$ rpki-client -vvf repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft File: 48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft (raw, json) Hash identifier: suso+B8qB/vg56R4pUi+glde5jhPPyeLsYHhoNTvSP8= Subject key identifier: 67:12:ED:6B:FC:3C:C2:26:D1:42:01:4D:E2:0E:06:B8:B8:6A:74:B9 Authority key identifier: 48:CA:77:19:CE:7C:E9:05:70:E1:A1:B6:F4:43:94:7A:E9:CA:A7:4E Certificate issuer: /CN=48CA7719CE7CE90570E1A1B6F443947AE9CAA74E Certificate serial: 8A8779CEFF0AA44F107CECE5E4AB9C74B85368 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft Manifest number: 01FD Signing time: Fri 17 May 2024 10:32:04 +0000 Manifest this update: Fri 17 May 2024 10:27:04 +0000 Manifest next update: Mon 20 May 2024 20:28:04 +0000 Files and hashes: 1: 3130332e3134342e35342e302f32342d3234203d3e20313339343139.roa (hash: X3LMJbMD7sbSyIgXCSsO4WP3ntGqJBFmyoBtikGfNsg=) 2: 48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.crl (hash: JzQIbU+eYC2JKmJwHNmoB2Yqbgt5OeUT5hwqy73KbDM=) 3: 323430353a363734303a3a2f33322d3332203d3e20313339343139.roa (hash: ML4PqIKMjOcQj45/YXtza9+7TI3GclDJNt7vuhnhi9Q=) 4: 3130332e3134342e35352e302f32342d3234203d3e20313339343139.roa (hash: dqgGwImYxMr4D0xPUdLkYZnrx8ccJqqftag9kPmV9L0=) 5: 323430353a363734303a3130303a3a2f34382d3438203d3e20313339343139.roa (hash: lx3+LLlQ4WnCMnKdcVANXgIMuP9AcgN7h+mv0gF7DvQ=) 6: 3130332e3134342e35342e302f32332d3233203d3e20313339343139.roa (hash: o9LWKCq7jFm12N0BNnvJYEbj9foPeU1mQYeuPgph+0w=) 7: 323430353a363734303a61303a3a2f34382d3438203d3e20313339343139.roa (hash: OG5Z9CpKWxd1W4YOSrj5Xk//pa9S5164fCU9LE6L+sg=) 8: 323430353a363734303a3139303a3a2f34382d3438203d3e20313339343139.roa (hash: lco+WzxW3Iji0/qkTCFH+wsYzV3XvFCQHLZ/O4Vbnww=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.crl rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 May 2024 14:23:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8a:87:79:ce:ff:0a:a4:4f:10:7c:ec:e5:e4:ab:9c:74:b8:53:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48CA7719CE7CE90570E1A1B6F443947AE9CAA74E Validity Not Before: May 17 10:27:04 2024 GMT Not After : May 20 20:28:04 2024 GMT Subject: CN=6712ED6BFC3CC226D142014DE20E06B8B86A74B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ab:44:d7:83:76:95:fc:83:28:3d:85:f2:7d: de:21:ce:19:67:1f:9e:fd:68:2a:85:2e:81:ec:f2: 3c:ad:98:1e:19:f7:7b:39:fa:aa:5b:88:48:e8:03: ac:4b:6c:7b:6f:72:09:f1:22:4c:3f:25:1a:c9:f4: d5:c8:94:2e:e5:e1:96:39:0b:0e:32:69:f3:78:26: 89:f2:2f:31:0b:f3:fc:02:9e:fa:b5:da:bf:fa:e6: 18:a1:c7:3b:fb:5c:74:2e:a2:f3:cf:23:8f:5f:bb: 89:56:02:c8:b1:ff:8d:69:ae:68:7b:0f:40:39:e3: 2b:e9:b5:2d:b8:56:be:e8:9e:56:e6:66:3d:bc:a9: a1:ed:28:32:ec:2d:18:e3:f8:cc:84:3a:79:d2:f4: 79:10:c2:62:54:7a:fd:7a:88:0f:4b:46:4d:24:12: cd:ba:6f:29:45:21:f1:27:c1:90:c8:e4:57:a8:e4: 77:6b:ad:7b:4c:3e:e4:44:37:b8:99:32:42:92:86: f4:15:f6:3f:ec:c6:d4:6b:d5:32:2b:22:23:34:81: d9:7d:8c:cb:a9:9c:52:97:b0:b4:2c:6c:4e:c0:ce: fa:11:30:1b:f4:da:65:ee:e5:6b:13:ec:7b:75:0e: 90:ae:77:68:e2:32:a3:88:13:3f:f3:c3:04:ed:30: b8:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:12:ED:6B:FC:3C:C2:26:D1:42:01:4D:E2:0E:06:B8:B8:6A:74:B9 X509v3 Authority Key Identifier: keyid:48:CA:77:19:CE:7C:E9:05:70:E1:A1:B6:F4:43:94:7A:E9:CA:A7:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:3a:b3:dc:7d:6e:ae:31:dd:50:b5:54:98:a5:6c:b5:21:fa: 20:24:ef:a2:85:bd:72:af:c5:21:e4:a4:5a:9c:cf:5f:cc:c7: d7:66:0e:a4:ee:26:3a:7e:f1:45:23:97:d1:99:d4:5c:2e:df: 11:46:95:a8:94:24:59:7c:b8:e2:ad:6f:30:0e:81:1b:32:46: 1c:75:e0:1f:ca:75:03:11:92:9e:15:08:80:ca:d9:41:21:c8: fb:1e:34:f5:38:81:90:77:d8:27:9b:a7:ed:6f:a8:32:e6:6a: a3:a3:7c:7f:a3:6b:2c:26:37:4b:c4:84:cf:96:27:62:19:f8: 17:dc:d9:0b:06:ef:5d:c3:2a:55:ed:67:f8:ae:9c:f4:80:fa: fc:27:49:ec:fc:57:45:08:13:68:44:a0:ef:70:6c:e9:11:f8: fc:81:cc:db:ad:6d:b7:b5:5d:f4:f7:dc:4e:4c:ca:7e:93:b4: 44:0a:ac:ac:45:e1:ca:ee:3a:92:f6:6c:aa:2d:ef:02:ab:5f: 4c:7f:53:60:4d:56:f7:a4:f1:22:88:a7:54:01:45:f0:d0:00: b8:fa:8e:a1:a5:68:46:93:f5:62:7b:2c:49:13:9f:f2:d5:bc: 13:c2:93:b2:9a:2b:e7:33:58:86:60:4b:d7:f3:e1:7c:f6:36: 3f:f7:5b:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAIqHec7/CqRPEHzs5eSrnHS4U2gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDhDQTc3MTlDRTdDRTkwNTcwRTFBMUI2RjQ0Mzk0N0FF OUNBQTc0RTAeFw0yNDA1MTcxMDI3MDRaFw0yNDA1MjAyMDI4MDRaMDMxMTAvBgNV BAMTKDY3MTJFRDZCRkMzQ0MyMjZEMTQyMDE0REUyMEUwNkI4Qjg2QTc0QjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9q0TXg3aV/IMoPYXyfd4hzhln H579aCqFLoHs8jytmB4Z93s5+qpbiEjoA6xLbHtvcgnxIkw/JRrJ9NXIlC7l4ZY5 Cw4yafN4JonyLzEL8/wCnvq12r/65hihxzv7XHQuovPPI49fu4lWAsix/41prmh7 D0A54yvptS24Vr7onlbmZj28qaHtKDLsLRjj+MyEOnnS9HkQwmJUev16iA9LRk0k Es26bylFIfEnwZDI5Feo5HdrrXtMPuREN7iZMkKShvQV9j/sxtRr1TIrIiM0gdl9 jMupnFKXsLQsbE7AzvoRMBv02mXu5WsT7Ht1DpCud2jiMqOIEz/zwwTtMLg1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZxLta/w8wibRQgFN4g4GuLhqdLkwHwYDVR0j BBgwFoAUSMp3Gc586QVw4aG29EOUeunKp04wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NzEzZmMxNy01N2YxLTQ2NzEtOGExNi1mODU4ZGRkN2RhNDMvMC80OENBNzcxOUNF N0NFOTA1NzBFMUExQjZGNDQzOTQ3QUU5Q0FBNzRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDhDQTc3MTlDRTdDRTkwNTcwRTFBMUI2RjQ0Mzk0N0FFOUNB QTc0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTcxM2ZjMTctNTdmMS00NjcxLThh MTYtZjg1OGRkZDdkYTQzLzAvNDhDQTc3MTlDRTdDRTkwNTcwRTFBMUI2RjQ0Mzk0 N0FFOUNBQTc0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALM6s9x9bq4x3VC1VJilbLUh+iAk76KFvXKv xSHkpFqcz1/Mx9dmDqTuJjp+8UUjl9GZ1Fwu3xFGlaiUJFl8uOKtbzAOgRsyRhx1 4B/KdQMRkp4VCIDK2UEhyPseNPU4gZB32Cebp+1vqDLmaqOjfH+jaywmN0vEhM+W J2IZ+Bfc2QsG713DKlXtZ/iunPSA+vwnSez8V0UIE2hEoO9wbOkR+PyBzNutbbe1 XfT33E5Myn6TtEQKrKxF4cruOpL2bKot7wKrX0x/U2BNVvek8SKIp1QBRfDQALj6 jqGlaEaT9WJ7LEkTn/LVvBPCk7KaK+czWIZgS9fz4Xz2Nj/3W6c= -----END CERTIFICATE-----Generated at Fri May 17 12:05:51 2024 by rpki-client on console-fra.rpki-client.org