$ rpki-client -vvf repo-rpki.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/40F85FB380A012F2BB6D055D914C008674125D67.mft File: 40F85FB380A012F2BB6D055D914C008674125D67.mft (raw, json) Hash identifier: Zelgev/C4xYrJF7I0XAYq4ZxyykY3fARS8HUjVT9GZw= Subject key identifier: 94:72:68:7A:72:DB:4B:A9:59:9E:41:C0:F9:45:A2:F4:6D:DE:30:EE Authority key identifier: 40:F8:5F:B3:80:A0:12:F2:BB:6D:05:5D:91:4C:00:86:74:12:5D:67 Certificate issuer: /CN=40F85FB380A012F2BB6D055D914C008674125D67 Certificate serial: 42601F3552DFA1E0C1DC57D7D2D137AB964FEE1C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40F85FB380A012F2BB6D055D914C008674125D67.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/40F85FB380A012F2BB6D055D914C008674125D67.mft Manifest number: 03FB Signing time: Wed 22 May 2024 01:01:15 +0000 Manifest this update: Wed 22 May 2024 00:56:15 +0000 Manifest next update: Sat 25 May 2024 10:49:15 +0000 Files and hashes: 1: 3130332e3231322e3233392e302f32342d3234203d3e20313338383839.roa (hash: HCOsZ4lnS6mTIpEEIP52LhgHmquwT/Npx2GquOMvTSQ=) 2: 3130332e3231322e3233382e302f32342d3234203d3e203338373536.roa (hash: kqCM+ybOTVdLlYvgsNblKrLNV0K1FxGd+0UGkN9tyc0=) 3: 3130332e3231322e3233362e302f32332d3234203d3e203338373536.roa (hash: Q7+Ig3st9QH7BYXbx8Ft103oTEokxpM9tTzrewLqJMw=) 4: 40F85FB380A012F2BB6D055D914C008674125D67.crl (hash: HfglFoFYlhhOzw5hkkKPnnxlc5WL4X2RuPj/Ir+3CYQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/40F85FB380A012F2BB6D055D914C008674125D67.crl rsync://repo-rpki.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/40F85FB380A012F2BB6D055D914C008674125D67.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40F85FB380A012F2BB6D055D914C008674125D67.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 00:42:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:60:1f:35:52:df:a1:e0:c1:dc:57:d7:d2:d1:37:ab:96:4f:ee:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40F85FB380A012F2BB6D055D914C008674125D67 Validity Not Before: May 22 00:56:15 2024 GMT Not After : May 25 10:49:15 2024 GMT Subject: CN=9472687A72DB4BA9599E41C0F945A2F46DDE30EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:dd:f9:ca:ab:ff:dc:3d:ae:e2:fb:2e:61:f8: 57:00:2f:b7:5c:48:f8:58:7f:0d:e7:f7:3b:0a:4b: 72:7a:1a:4e:c1:2d:e4:12:0e:32:4e:7f:cf:ec:45: a7:91:0a:9d:73:d1:9d:7c:f6:07:a3:4e:e0:ed:79: 73:e0:09:2d:c8:32:fe:23:0d:d1:bd:c3:02:25:b2: ea:5a:72:1b:78:10:cc:d9:68:ee:25:06:62:71:e0: 70:63:4a:a6:e1:e2:82:75:e2:c6:e7:80:0c:cb:e4: 9a:8a:f6:cf:62:c1:3a:24:fe:9b:5c:54:80:ed:45: dc:8e:b5:3e:de:96:82:f7:ad:cd:39:67:56:01:c1: 6c:06:bc:13:5b:cb:41:50:03:b4:32:97:4b:0b:3e: 8d:63:af:46:0d:7a:43:12:0a:16:1e:f5:d9:8b:df: 07:ff:39:2b:45:f0:e8:66:2a:b7:ae:78:a4:c8:09: 32:78:ac:53:82:a5:69:90:24:fa:63:bc:c6:9b:7d: bd:0e:2d:f4:02:54:46:b8:b3:7a:d0:d2:a3:38:ad: aa:27:95:74:6d:27:35:b3:58:ae:63:f4:26:db:d3: 11:c7:e7:ad:46:a6:31:8a:46:81:6e:fb:b1:b9:80: 29:59:3b:ba:18:59:12:d3:93:27:5b:c0:db:41:d6: c0:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:72:68:7A:72:DB:4B:A9:59:9E:41:C0:F9:45:A2:F4:6D:DE:30:EE X509v3 Authority Key Identifier: keyid:40:F8:5F:B3:80:A0:12:F2:BB:6D:05:5D:91:4C:00:86:74:12:5D:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/40F85FB380A012F2BB6D055D914C008674125D67.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40F85FB380A012F2BB6D055D914C008674125D67.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/40F85FB380A012F2BB6D055D914C008674125D67.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:33:4c:49:9c:8c:c7:dd:ca:81:58:88:ba:35:b6:c0:91:52: 05:4c:8b:6e:af:aa:76:1b:83:0c:8d:89:9b:8a:d4:52:c6:42: 10:dc:f4:ff:a8:d1:41:e3:11:cb:3f:9d:48:04:b2:33:fe:07: 2d:ff:f7:61:c1:08:64:45:b4:91:90:53:ea:94:c1:12:dc:53: a8:f0:5d:31:e5:43:9c:95:07:c7:71:92:81:c0:8e:1c:61:03: 2f:8d:60:ac:69:f8:13:c1:84:7e:7d:61:86:38:f1:92:cf:78: eb:d7:8f:45:d0:e9:96:36:e1:2b:b5:14:97:3a:c3:f3:7e:7a: 5c:75:e3:a0:3a:59:b3:b3:5e:dc:86:92:41:0f:78:2c:5e:48: 6b:9f:d4:9b:9a:ec:09:89:c6:6e:d4:bf:df:87:8f:6a:42:28: eb:f1:bf:ff:3b:7f:c5:83:f7:ce:a0:3f:a7:d6:44:81:f2:55: a8:8d:68:66:65:78:11:4a:ce:e7:1c:72:da:a2:43:69:b5:95: 8f:8a:f3:40:fd:cf:01:51:22:eb:26:f6:20:18:1f:18:69:1f: 6f:ac:5d:0e:a3:bf:39:2b:99:7b:19:fc:63:9f:07:10:81:68: cf:c5:eb:19:48:a1:25:75:6f:32:2d:4a:fd:5f:e6:9c:82:73: 71:af:9a:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQmAfNVLfoeDB3FfX0tE3q5ZP7hwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBGODVGQjM4MEEwMTJGMkJCNkQwNTVEOTE0QzAwODY3 NDEyNUQ2NzAeFw0yNDA1MjIwMDU2MTVaFw0yNDA1MjUxMDQ5MTVaMDMxMTAvBgNV BAMTKDk0NzI2ODdBNzJEQjRCQTk1OTlFNDFDMEY5NDVBMkY0NkRERTMwRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp3fnKq//cPa7i+y5h+FcAL7dc SPhYfw3n9zsKS3J6Gk7BLeQSDjJOf8/sRaeRCp1z0Z189gejTuDteXPgCS3IMv4j DdG9wwIlsupacht4EMzZaO4lBmJx4HBjSqbh4oJ14sbngAzL5JqK9s9iwTok/ptc VIDtRdyOtT7eloL3rc05Z1YBwWwGvBNby0FQA7Qyl0sLPo1jr0YNekMSChYe9dmL 3wf/OStF8OhmKreueKTICTJ4rFOCpWmQJPpjvMabfb0OLfQCVEa4s3rQ0qM4raon lXRtJzWzWK5j9Cbb0xHH561GpjGKRoFu+7G5gClZO7oYWRLTkydbwNtB1sDhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlHJoenLbS6lZnkHA+UWi9G3eMO4wHwYDVR0j BBgwFoAUQPhfs4CgEvK7bQVdkUwAhnQSXWcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OTcyZjlhMi1iMGZmLTQyOTgtOGRhNi1lMmUzODM0OGEwN2IvMC80MEY4NUZCMzgw QTAxMkYyQkI2RDA1NUQ5MTRDMDA4Njc0MTI1RDY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDBGODVGQjM4MEEwMTJGMkJCNkQwNTVEOTE0QzAwODY3NDEy NUQ2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTk3MmY5YTItYjBmZi00Mjk4LThk YTYtZTJlMzgzNDhhMDdiLzAvNDBGODVGQjM4MEEwMTJGMkJCNkQwNTVEOTE0QzAw ODY3NDEyNUQ2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH4zTEmcjMfdyoFYiLo1tsCRUgVMi26vqnYb gwyNiZuK1FLGQhDc9P+o0UHjEcs/nUgEsjP+By3/92HBCGRFtJGQU+qUwRLcU6jw XTHlQ5yVB8dxkoHAjhxhAy+NYKxp+BPBhH59YYY48ZLPeOvXj0XQ6ZY24Su1FJc6 w/N+elx146A6WbOzXtyGkkEPeCxeSGuf1Jua7AmJxm7Uv9+Hj2pCKOvxv/87f8WD 986gP6fWRIHyVaiNaGZleBFKzuccctqiQ2m1lY+K80D9zwFRIusm9iAYHxhpH2+s XQ6jvzkrmXsZ/GOfBxCBaM/F6xlIoSV1bzItSv1f5pyCc3Gvmj0= -----END CERTIFICATE-----Generated at Wed May 22 01:45:30 2024 by rpki-client on console-fra.rpki-client.org