$ rpki-client -vvf repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.mft File: CA41DDE3591DCF89BBD15BC96E05BDC73214099B.mft (raw, json) Hash identifier: Qg8o/C8Xbb73wdfHl/vSwkFMxfiIBR/jgnoU2cUK0LY= Subject key identifier: 9B:74:90:C5:3E:86:2E:0E:CA:13:D0:D5:43:BC:31:10:89:25:5B:18 Authority key identifier: CA:41:DD:E3:59:1D:CF:89:BB:D1:5B:C9:6E:05:BD:C7:32:14:09:9B Certificate issuer: /CN=CA41DDE3591DCF89BBD15BC96E05BDC73214099B Certificate serial: 48EFA309A95928EF8188F32161299E402C251265 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.mft Manifest number: 0436 Signing time: Sat 18 May 2024 03:41:37 +0000 Manifest this update: Sat 18 May 2024 03:36:37 +0000 Manifest next update: Tue 21 May 2024 05:48:37 +0000 Files and hashes: 1: CA41DDE3591DCF89BBD15BC96E05BDC73214099B.crl (hash: Q9oHu8ZcdCzzcN6EQPRRVeY92fdpnP28VYbP7wZjybw=) 2: 3130332e36362e38362e302f32342d3234203d3e20313431313037.roa (hash: Ar0HRMX0FBVPm+lZO/EMpscS+vISZYEM9tYmOEqd5ho=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.crl rsync://repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 05:48:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:ef:a3:09:a9:59:28:ef:81:88:f3:21:61:29:9e:40:2c:25:12:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA41DDE3591DCF89BBD15BC96E05BDC73214099B Validity Not Before: May 18 03:36:37 2024 GMT Not After : May 21 05:48:37 2024 GMT Subject: CN=9B7490C53E862E0ECA13D0D543BC311089255B18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c5:c9:d0:e4:64:bf:47:39:35:12:e6:4a:4e: 44:1d:0c:42:28:13:41:35:2b:97:6c:0a:0b:c0:89: 3e:e6:05:9b:ab:2d:d8:08:20:fc:69:f3:16:9d:d6: f1:d8:77:c6:85:df:bc:d0:6b:62:92:4f:1f:1e:b8: c5:0e:e0:a1:14:fb:47:45:e2:78:c6:6a:61:72:3f: 00:db:de:23:ec:7b:f0:9d:f3:a0:92:16:79:5b:f8: 09:b4:1a:ec:24:7b:0c:35:c8:c0:94:75:03:86:34: 97:da:fd:84:d7:82:12:29:df:3b:42:ba:75:d8:19: 59:1d:95:92:6c:c2:32:46:9d:cb:10:7c:3f:55:1e: f9:00:23:61:6f:cf:d2:e1:2e:85:b6:c1:da:7f:6c: c2:5b:67:6a:ab:f1:60:03:fc:8b:1a:c1:33:c1:e6: a4:12:c0:7e:90:62:1f:19:40:ef:c2:62:d9:4e:e4: 09:99:69:f7:4f:e2:1b:97:a4:70:44:c9:4e:54:2f: 3f:68:43:66:32:c3:1b:a2:34:d4:06:a4:04:9b:ac: b4:6b:71:62:b6:50:53:bf:f1:0c:80:19:d2:5c:57: 2b:e9:27:ba:7b:40:13:fb:3c:72:e6:fa:4a:d9:44: b1:91:cf:28:cd:31:dd:15:f7:4c:2f:9d:67:cb:26: e8:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:74:90:C5:3E:86:2E:0E:CA:13:D0:D5:43:BC:31:10:89:25:5B:18 X509v3 Authority Key Identifier: keyid:CA:41:DD:E3:59:1D:CF:89:BB:D1:5B:C9:6E:05:BD:C7:32:14:09:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:89:ef:6a:9a:0c:e1:6c:27:c0:3f:de:16:ce:3f:be:e6:ad: 7b:84:8a:00:82:59:89:1d:e1:97:f3:ae:05:4b:52:b3:70:20: 70:c4:51:a6:a0:a1:d5:db:d2:e0:2f:26:10:9f:97:4a:52:07: b1:39:a3:e9:96:8e:7b:71:25:00:95:dc:0e:7c:4b:71:15:6e: 30:ac:e8:1f:47:fe:98:03:5e:bc:93:fe:01:14:f7:ca:d0:72: 7c:ea:18:5f:0a:69:20:7a:15:11:54:e1:c8:b2:e8:cc:be:96: 10:c0:63:fa:2f:9b:7d:64:c7:50:61:e7:70:d5:4e:ec:58:25: 8f:e5:f0:51:59:de:db:5e:62:d7:13:7e:02:78:c6:c1:6d:86: b0:57:a6:13:6e:ab:a6:f6:38:05:5f:ce:60:de:f6:d7:8f:a6: 17:03:a4:6c:db:70:74:a9:31:9a:ca:fc:fa:4a:1a:0c:93:40: e7:92:95:65:93:6f:04:bf:50:27:45:f9:bd:bc:ca:e9:d7:ed: 01:1d:46:33:01:29:5b:fa:ae:92:5a:38:e3:15:0d:1f:a8:ac: d2:e1:d7:11:57:03:51:ed:38:5a:4d:4e:ba:b3:b5:96:33:f7: a2:40:32:12:74:6b:a8:02:63:ec:f2:a9:ae:f7:91:c3:44:3a: 0c:79:c5:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSO+jCalZKO+BiPMhYSmeQCwlEmUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E0MURERTM1OTFEQ0Y4OUJCRDE1QkM5NkUwNUJEQzcz MjE0MDk5QjAeFw0yNDA1MTgwMzM2MzdaFw0yNDA1MjEwNTQ4MzdaMDMxMTAvBgNV BAMTKDlCNzQ5MEM1M0U4NjJFMEVDQTEzRDBENTQzQkMzMTEwODkyNTVCMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLxcnQ5GS/Rzk1EuZKTkQdDEIo E0E1K5dsCgvAiT7mBZurLdgIIPxp8xad1vHYd8aF37zQa2KSTx8euMUO4KEU+0dF 4njGamFyPwDb3iPse/Cd86CSFnlb+Am0Guwkeww1yMCUdQOGNJfa/YTXghIp3ztC unXYGVkdlZJswjJGncsQfD9VHvkAI2Fvz9LhLoW2wdp/bMJbZ2qr8WAD/IsawTPB 5qQSwH6QYh8ZQO/CYtlO5AmZafdP4huXpHBEyU5ULz9oQ2YywxuiNNQGpASbrLRr cWK2UFO/8QyAGdJcVyvpJ7p7QBP7PHLm+krZRLGRzyjNMd0V90wvnWfLJujpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm3SQxT6GLg7KE9DVQ7wxEIklWxgwHwYDVR0j BBgwFoAUykHd41kdz4m70VvJbgW9xzIUCZswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZmNjMmQ0NC05NDE4LTQwMTMtOTcyMy1hOTc4ZjhiZDhiNmIvMC9DQTQxRERFMzU5 MURDRjg5QkJEMTVCQzk2RTA1QkRDNzMyMTQwOTlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0E0MURERTM1OTFEQ0Y4OUJCRDE1QkM5NkUwNUJEQzczMjE0 MDk5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGZjYzJkNDQtOTQxOC00MDEzLTk3 MjMtYTk3OGY4YmQ4YjZiLzAvQ0E0MURERTM1OTFEQ0Y4OUJCRDE1QkM5NkUwNUJE QzczMjE0MDk5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGCJ72qaDOFsJ8A/3hbOP77mrXuEigCCWYkd 4ZfzrgVLUrNwIHDEUaagodXb0uAvJhCfl0pSB7E5o+mWjntxJQCV3A58S3EVbjCs 6B9H/pgDXryT/gEU98rQcnzqGF8KaSB6FRFU4ciy6My+lhDAY/ovm31kx1Bh53DV TuxYJY/l8FFZ3tteYtcTfgJ4xsFthrBXphNuq6b2OAVfzmDe9tePphcDpGzbcHSp MZrK/PpKGgyTQOeSlWWTbwS/UCdF+b28yunX7QEdRjMBKVv6rpJaOOMVDR+orNLh 1xFXA1HtOFpNTrqztZYz96JAMhJ0a6gCY+zyqa73kcNEOgx5xTw= -----END CERTIFICATE-----Generated at Sat May 18 04:39:31 2024 by rpki-client on console-fra.rpki-client.org