$ rpki-client -vvf repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft File: 42CD38BF795E0099BD3E143DD8383778ADEAE850.mft (raw, json) Hash identifier: 8vHSKLc/avZfq8nr4uNMR4Cxoxqzqnc7QPqy/6dJYL8= Subject key identifier: 88:D5:F1:66:92:DE:D6:99:E5:0E:BC:46:8B:1E:74:52:45:EC:3D:CD Authority key identifier: 42:CD:38:BF:79:5E:00:99:BD:3E:14:3D:D8:38:37:78:AD:EA:E8:50 Certificate issuer: /CN=42CD38BF795E0099BD3E143DD8383778ADEAE850 Certificate serial: 2FC78C60BCF23A2B317527A11D3E102457DB5B8D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CD38BF795E0099BD3E143DD8383778ADEAE850.cer Subject info access: rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft Manifest number: 0403 Signing time: Sun 26 May 2024 17:11:41 +0000 Manifest this update: Sun 26 May 2024 17:06:41 +0000 Manifest next update: Thu 30 May 2024 02:53:41 +0000 Files and hashes: 1: 42CD38BF795E0099BD3E143DD8383778ADEAE850.crl (hash: 0M/KKncWzD3XttBCiTEH+M1eL9zH6cr/REmrG/nVENY=) 2: 3130332e3135382e39372e302f32342d3234203d3e20313431313330.roa (hash: u1hSAWnz5SqRmBFSSS4zIzFdhz0IY59ri1eW50looD4=) 3: 3130332e3135382e39362e302f32342d3234203d3e20313431313330.roa (hash: ZjQFdpco2N0/KeIs/epUGzod3br0O3SVJCGHi6x4Sgc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.crl rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CD38BF795E0099BD3E143DD8383778ADEAE850.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 May 2024 22:29:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:c7:8c:60:bc:f2:3a:2b:31:75:27:a1:1d:3e:10:24:57:db:5b:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42CD38BF795E0099BD3E143DD8383778ADEAE850 Validity Not Before: May 26 17:06:41 2024 GMT Not After : May 30 02:53:41 2024 GMT Subject: CN=88D5F16692DED699E50EBC468B1E745245EC3DCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:58:c0:6a:c3:ac:c5:f5:68:79:27:2b:17:f3: ee:8b:be:11:d8:fa:94:92:89:b7:a8:5d:7d:21:d2: 88:4f:38:a3:61:1b:1f:71:b1:d5:b0:f2:63:9e:73: e3:d9:e3:0a:9c:09:a5:5f:3a:fd:25:b2:4e:f5:6d: cb:36:77:9f:c8:e4:cf:31:e2:e5:a2:5a:bc:1d:c9: 7f:d5:53:1c:62:ea:4c:fa:e8:78:88:62:5d:23:57: 27:fc:5c:8a:59:e7:c0:9f:d2:ee:da:b0:ce:e4:04: bf:7c:0c:6e:7c:a0:bd:fe:8d:97:c5:e2:ba:54:d2: e7:ad:ae:9f:26:49:ed:07:e9:dd:8b:b4:c5:5a:04: 00:b9:d9:a8:6a:cc:2f:77:54:f1:3e:a0:83:b8:36: a3:86:9d:bf:88:fe:59:67:c8:f4:19:c0:83:ec:51: 7c:dd:12:c6:57:de:60:21:d8:b6:1e:ce:31:26:ed: 4c:ec:4b:d5:09:85:78:bb:81:2c:5d:41:08:c5:8d: 39:69:f1:9b:bc:70:a4:0a:66:78:3b:9c:da:ad:07: 14:5b:d6:20:37:31:f2:ee:fc:cd:e0:f0:8e:94:fe: 25:70:2d:5c:77:13:6c:70:ba:e4:3f:4f:44:b0:96: 3b:18:54:60:59:9c:1c:e3:e6:5a:ac:38:9b:03:f1: 05:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:D5:F1:66:92:DE:D6:99:E5:0E:BC:46:8B:1E:74:52:45:EC:3D:CD X509v3 Authority Key Identifier: keyid:42:CD:38:BF:79:5E:00:99:BD:3E:14:3D:D8:38:37:78:AD:EA:E8:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CD38BF795E0099BD3E143DD8383778ADEAE850.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51292911-da7d-4636-b153-02a4b66205b5/0/42CD38BF795E0099BD3E143DD8383778ADEAE850.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:72:b7:79:61:66:90:05:e6:6d:e6:b2:a5:5b:36:f9:82:5b: 9d:f8:15:8c:aa:25:2b:77:89:82:1f:ba:c3:a6:ea:7f:25:5d: 7e:13:48:fe:0f:e2:73:24:06:84:98:b1:a7:0e:02:cc:b6:8a: 62:fe:72:68:8e:83:77:22:68:cd:c1:8f:8f:52:8b:6b:73:03: 60:52:58:48:fb:30:8a:5f:c4:b3:1b:b6:cc:b9:ea:6c:11:be: fd:ba:b7:05:03:e3:ad:49:7d:41:18:27:a0:ed:6f:c5:8d:76: 62:03:7f:45:a6:6b:20:e9:2e:b1:7c:e5:8a:b7:f5:75:f2:48: 05:e5:36:5e:c0:b8:66:6e:51:d3:2f:66:4d:da:f5:ef:e0:ac: 53:1b:fe:87:fd:84:3a:7c:e3:84:ff:70:32:29:15:95:3c:7a: e0:ae:bf:e8:17:4e:8f:fe:b4:82:93:ad:fc:ac:b7:a2:d6:e6: 67:96:d2:4e:7f:e8:2f:9b:84:9a:78:d4:d3:3e:dc:ac:08:14: 06:aa:e5:2a:92:f5:ec:de:c8:4d:e6:32:5c:0b:ca:b0:51:47: e4:58:da:37:10:b4:23:5e:d4:cd:8f:01:21:41:83:2a:c5:0b: 5d:70:fc:d1:0e:a9:52:f6:ba:62:9c:92:9f:98:55:8c:b4:43: b5:88:7c:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL8eMYLzyOisxdSehHT4QJFfbW40wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJDRDM4QkY3OTVFMDA5OUJEM0UxNDNERDgzODM3NzhB REVBRTg1MDAeFw0yNDA1MjYxNzA2NDFaFw0yNDA1MzAwMjUzNDFaMDMxMTAvBgNV BAMTKDg4RDVGMTY2OTJERUQ2OTlFNTBFQkM0NjhCMUU3NDUyNDVFQzNEQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyWMBqw6zF9Wh5JysX8+6LvhHY +pSSibeoXX0h0ohPOKNhGx9xsdWw8mOec+PZ4wqcCaVfOv0lsk71bcs2d5/I5M8x 4uWiWrwdyX/VUxxi6kz66HiIYl0jVyf8XIpZ58Cf0u7asM7kBL98DG58oL3+jZfF 4rpU0uetrp8mSe0H6d2LtMVaBAC52ahqzC93VPE+oIO4NqOGnb+I/llnyPQZwIPs UXzdEsZX3mAh2LYezjEm7UzsS9UJhXi7gSxdQQjFjTlp8Zu8cKQKZng7nNqtBxRb 1iA3MfLu/M3g8I6U/iVwLVx3E2xwuuQ/T0SwljsYVGBZnBzj5lqsOJsD8QUlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiNXxZpLe1pnlDrxGix50UkXsPc0wHwYDVR0j BBgwFoAUQs04v3leAJm9PhQ92Dg3eK3q6FAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTI5MjkxMS1kYTdkLTQ2MzYtYjE1My0wMmE0YjY2MjA1YjUvMC80MkNEMzhCRjc5 NUUwMDk5QkQzRTE0M0REODM4Mzc3OEFERUFFODUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDJDRDM4QkY3OTVFMDA5OUJEM0UxNDNERDgzODM3NzhBREVB RTg1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTEyOTI5MTEtZGE3ZC00NjM2LWIx NTMtMDJhNGI2NjIwNWI1LzAvNDJDRDM4QkY3OTVFMDA5OUJEM0UxNDNERDgzODM3 NzhBREVBRTg1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFNyt3lhZpAF5m3msqVbNvmCW534FYyqJSt3 iYIfusOm6n8lXX4TSP4P4nMkBoSYsacOAsy2imL+cmiOg3ciaM3Bj49Si2tzA2BS WEj7MIpfxLMbtsy56mwRvv26twUD461JfUEYJ6Dtb8WNdmIDf0WmayDpLrF85Yq3 9XXySAXlNl7AuGZuUdMvZk3a9e/grFMb/of9hDp844T/cDIpFZU8euCuv+gXTo/+ tIKTrfyst6LW5meW0k5/6C+bhJp41NM+3KwIFAaq5SqS9ezeyE3mMlwLyrBRR+RY 2jcQtCNe1M2PASFBgyrFC11w/NEOqVL2umKckp+YVYy0Q7WIfMQ= -----END CERTIFICATE-----Generated at Sun May 26 19:08:15 2024 by rpki-client on console-ams.rpki-client.org