$ rpki-client -vvf repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft File: 30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft (raw, json) Hash identifier: xnI6sZ5lJC5LJ/OHF+AShhQxWqqXW/+suwwnXk0sEkU= Subject key identifier: 30:34:D4:0A:BB:10:1D:D4:30:8D:A5:17:0E:82:EC:EC:87:23:61:23 Authority key identifier: 30:E2:B4:61:7B:8B:9C:FC:4F:C5:7B:1C:5A:4D:74:FC:7E:91:2D:45 Certificate issuer: /CN=30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45 Certificate serial: 61A37D044AFF432418FBD85B783DC84D5FAB8053 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft Manifest number: 0103 Signing time: Sat 18 May 2024 16:11:04 +0000 Manifest this update: Sat 18 May 2024 16:06:04 +0000 Manifest next update: Tue 21 May 2024 18:54:04 +0000 Files and hashes: 1: 30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.crl (hash: Yd9ElIVi0wJskLzdmLoXWJ+K6pQEoLVpfilKN3ESjEg=) 2: 3130332e3136362e3235342e302f32342d3234203d3e20313431393636.roa (hash: rtGpfUVP9rpcERn6tpKnD8SvfIxxfSHmyehlR/5XHVA=) 3: 3130332e3136362e3235352e302f32342d3234203d3e20313431393636.roa (hash: HHeqOJO5aP/dVF49t0B2QIMMqTpjchseMFRCn2gwDxM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.crl rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 18:54:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:a3:7d:04:4a:ff:43:24:18:fb:d8:5b:78:3d:c8:4d:5f:ab:80:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45 Validity Not Before: May 18 16:06:04 2024 GMT Not After : May 21 18:54:04 2024 GMT Subject: CN=3034D40ABB101DD4308DA5170E82ECEC87236123 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:8f:d2:0c:fa:9d:28:19:05:fb:4c:43:9c:09: c1:33:45:0a:9d:42:1a:6c:e9:60:a2:7b:45:6b:ea: 9d:0b:97:57:16:d7:c9:dc:b9:3d:7d:05:9a:d3:7b: dc:45:5c:41:ac:ab:1c:a8:fa:28:4d:e9:36:cc:a7: 03:23:34:a9:20:9d:f4:80:93:12:25:79:24:36:80: ba:03:7e:67:c9:89:12:5c:ef:24:a4:13:93:dd:9a: 9b:e3:d7:b6:ab:38:53:9b:eb:cd:8a:c2:f0:4d:a4: 83:87:f9:d4:98:35:be:17:ec:f3:1a:eb:56:a1:86: c2:ff:4c:6a:90:05:19:3c:33:53:1a:77:d7:b2:ad: 2d:3b:ed:f3:40:12:79:05:b0:39:96:04:e4:6d:91: b7:97:c1:d0:97:61:b2:24:81:a9:9b:b2:e9:61:2f: e0:1a:0d:c7:93:66:af:0a:75:52:1e:85:c2:2d:ef: 25:e6:6a:30:e5:7e:2f:01:95:0f:1d:5d:3e:98:17: 73:ef:1b:25:25:3a:b8:04:66:c9:e9:9b:b6:2a:0c: 88:9e:24:08:fb:ec:85:fa:e6:45:2d:5b:0f:63:69: 9c:6d:a3:b3:e5:fb:49:39:f6:6c:c9:29:3b:08:bb: 02:08:5d:7c:5a:d2:15:6b:49:2a:37:62:66:94:eb: ae:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:34:D4:0A:BB:10:1D:D4:30:8D:A5:17:0E:82:EC:EC:87:23:61:23 X509v3 Authority Key Identifier: keyid:30:E2:B4:61:7B:8B:9C:FC:4F:C5:7B:1C:5A:4D:74:FC:7E:91:2D:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:4f:43:31:1f:8b:00:c3:cc:eb:01:41:f4:95:14:98:6c:a8: f1:4a:3a:f2:a8:94:55:2d:bc:24:81:0e:1e:ef:ea:72:6b:05: c8:31:d1:09:aa:e8:bd:25:56:66:fd:c7:db:ce:f9:b5:18:be: a2:53:59:82:ee:18:55:fd:19:f5:3c:64:18:35:5c:dd:eb:51: 6c:93:f2:a1:b0:b3:d3:41:ab:e1:46:4a:1a:85:12:d4:9e:70: 47:61:6d:1b:cc:52:90:1a:fd:dc:9a:75:4b:a1:cb:bb:33:0d: 2d:6c:15:df:0e:c2:e5:c2:97:92:46:a6:69:47:4b:8d:ce:e1: e9:42:7e:52:a5:5e:a5:09:5e:a2:74:58:1b:54:fb:aa:aa:6e: cc:5d:fa:87:00:c8:ec:05:0f:0c:11:b9:24:78:96:72:1b:11: 53:8e:38:94:65:78:cf:78:8c:85:e6:20:3e:f7:13:31:6d:0e: 89:4f:84:53:d0:e5:3c:bb:0d:cf:48:87:eb:43:24:8a:e4:48: ba:01:af:3a:92:9b:93:0d:d2:a0:4e:1e:85:96:07:2d:c3:ed: 3d:bc:03:05:39:fb:11:0f:54:ae:f3:2c:65:3d:6a:ff:18:2c: aa:98:28:d7:4c:c1:37:06:27:38:ca:a9:3d:93:63:1d:b0:ec: e7:5f:54:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYaN9BEr/QyQY+9hbeD3ITV+rgFMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBFMkI0NjE3QjhCOUNGQzRGQzU3QjFDNUE0RDc0RkM3 RTkxMkQ0NTAeFw0yNDA1MTgxNjA2MDRaFw0yNDA1MjExODU0MDRaMDMxMTAvBgNV BAMTKDMwMzRENDBBQkIxMDFERDQzMDhEQTUxNzBFODJFQ0VDODcyMzYxMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpj9IM+p0oGQX7TEOcCcEzRQqd Qhps6WCie0Vr6p0Ll1cW18ncuT19BZrTe9xFXEGsqxyo+ihN6TbMpwMjNKkgnfSA kxIleSQ2gLoDfmfJiRJc7ySkE5Pdmpvj17arOFOb682KwvBNpIOH+dSYNb4X7PMa 61ahhsL/TGqQBRk8M1Mad9eyrS077fNAEnkFsDmWBORtkbeXwdCXYbIkgambsulh L+AaDceTZq8KdVIehcIt7yXmajDlfi8BlQ8dXT6YF3PvGyUlOrgEZsnpm7YqDIie JAj77IX65kUtWw9jaZxto7Pl+0k59mzJKTsIuwIIXXxa0hVrSSo3YmaU6643AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMDTUCrsQHdQwjaUXDoLs7IcjYSMwHwYDVR0j BBgwFoAUMOK0YXuLnPxPxXscWk10/H6RLUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjlmODkwMi0xYTA2LTQ1YTgtYTk5OC03MmU0NmFhYWU4ZmMvMC8zMEUyQjQ2MTdC OEI5Q0ZDNEZDNTdCMUM1QTRENzRGQzdFOTEyRDQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzBFMkI0NjE3QjhCOUNGQzRGQzU3QjFDNUE0RDc0RkM3RTkx MkQ0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDI5Zjg5MDItMWEwNi00NWE4LWE5 OTgtNzJlNDZhYWFlOGZjLzAvMzBFMkI0NjE3QjhCOUNGQzRGQzU3QjFDNUE0RDc0 RkM3RTkxMkQ0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD1PQzEfiwDDzOsBQfSVFJhsqPFKOvKolFUt vCSBDh7v6nJrBcgx0Qmq6L0lVmb9x9vO+bUYvqJTWYLuGFX9GfU8ZBg1XN3rUWyT 8qGws9NBq+FGShqFEtSecEdhbRvMUpAa/dyadUuhy7szDS1sFd8OwuXCl5JGpmlH S43O4elCflKlXqUJXqJ0WBtU+6qqbsxd+ocAyOwFDwwRuSR4lnIbEVOOOJRleM94 jIXmID73EzFtDolPhFPQ5Ty7Dc9Ih+tDJIrkSLoBrzqSm5MN0qBOHoWWBy3D7T28 AwU5+xEPVK7zLGU9av8YLKqYKNdMwTcGJzjKqT2TYx2w7OdfVLE= -----END CERTIFICATE-----Generated at Sat May 18 17:19:17 2024 by rpki-client on console-ams.rpki-client.org