$ rpki-client -vvf repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft File: 4F40845626DE4E373F550B654EA4E833B6EB4D27.mft (raw, json) Hash identifier: nNMlhWRgp2ZBdCt4rZl3SOMH4DFNbhAqu2bpGREl7TA= Subject key identifier: 0C:D8:04:E6:A2:06:83:E3:48:67:D4:D2:69:E8:2E:7D:D5:E7:4F:58 Authority key identifier: 4F:40:84:56:26:DE:4E:37:3F:55:0B:65:4E:A4:E8:33:B6:EB:4D:27 Certificate issuer: /CN=4F40845626DE4E373F550B654EA4E833B6EB4D27 Certificate serial: 422E4FF5DFEE65DF687DBE7FA5790D0142570807 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft Manifest number: 02DC Signing time: Tue 28 May 2024 08:40:01 +0000 Manifest this update: Tue 28 May 2024 08:35:01 +0000 Manifest next update: Fri 31 May 2024 19:35:01 +0000 Files and hashes: 1: 3130332e3136382e3134362e302f32342d3234203d3e20313430343433.roa (hash: oXF8+YFdcm9cYBe2kMQLocV+o9Vq4WvNgvO4uFLK2SY=) 2: 3130332e3136382e3134362e302f32332d3233203d3e20313430343433.roa (hash: vS6/EEtMQVT4K3YP4R6xoIVUl5MVwEjWaihe/UDhtsg=) 3: 3130332e3136382e3134372e302f32342d3234203d3e20313430343433.roa (hash: nfF6yza8WaHmO48+Z0ivbgJKOpA/mJ1TCo6EtEhvGDc=) 4: 4F40845626DE4E373F550B654EA4E833B6EB4D27.crl (hash: so/533I6dXGyulcookfYwVdps7x2a+EeQPqIG679Hyg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.crl rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 May 2024 17:07:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:2e:4f:f5:df:ee:65:df:68:7d:be:7f:a5:79:0d:01:42:57:08:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F40845626DE4E373F550B654EA4E833B6EB4D27 Validity Not Before: May 28 08:35:01 2024 GMT Not After : May 31 19:35:01 2024 GMT Subject: CN=0CD804E6A20683E34867D4D269E82E7DD5E74F58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4e:c9:a3:67:33:bb:df:06:c4:a3:bb:61:55: 53:37:c1:62:17:e9:29:17:a5:79:c8:54:3f:74:f2: 24:c8:27:76:f6:c7:26:c3:bc:b3:c0:d8:5d:79:ae: 4b:cb:3e:48:4b:f6:02:44:cd:0a:21:fa:05:d4:2e: 39:4b:84:97:72:45:db:c8:84:42:40:f9:7b:4b:3e: 30:37:75:e3:4b:65:1f:44:13:19:ef:b8:eb:b4:93: 26:65:19:11:13:6d:aa:fc:78:6b:6e:4c:b2:50:5c: d7:2a:d1:90:39:bf:f6:49:5c:10:5b:33:3e:38:7d: 23:a4:97:1d:f0:e6:43:ba:00:61:53:5f:e9:0f:8a: 0d:a1:10:ff:5c:d2:1e:7f:bf:58:78:15:a5:ce:02: e6:f4:88:d8:32:8d:cf:b8:0e:20:ec:48:a8:fc:36: ed:bc:ef:cb:bd:29:65:72:57:2e:75:61:c0:dc:9c: 3a:dc:41:b3:c1:d4:73:5f:78:a6:20:be:c3:73:5c: a3:0e:6c:d5:2a:aa:39:c8:a9:3a:1a:d1:9e:b4:ea: 78:49:47:6a:0a:05:0b:d7:20:61:3b:0a:d8:ab:77: e9:44:f9:52:ee:c2:8e:a8:3a:8f:c9:f3:25:d8:60: 64:11:5a:72:6d:25:a8:a5:4f:91:0e:08:4a:b5:da: 83:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:D8:04:E6:A2:06:83:E3:48:67:D4:D2:69:E8:2E:7D:D5:E7:4F:58 X509v3 Authority Key Identifier: keyid:4F:40:84:56:26:DE:4E:37:3F:55:0B:65:4E:A4:E8:33:B6:EB:4D:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:f6:74:d8:3b:0e:7d:9f:ee:2b:01:dc:04:93:52:52:c1:e1: 4c:cc:58:d4:40:ef:2a:d2:97:59:c8:6c:0e:95:71:b9:43:ec: 3c:34:d3:22:dd:29:4f:c6:9e:25:be:d4:c1:18:e8:89:ca:41: 22:b0:d6:74:f5:85:68:06:a9:e8:1a:1b:e4:de:25:ec:8a:b9: 63:d2:7d:83:c6:3b:e2:3e:c9:6c:e7:1f:2d:8a:89:73:23:83: 77:5b:16:b6:a3:0b:5a:1c:10:40:c0:1f:95:11:83:ae:20:d7: 84:85:17:4e:31:1b:08:14:9a:ff:c7:ac:6d:62:6f:f2:dd:27: 59:ba:c6:85:e8:7a:4e:12:7b:37:ec:ff:78:b1:cb:82:39:5f: c2:25:a9:54:4e:71:a5:ed:e0:02:5d:14:a1:4e:96:04:56:54: 07:1d:a6:99:82:48:93:da:84:44:66:96:b7:2b:86:fd:6c:08: 75:a3:fb:73:d4:fe:44:93:ac:0d:5c:69:b5:36:3c:97:96:65: 7c:ac:fc:80:eb:b5:7b:43:49:02:f6:52:7e:e7:f7:4e:dd:8b: b8:aa:96:d3:42:f0:bb:3d:f1:fa:e7:ee:53:ee:2d:5a:2a:6b: b7:63:49:a4:a9:3b:86:74:72:d5:11:c7:c9:44:71:77:f1:d5: 47:45:79:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQi5P9d/uZd9ofb5/pXkNAUJXCAcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEY0MDg0NTYyNkRFNEUzNzNGNTUwQjY1NEVBNEU4MzNC NkVCNEQyNzAeFw0yNDA1MjgwODM1MDFaFw0yNDA1MzExOTM1MDFaMDMxMTAvBgNV BAMTKDBDRDgwNEU2QTIwNjgzRTM0ODY3RDREMjY5RTgyRTdERDVFNzRGNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyTsmjZzO73wbEo7thVVM3wWIX 6SkXpXnIVD908iTIJ3b2xybDvLPA2F15rkvLPkhL9gJEzQoh+gXULjlLhJdyRdvI hEJA+XtLPjA3deNLZR9EExnvuOu0kyZlGRETbar8eGtuTLJQXNcq0ZA5v/ZJXBBb Mz44fSOklx3w5kO6AGFTX+kPig2hEP9c0h5/v1h4FaXOAub0iNgyjc+4DiDsSKj8 Nu2878u9KWVyVy51YcDcnDrcQbPB1HNfeKYgvsNzXKMObNUqqjnIqToa0Z606nhJ R2oKBQvXIGE7Ctird+lE+VLuwo6oOo/J8yXYYGQRWnJtJailT5EOCEq12oPdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDNgE5qIGg+NIZ9TSaegufdXnT1gwHwYDVR0j BBgwFoAUT0CEVibeTjc/VQtlTqToM7brTScwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTQ2MzYwZC02NjJiLTRmN2QtYmIxNy1kODYwODIxNTI0NzEvMC80RjQwODQ1NjI2 REU0RTM3M0Y1NTBCNjU0RUE0RTgzM0I2RUI0RDI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEY0MDg0NTYyNkRFNEUzNzNGNTUwQjY1NEVBNEU4MzNCNkVC NEQyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2E0NjM2MGQtNjYyYi00ZjdkLWJi MTctZDg2MDgyMTUyNDcxLzAvNEY0MDg0NTYyNkRFNEUzNzNGNTUwQjY1NEVBNEU4 MzNCNkVCNEQyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALT2dNg7Dn2f7isB3ASTUlLB4UzMWNRA7yrS l1nIbA6VcblD7Dw00yLdKU/GniW+1MEY6InKQSKw1nT1hWgGqegaG+TeJeyKuWPS fYPGO+I+yWznHy2KiXMjg3dbFrajC1ocEEDAH5URg64g14SFF04xGwgUmv/HrG1i b/LdJ1m6xoXoek4Sezfs/3ixy4I5X8IlqVROcaXt4AJdFKFOlgRWVAcdppmCSJPa hERmlrcrhv1sCHWj+3PU/kSTrA1cabU2PJeWZXys/IDrtXtDSQL2Un7n907di7iq ltNC8Ls98frn7lPuLVoqa7djSaSpO4Z0ctURx8lEcXfx1UdFeZk= -----END CERTIFICATE-----Generated at Tue May 28 11:04:36 2024 by rpki-client on console-fra.rpki-client.org