$ rpki-client -vvf repo-rpki.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.mft File: 40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.mft (raw, json) Hash identifier: 6ljH32HD2W5aAl+q3S1nj2bSmeq48f93ONuHvkBi6vE= Subject key identifier: E1:29:21:C8:4C:56:61:7E:7B:BC:1A:5F:D4:4A:5C:4E:58:19:45:6E Authority key identifier: 40:70:6A:5C:CF:A8:96:C8:EE:0C:1F:9A:5B:6D:CD:A1:91:5A:C7:6D Certificate issuer: /CN=40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D Certificate serial: 7B132D9D43A3D41DAA83E0829F2B73E87DE6115E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.mft Manifest number: 0120 Signing time: Fri 17 May 2024 19:51:13 +0000 Manifest this update: Fri 17 May 2024 19:46:13 +0000 Manifest next update: Mon 20 May 2024 23:47:13 +0000 Files and hashes: 1: 40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.crl (hash: Dx2jPXY6kS24N1FR7WX7o6tnsnBkQXlEhhazykvg7EQ=) 2: 3130332e31342e3233312e302f32342d3234203d3e20313439393435.roa (hash: iEsrKRCbgtWYEFi80UQIsvoOEBjiGqLO18g76tulSYE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.crl rsync://repo-rpki.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 May 2024 23:47:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:13:2d:9d:43:a3:d4:1d:aa:83:e0:82:9f:2b:73:e8:7d:e6:11:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D Validity Not Before: May 17 19:46:13 2024 GMT Not After : May 20 23:47:13 2024 GMT Subject: CN=E12921C84C56617E7BBC1A5FD44A5C4E5819456E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:da:86:56:da:32:c9:b6:a0:67:92:1f:38:3b: 50:d0:28:ef:9a:03:7b:93:eb:eb:7e:c3:fb:17:f6: f4:98:89:88:9b:1e:ea:d0:be:5a:55:4f:2e:29:b3: 27:83:1f:3d:fa:8f:c8:c0:4e:56:38:17:ad:f2:23: 75:71:1d:6d:cc:e0:94:18:7f:2b:9e:3c:fe:59:ff: f4:f5:e5:ac:24:5e:e4:6a:83:e1:d6:53:03:dc:f0: 76:9b:4e:0d:f7:71:bf:a6:27:10:9a:06:9e:d6:fa: 3e:26:39:a4:46:34:dc:5f:4e:fa:09:23:c2:08:52: 82:f9:60:15:62:17:bb:4b:c2:f4:81:28:4c:0f:e7: 1f:40:9b:52:18:27:ef:51:92:ad:d5:b4:f7:d9:3d: 45:45:9e:39:49:64:59:0a:ad:a9:e1:03:5c:17:26: c8:31:90:e0:df:45:f7:8a:00:74:4e:9c:5b:20:b2: 1d:06:b8:23:7b:13:b5:ce:d8:62:4e:2b:e7:86:89: 9c:b3:bf:33:e7:be:5f:a6:73:d6:77:10:f1:58:4e: c3:69:05:97:39:61:fa:87:6c:a1:52:b7:58:84:cb: 78:8e:7d:e1:9f:cd:ce:a4:b2:3e:96:f2:79:c7:98: 78:04:a1:12:a9:65:09:26:91:03:e0:60:76:85:53: 23:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:29:21:C8:4C:56:61:7E:7B:BC:1A:5F:D4:4A:5C:4E:58:19:45:6E X509v3 Authority Key Identifier: keyid:40:70:6A:5C:CF:A8:96:C8:EE:0C:1F:9A:5B:6D:CD:A1:91:5A:C7:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:43:d9:2b:4b:f4:e2:d3:dd:a1:31:8f:1c:3e:ad:0d:a3:a6: e1:eb:3b:7c:f8:a8:ab:1d:ce:02:5d:6a:84:3e:0e:ea:81:28: 5e:40:eb:81:0b:d1:7c:3c:79:6d:88:be:47:4e:0f:02:ce:b7: 1a:7d:bb:4c:fe:bc:bb:f4:f9:76:f3:e2:2c:2e:a2:42:0e:63: b2:e1:fa:5d:7b:da:22:c8:fc:0c:63:52:46:4a:19:58:bb:90: e6:04:99:10:4e:dc:82:fb:6c:15:23:d3:ad:d2:97:76:5c:60: f1:c7:3a:9f:d4:fd:a1:18:f5:08:18:78:dd:4f:66:81:bb:82: e7:47:2d:39:97:6f:11:e8:32:8e:c2:8b:03:11:8d:ef:96:47: ed:7e:f1:3a:6f:f4:3f:1e:46:ca:0e:5f:93:71:b9:74:81:ea: 23:2b:ec:cc:2e:4d:13:c3:cf:96:f0:35:7c:e6:bc:7f:1e:ef: 20:98:92:e6:60:07:63:37:85:62:f8:a5:57:c5:62:80:bc:25: e9:a7:21:be:d0:0e:56:20:54:ee:43:c7:95:08:94:59:c7:3b: 94:d2:e2:2e:81:2a:fa:9c:7b:7d:29:c3:13:e1:84:ea:c2:84: 9c:a0:ba:78:61:5c:2c:d4:cc:92:e9:98:61:44:65:ba:36:d7: 92:67:f1:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUexMtnUOj1B2qg+CCnytz6H3mEV4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA3MDZBNUNDRkE4OTZDOEVFMEMxRjlBNUI2RENEQTE5 MTVBQzc2RDAeFw0yNDA1MTcxOTQ2MTNaFw0yNDA1MjAyMzQ3MTNaMDMxMTAvBgNV BAMTKEUxMjkyMUM4NEM1NjYxN0U3QkJDMUE1RkQ0NEE1QzRFNTgxOTQ1NkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC62oZW2jLJtqBnkh84O1DQKO+a A3uT6+t+w/sX9vSYiYibHurQvlpVTy4psyeDHz36j8jATlY4F63yI3VxHW3M4JQY fyuePP5Z//T15awkXuRqg+HWUwPc8HabTg33cb+mJxCaBp7W+j4mOaRGNNxfTvoJ I8IIUoL5YBViF7tLwvSBKEwP5x9Am1IYJ+9Rkq3VtPfZPUVFnjlJZFkKranhA1wX JsgxkODfRfeKAHROnFsgsh0GuCN7E7XO2GJOK+eGiZyzvzPnvl+mc9Z3EPFYTsNp BZc5YfqHbKFSt1iEy3iOfeGfzc6ksj6W8nnHmHgEoRKpZQkmkQPgYHaFUyMvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4SkhyExWYX57vBpf1EpcTlgZRW4wHwYDVR0j BBgwFoAUQHBqXM+olsjuDB+aW23NoZFax20wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZGY0Mjk2Zi0xY2E5LTQ1ZmMtYmIwOC04NDEzNWViMDBmYTcvMC80MDcwNkE1Q0NG QTg5NkM4RUUwQzFGOUE1QjZEQ0RBMTkxNUFDNzZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDA3MDZBNUNDRkE4OTZDOEVFMEMxRjlBNUI2RENEQTE5MTVB Qzc2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGRmNDI5NmYtMWNhOS00NWZjLWJi MDgtODQxMzVlYjAwZmE3LzAvNDA3MDZBNUNDRkE4OTZDOEVFMEMxRjlBNUI2RENE QTE5MTVBQzc2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAClD2StL9OLT3aExjxw+rQ2jpuHrO3z4qKsd zgJdaoQ+DuqBKF5A64EL0Xw8eW2IvkdODwLOtxp9u0z+vLv0+Xbz4iwuokIOY7Lh +l172iLI/AxjUkZKGVi7kOYEmRBO3IL7bBUj063Sl3ZcYPHHOp/U/aEY9QgYeN1P ZoG7gudHLTmXbxHoMo7CiwMRje+WR+1+8Tpv9D8eRsoOX5NxuXSB6iMr7MwuTRPD z5bwNXzmvH8e7yCYkuZgB2M3hWL4pVfFYoC8JemnIb7QDlYgVO5Dx5UIlFnHO5TS 4i6BKvqce30pwxPhhOrChJygunhhXCzUzJLpmGFEZbo215Jn8Xo= -----END CERTIFICATE-----Generated at Fri May 17 21:06:47 2024 by rpki-client on console-ams.rpki-client.org