$ rpki-client -vvf repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.mft File: 9A52B6405ED406A7B17C4478D516DF3E37282980.mft (raw, json) Hash identifier: OA95AMHOxVQj2RQqa1ULs5iReJvyuZu9edSChtxze8o= Subject key identifier: AA:3D:E0:06:F7:31:17:36:62:FC:87:42:6E:24:60:E1:B2:8A:2E:E8 Authority key identifier: 9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80 Certificate issuer: /CN=9A52B6405ED406A7B17C4478D516DF3E37282980 Certificate serial: 671380C08945B126ED62FBD321BFA7DE6CC276E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.mft Manifest number: 01AA Signing time: Sat 18 May 2024 16:10:55 +0000 Manifest this update: Sat 18 May 2024 16:05:55 +0000 Manifest next update: Tue 21 May 2024 16:53:55 +0000 Files and hashes: 1: 3130332e3137372e392e302f32342d3234203d3e20313437313337.roa (hash: 8wlLzmfSWwRGc5rVuWlfm5TS6Q1boqLecoY0IZM6yqg=) 2: 323430303a343661303a3a2f33322d3438203d3e20313437313337.roa (hash: SQI2TSXcoQX+dudmb1rcaG7E9Hb0kjI3myrsV+tUEfg=) 3: 9A52B6405ED406A7B17C4478D516DF3E37282980.crl (hash: gnUspcQ8VME1C87rFBqQhnyGUN00WFPFvrFPFuGDRHY=) 4: 3130332e3137372e382e302f32342d3234203d3e20313437313337.roa (hash: reMGXOxBqJAc/IWI0zDm6I+GN78LXRTD8Si9i1k3sTA=) 5: 3130332e3137372e382e302f32332d3233203d3e20313437313337.roa (hash: AIKlW1zNeRaPeUIsGgITBd9fTMzwbS1jNsCqQk3DEsw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 16:53:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:13:80:c0:89:45:b1:26:ed:62:fb:d3:21:bf:a7:de:6c:c2:76:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A52B6405ED406A7B17C4478D516DF3E37282980 Validity Not Before: May 18 16:05:55 2024 GMT Not After : May 21 16:53:55 2024 GMT Subject: CN=AA3DE006F731173662FC87426E2460E1B28A2EE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bc:18:99:4b:fd:28:a7:22:a2:aa:88:ab:2a: d0:71:c2:42:5d:0d:91:cb:b2:be:59:eb:46:e5:71: e9:7b:de:60:79:ae:81:ab:ea:bb:7c:9b:d3:3a:9d: 26:19:c7:b7:21:84:5d:a3:bc:28:b4:16:13:cc:4f: c8:e0:61:c4:90:86:4a:67:ea:73:83:03:f2:63:1a: 27:88:6f:31:3e:ad:1b:c2:eb:2c:ba:a4:2a:5b:29: 43:b3:3a:84:5c:a1:17:56:52:99:a2:4b:54:33:5f: a1:7a:33:79:52:fe:b5:65:e9:fd:37:bc:57:99:b6: c5:f9:f1:3f:b3:f2:79:ee:a1:39:ab:de:9b:cb:19: 2f:5e:c3:03:9b:79:21:e0:cb:f8:c6:35:54:ea:09: eb:fd:1d:26:34:80:3b:6b:9f:eb:2d:24:3a:23:0f: 73:5f:3e:79:94:63:e3:88:50:c6:c5:ad:f0:25:fc: bf:34:c9:06:1d:14:de:78:86:1d:f0:a6:e8:c2:31: 39:33:7e:8e:3e:ee:64:c4:c4:0b:ee:87:b6:ef:09: 5e:12:47:82:44:66:e7:e4:a4:15:41:2b:77:4e:1b: 99:77:97:05:e1:29:7a:54:5a:4b:dd:3a:49:c6:1b: 23:a8:e3:25:1c:05:1f:f0:eb:fb:ad:a5:e0:66:49: 9a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:3D:E0:06:F7:31:17:36:62:FC:87:42:6E:24:60:E1:B2:8A:2E:E8 X509v3 Authority Key Identifier: keyid:9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:99:48:46:e4:ad:5c:9d:17:b9:62:48:fd:19:a8:69:71:78: ff:7a:29:e7:52:e6:80:8b:da:2e:d3:61:d7:a7:f5:5e:46:b0: 42:29:49:ca:19:52:5c:2d:dd:a5:22:88:0c:a0:6c:d7:05:f5: 1b:75:ef:d6:e2:8a:d7:29:92:ce:0e:3a:bf:a8:38:d2:17:6b: ae:48:e6:7f:4b:64:14:b4:46:fc:e1:84:00:dc:17:97:b2:51: 1b:bc:3f:00:d9:4c:21:5d:36:f9:d2:c8:01:f6:8b:e8:5f:8c: 08:15:ff:c7:a6:78:14:45:60:a8:86:fa:b9:85:b5:2a:b6:0c: 63:b1:10:b6:ec:4c:3f:28:d1:0d:1e:2e:7f:e2:57:f4:25:eb: bf:7f:b0:43:82:4e:86:cb:52:ad:28:52:4e:55:db:dc:eb:5f: a0:ff:5e:6e:b6:7c:75:10:f2:79:d4:c0:6b:38:a6:92:a1:3b: 8a:26:4e:40:43:b3:e0:9e:1a:0f:2f:11:78:85:4f:b7:f4:49: 0d:e5:e2:0c:0a:08:19:5d:9d:c9:82:3a:5c:1a:bb:00:4f:2c: 56:90:11:77:2e:ba:1b:b9:eb:a3:ae:1b:c0:65:9e:16:80:f9: 73:2d:5c:a6:d5:ff:7c:39:af:0d:ba:4e:e7:fa:5e:2f:d5:b2: 0b:19:da:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZxOAwIlFsSbtYvvTIb+n3mzCduYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE1MkI2NDA1RUQ0MDZBN0IxN0M0NDc4RDUxNkRGM0Uz NzI4Mjk4MDAeFw0yNDA1MTgxNjA1NTVaFw0yNDA1MjExNjUzNTVaMDMxMTAvBgNV BAMTKEFBM0RFMDA2RjczMTE3MzY2MkZDODc0MjZFMjQ2MEUxQjI4QTJFRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9vBiZS/0opyKiqoirKtBxwkJd DZHLsr5Z60blcel73mB5roGr6rt8m9M6nSYZx7chhF2jvCi0FhPMT8jgYcSQhkpn 6nODA/JjGieIbzE+rRvC6yy6pCpbKUOzOoRcoRdWUpmiS1QzX6F6M3lS/rVl6f03 vFeZtsX58T+z8nnuoTmr3pvLGS9ewwObeSHgy/jGNVTqCev9HSY0gDtrn+stJDoj D3NfPnmUY+OIUMbFrfAl/L80yQYdFN54hh3wpujCMTkzfo4+7mTExAvuh7bvCV4S R4JEZufkpBVBK3dOG5l3lwXhKXpUWkvdOknGGyOo4yUcBR/w6/utpeBmSZr9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqj3gBvcxFzZi/IdCbiRg4bKKLugwHwYDVR0j BBgwFoAUmlK2QF7UBqexfER41RbfPjcoKYAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTY2NWMzMi02ZGFmLTQ3MmItYmNlNi0zMTdkNWQ2Yzc4OWUvMC85QTUyQjY0MDVF RDQwNkE3QjE3QzQ0NzhENTE2REYzRTM3MjgyOTgwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE1MkI2NDA1RUQ0MDZBN0IxN0M0NDc4RDUxNkRGM0UzNzI4 Mjk4MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2E2NjVjMzItNmRhZi00NzJiLWJj ZTYtMzE3ZDVkNmM3ODllLzAvOUE1MkI2NDA1RUQ0MDZBN0IxN0M0NDc4RDUxNkRG M0UzNzI4Mjk4MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJCZSEbkrVydF7liSP0ZqGlxeP96KedS5oCL 2i7TYden9V5GsEIpScoZUlwt3aUiiAygbNcF9Rt179biitcpks4OOr+oONIXa65I 5n9LZBS0RvzhhADcF5eyURu8PwDZTCFdNvnSyAH2i+hfjAgV/8emeBRFYKiG+rmF tSq2DGOxELbsTD8o0Q0eLn/iV/Ql679/sEOCTobLUq0oUk5V29zrX6D/Xm62fHUQ 8nnUwGs4ppKhO4omTkBDs+CeGg8vEXiFT7f0SQ3l4gwKCBldncmCOlwauwBPLFaQ EXcuuhu566OuG8BlnhaA+XMtXKbV/3w5rw26Tuf6Xi/VsgsZ2l4= -----END CERTIFICATE-----Generated at Sat May 18 16:57:11 2024 by rpki-client on console-fra.rpki-client.org