$ rpki-client -vvf repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft File: 4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft (raw, json) Hash identifier: PF24zJ7RN0Cc3SxPDobvD6EsvaUQf1oz1QL3t+0rH7U= Subject key identifier: 76:76:97:24:41:B6:F5:3A:B1:DD:E6:CD:F8:8D:86:DB:EB:7A:02:DF Authority key identifier: 4A:C7:DC:D8:EB:12:34:AD:C4:27:AE:BE:39:49:E8:69:16:38:A7:07 Certificate issuer: /CN=4AC7DCD8EB1234ADC427AEBE3949E8691638A707 Certificate serial: 6E585E494C0DD2895A9726DDD736E02D72CE85A1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer Subject info access: rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft Manifest number: 0138 Signing time: Sat 18 May 2024 18:50:39 +0000 Manifest this update: Sat 18 May 2024 18:45:39 +0000 Manifest next update: Wed 22 May 2024 01:57:39 +0000 Files and hashes: 1: 3130332e382e39362e302f32322d3234203d3e203137343530.roa (hash: B5BXVdAeOH4Uo9LoIOoXra62j0qIUdE4rGjnSCYwJVA=) 2: 3230322e362e3230382e302f32302d3234203d3e203137343530.roa (hash: Qk8IA75d8pfvyntKMnhMG3UoUrbTIKAVSS8hjIagbuA=) 3: 323030313a6466363a366630303a3a2f34382d3438203d3e20313331373034.roa (hash: VDnkiC6xsHb+wdu6iC6My4yclVTmaygUM2M2G/K9SOQ=) 4: 4AC7DCD8EB1234ADC427AEBE3949E8691638A707.crl (hash: G6BBUDaa71H0O0SBVWqmCZ41wqlL625bddvQJvahI7w=) 5: 3131392e322e36342e302f31392d3139203d3e20313331373034.roa (hash: 3OsDeHkNucbyDbdzfmyFYoiizgBvhTcIhYB5Uh6RzTc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.crl rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:58:5e:49:4c:0d:d2:89:5a:97:26:dd:d7:36:e0:2d:72:ce:85:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AC7DCD8EB1234ADC427AEBE3949E8691638A707 Validity Not Before: May 18 18:45:39 2024 GMT Not After : May 22 01:57:39 2024 GMT Subject: CN=7676972441B6F53AB1DDE6CDF88D86DBEB7A02DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:60:af:a6:22:1e:22:16:52:b7:98:fa:29:f4: 0c:62:65:08:26:58:81:55:3a:b3:38:bb:5b:3c:be: 04:e0:80:91:1d:ff:46:e3:e4:f9:41:6c:bb:f7:6f: 51:1b:dd:36:84:a6:59:bd:60:6b:6b:95:53:bc:ed: 93:24:ce:00:60:21:1e:16:c3:e9:3a:9e:26:ea:34: 0c:f3:60:00:62:3b:9d:1b:fe:51:a0:0f:04:5b:b5: de:1d:db:74:98:87:1b:30:8e:67:e2:6c:12:e7:9e: 16:79:0a:63:d7:5f:8a:e6:26:c3:c6:d8:63:34:c4: ed:4f:9d:0e:85:45:30:d1:c8:c0:b1:b6:95:0b:a9: 77:a0:3f:34:aa:50:d6:43:5a:ad:90:a5:ee:b5:a2: cb:c7:9a:2b:23:4d:34:b4:b8:0a:d3:09:46:b4:b9: 13:bc:78:cd:ac:f1:d2:3c:01:16:dd:ee:2d:0e:3a: 40:bb:c2:4e:fe:8c:80:5a:e2:64:78:ed:eb:62:c8: cf:5f:d7:41:b6:0b:5d:e3:47:f7:0a:34:c3:6f:d5: 8c:25:75:fe:f6:86:1b:1f:40:32:01:93:8a:a7:bd: 93:69:4d:e5:52:99:07:12:f4:9c:b9:0c:fe:1f:8b: a3:ce:72:ad:e2:d4:f3:5e:3f:a6:6c:b3:95:99:b7: e7:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:76:97:24:41:B6:F5:3A:B1:DD:E6:CD:F8:8D:86:DB:EB:7A:02:DF X509v3 Authority Key Identifier: keyid:4A:C7:DC:D8:EB:12:34:AD:C4:27:AE:BE:39:49:E8:69:16:38:A7:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:b3:bb:1f:3d:58:96:78:06:72:08:91:49:49:9a:2e:b7:90: de:de:d4:49:b7:4e:79:8e:16:69:87:0c:db:a6:11:98:27:39: 85:4c:39:17:2a:bb:8d:a5:0b:5b:18:8f:0f:9e:d3:e9:d2:3a: cb:d7:38:ae:2e:27:ae:64:41:d0:5e:1b:64:28:98:66:ee:fd: 16:18:51:2a:e8:90:86:f8:1d:0f:e7:37:69:eb:ca:98:84:8a: ba:c2:ac:77:46:ec:ab:f8:c5:ab:d1:5a:ef:ee:7b:4f:cf:f8: ab:3c:2f:25:a6:9a:cd:2b:66:5b:36:65:e1:a6:0b:5b:aa:65: 76:0e:73:a8:29:e5:0e:8c:94:97:2f:01:f5:07:e6:f1:d8:db: e3:86:a6:8b:01:15:d9:30:17:dc:ab:36:e4:b1:d4:6a:45:56: 54:84:38:10:4c:8f:ab:42:c6:55:56:9b:cc:c4:93:96:04:79: c0:84:94:02:0c:f6:66:96:24:2e:a2:63:fa:11:53:80:a7:84: 35:a2:5e:bc:93:67:cc:c4:83:1a:34:8f:06:e9:9f:fa:88:10: cc:f9:98:cf:54:e4:7e:0c:b7:b7:8d:19:d8:f2:de:88:46:20: 45:72:5b:f5:80:b6:df:36:07:90:c6:b7:fa:74:73:e1:d1:68: a7:ee:02:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUblheSUwN0olalybd1zbgLXLOhaEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFDN0RDRDhFQjEyMzRBREM0MjdBRUJFMzk0OUU4Njkx NjM4QTcwNzAeFw0yNDA1MTgxODQ1MzlaFw0yNDA1MjIwMTU3MzlaMDMxMTAvBgNV BAMTKDc2NzY5NzI0NDFCNkY1M0FCMURERTZDREY4OEQ4NkRCRUI3QTAyREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiYK+mIh4iFlK3mPop9AxiZQgm WIFVOrM4u1s8vgTggJEd/0bj5PlBbLv3b1Eb3TaEplm9YGtrlVO87ZMkzgBgIR4W w+k6nibqNAzzYABiO50b/lGgDwRbtd4d23SYhxswjmfibBLnnhZ5CmPXX4rmJsPG 2GM0xO1PnQ6FRTDRyMCxtpULqXegPzSqUNZDWq2Qpe61osvHmisjTTS0uArTCUa0 uRO8eM2s8dI8ARbd7i0OOkC7wk7+jIBa4mR47etiyM9f10G2C13jR/cKNMNv1Ywl df72hhsfQDIBk4qnvZNpTeVSmQcS9Jy5DP4fi6POcq3i1PNeP6Zss5WZt+dtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdnaXJEG29Tqx3ebN+I2G2+t6At8wHwYDVR0j BBgwFoAUSsfc2OsSNK3EJ66+OUnoaRY4pwcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MzgwNjFmMS1mYTMwLTRiZDYtODFhMC0yZWM2NzA4MzZjNDIvMC80QUM3RENEOEVC MTIzNEFEQzQyN0FFQkUzOTQ5RTg2OTE2MzhBNzA3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEFDN0RDRDhFQjEyMzRBREM0MjdBRUJFMzk0OUU4NjkxNjM4 QTcwNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDM4MDYxZjEtZmEzMC00YmQ2LTgx YTAtMmVjNjcwODM2YzQyLzAvNEFDN0RDRDhFQjEyMzRBREM0MjdBRUJFMzk0OUU4 NjkxNjM4QTcwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEGzux89WJZ4BnIIkUlJmi63kN7e1Em3TnmO FmmHDNumEZgnOYVMORcqu42lC1sYjw+e0+nSOsvXOK4uJ65kQdBeG2QomGbu/RYY USrokIb4HQ/nN2nrypiEirrCrHdG7Kv4xavRWu/ue0/P+Ks8LyWmms0rZls2ZeGm C1uqZXYOc6gp5Q6MlJcvAfUH5vHY2+OGposBFdkwF9yrNuSx1GpFVlSEOBBMj6tC xlVWm8zEk5YEecCElAIM9maWJC6iY/oRU4CnhDWiXryTZ8zEgxo0jwbpn/qIEMz5 mM9U5H4Mt7eNGdjy3ohGIEVyW/WAtt82B5DGt/p0c+HRaKfuAus= -----END CERTIFICATE-----Generated at Sat May 18 19:20:39 2024 by rpki-client on console-fra.rpki-client.org