$ rpki-client -vvf repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.mft File: 44106068E5A5FC1973C8043D3B8F00105A9C9710.mft (raw, json) Hash identifier: HNzB4NKdsmW8PnCydkCaTq+//u5NjQFYH0gvAsP0uBk= Subject key identifier: 14:AB:F9:FA:12:D7:2D:89:34:41:BC:7C:C7:75:77:38:E1:28:D0:71 Authority key identifier: 44:10:60:68:E5:A5:FC:19:73:C8:04:3D:3B:8F:00:10:5A:9C:97:10 Certificate issuer: /CN=44106068E5A5FC1973C8043D3B8F00105A9C9710 Certificate serial: 687AB19CA21F59BC1BFEDA4ED6CCF3B4CF71DC44 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44106068E5A5FC1973C8043D3B8F00105A9C9710.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.mft Manifest number: 02FA Signing time: Wed 29 May 2024 18:40:58 +0000 Manifest this update: Wed 29 May 2024 18:35:58 +0000 Manifest next update: Sat 01 Jun 2024 21:26:58 +0000 Files and hashes: 1: 3130332e3135352e3234362e302f32342d3234203d3e20313431303738.roa (hash: wpT3HOPYZ9xPLMMTy1+I/VesuIKNDiKNdadypj/D++c=) 2: 3130332e3135352e3234372e302f32342d3234203d3e20313431303738.roa (hash: MeEd/Ro5wDh3435Ok3avWaDRb9M+pVKmccKrncFYuEQ=) 3: 44106068E5A5FC1973C8043D3B8F00105A9C9710.crl (hash: OGZSl+Tm1tiIyd5Ndm4UJPD55pJ2ETrM94fcWz/Lo4o=) 4: 323430363a376163303a3a2f33322d3332203d3e20313431303738.roa (hash: uR1+afDktO/hpDJ46ocHGfgJQmgWSAYkk8ZOTplnWy8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.crl rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44106068E5A5FC1973C8043D3B8F00105A9C9710.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 21:26:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:7a:b1:9c:a2:1f:59:bc:1b:fe:da:4e:d6:cc:f3:b4:cf:71:dc:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44106068E5A5FC1973C8043D3B8F00105A9C9710 Validity Not Before: May 29 18:35:58 2024 GMT Not After : Jun 1 21:26:58 2024 GMT Subject: CN=14ABF9FA12D72D893441BC7CC7757738E128D071 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:81:c3:7e:b6:9f:e7:6a:eb:30:20:29:be:ac: 5f:81:ca:23:e1:74:2b:8e:83:27:76:4d:39:bf:1c: de:39:8c:15:20:60:c6:7a:62:f4:9d:b2:7f:6e:3e: d8:ca:06:0e:db:f1:8b:da:03:f1:99:15:58:01:54: 57:8b:1d:d1:64:1a:3d:bc:1c:a9:be:32:32:26:13: b1:37:95:0b:8e:0d:78:11:05:45:86:fb:67:a1:33: 01:3c:57:c5:fa:5e:80:94:b3:05:1f:cc:63:91:de: 5d:e0:b1:99:07:6f:34:ac:09:8c:4b:b6:db:49:a9: 5a:96:c0:78:f4:ce:92:16:1e:26:92:06:c6:c6:38: 4e:c1:0d:b3:5b:c0:0e:44:97:7c:e7:e6:aa:72:c4: ea:11:22:9a:88:3a:44:72:bb:d9:26:64:a0:00:6b: e6:c6:0b:cc:44:3b:a7:43:df:62:d7:b1:13:ba:25: ba:aa:91:23:09:ec:ef:f4:10:55:f0:aa:4b:35:e6: ae:80:ca:8b:3b:9e:4d:03:f1:18:6b:30:de:29:ad: e4:c1:0c:2c:1f:bd:59:dc:13:48:c2:fb:35:b0:7e: 7f:9c:ee:e6:ab:1d:57:f1:6a:0c:f5:4f:ba:0a:96: 26:1c:75:b0:5c:7f:f3:e2:d5:73:3f:e5:5b:99:c6: af:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:AB:F9:FA:12:D7:2D:89:34:41:BC:7C:C7:75:77:38:E1:28:D0:71 X509v3 Authority Key Identifier: keyid:44:10:60:68:E5:A5:FC:19:73:C8:04:3D:3B:8F:00:10:5A:9C:97:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44106068E5A5FC1973C8043D3B8F00105A9C9710.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:91:6c:fa:a1:db:7b:cf:f9:50:15:8a:fe:d7:40:14:a8:c9: 3e:0f:c7:a4:b5:1a:12:4e:d3:c3:b9:a0:b0:f9:d3:05:89:6d: 35:ce:e8:c9:f0:a1:ea:b9:f2:33:0c:43:e1:de:be:11:bf:67: 27:5c:fa:40:41:bb:5c:12:9a:5d:57:20:d9:cd:3e:0d:68:42: 9d:86:7e:ac:f7:2c:ff:16:dd:81:0d:c3:10:37:2f:cf:fd:f6: 1b:24:85:59:a3:e7:a7:83:2f:b8:c8:3c:bf:cb:49:09:b8:75: ca:76:cf:68:48:64:5b:72:e7:7f:5d:08:42:63:b8:67:52:4c: 5f:34:29:0a:02:db:e3:fc:f3:54:79:94:1e:4b:e1:0a:97:0b: 6e:b0:18:e5:65:78:22:c2:08:b6:db:09:f6:bc:e5:21:98:d1: b6:d9:e0:c8:3d:66:c3:6a:50:de:30:2f:96:9d:13:61:8b:92: 23:8a:e5:61:aa:97:40:09:fe:11:df:1e:ea:3b:e2:da:9c:73: dc:02:48:3f:2d:75:51:31:5a:8b:a7:3f:d1:2e:bc:88:3c:21: 2f:54:17:b2:72:ba:9a:0b:60:97:0f:5a:95:51:98:80:6b:76: 2d:d8:1c:55:66:f1:4a:ef:b2:f3:91:55:ff:40:4e:56:23:01: fd:f2:28:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaHqxnKIfWbwb/tpO1szztM9x3EQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQxMDYwNjhFNUE1RkMxOTczQzgwNDNEM0I4RjAwMTA1 QTlDOTcxMDAeFw0yNDA1MjkxODM1NThaFw0yNDA2MDEyMTI2NThaMDMxMTAvBgNV BAMTKDE0QUJGOUZBMTJENzJEODkzNDQxQkM3Q0M3NzU3NzM4RTEyOEQwNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHgcN+tp/nauswICm+rF+ByiPh dCuOgyd2TTm/HN45jBUgYMZ6YvSdsn9uPtjKBg7b8YvaA/GZFVgBVFeLHdFkGj28 HKm+MjImE7E3lQuODXgRBUWG+2ehMwE8V8X6XoCUswUfzGOR3l3gsZkHbzSsCYxL tttJqVqWwHj0zpIWHiaSBsbGOE7BDbNbwA5El3zn5qpyxOoRIpqIOkRyu9kmZKAA a+bGC8xEO6dD32LXsRO6JbqqkSMJ7O/0EFXwqks15q6Ayos7nk0D8RhrMN4preTB DCwfvVncE0jC+zWwfn+c7uarHVfxagz1T7oKliYcdbBcf/Pi1XM/5VuZxq//AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFKv5+hLXLYk0Qbx8x3V3OOEo0HEwHwYDVR0j BBgwFoAURBBgaOWl/BlzyAQ9O48AEFqclxAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YzdkM2NiZi0yNGQ2LTRiMWMtODZjYi0xZDQ4ODc2ZjNjNmIvMC80NDEwNjA2OEU1 QTVGQzE5NzNDODA0M0QzQjhGMDAxMDVBOUM5NzEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDQxMDYwNjhFNUE1RkMxOTczQzgwNDNEM0I4RjAwMTA1QTlD OTcxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGM3ZDNjYmYtMjRkNi00YjFjLTg2 Y2ItMWQ0ODg3NmYzYzZiLzAvNDQxMDYwNjhFNUE1RkMxOTczQzgwNDNEM0I4RjAw MTA1QTlDOTcxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIeRbPqh23vP+VAViv7XQBSoyT4Px6S1GhJO 08O5oLD50wWJbTXO6Mnwoeq58jMMQ+HevhG/Zydc+kBBu1wSml1XINnNPg1oQp2G fqz3LP8W3YENwxA3L8/99hskhVmj56eDL7jIPL/LSQm4dcp2z2hIZFty539dCEJj uGdSTF80KQoC2+P881R5lB5L4QqXC26wGOVleCLCCLbbCfa85SGY0bbZ4Mg9ZsNq UN4wL5adE2GLkiOK5WGql0AJ/hHfHuo74tqcc9wCSD8tdVExWounP9EuvIg8IS9U F7JyupoLYJcPWpVRmIBrdi3YHFVm8UrvsvORVf9ATlYjAf3yKB0= -----END CERTIFICATE-----Generated at Wed May 29 20:52:41 2024 by rpki-client on console-fra.rpki-client.org