$ rpki-client -vvf repo-rpki.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/024ABFF2959A6144CC4889C70F77F968FA410EF1.mft File: 024ABFF2959A6144CC4889C70F77F968FA410EF1.mft (raw, json) Hash identifier: 4XgkAZjFqv5R+0UAzeJJONdTZrJ2pZqZcMbWIkOMaZA= Subject key identifier: E3:C8:57:27:74:A0:08:E3:85:08:A0:B6:71:C7:E5:C8:EC:77:3B:24 Authority key identifier: 02:4A:BF:F2:95:9A:61:44:CC:48:89:C7:0F:77:F9:68:FA:41:0E:F1 Certificate issuer: /CN=024ABFF2959A6144CC4889C70F77F968FA410EF1 Certificate serial: 1CB97F654F4C8FF3449E5E236FDE6D0AD5E4737A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/024ABFF2959A6144CC4889C70F77F968FA410EF1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/024ABFF2959A6144CC4889C70F77F968FA410EF1.mft Manifest number: 01F3 Signing time: Tue 28 May 2024 08:21:03 +0000 Manifest this update: Tue 28 May 2024 08:16:03 +0000 Manifest next update: Fri 31 May 2024 16:19:03 +0000 Files and hashes: 1: 3130332e3137362e34342e302f32332d3233203d3e20313437313238.roa (hash: Y9Myg21wZWpArPDRMRM2GYBJ5q8vQ+ONOYlkqIekfXY=) 2: 3130332e3137362e34352e302f32342d3234203d3e20313437313238.roa (hash: ECxpMRKjw5XX2XksVVE0UOBQexpyfWyCmwjVGHtI3aw=) 3: 3130332e3137362e34342e302f32342d3234203d3e20313437313238.roa (hash: XgjVYfJl/xlVtua0sjuxOo3f+EBPiESInzuFXaA9I4w=) 4: 024ABFF2959A6144CC4889C70F77F968FA410EF1.crl (hash: S6KdGUdMCVwQShZoEkHzQ1HokPjj+PWmKTLa6P4jdrk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/024ABFF2959A6144CC4889C70F77F968FA410EF1.crl rsync://repo-rpki.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/024ABFF2959A6144CC4889C70F77F968FA410EF1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/024ABFF2959A6144CC4889C70F77F968FA410EF1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 May 2024 16:19:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:b9:7f:65:4f:4c:8f:f3:44:9e:5e:23:6f:de:6d:0a:d5:e4:73:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=024ABFF2959A6144CC4889C70F77F968FA410EF1 Validity Not Before: May 28 08:16:03 2024 GMT Not After : May 31 16:19:03 2024 GMT Subject: CN=E3C8572774A008E38508A0B671C7E5C8EC773B24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:50:aa:69:3b:75:32:83:09:4d:8d:a2:66:db: a5:90:b5:1b:79:65:e8:1c:a6:44:b3:7f:40:76:bb: 96:9c:e2:3f:ae:be:cf:6b:84:b2:0d:a9:32:47:94: 6a:73:d0:a3:a6:da:e4:81:d2:af:0b:ac:28:48:98: 48:c1:da:8b:e3:e5:33:cc:20:b6:40:84:bd:11:3d: f9:12:3b:25:60:4d:dd:51:70:97:d3:1c:fd:ae:a7: 2f:cb:e0:2e:b0:ac:bd:8d:9f:e6:bc:3e:b3:d1:62: c5:69:0d:e4:0d:ac:4d:cd:88:a4:7a:5d:53:11:03: 0e:7a:fb:ef:fa:e8:43:e6:3f:15:24:34:9b:5c:2b: 55:0e:a8:7a:fb:ed:89:6c:2d:c7:3b:93:77:70:b2: 69:b3:f0:c2:b3:74:d3:be:ef:5e:c2:79:10:65:af: 47:6a:f5:79:d4:b8:6d:dd:5a:95:5b:97:4d:85:b2: 23:3e:23:4c:70:d6:a9:1c:85:d8:7e:28:22:5c:96: a3:e3:f8:24:c3:ca:de:6a:57:1b:ae:2e:21:7a:29: b4:d0:d5:9f:18:07:99:42:6e:40:5e:f4:16:7d:a8: 4f:91:57:2d:fd:d0:25:6c:37:fc:ab:c6:07:8a:84: a2:80:4f:5a:77:81:c4:60:28:05:8b:9c:e5:57:1b: bc:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:C8:57:27:74:A0:08:E3:85:08:A0:B6:71:C7:E5:C8:EC:77:3B:24 X509v3 Authority Key Identifier: keyid:02:4A:BF:F2:95:9A:61:44:CC:48:89:C7:0F:77:F9:68:FA:41:0E:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/024ABFF2959A6144CC4889C70F77F968FA410EF1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/024ABFF2959A6144CC4889C70F77F968FA410EF1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/024ABFF2959A6144CC4889C70F77F968FA410EF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:b0:dc:ea:25:8e:8e:b5:9a:b1:1e:24:e3:8d:11:cd:d7:0d: 01:24:71:92:7b:f4:62:e1:9b:a3:6c:3f:a0:bc:d5:28:be:2e: 79:55:bb:8a:fd:e2:1f:ef:9e:18:1f:80:2e:dc:52:37:ea:cb: ef:c7:01:ca:fc:e0:17:1a:5a:66:18:70:62:0e:b2:02:1c:2b: 99:90:64:3b:9a:3b:26:66:bc:1b:0b:c9:0b:9d:3b:b3:b3:16: c0:4c:22:cf:c4:34:47:39:a1:c6:f0:16:ae:42:73:d2:e1:7b: 05:cd:4d:96:15:10:0f:7e:1d:76:23:e3:c8:0e:0c:23:9e:3c: 7f:4d:cc:7e:7a:4b:fc:e7:a1:b9:fb:80:7d:c8:a9:19:58:94: 68:e7:e5:03:e9:4f:d5:18:0c:c5:ac:1f:9a:d0:86:e6:98:59: a9:15:cc:d7:f5:94:31:68:ff:76:e4:2a:10:9a:14:3e:3e:fe: 1d:cb:ad:a4:25:3f:3f:10:d3:cf:c3:41:e7:07:43:72:40:91: 3e:47:74:99:af:47:9c:17:64:ab:8d:01:fc:4e:a1:b3:53:9c: 2e:41:52:39:8c:43:86:bc:2a:47:2e:cc:f1:39:16:ca:61:01: 17:26:79:dd:b6:53:1c:89:3f:20:70:39:08:90:91:77:bf:4b: 51:85:09:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHLl/ZU9Mj/NEnl4jb95tCtXkc3owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI0QUJGRjI5NTlBNjE0NENDNDg4OUM3MEY3N0Y5NjhG QTQxMEVGMTAeFw0yNDA1MjgwODE2MDNaFw0yNDA1MzExNjE5MDNaMDMxMTAvBgNV BAMTKEUzQzg1NzI3NzRBMDA4RTM4NTA4QTBCNjcxQzdFNUM4RUM3NzNCMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfUKppO3UygwlNjaJm26WQtRt5 ZegcpkSzf0B2u5ac4j+uvs9rhLINqTJHlGpz0KOm2uSB0q8LrChImEjB2ovj5TPM ILZAhL0RPfkSOyVgTd1RcJfTHP2upy/L4C6wrL2Nn+a8PrPRYsVpDeQNrE3NiKR6 XVMRAw56++/66EPmPxUkNJtcK1UOqHr77YlsLcc7k3dwsmmz8MKzdNO+717CeRBl r0dq9XnUuG3dWpVbl02FsiM+I0xw1qkchdh+KCJclqPj+CTDyt5qVxuuLiF6KbTQ 1Z8YB5lCbkBe9BZ9qE+RVy390CVsN/yrxgeKhKKAT1p3gcRgKAWLnOVXG7wvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU48hXJ3SgCOOFCKC2ccflyOx3OyQwHwYDVR0j BBgwFoAUAkq/8pWaYUTMSInHD3f5aPpBDvEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MzFhOTQyNi0zYzM1LTQ3MGUtYmYzNC0zMGU3ZTQxNjAyY2IvMC8wMjRBQkZGMjk1 OUE2MTQ0Q0M0ODg5QzcwRjc3Rjk2OEZBNDEwRUYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDI0QUJGRjI5NTlBNjE0NENDNDg4OUM3MEY3N0Y5NjhGQTQx MEVGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDMxYTk0MjYtM2MzNS00NzBlLWJm MzQtMzBlN2U0MTYwMmNiLzAvMDI0QUJGRjI5NTlBNjE0NENDNDg4OUM3MEY3N0Y5 NjhGQTQxMEVGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALGw3Ooljo61mrEeJOONEc3XDQEkcZJ79GLh m6NsP6C81Si+LnlVu4r94h/vnhgfgC7cUjfqy+/HAcr84BcaWmYYcGIOsgIcK5mQ ZDuaOyZmvBsLyQudO7OzFsBMIs/ENEc5ocbwFq5Cc9LhewXNTZYVEA9+HXYj48gO DCOePH9NzH56S/znobn7gH3IqRlYlGjn5QPpT9UYDMWsH5rQhuaYWakVzNf1lDFo /3bkKhCaFD4+/h3LraQlPz8Q08/DQecHQ3JAkT5HdJmvR5wXZKuNAfxOobNTnC5B UjmMQ4a8KkcuzPE5FsphARcmed22UxyJPyBwOQiQkXe/S1GFCZo= -----END CERTIFICATE-----Generated at Tue May 28 09:05:07 2024 by rpki-client on console-fra.rpki-client.org