$ rpki-client -vvf repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.mft File: 4EB8521D8427720F50A3F65249F2D26C6CD22F13.mft (raw, json) Hash identifier: hugduk0oyEy+a/K7unHjiZ/3rPek8DAfxQejna27BIE= Subject key identifier: 4C:F5:05:8A:0E:78:FA:FA:C3:3E:E9:AD:90:2E:D2:30:5B:47:75:40 Authority key identifier: 4E:B8:52:1D:84:27:72:0F:50:A3:F6:52:49:F2:D2:6C:6C:D2:2F:13 Certificate issuer: /CN=4EB8521D8427720F50A3F65249F2D26C6CD22F13 Certificate serial: 65585EB09B881F6B5C8A41EE077C8B8E839EF498 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EB8521D8427720F50A3F65249F2D26C6CD22F13.cer Subject info access: rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.mft Manifest number: 011B Signing time: Fri 17 May 2024 16:01:19 +0000 Manifest this update: Fri 17 May 2024 15:56:18 +0000 Manifest next update: Tue 21 May 2024 03:04:18 +0000 Files and hashes: 1: 3130332e3135382e3135352e302f32342d3234203d3e20313431313236.roa (hash: wLIIiQKFAS5fAF42/WixxqeCdSYCSpkWI0VfcKSxIc8=) 2: 3130332e3135382e3135342e302f32342d3234203d3e20313431313236.roa (hash: Mfntz4qjc5O8XnZO55ZIrN89IUvKkn7eL1Wx+x76Q10=) 3: 4EB8521D8427720F50A3F65249F2D26C6CD22F13.crl (hash: k54NPqtT7wo3RE4msPYs6iG1AkaPHTC/IlQj27WIOYo=) 4: 3130332e3135382e3135342e302f32332d3233203d3e20313431313236.roa (hash: U39v+Ouklcs+2aJhhj0UseAFP0Of3R+lyp/tFUVAL+g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.crl rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EB8521D8427720F50A3F65249F2D26C6CD22F13.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 May 2024 23:07:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:58:5e:b0:9b:88:1f:6b:5c:8a:41:ee:07:7c:8b:8e:83:9e:f4:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4EB8521D8427720F50A3F65249F2D26C6CD22F13 Validity Not Before: May 17 15:56:18 2024 GMT Not After : May 21 03:04:18 2024 GMT Subject: CN=4CF5058A0E78FAFAC33EE9AD902ED2305B477540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f3:18:19:74:31:08:0e:7f:32:ff:8b:12:10: 79:98:a1:8e:b6:6c:cc:d8:59:7c:9a:5b:94:fc:13: 9d:73:96:fb:76:f3:9b:30:18:12:f3:f9:7e:71:f6: 8f:96:98:fd:99:16:5c:80:4e:8d:45:d5:75:f1:f6: 77:03:ad:08:d7:b8:fd:9d:48:40:10:36:80:69:ed: 82:44:c7:30:53:0f:49:c7:4e:6c:a3:d2:b8:ba:52: 7c:ef:61:dd:14:2e:3b:9a:99:a2:2c:b6:17:b8:e4: 4a:3d:0a:c2:97:d0:1f:a8:4a:12:7b:ab:8d:da:d4: 66:69:d1:44:04:9d:cb:65:01:5d:2c:63:b0:03:8d: 2b:81:4a:e4:fe:ec:4e:f5:74:df:61:a5:a3:6d:f8: be:00:4a:5c:d1:83:56:11:2c:1b:7f:69:39:35:1a: ea:52:09:36:ab:64:98:59:47:67:0a:e5:9d:eb:4e: 26:1a:ce:94:e8:54:89:7c:6a:5e:0c:c0:64:9b:25: 4f:24:16:70:62:04:ee:06:c7:e0:83:96:d2:07:10: d1:98:80:a8:a2:5c:8c:13:b8:47:01:8d:8b:8b:14: 56:50:93:48:1b:8e:c0:b7:c5:33:89:a0:61:ee:00: bb:e4:41:78:fa:8e:36:50:40:e9:b7:0b:24:08:2e: 00:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:F5:05:8A:0E:78:FA:FA:C3:3E:E9:AD:90:2E:D2:30:5B:47:75:40 X509v3 Authority Key Identifier: keyid:4E:B8:52:1D:84:27:72:0F:50:A3:F6:52:49:F2:D2:6C:6C:D2:2F:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EB8521D8427720F50A3F65249F2D26C6CD22F13.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:59:5d:9b:6f:66:27:2d:91:c0:95:64:e7:9e:91:96:68:50: 19:bc:6b:9f:1b:fb:3c:d4:e2:9c:7b:d5:0d:5c:2b:79:a9:2a: ad:e0:d8:1a:cb:42:7e:21:76:36:1e:56:a1:92:29:47:6d:0f: 60:78:15:cd:09:8f:28:ba:43:f1:dd:d2:ba:ae:6a:dc:2a:e0: e2:ef:d2:b9:ce:49:5d:aa:17:66:b8:67:6c:67:2a:6f:71:80: 4c:61:33:e5:e9:ef:15:09:ac:7e:ac:59:69:5d:30:af:55:4c: 74:4d:83:82:d1:d3:27:cc:44:fa:2a:83:6c:ad:31:d5:b8:1d: 7d:3c:98:4d:72:d3:ac:c0:6f:f6:17:ff:54:79:58:50:12:f5: c0:ed:ca:6f:6f:0b:a9:5b:73:25:61:07:33:32:8b:08:d2:0a: f7:19:54:70:60:0e:b0:b8:37:fd:a0:b4:47:03:67:b4:f3:0f: 86:de:07:d3:56:e1:07:fd:40:0e:e2:ea:01:26:20:06:66:5d: 06:7f:48:bb:f6:84:87:fe:4a:ae:67:60:a0:aa:fd:25:be:39: 49:24:61:43:6d:1b:a4:ce:f6:41:34:4a:e6:1f:b8:ff:7b:b7: e0:e3:0c:42:48:7a:48:60:d5:01:6f:b3:01:70:84:f9:0d:5d: e6:90:e3:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZVhesJuIH2tcikHuB3yLjoOe9JgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEVCODUyMUQ4NDI3NzIwRjUwQTNGNjUyNDlGMkQyNkM2 Q0QyMkYxMzAeFw0yNDA1MTcxNTU2MThaFw0yNDA1MjEwMzA0MThaMDMxMTAvBgNV BAMTKDRDRjUwNThBMEU3OEZBRkFDMzNFRTlBRDkwMkVEMjMwNUI0Nzc1NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC38xgZdDEIDn8y/4sSEHmYoY62 bMzYWXyaW5T8E51zlvt285swGBLz+X5x9o+WmP2ZFlyATo1F1XXx9ncDrQjXuP2d SEAQNoBp7YJExzBTD0nHTmyj0ri6UnzvYd0ULjuamaIsthe45Eo9CsKX0B+oShJ7 q43a1GZp0UQEnctlAV0sY7ADjSuBSuT+7E71dN9hpaNt+L4ASlzRg1YRLBt/aTk1 GupSCTarZJhZR2cK5Z3rTiYazpToVIl8al4MwGSbJU8kFnBiBO4Gx+CDltIHENGY gKiiXIwTuEcBjYuLFFZQk0gbjsC3xTOJoGHuALvkQXj6jjZQQOm3CyQILgAPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTPUFig54+vrDPumtkC7SMFtHdUAwHwYDVR0j BBgwFoAUTrhSHYQncg9Qo/ZSSfLSbGzSLxMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MzNmNjBlNi1hZmRkLTRlMTAtODNiNC1lOGNiZDY0MWM1MmYvMC80RUI4NTIxRDg0 Mjc3MjBGNTBBM0Y2NTI0OUYyRDI2QzZDRDIyRjEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEVCODUyMUQ4NDI3NzIwRjUwQTNGNjUyNDlGMkQyNkM2Q0Qy MkYxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTMzZjYwZTYtYWZkZC00ZTEwLTgz YjQtZThjYmQ2NDFjNTJmLzAvNEVCODUyMUQ4NDI3NzIwRjUwQTNGNjUyNDlGMkQy NkM2Q0QyMkYxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA5ZXZtvZictkcCVZOeekZZoUBm8a58b+zzU 4px71Q1cK3mpKq3g2BrLQn4hdjYeVqGSKUdtD2B4Fc0Jjyi6Q/Hd0rquatwq4OLv 0rnOSV2qF2a4Z2xnKm9xgExhM+Xp7xUJrH6sWWldMK9VTHRNg4LR0yfMRPoqg2yt MdW4HX08mE1y06zAb/YX/1R5WFAS9cDtym9vC6lbcyVhBzMyiwjSCvcZVHBgDrC4 N/2gtEcDZ7TzD4beB9NW4Qf9QA7i6gEmIAZmXQZ/SLv2hIf+Sq5nYKCq/SW+OUkk YUNtG6TO9kE0SuYfuP97t+DjDEJIekhg1QFvswFwhPkNXeaQ4/0= -----END CERTIFICATE-----Generated at Fri May 17 17:47:03 2024 by rpki-client on console-ams.rpki-client.org