$ rpki-client -vvf repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.mft File: 30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.mft (raw, json) Hash identifier: NIXlbLJoBx5NgLDAK9Qas3FwMeyOirnDsul8ikU3aPI= Subject key identifier: 75:4D:C6:EE:72:63:9B:97:E0:A2:89:B1:86:E2:CA:83:A1:38:61:AD Authority key identifier: 30:FC:12:E9:03:AE:0E:E8:7B:D1:A1:E5:8A:06:2C:80:26:A0:CE:51 Certificate issuer: /CN=30FC12E903AE0EE87BD1A1E58A062C8026A0CE51 Certificate serial: 73AA67697523549048EDFFC1FA5B664BAE91DA76 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.mft Manifest number: 0309 Signing time: Sat 18 May 2024 09:11:30 +0000 Manifest this update: Sat 18 May 2024 09:06:30 +0000 Manifest next update: Tue 21 May 2024 11:56:30 +0000 Files and hashes: 1: 3130332e3130372e31382e302f32342d3234203d3e20313337323838.roa (hash: pzN8C6kgK6IwQNAQGcthi+/KeoIdNKwokQYSl7Be1D8=) 2: 30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.crl (hash: 6qKUzRUCQ68HP8Dx53BVfXTujdvFwOhvhpVz9/e5Oq4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.crl rsync://repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 11:56:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:aa:67:69:75:23:54:90:48:ed:ff:c1:fa:5b:66:4b:ae:91:da:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30FC12E903AE0EE87BD1A1E58A062C8026A0CE51 Validity Not Before: May 18 09:06:30 2024 GMT Not After : May 21 11:56:30 2024 GMT Subject: CN=754DC6EE72639B97E0A289B186E2CA83A13861AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:38:13:ec:6a:38:83:c0:b2:47:b9:0e:26:3f: d8:5d:ba:a9:c7:13:dd:f3:44:95:d9:27:95:9d:e4: 9e:a2:2d:ed:5a:1a:81:8a:a1:9f:0d:fb:82:ac:8f: 06:07:72:0d:0e:b1:1f:8c:1b:23:9b:0d:c2:f6:14: 77:5a:40:de:c8:39:75:41:fd:2d:e4:a5:2e:4b:3f: b6:df:bb:94:30:c6:c4:c7:f0:06:70:56:fa:e7:c6: c4:e3:5c:2a:51:f8:67:91:9d:a5:71:6a:65:93:68: 8d:12:1d:fe:9d:26:42:a5:6c:5a:e2:4d:17:be:88: 5c:32:ce:4a:e0:af:55:1a:31:da:35:53:a3:75:d6: 4c:c1:a3:f9:f7:af:31:96:ca:dc:03:1b:93:61:ec: ff:ea:76:d4:bd:f5:46:43:e7:c6:18:f2:9f:f5:6f: 98:f3:07:c2:2c:82:17:9e:6c:b8:5b:b6:42:9f:54: f6:d8:b2:75:af:93:3c:ba:be:07:a7:b0:a8:b8:c8: 06:15:18:54:03:f3:4b:04:35:b8:84:62:47:02:ed: 2d:fa:df:9f:14:e5:4c:84:3c:a0:e0:9d:c5:81:59: 5a:58:2f:ce:d7:63:de:88:bc:21:1a:9b:da:1e:1d: cb:60:9b:52:e7:33:a9:75:ce:b3:79:39:bd:aa:e2: f7:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:4D:C6:EE:72:63:9B:97:E0:A2:89:B1:86:E2:CA:83:A1:38:61:AD X509v3 Authority Key Identifier: keyid:30:FC:12:E9:03:AE:0E:E8:7B:D1:A1:E5:8A:06:2C:80:26:A0:CE:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:92:fc:ec:18:db:7e:92:a0:21:48:ff:ed:e1:f0:cb:1b:c7: 6e:bb:44:15:50:6b:4f:d2:f4:b7:6f:08:69:c4:bd:70:eb:17: 64:ad:a9:c8:bf:38:19:d8:c7:1f:3a:ee:c4:1d:f9:86:ef:a8: 58:d0:92:f9:7d:34:a8:43:05:9f:60:13:73:ec:5e:79:27:6a: 38:aa:6c:89:78:1f:f5:31:e7:55:85:2a:4b:8f:f6:f4:9b:5e: 20:31:ff:80:d3:6a:5d:a4:78:ea:7b:69:b8:76:19:8e:98:25: 49:dd:21:e3:f7:9c:06:bc:e4:48:8c:50:cb:7d:65:b0:52:89: a8:1e:67:3c:94:a6:d3:b1:b5:fa:2f:11:75:f1:d4:3b:4a:50: 65:8c:87:fb:16:be:e7:a6:6b:6b:d1:c3:da:d6:c2:e6:14:40: 24:a8:1d:c4:5c:32:ef:96:33:1c:fe:ed:ee:09:7d:1c:52:a3: a3:0e:ba:aa:96:f4:e1:84:a1:4a:43:d6:cc:29:f0:f0:10:00: 9e:4f:a9:cb:af:7e:1b:1d:ca:d1:96:f1:bc:2d:57:fa:c4:15: 57:26:62:bf:a3:8a:a4:76:cb:58:bf:eb:ec:5b:11:3e:25:0e: 54:85:75:19:ff:bd:ad:c6:bf:98:b8:46:50:4a:fb:e9:28:f5: 48:d7:4b:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc6pnaXUjVJBI7f/B+ltmS66R2nYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBGQzEyRTkwM0FFMEVFODdCRDFBMUU1OEEwNjJDODAy NkEwQ0U1MTAeFw0yNDA1MTgwOTA2MzBaFw0yNDA1MjExMTU2MzBaMDMxMTAvBgNV BAMTKDc1NERDNkVFNzI2MzlCOTdFMEEyODlCMTg2RTJDQTgzQTEzODYxQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsOBPsajiDwLJHuQ4mP9hduqnH E93zRJXZJ5Wd5J6iLe1aGoGKoZ8N+4KsjwYHcg0OsR+MGyObDcL2FHdaQN7IOXVB /S3kpS5LP7bfu5QwxsTH8AZwVvrnxsTjXCpR+GeRnaVxamWTaI0SHf6dJkKlbFri TRe+iFwyzkrgr1UaMdo1U6N11kzBo/n3rzGWytwDG5Nh7P/qdtS99UZD58YY8p/1 b5jzB8IsgheebLhbtkKfVPbYsnWvkzy6vgensKi4yAYVGFQD80sENbiEYkcC7S36 358U5UyEPKDgncWBWVpYL87XY96IvCEam9oeHctgm1LnM6l1zrN5Ob2q4vcpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdU3G7nJjm5fgoomxhuLKg6E4Ya0wHwYDVR0j BBgwFoAUMPwS6QOuDuh70aHligYsgCagzlEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NzExYzExMC03YWIxLTRhMzktYjljYS0zYTliMGU4MWJjZjUvMC8zMEZDMTJFOTAz QUUwRUU4N0JEMUExRTU4QTA2MkM4MDI2QTBDRTUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzBGQzEyRTkwM0FFMEVFODdCRDFBMUU1OEEwNjJDODAyNkEw Q0U1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDcxMWMxMTAtN2FiMS00YTM5LWI5 Y2EtM2E5YjBlODFiY2Y1LzAvMzBGQzEyRTkwM0FFMEVFODdCRDFBMUU1OEEwNjJD ODAyNkEwQ0U1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEyS/OwY236SoCFI/+3h8Msbx267RBVQa0/S 9LdvCGnEvXDrF2Stqci/OBnYxx867sQd+YbvqFjQkvl9NKhDBZ9gE3PsXnknajiq bIl4H/Ux51WFKkuP9vSbXiAx/4DTal2keOp7abh2GY6YJUndIeP3nAa85EiMUMt9 ZbBSiageZzyUptOxtfovEXXx1DtKUGWMh/sWvuema2vRw9rWwuYUQCSoHcRcMu+W Mxz+7e4JfRxSo6MOuqqW9OGEoUpD1swp8PAQAJ5PqcuvfhsdytGW8bwtV/rEFVcm Yr+jiqR2y1i/6+xbET4lDlSFdRn/va3Gv5i4RlBK++ko9UjXS7E= -----END CERTIFICATE-----Generated at Sat May 18 09:57:32 2024 by rpki-client on console-fra.rpki-client.org