:2F:0C:3C:89:14:35:14:04:FC:05:DB:0F:DD:9C:D4:EB:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:41:c5:f9:ed:85:d8:e4:ee:59:25:80:cc:20:68:7e:c5:61: fd:9c:69:0c:63:db:65:5f:a4:d5:68:40:53:10:17:af:00:bc: fb:f8:08:69:2e:f2:bc:ba:8f:37:1a:ee:5a:a8:4e:62:7f:1b: c4:38:47:42:ca:69:ef:e0:af:fc:5c:e7:dc:a3:8b:41:c1:ab: b3:8c:71:cf:b7:dd:ba:33:0e:25:ed:02:a0:5a:c9:18:0d:50: cc:09:66:27:0d:7d:85:76:39:ea:43:e0:de:2a:42:69:e2:80: 27:e9:13:10:9b:1f:c7:12:e4:cb:45:42:b5:e5:1c:d1:76:1d: b0:b2:68:53:ad:0f:64:6b:9e:f9:f2:9f:ca:f2:fc:c9:3c:e7: 63:a4:36:53:6b:78:1a:36:27:a9:86:91:63:40:43:6d:14:ab: 6d:aa:3e:3b:d0:a0:2f:8a:4a:6a:9b:08:f5:2a:13:75:01:cd: 5d:b1:1b:fe:46:3f:fe:5a:d3:22:82:11:85:ee:4b:04:29:52: 10:0d:2f:c3:a3:c1:bc:35:a2:17:c5:2d:1d:8b:33:92:bc:23: 36:17:bc:d7:cc:26:4c:18:1e:a3:05:58:63:8c:78:6f:e7:4a: a0:5f:f5:76:d4:af:cc:06:4c:f4:ea:df:52:60:56:92:cf:35: 73:94:f7:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM/nvBo/9Ud1EyRVVkZhHcRdUKWgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE3RTIyMkYwQzNDODkxNDM1MTQwNEZDMDVEQjBGREQ5 Q0Q0RUIyMDAeFw0yNDA1MTgwODE1NTFaFw0yNDA1MjExNDQyNTFaMDMxMTAvBgNV BAMTKEQ5QkIwRTIzQjQ4Mzg4MjE0RDc1RjNFQ0VBQkUzQTY5N0I3RTBDNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgzhVaqMlVIox+0JRt5u3JB0tY 8PNEDZq/EB2exgEtsg5VZQXb9T5yNDIHhJ+E1BhzmStYIcADKezxvuc5B0UiMvU8 hMsUvKiz9l3N/a42jykCy43e7ppCztN8tDGaZsKTyCCI/hmWVJvOql/VHsoYz7ed Og7mZ6P0t4vZICHQqBpyHEspeOS24q3fHAgKsngH3dClSrb528lJAVaY++n4QJxh bzDf5AAqId0/XtUKw0gEEK91iDRimSxAF3SLNc54Khv7FvBMurZPqDwdk+wtnsCS jy9m4RYmxc50Q8a70VJFAEn7c72IVXwNKmQjGapzTV+xd3Vo/3+yqRxs1ffVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2bsOI7SDiCFNdfPs6r46aXt+DGAwHwYDVR0j BBgwFoAUCn4iLww8iRQ1FAT8BdsP3ZzU6yAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y Y2YzNWE0Ny0yY2NlLTQ4N2YtYWEyNy1jOWU5ZGU2MzViZWMvMC8wQTdFMjIyRjBD M0M4OTE0MzUxNDA0RkMwNURCMEZERDlDRDRFQjIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEE3RTIyMkYwQzNDODkxNDM1MTQwNEZDMDVEQjBGREQ5Q0Q0 RUIyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmNmMzVhNDctMmNjZS00ODdmLWFh MjctYzllOWRlNjM1YmVjLzAvMEE3RTIyMkYwQzNDODkxNDM1MTQwNEZDMDVEQjBG REQ5Q0Q0RUIyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAxBxfnthdjk7lklgMwgaH7FYf2caQxj22Vf pNVoQFMQF68AvPv4CGku8ry6jzca7lqoTmJ/G8Q4R0LKae/gr/xc59yji0HBq7OM cc+33bozDiXtAqBayRgNUMwJZicNfYV2OepD4N4qQmnigCfpExCbH8cS5MtFQrXl HNF2HbCyaFOtD2Rrnvnyn8ry/Mk852OkNlNreBo2J6mGkWNAQ20Uq22qPjvQoC+K SmqbCPUqE3UBzV2xG/5GP/5a0yKCEYXuSwQpUhANL8Ojwbw1ohfFLR2LM5K8IzYX vNfMJkwYHqMFWGOMeG/nSqBf9XbUr8wGTPTq31JgVpLPNXOU900= -----END CERTIFICATE-----Generated at Sat May 18 08:46:49 2024 by rpki-client on console-fra.rpki-client.org