$ rpki-client -vvf repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/49011B0D97FF49210FC27249FDD23F7172FD5561.mft File: 49011B0D97FF49210FC27249FDD23F7172FD5561.mft (raw, json) Hash identifier: P8UelRF0uW1Fltg7BN5U3mMad4xxUQ4DwzM5ca657r4= Subject key identifier: 71:42:82:03:02:7D:E1:1B:55:08:25:12:60:8F:8B:E9:58:63:29:06 Authority key identifier: 49:01:1B:0D:97:FF:49:21:0F:C2:72:49:FD:D2:3F:71:72:FD:55:61 Certificate issuer: /CN=49011B0D97FF49210FC27249FDD23F7172FD5561 Certificate serial: 47732CB40804D42F91E1FD54428D3DE9E19761FB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49011B0D97FF49210FC27249FDD23F7172FD5561.cer Subject info access: rsync://repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/49011B0D97FF49210FC27249FDD23F7172FD5561.mft Manifest number: 4E Signing time: Fri 17 May 2024 14:12:07 +0000 Manifest this update: Fri 17 May 2024 14:07:07 +0000 Manifest next update: Mon 20 May 2024 21:27:07 +0000 Files and hashes: 1: 3130332e36372e39302e302f32342d3234203d3e20313532303035.roa (hash: wICepd8U1QcGIGsrjMvgWPxltcWN58EUXrKFn1vdy6M=) 2: 3130332e36372e39312e302f32342d3234203d3e20313532303035.roa (hash: smGZgJZZCOs+jVUBHqaBcVcOi1qyQfpKzrUsCCMETHM=) 3: 49011B0D97FF49210FC27249FDD23F7172FD5561.crl (hash: AfZAqj5AC6toqYAOn878POB/mjnuej0PT4tCWfMW+iY=) 4: 3130332e36372e39302e302f32332d3233203d3e20313532303035.roa (hash: VwbI/oIqle8NfhRt5bW+40US1oBX0xVf8Vcy4J4MVEo=) 5: 323030313a6466333a316363303a3a2f34382d3438203d3e20313532303035.roa (hash: GlJzjlLIP+VYq001fSSL3JZRcIW0kJz9RaxJOI4O4Mk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/49011B0D97FF49210FC27249FDD23F7172FD5561.crl rsync://repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/49011B0D97FF49210FC27249FDD23F7172FD5561.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49011B0D97FF49210FC27249FDD23F7172FD5561.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 May 2024 21:27:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:73:2c:b4:08:04:d4:2f:91:e1:fd:54:42:8d:3d:e9:e1:97:61:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49011B0D97FF49210FC27249FDD23F7172FD5561 Validity Not Before: May 17 14:07:07 2024 GMT Not After : May 20 21:27:07 2024 GMT Subject: CN=71428203027DE11B55082512608F8BE958632906 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:f8:a5:7c:d7:84:46:83:01:15:49:13:ae:58: fb:ff:70:fd:ee:4f:8b:1f:3d:92:f3:63:0f:e6:19: c1:81:1c:eb:37:9a:60:20:48:2f:72:9d:71:a6:8b: 12:bb:e2:42:77:0d:ec:bc:87:c7:2a:8c:9d:4d:7f: 57:bc:96:9e:d9:b9:55:48:9f:22:96:b7:9d:59:3b: 84:f5:74:5a:c2:1f:a0:81:da:a0:55:44:3e:e6:91: a5:d3:96:79:1b:f8:ff:21:10:a2:50:ca:ff:d7:8e: 3f:cf:3e:c0:bd:1f:eb:b0:bb:e1:ca:03:b7:55:61: 3c:95:a3:65:8c:cc:a1:e0:4e:46:b3:fa:ac:36:1e: 3d:39:bb:39:84:ae:9c:de:19:3b:ba:6d:e1:a8:16: 2c:23:8a:0c:05:9e:03:5c:7f:ec:0e:d7:a8:8c:e5: 2e:55:59:b0:a0:a8:d5:8c:6f:89:08:64:cb:fa:ba: 7b:23:bd:ac:14:86:0c:cf:73:db:4f:f7:92:95:08: 03:66:2a:f6:f6:93:70:d1:af:19:3c:4e:a5:e9:61: d1:71:dd:22:51:33:95:a5:72:6e:44:77:fc:3d:3d: 46:0c:08:7a:6d:cc:01:26:96:84:28:b0:14:51:c6: 42:a9:da:0c:a0:f8:f4:fe:db:a8:bb:26:9b:54:04: e3:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:42:82:03:02:7D:E1:1B:55:08:25:12:60:8F:8B:E9:58:63:29:06 X509v3 Authority Key Identifier: keyid:49:01:1B:0D:97:FF:49:21:0F:C2:72:49:FD:D2:3F:71:72:FD:55:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/49011B0D97FF49210FC27249FDD23F7172FD5561.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49011B0D97FF49210FC27249FDD23F7172FD5561.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38488519-8f04-44f5-8312-8d9d3616d0d9/0/49011B0D97FF49210FC27249FDD23F7172FD5561.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:12:88:ba:8e:7c:cc:df:c9:e3:1a:4d:3a:85:9d:52:6c:3d: 90:fc:53:27:c8:dd:aa:2f:2d:a8:51:c0:67:fb:1c:88:7a:0f: ba:c2:0f:dd:57:74:cc:ce:cf:db:5f:9a:7a:9e:97:98:19:24: 15:25:8b:94:88:31:4e:7e:18:db:eb:b6:c2:b8:4a:e7:47:b4: fc:a6:4b:cd:c8:b0:21:38:6a:67:19:00:e4:fa:b7:32:db:7d: d0:a0:b0:1d:01:64:85:6e:f9:45:e0:27:a0:41:79:22:12:5a: 97:a2:f0:30:6a:a0:dd:6b:99:24:d1:c3:4b:43:09:48:3f:e2: be:1d:c4:39:94:45:09:be:23:23:98:87:15:25:4c:eb:b8:be: 00:6c:94:cc:df:54:58:5d:b0:27:b7:30:cd:c1:cc:86:58:6e: 9c:35:4c:da:8d:93:13:49:87:19:c8:3c:bc:45:04:41:d1:fd: 0a:33:39:cd:cb:1f:11:2c:8a:34:53:01:0a:78:4a:2a:54:59: a7:92:ed:6a:bc:ab:8d:9f:4e:45:75:3b:60:a2:00:98:ab:1e: 96:4e:b3:c1:78:63:3b:5c:a6:36:38:d1:bd:c8:f5:02:09:44: 39:b4:71:25:b2:b3:fd:71:2e:b0:95:5e:4e:b7:ef:14:75:bf: b4:fc:1f:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR3MstAgE1C+R4f1UQo096eGXYfswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDkwMTFCMEQ5N0ZGNDkyMTBGQzI3MjQ5RkREMjNGNzE3 MkZENTU2MTAeFw0yNDA1MTcxNDA3MDdaFw0yNDA1MjAyMTI3MDdaMDMxMTAvBgNV BAMTKDcxNDI4MjAzMDI3REUxMUI1NTA4MjUxMjYwOEY4QkU5NTg2MzI5MDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDt+KV814RGgwEVSROuWPv/cP3u T4sfPZLzYw/mGcGBHOs3mmAgSC9ynXGmixK74kJ3Dey8h8cqjJ1Nf1e8lp7ZuVVI nyKWt51ZO4T1dFrCH6CB2qBVRD7mkaXTlnkb+P8hEKJQyv/Xjj/PPsC9H+uwu+HK A7dVYTyVo2WMzKHgTkaz+qw2Hj05uzmErpzeGTu6beGoFiwjigwFngNcf+wO16iM 5S5VWbCgqNWMb4kIZMv6unsjvawUhgzPc9tP95KVCANmKvb2k3DRrxk8TqXpYdFx 3SJRM5Wlcm5Ed/w9PUYMCHptzAEmloQosBRRxkKp2gyg+PT+26i7JptUBONfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcUKCAwJ94RtVCCUSYI+L6VhjKQYwHwYDVR0j BBgwFoAUSQEbDZf/SSEPwnJJ/dI/cXL9VWEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ODQ4ODUxOS04ZjA0LTQ0ZjUtODMxMi04ZDlkMzYxNmQwZDkvMC80OTAxMUIwRDk3 RkY0OTIxMEZDMjcyNDlGREQyM0Y3MTcyRkQ1NTYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDkwMTFCMEQ5N0ZGNDkyMTBGQzI3MjQ5RkREMjNGNzE3MkZE NTU2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzg0ODg1MTktOGYwNC00NGY1LTgz MTItOGQ5ZDM2MTZkMGQ5LzAvNDkwMTFCMEQ5N0ZGNDkyMTBGQzI3MjQ5RkREMjNG NzE3MkZENTU2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEUSiLqOfMzfyeMaTTqFnVJsPZD8UyfI3aov LahRwGf7HIh6D7rCD91XdMzOz9tfmnqel5gZJBUli5SIMU5+GNvrtsK4SudHtPym S83IsCE4amcZAOT6tzLbfdCgsB0BZIVu+UXgJ6BBeSISWpei8DBqoN1rmSTRw0tD CUg/4r4dxDmURQm+IyOYhxUlTOu4vgBslMzfVFhdsCe3MM3BzIZYbpw1TNqNkxNJ hxnIPLxFBEHR/QozOc3LHxEsijRTAQp4SipUWaeS7Wq8q42fTkV1O2CiAJirHpZO s8F4YztcpjY40b3I9QIJRDm0cSWys/1xLrCVXk637xR1v7T8H9g= -----END CERTIFICATE-----Generated at Fri May 17 15:21:31 2024 by rpki-client on console-ams.rpki-client.org