$ rpki-client -vvf repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft File: 498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft (raw, json) Hash identifier: EuWxspzukMeT/EO8JGcTt8vF4+HDfwpXX2fE0I4wPoc= Subject key identifier: 12:B1:2D:20:24:1E:BA:84:DA:6B:A7:E3:37:C0:E4:A1:92:1A:F8:2A Authority key identifier: 49:8B:46:B7:89:36:1D:2A:AA:4E:5C:F9:B2:A8:1E:22:39:25:A8:9F Certificate issuer: /CN=498B46B789361D2AAA4E5CF9B2A81E223925A89F Certificate serial: 1AE9937D582E87DF15275E9DBF182A39BABE8693 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/498B46B789361D2AAA4E5CF9B2A81E223925A89F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft Manifest number: 0431 Signing time: Tue 21 May 2024 17:31:43 +0000 Manifest this update: Tue 21 May 2024 17:26:43 +0000 Manifest next update: Sat 25 May 2024 03:43:43 +0000 Files and hashes: 1: 498B46B789361D2AAA4E5CF9B2A81E223925A89F.crl (hash: DCt+QBhLuF3IY1Aui4JM8PX6K8pwWWK/FE50xrz59Vs=) 2: 3130332e34312e3139322e302f32322d3234203d3e203538333937.roa (hash: rZPduyT8LmU69JMvhmuoepLOx5Bw9UBBh+rXCUuTVSs=) 3: 3131372e35332e3134342e302f32322d3234203d3e203538333937.roa (hash: OMaWRHwm/vWxjpYzxGXY2k4LIXQ9AplJgn3ZbNUGCnQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.crl rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/498B46B789361D2AAA4E5CF9B2A81E223925A89F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 00:42:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:e9:93:7d:58:2e:87:df:15:27:5e:9d:bf:18:2a:39:ba:be:86:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=498B46B789361D2AAA4E5CF9B2A81E223925A89F Validity Not Before: May 21 17:26:43 2024 GMT Not After : May 25 03:43:43 2024 GMT Subject: CN=12B12D20241EBA84DA6BA7E337C0E4A1921AF82A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:85:5e:39:a5:14:23:41:9d:95:7f:72:07:6d: 3c:7f:99:88:9a:41:91:78:04:6c:82:e8:ae:6e:99: 2c:f3:e1:03:a3:08:24:c5:7a:a9:0e:f7:05:98:03: 4c:80:9c:1e:16:37:53:d1:36:ab:9f:72:bc:d1:6f: b0:4a:f5:dc:ee:a4:81:b8:60:a1:73:08:c8:d1:94: 4b:1a:28:fc:49:92:ec:f7:85:d6:98:1a:e2:60:7d: b3:c3:bc:6d:8b:53:6a:a3:2d:f8:51:96:07:a0:94: 44:6f:79:b1:a9:4e:1c:c9:9a:7b:08:65:44:aa:88: 1c:eb:9a:bd:67:ce:7c:03:7f:d6:e3:e5:7d:fd:14: 28:a8:8f:b3:8a:1b:f6:b9:4a:2a:d8:fa:31:49:3a: 1b:1d:dd:70:a6:f7:21:6e:a9:bd:85:1f:2b:33:45: f9:fc:b5:5d:1e:bc:a0:10:6e:72:b5:c6:a5:f2:fb: 9c:83:0f:69:24:ca:92:48:2b:bf:c5:af:5d:18:1b: f6:4b:ab:ff:ef:f8:43:f7:d5:b8:58:55:c8:68:d2: 5c:d6:81:26:d1:5e:b7:04:a4:f7:e9:0e:c1:70:29: be:5b:fc:bd:81:9c:40:08:7f:3c:09:4c:7b:17:6c: 98:63:56:57:be:e2:c1:2b:e1:5b:a1:2e:0d:29:a0: e2:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:B1:2D:20:24:1E:BA:84:DA:6B:A7:E3:37:C0:E4:A1:92:1A:F8:2A X509v3 Authority Key Identifier: keyid:49:8B:46:B7:89:36:1D:2A:AA:4E:5C:F9:B2:A8:1E:22:39:25:A8:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/498B46B789361D2AAA4E5CF9B2A81E223925A89F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:07:a4:17:47:bf:aa:12:f3:d2:37:bf:7d:b1:9b:a3:f2:22: 0c:4c:54:a2:d6:68:39:4e:90:b0:36:77:e7:93:ba:82:70:18: f4:3e:c5:a0:d7:90:98:04:db:c2:e6:22:09:a2:40:0d:c8:51: be:d5:8e:b5:53:20:ec:e6:f0:22:0e:32:41:a8:07:c5:76:43: 9f:74:9a:e1:d8:87:4b:2c:07:f4:8d:88:e4:e8:02:51:51:f7: d5:99:fc:d0:88:76:69:59:a1:f5:cc:40:af:c3:5e:cb:a2:b5: bc:11:36:e2:08:0b:a0:e7:08:e7:9d:37:b2:67:0d:b4:65:4c: 6c:3d:cb:17:fe:25:e7:34:5f:24:55:c3:4f:aa:f7:7b:6d:93: 60:90:6e:44:04:6d:c5:7c:e7:28:ba:fa:1e:32:f5:66:e2:45: f7:2d:7f:72:28:44:7e:7a:38:42:3d:5c:0d:ef:d8:d6:12:08: 7a:bf:a9:28:2c:60:0f:87:c6:7e:94:56:81:54:a9:ea:de:a0: 47:bf:e8:0c:46:16:c1:fa:91:81:54:41:4c:d2:4c:d6:72:f0: ed:10:2d:d4:f4:39:ec:e8:0e:b7:c4:ef:0a:f8:aa:28:5f:7c: be:9c:3c:94:b1:71:7e:1b:cc:f4:2f:37:b5:18:b6:c3:aa:16: da:23:09:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGumTfVguh98VJ16dvxgqObq+hpMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk4QjQ2Qjc4OTM2MUQyQUFBNEU1Q0Y5QjJBODFFMjIz OTI1QTg5RjAeFw0yNDA1MjExNzI2NDNaFw0yNDA1MjUwMzQzNDNaMDMxMTAvBgNV BAMTKDEyQjEyRDIwMjQxRUJBODREQTZCQTdFMzM3QzBFNEExOTIxQUY4MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGhV45pRQjQZ2Vf3IHbTx/mYia QZF4BGyC6K5umSzz4QOjCCTFeqkO9wWYA0yAnB4WN1PRNqufcrzRb7BK9dzupIG4 YKFzCMjRlEsaKPxJkuz3hdaYGuJgfbPDvG2LU2qjLfhRlgeglERvebGpThzJmnsI ZUSqiBzrmr1nznwDf9bj5X39FCioj7OKG/a5SirY+jFJOhsd3XCm9yFuqb2FHysz Rfn8tV0evKAQbnK1xqXy+5yDD2kkypJIK7/Fr10YG/ZLq//v+EP31bhYVcho0lzW gSbRXrcEpPfpDsFwKb5b/L2BnEAIfzwJTHsXbJhjVle+4sEr4VuhLg0poOJ/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUErEtICQeuoTaa6fjN8DkoZIa+CowHwYDVR0j BBgwFoAUSYtGt4k2HSqqTlz5sqgeIjklqJ8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTkxNjZhMS0xOGNkLTQ0ZDMtYTZlMC0yZWY4MmY3NjBkMjgvMC80OThCNDZCNzg5 MzYxRDJBQUE0RTVDRjlCMkE4MUUyMjM5MjVBODlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDk4QjQ2Qjc4OTM2MUQyQUFBNEU1Q0Y5QjJBODFFMjIzOTI1 QTg5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTE5MTY2YTEtMThjZC00NGQzLWE2 ZTAtMmVmODJmNzYwZDI4LzAvNDk4QjQ2Qjc4OTM2MUQyQUFBNEU1Q0Y5QjJBODFF MjIzOTI1QTg5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFgHpBdHv6oS89I3v32xm6PyIgxMVKLWaDlO kLA2d+eTuoJwGPQ+xaDXkJgE28LmIgmiQA3IUb7VjrVTIOzm8CIOMkGoB8V2Q590 muHYh0ssB/SNiOToAlFR99WZ/NCIdmlZofXMQK/DXsuitbwRNuIIC6DnCOedN7Jn DbRlTGw9yxf+Jec0XyRVw0+q93ttk2CQbkQEbcV85yi6+h4y9WbiRfctf3IoRH56 OEI9XA3v2NYSCHq/qSgsYA+Hxn6UVoFUqereoEe/6AxGFsH6kYFUQUzSTNZy8O0Q LdT0OezoDrfE7wr4qihffL6cPJSxcX4bzPQvN7UYtsOqFtojCV4= -----END CERTIFICATE-----Generated at Tue May 21 18:51:33 2024 by rpki-client on console-fra.rpki-client.org