$ rpki-client -vvf repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft File: C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft (raw, json) Hash identifier: hu2vixu4FIeDSg1NUqBsxvMZ5PKAtpjCH87wUcTrvS8= Subject key identifier: 86:04:3D:11:CB:F5:47:41:4C:82:69:D9:A5:73:F8:3D:DB:A5:0B:72 Authority key identifier: C3:0A:37:71:EC:E5:F7:62:D6:FA:6D:87:28:F4:C0:C9:22:86:31:F7 Certificate issuer: /CN=C30A3771ECE5F762D6FA6D8728F4C0C9228631F7 Certificate serial: 507D1389CF53D09A027EB10F2AC033A7439D006A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft Manifest number: 027F Signing time: Sat 18 May 2024 02:02:02 +0000 Manifest this update: Sat 18 May 2024 01:57:02 +0000 Manifest next update: Tue 21 May 2024 12:33:02 +0000 Files and hashes: 1: 3130332e3136382e3134382e302f32342d3234203d3e20313432333530.roa (hash: hNeCPjWxsVTyc73QkAKJAy/ctaOIFUlChBmRPWtRNRs=) 2: C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.crl (hash: GKLiaZnxeTCpeM+IMeOsdh7fjCWS526h9SSvHEgXDbk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.crl rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 05:59:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:7d:13:89:cf:53:d0:9a:02:7e:b1:0f:2a:c0:33:a7:43:9d:00:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C30A3771ECE5F762D6FA6D8728F4C0C9228631F7 Validity Not Before: May 18 01:57:02 2024 GMT Not After : May 21 12:33:02 2024 GMT Subject: CN=86043D11CBF547414C8269D9A573F83DDBA50B72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d1:f8:30:06:79:ac:aa:29:2a:d9:17:f0:9f: 0f:19:ae:1a:cf:fa:b2:bf:12:1d:ba:87:19:57:38: ab:56:77:98:9f:97:dd:46:fc:5f:91:55:79:ee:2b: f5:17:7d:43:b3:58:5d:d5:d6:8b:0d:e5:46:fc:58: 11:5c:b9:37:30:b2:b5:2d:dc:a1:43:4e:97:36:72: fb:b2:71:57:93:e2:e9:40:1c:07:86:83:2e:36:79: 65:86:ac:29:b3:48:59:0d:fc:f1:5c:01:22:35:c3: 45:c9:00:88:96:ce:aa:75:d0:62:66:ae:d3:52:29: 9d:a5:55:2f:c0:ab:99:a4:de:d8:8a:42:0c:5d:48: 4a:db:f3:c0:a8:9c:4f:a4:65:54:ed:f0:9b:fb:51: 38:28:52:80:19:4e:ce:62:d5:dd:fb:f9:53:fc:38: 4b:75:31:3a:c4:6e:b9:4c:af:2d:ab:6f:17:be:31: 46:b7:c3:66:1e:d8:c9:32:f3:08:f2:b2:fe:a5:b6: 01:eb:27:4e:62:30:27:9c:3e:6a:d4:d0:79:87:8c: 61:f4:f5:38:f5:15:a3:4a:8b:ab:1d:6f:c0:3d:53: fb:93:ba:b6:44:cd:e5:bb:6c:cb:9f:de:0c:6d:3d: 79:87:cd:ba:f1:d6:7a:07:f8:5a:24:87:c9:23:87: 74:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:04:3D:11:CB:F5:47:41:4C:82:69:D9:A5:73:F8:3D:DB:A5:0B:72 X509v3 Authority Key Identifier: keyid:C3:0A:37:71:EC:E5:F7:62:D6:FA:6D:87:28:F4:C0:C9:22:86:31:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:c0:c7:cc:d7:cd:10:e1:83:db:f1:ea:c5:29:32:79:32:dc: c1:71:12:7e:ea:30:0b:88:49:28:29:c7:16:47:19:aa:03:70: 7c:44:9b:b6:8a:68:0a:33:20:fd:49:a0:81:d3:e4:ea:c8:d9: 4b:64:76:9c:e0:06:b5:d2:8b:a6:c5:37:18:9b:85:d5:d9:1d: 2d:0c:a1:93:90:05:af:37:45:bb:cb:06:7a:57:7a:1a:81:17: 99:d5:a4:1e:43:a0:e5:dd:78:99:47:df:e5:b4:21:b2:aa:5c: 3a:22:33:38:cc:f3:d9:84:10:c5:25:48:45:cc:e3:e4:ec:46: bd:9f:99:c8:87:b3:73:0d:78:b4:e2:08:92:1a:83:e3:ed:3f: 67:d5:51:9a:28:48:2b:6d:18:1d:b0:e4:f2:58:e2:6b:0f:d5: cf:ca:d8:5e:af:5d:96:61:a8:5e:5b:88:7e:68:5d:a1:10:bd: 37:4f:25:c7:e1:8c:b2:54:1d:6e:59:43:a4:7f:90:7b:72:50: 32:f9:bb:24:8c:bd:90:91:b0:0a:6e:6c:aa:23:e9:61:64:4e: b9:18:2c:38:f7:2c:41:e8:69:75:5a:03:ff:79:41:b6:33:71: 3a:4b:f9:67:e8:a0:ea:1a:f7:97:aa:e0:6b:ea:c3:85:51:91: 7d:c1:23:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUH0Tic9T0JoCfrEPKsAzp0OdAGowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMwQTM3NzFFQ0U1Rjc2MkQ2RkE2RDg3MjhGNEMwQzky Mjg2MzFGNzAeFw0yNDA1MTgwMTU3MDJaFw0yNDA1MjExMjMzMDJaMDMxMTAvBgNV BAMTKDg2MDQzRDExQ0JGNTQ3NDE0QzgyNjlEOUE1NzNGODNEREJBNTBCNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC40fgwBnmsqikq2Rfwnw8ZrhrP +rK/Eh26hxlXOKtWd5ifl91G/F+RVXnuK/UXfUOzWF3V1osN5Ub8WBFcuTcwsrUt 3KFDTpc2cvuycVeT4ulAHAeGgy42eWWGrCmzSFkN/PFcASI1w0XJAIiWzqp10GJm rtNSKZ2lVS/Aq5mk3tiKQgxdSErb88ConE+kZVTt8Jv7UTgoUoAZTs5i1d37+VP8 OEt1MTrEbrlMry2rbxe+MUa3w2Ye2Mky8wjysv6ltgHrJ05iMCecPmrU0HmHjGH0 9Tj1FaNKi6sdb8A9U/uTurZEzeW7bMuf3gxtPXmHzbrx1noH+Fokh8kjh3Q5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhgQ9Ecv1R0FMgmnZpXP4PdulC3IwHwYDVR0j BBgwFoAUwwo3cezl92LW+m2HKPTAySKGMfcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTFmNjI5OS1iMTU1LTQyMTItYjVlMS05ZjU3MDNjZDA5ODkvMC9DMzBBMzc3MUVD RTVGNzYyRDZGQTZEODcyOEY0QzBDOTIyODYzMUY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzMwQTM3NzFFQ0U1Rjc2MkQ2RkE2RDg3MjhGNEMwQzkyMjg2 MzFGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2ExZjYyOTktYjE1NS00MjEyLWI1 ZTEtOWY1NzAzY2QwOTg5LzAvQzMwQTM3NzFFQ0U1Rjc2MkQ2RkE2RDg3MjhGNEMw QzkyMjg2MzFGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGDAx8zXzRDhg9vx6sUpMnky3MFxEn7qMAuI SSgpxxZHGaoDcHxEm7aKaAozIP1JoIHT5OrI2UtkdpzgBrXSi6bFNxibhdXZHS0M oZOQBa83RbvLBnpXehqBF5nVpB5DoOXdeJlH3+W0IbKqXDoiMzjM89mEEMUlSEXM 4+TsRr2fmciHs3MNeLTiCJIag+PtP2fVUZooSCttGB2w5PJY4msP1c/K2F6vXZZh qF5biH5oXaEQvTdPJcfhjLJUHW5ZQ6R/kHtyUDL5uySMvZCRsApubKoj6WFkTrkY LDj3LEHoaXVaA/95QbYzcTpL+WfooOoa95eq4Gvqw4VRkX3BI50= -----END CERTIFICATE-----Generated at Sat May 18 04:02:38 2024 by rpki-client on console-ams.rpki-client.org