$ rpki-client -vvf repo-rpki.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/843FDF32A52D11795BBFB0918ABF926E0A210870.mft File: 843FDF32A52D11795BBFB0918ABF926E0A210870.mft (raw, json) Hash identifier: A8g6gkgDmTHVjF3k6f+7xjV2+izsaOmKnzo+SPwgRqk= Subject key identifier: CD:6B:91:89:4C:EE:29:6C:C2:26:E3:56:A9:94:48:5F:43:80:D7:33 Authority key identifier: 84:3F:DF:32:A5:2D:11:79:5B:BF:B0:91:8A:BF:92:6E:0A:21:08:70 Certificate issuer: /CN=843FDF32A52D11795BBFB0918ABF926E0A210870 Certificate serial: 4A6D68BC5551C34F5FE2C10EF347E08A06C9B44A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/843FDF32A52D11795BBFB0918ABF926E0A210870.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/843FDF32A52D11795BBFB0918ABF926E0A210870.mft Manifest number: 2C Signing time: Sat 18 May 2024 09:51:52 +0000 Manifest this update: Sat 18 May 2024 09:46:52 +0000 Manifest next update: Tue 21 May 2024 10:08:52 +0000 Files and hashes: 1: 843FDF32A52D11795BBFB0918ABF926E0A210870.crl (hash: wdxyW+2V6HjKMORZxlsdBqbPikzgpnNkehNv22vezY8=) 2: 3231302e38372e3132342e302f32332d3234203d3e20313532303539.roa (hash: JJn8SaSEdyLlsSnCh1fgYIIfjbbeg3PlOVnbaVd8Tpo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/843FDF32A52D11795BBFB0918ABF926E0A210870.crl rsync://repo-rpki.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/843FDF32A52D11795BBFB0918ABF926E0A210870.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/843FDF32A52D11795BBFB0918ABF926E0A210870.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 10:08:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:6d:68:bc:55:51:c3:4f:5f:e2:c1:0e:f3:47:e0:8a:06:c9:b4:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=843FDF32A52D11795BBFB0918ABF926E0A210870 Validity Not Before: May 18 09:46:52 2024 GMT Not After : May 21 10:08:52 2024 GMT Subject: CN=CD6B91894CEE296CC226E356A994485F4380D733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6b:71:65:ae:b7:fc:f9:a1:1e:b0:33:02:ef: 38:5e:18:76:86:b5:9f:8a:a5:94:3b:d0:44:e2:13: ae:fb:f0:74:89:f3:b4:fa:8b:8e:b9:2c:91:42:1b: 33:4f:66:29:b9:a3:c4:1e:ac:ad:50:6b:0c:f4:6c: 53:f1:7c:f5:a2:08:77:64:69:2c:35:81:8d:f2:f8: dc:ee:35:71:9d:15:b1:b4:79:ab:9a:65:d4:40:20: ef:49:1f:87:54:26:a4:78:f0:42:aa:16:69:2b:d1: 79:7f:ea:c3:8d:49:83:e1:6f:ad:1e:86:48:41:42: b2:4b:d6:6d:48:1f:d8:80:64:2e:97:3d:8e:b9:21: 08:d0:81:6a:32:7b:cd:40:11:e1:37:64:6c:56:63: a7:53:63:74:3b:d2:ba:9d:c7:ed:9a:d8:06:c1:d4: 61:52:69:02:b5:25:f3:5e:92:01:40:b3:c5:df:2e: 8a:b8:61:e0:44:f9:2b:73:c5:74:48:b6:ec:ab:38: ce:41:e8:d7:0c:68:f4:96:96:e6:d1:3c:3d:60:81: 60:6c:ea:fd:37:83:0c:14:50:3f:eb:1a:55:e5:11: 19:98:03:ca:2d:68:53:77:5d:9a:35:18:80:d8:1b: 09:b1:d3:09:fe:9d:e6:d9:94:34:3d:ea:32:81:ea: 22:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:6B:91:89:4C:EE:29:6C:C2:26:E3:56:A9:94:48:5F:43:80:D7:33 X509v3 Authority Key Identifier: keyid:84:3F:DF:32:A5:2D:11:79:5B:BF:B0:91:8A:BF:92:6E:0A:21:08:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/843FDF32A52D11795BBFB0918ABF926E0A210870.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/843FDF32A52D11795BBFB0918ABF926E0A210870.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57be8b7c-232f-47e8-9cdd-8817d39b70ea/0/843FDF32A52D11795BBFB0918ABF926E0A210870.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:84:22:4f:94:4a:d3:59:97:4e:c1:f4:04:c4:fb:c7:c9:87: 59:64:b8:eb:c5:c1:f0:ac:8d:19:4d:01:16:e5:4f:5c:db:a4: 3d:90:e8:d2:c9:a5:90:32:bc:e1:9d:c4:f3:f2:f6:23:70:0b: 3a:bf:42:87:30:aa:0f:ca:fa:3e:af:f5:d5:9b:6b:e5:0d:f9: b7:1d:16:c2:77:4a:c9:e0:32:ad:65:6c:64:c0:13:fc:1a:4b: 14:3b:2b:53:fd:7f:81:b9:9e:d5:b9:6c:ec:96:38:dd:40:ce: 7d:1f:da:76:b6:d7:e8:f4:3e:d3:dc:13:73:d6:13:23:90:37: a4:1a:b2:b9:6d:56:2a:83:cd:68:8f:04:18:c8:e3:16:90:a7: 55:cb:0d:e5:40:84:aa:be:d4:4c:0e:30:37:d2:c1:5e:b5:f0: af:cf:4d:92:fb:0b:f7:14:82:4b:69:8c:13:f3:bc:fd:ed:15: 73:3a:73:29:61:d4:05:30:57:d2:79:ba:fd:43:90:51:36:af: a3:8e:50:93:00:99:c4:1f:b4:b6:67:45:48:40:5f:56:02:0d: 0a:ff:1b:1f:f8:28:3b:f4:f4:97:5b:a3:72:4c:ca:d1:b8:37: c0:4c:dc:8f:7c:72:61:06:09:42:a4:e2:42:68:ee:78:27:9a: 19:7a:e3:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSm1ovFVRw09f4sEO80fgigbJtEowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQzRkRGMzJBNTJEMTE3OTVCQkZCMDkxOEFCRjkyNkUw QTIxMDg3MDAeFw0yNDA1MTgwOTQ2NTJaFw0yNDA1MjExMDA4NTJaMDMxMTAvBgNV BAMTKENENkI5MTg5NENFRTI5NkNDMjI2RTM1NkE5OTQ0ODVGNDM4MEQ3MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBa3Flrrf8+aEesDMC7zheGHaG tZ+KpZQ70ETiE6778HSJ87T6i465LJFCGzNPZim5o8QerK1Qawz0bFPxfPWiCHdk aSw1gY3y+NzuNXGdFbG0eauaZdRAIO9JH4dUJqR48EKqFmkr0Xl/6sONSYPhb60e hkhBQrJL1m1IH9iAZC6XPY65IQjQgWoye81AEeE3ZGxWY6dTY3Q70rqdx+2a2AbB 1GFSaQK1JfNekgFAs8XfLoq4YeBE+StzxXRItuyrOM5B6NcMaPSWlubRPD1ggWBs 6v03gwwUUD/rGlXlERmYA8otaFN3XZo1GIDYGwmx0wn+nebZlDQ96jKB6iJdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzWuRiUzuKWzCJuNWqZRIX0OA1zMwHwYDVR0j BBgwFoAUhD/fMqUtEXlbv7CRir+SbgohCHAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 N2JlOGI3Yy0yMzJmLTQ3ZTgtOWNkZC04ODE3ZDM5YjcwZWEvMC84NDNGREYzMkE1 MkQxMTc5NUJCRkIwOTE4QUJGOTI2RTBBMjEwODcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQzRkRGMzJBNTJEMTE3OTVCQkZCMDkxOEFCRjkyNkUwQTIx MDg3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTdiZThiN2MtMjMyZi00N2U4LTlj ZGQtODgxN2QzOWI3MGVhLzAvODQzRkRGMzJBNTJEMTE3OTVCQkZCMDkxOEFCRjky NkUwQTIxMDg3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAKEIk+UStNZl07B9ATE+8fJh1lkuOvFwfCs jRlNARblT1zbpD2Q6NLJpZAyvOGdxPPy9iNwCzq/Qocwqg/K+j6v9dWba+UN+bcd FsJ3SsngMq1lbGTAE/waSxQ7K1P9f4G5ntW5bOyWON1Azn0f2na21+j0PtPcE3PW EyOQN6QasrltViqDzWiPBBjI4xaQp1XLDeVAhKq+1EwOMDfSwV618K/PTZL7C/cU gktpjBPzvP3tFXM6cylh1AUwV9J5uv1DkFE2r6OOUJMAmcQftLZnRUhAX1YCDQr/ Gx/4KDv09Jdbo3JMytG4N8BM3I98cmEGCUKk4kJo7ngnmhl64yk= -----END CERTIFICATE-----Generated at Sat May 18 10:26:12 2024 by rpki-client on console-ams.rpki-client.org