$ rpki-client -vvf repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.mft File: A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.mft (raw, json) Hash identifier: Dv1TnWrQDlkUs04FxA2LOgMV6xYR7whv3nwiETqP3BM= Subject key identifier: 1E:2D:51:88:29:55:3F:F0:86:4D:D0:31:F4:07:0B:81:FD:96:D5:7F Authority key identifier: A4:D9:09:9C:36:5D:8B:B9:FA:96:A2:A5:1F:A4:C6:1F:10:5E:F8:48 Certificate issuer: /CN=A4D9099C365D8BB9FA96A2A51FA4C61F105EF848 Certificate serial: 1291D14422FF511575925B829979800478622799 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.mft Manifest number: 17 Signing time: Fri 17 May 2024 16:42:06 +0000 Manifest this update: Fri 17 May 2024 16:37:06 +0000 Manifest next update: Mon 20 May 2024 23:11:06 +0000 Files and hashes: 1: 3130332e3235352e3136352e302f32342d3234203d3e20313531393934.roa (hash: 5hNQgKoQHy01q9WmOa4z3rjam+uZfVCwQVSfgN0IF+Y=) 2: 3130332e3235352e3136342e302f32342d3234203d3e20313531393934.roa (hash: zwB5l8LT24BhLoLaBW1yBvtnyWEzq+AG9lc9wMoAgJg=) 3: A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.crl (hash: AT5vM0b0rRQ2OviJLD6mo2ebRwrwfe9ID3G0hchYkLs=) 4: 3130332e3235352e3136342e302f32332d3233203d3e20313531393934.roa (hash: BeBYU80MLMh6Q0KG0SuOVcnIESYGUx7BbYTB/h6/djI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.crl rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 May 2024 23:07:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:91:d1:44:22:ff:51:15:75:92:5b:82:99:79:80:04:78:62:27:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4D9099C365D8BB9FA96A2A51FA4C61F105EF848 Validity Not Before: May 17 16:37:06 2024 GMT Not After : May 20 23:11:06 2024 GMT Subject: CN=1E2D518829553FF0864DD031F4070B81FD96D57F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bc:f0:43:ae:50:dc:59:03:b2:cd:86:c1:fd: 0b:bb:b7:40:7a:40:cf:93:f3:d9:f3:90:c6:42:d7: 98:77:7b:66:01:05:ba:08:30:9c:fb:a7:fd:95:1e: 09:fc:54:dd:cd:ea:ce:8c:4c:76:44:93:10:2e:8f: fc:40:87:5f:1c:12:d9:07:04:2b:77:ec:80:ff:05: 01:e0:ce:d6:47:18:f2:25:11:8d:08:ab:ad:0c:2e: df:21:e7:73:3a:c1:7d:28:86:a5:a4:1f:02:bc:23: a3:a3:a8:6e:c4:81:b8:e2:1d:7c:74:f9:10:2b:91: 76:47:46:ca:2b:2e:3d:da:c2:1a:f0:a2:44:0c:84: e0:41:d2:84:2a:9b:94:74:36:4f:48:5f:80:e7:6f: a3:d8:ef:b7:28:5a:80:c8:14:ee:fd:8d:53:aa:da: 0a:ad:53:3b:fd:1f:d8:49:57:22:31:7c:cc:63:0e: ce:78:f2:ac:5f:bb:da:4b:74:c4:bf:f4:e5:4a:d6: bd:69:e9:fd:86:91:5b:dd:e1:9f:59:e4:a5:f5:18: 12:55:07:c0:c8:60:4d:03:3f:43:9e:86:ab:99:69: d7:a7:a7:f3:51:d0:b6:8e:4a:0f:08:d4:2e:b6:fd: 4b:e5:bd:98:b4:35:37:a2:30:2b:19:e9:83:47:1f: ed:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:2D:51:88:29:55:3F:F0:86:4D:D0:31:F4:07:0B:81:FD:96:D5:7F X509v3 Authority Key Identifier: keyid:A4:D9:09:9C:36:5D:8B:B9:FA:96:A2:A5:1F:A4:C6:1F:10:5E:F8:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:cc:4e:a9:9d:07:31:ed:bb:aa:62:cf:51:f1:16:9b:62:4b: fb:5a:a6:07:ad:6f:7c:a9:06:97:b9:3f:00:2f:46:05:87:67: 54:f1:9a:7f:e6:ac:b1:b1:33:ca:b7:86:88:1c:f4:a2:0c:34: 7a:48:2b:d4:d1:3c:e1:40:18:ee:93:e3:c7:0f:d5:c4:5c:49: 27:fe:f8:f6:b8:00:cb:ff:a8:03:fb:aa:0c:fc:f6:9d:ad:a4: f0:06:8f:05:b7:17:a4:ca:c4:b0:f9:9a:a1:29:1a:dc:65:ec: d1:1e:c9:af:c6:f0:37:f5:ee:5c:03:f0:8b:ec:1c:ed:ab:ea: ff:e9:60:65:4e:38:07:31:0c:8c:8d:7f:49:19:12:89:5f:5d: d8:9c:cc:76:af:ea:52:3c:0a:8a:fc:38:10:09:6f:cd:cb:72: 99:89:5f:5d:26:bc:54:8b:c4:92:79:e0:27:90:ae:21:0d:68: c9:17:ca:93:29:be:56:a3:5a:3f:a0:af:b5:e3:2b:87:7d:43: d6:a8:cf:5d:64:47:01:c1:ee:39:54:ed:b9:3d:d1:ae:15:22: 7f:f1:33:67:cf:79:ea:71:fb:9d:d0:8d:3b:97:7a:14:d5:9c: fc:8e:09:14:0c:33:b9:14:98:f1:e9:a3:82:b7:af:4c:82:c4: 9e:a0:fb:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEpHRRCL/URV1kluCmXmABHhiJ5kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTREOTA5OUMzNjVEOEJCOUZBOTZBMkE1MUZBNEM2MUYx MDVFRjg0ODAeFw0yNDA1MTcxNjM3MDZaFw0yNDA1MjAyMzExMDZaMDMxMTAvBgNV BAMTKDFFMkQ1MTg4Mjk1NTNGRjA4NjRERDAzMUY0MDcwQjgxRkQ5NkQ1N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/vPBDrlDcWQOyzYbB/Qu7t0B6 QM+T89nzkMZC15h3e2YBBboIMJz7p/2VHgn8VN3N6s6MTHZEkxAuj/xAh18cEtkH BCt37ID/BQHgztZHGPIlEY0Iq60MLt8h53M6wX0ohqWkHwK8I6OjqG7EgbjiHXx0 +RArkXZHRsorLj3awhrwokQMhOBB0oQqm5R0Nk9IX4Dnb6PY77coWoDIFO79jVOq 2gqtUzv9H9hJVyIxfMxjDs548qxfu9pLdMS/9OVK1r1p6f2GkVvd4Z9Z5KX1GBJV B8DIYE0DP0OehquZadenp/NR0LaOSg8I1C62/UvlvZi0NTeiMCsZ6YNHH+1NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHi1RiClVP/CGTdAx9AcLgf2W1X8wHwYDVR0j BBgwFoAUpNkJnDZdi7n6lqKlH6TGHxBe+EgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YzQ3ZWY1Yy01YmJhLTRjZDEtOGRjOS0xNzNlMjc1MWY0ZjQvMC9BNEQ5MDk5QzM2 NUQ4QkI5RkE5NkEyQTUxRkE0QzYxRjEwNUVGODQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTREOTA5OUMzNjVEOEJCOUZBOTZBMkE1MUZBNEM2MUYxMDVF Rjg0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M0N2VmNWMtNWJiYS00Y2QxLThk YzktMTczZTI3NTFmNGY0LzAvQTREOTA5OUMzNjVEOEJCOUZBOTZBMkE1MUZBNEM2 MUYxMDVFRjg0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALrMTqmdBzHtu6piz1HxFptiS/tapgetb3yp Bpe5PwAvRgWHZ1Txmn/mrLGxM8q3hogc9KIMNHpIK9TRPOFAGO6T48cP1cRcSSf+ +Pa4AMv/qAP7qgz89p2tpPAGjwW3F6TKxLD5mqEpGtxl7NEeya/G8Df17lwD8Ivs HO2r6v/pYGVOOAcxDIyNf0kZEolfXdiczHav6lI8Cor8OBAJb83LcpmJX10mvFSL xJJ54CeQriENaMkXypMpvlajWj+gr7XjK4d9Q9aoz11kRwHB7jlU7bk90a4VIn/x M2fPeepx+53QjTuXehTVnPyOCRQMM7kUmPHpo4K3r0yCxJ6g+zw= -----END CERTIFICATE-----Generated at Fri May 17 18:13:30 2024 by rpki-client on console-fra.rpki-client.org