$ rpki-client -vvf repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft File: 9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft (raw, json) Hash identifier: pwn4dorLAdtXRGUauT0u3KBJdgp+MLGE5+DkGUJm1hE= Subject key identifier: 19:B4:57:06:6D:A3:98:83:1F:08:93:B4:6C:6B:55:08:E4:93:15:9A Authority key identifier: 9A:63:5D:42:27:43:AA:8C:31:CA:82:C7:F5:03:B9:5F:FB:64:A4:DF Certificate issuer: /CN=9A635D422743AA8C31CA82C7F503B95FFB64A4DF Certificate serial: 38B2373631636D2E07900A74989EE8791FD0FD2C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft Manifest number: 031B Signing time: Mon 13 May 2024 23:01:13 +0000 Manifest this update: Mon 13 May 2024 22:56:13 +0000 Manifest next update: Fri 17 May 2024 00:40:13 +0000 Files and hashes: 1: 3130332e32362e3133312e302f32342d3234203d3e20313332363633.roa (hash: O/kvSI9r8ac9UaS8UQgMdP3IqTJCcU/HYz9o7xSla0s=) 2: 9A635D422743AA8C31CA82C7F503B95FFB64A4DF.crl (hash: FY5neUXinH+/gyd7L5RhpIEwMYZoy4DyuunjGb8oO2c=) 3: 3130332e32362e3133302e302f32342d3234203d3e20313332363633.roa (hash: Stn5I7RDPRMI03TmuoeCAeds6by3O6C+/bo2ByhHcFs=) 4: 3130332e32362e3132382e302f32342d3234203d3e20313431363634.roa (hash: tlsdUY6ybvJN2IEtejfkmeue+5jDkByHMqeZv2dLGKI=) 5: 3130332e32362e3132392e302f32342d3234203d3e20313439373034.roa (hash: Qe2X1VN3cr5YYScwwFCPfm5GbdYlILqmUCd0hannXIA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.crl rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 May 2024 00:40:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:b2:37:36:31:63:6d:2e:07:90:0a:74:98:9e:e8:79:1f:d0:fd:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A635D422743AA8C31CA82C7F503B95FFB64A4DF Validity Not Before: May 13 22:56:13 2024 GMT Not After : May 17 00:40:13 2024 GMT Subject: CN=19B457066DA398831F0893B46C6B5508E493159A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:cf:5c:11:22:e4:ec:92:ab:0e:c4:e0:31:c1: 20:04:2b:a9:d5:f9:54:32:e1:e6:e0:fd:b0:2f:85: 37:b2:26:1c:52:b4:b7:99:39:ff:d7:31:8c:b6:ca: e7:81:e3:c4:d9:1f:35:96:48:33:30:d4:bd:99:80: 3b:0b:b8:45:e8:09:63:ca:34:ef:07:9b:c8:2a:45: 6e:05:83:a2:ee:37:28:36:f1:33:32:41:2d:66:fb: 8b:12:e3:01:1d:7f:c5:6f:84:20:5c:be:f2:81:96: 8a:f7:f6:be:19:d9:e7:58:40:54:dd:8c:cd:2d:8b: ba:9a:78:42:3b:52:f7:19:0b:05:e8:86:e5:69:0e: ef:77:74:7f:00:91:f0:02:c3:16:7f:53:c2:4c:3e: 47:e8:bb:b0:03:1b:49:f3:3c:62:2f:8e:be:ef:c6: 85:fc:d2:d4:5a:86:fd:c4:8c:37:6b:11:30:93:52: eb:25:e3:40:fa:c4:13:09:61:8c:eb:7d:10:b5:42: 79:0e:0c:42:38:2e:f9:59:f1:71:60:12:d1:85:bb: 0a:0e:ab:8b:9d:46:ec:33:05:4f:b2:b5:af:c4:4f: 91:a7:6e:09:a6:40:89:6d:bc:fa:8e:d4:22:d2:a0: 0e:75:e7:a8:57:eb:84:bb:77:cb:0d:48:69:a0:91: 0a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:B4:57:06:6D:A3:98:83:1F:08:93:B4:6C:6B:55:08:E4:93:15:9A X509v3 Authority Key Identifier: keyid:9A:63:5D:42:27:43:AA:8C:31:CA:82:C7:F5:03:B9:5F:FB:64:A4:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:9f:b6:3c:7c:4d:9c:0e:ce:65:f6:ad:6a:9b:cd:36:aa:a0: dc:7b:70:ef:21:f0:9f:38:78:a9:df:45:e0:47:68:09:ab:01: 36:ea:75:8d:07:3f:63:6e:a8:b3:3f:57:4c:9f:82:be:01:42: 96:39:19:52:bc:1b:16:8f:66:27:52:0e:19:b3:84:6b:72:1c: 93:ac:a4:ab:66:74:58:91:5b:e7:ee:41:71:f6:20:31:c7:8b: 89:fc:5b:54:bd:83:51:f2:94:2c:08:a4:ef:ac:a2:e3:de:57: 73:60:c8:69:65:82:bc:64:e3:61:88:f3:c5:e9:54:9c:5a:64: c8:35:25:d7:79:a0:77:0e:e8:22:1a:3b:70:59:d2:57:3c:23: 23:96:25:15:94:ec:96:fb:97:f9:d3:12:dc:58:6e:4c:fd:20: b6:fb:e4:d9:72:f4:5f:8f:ab:09:3e:4e:0a:0f:b5:4d:2b:eb: 37:1c:f6:b8:09:c7:d5:c6:d1:28:f8:a1:4c:7d:e9:d6:f9:8f: 99:7b:89:ef:5e:fd:ea:d1:93:62:e4:d0:10:4d:b7:99:14:a3: d4:1f:49:e1:8f:c2:39:cd:dc:32:20:cf:c2:9b:70:6e:a1:fc: 00:15:c8:f2:cf:f9:0b:1d:1c:c9:44:90:d2:1a:2f:d2:8b:3c: 47:07:eb:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOLI3NjFjbS4HkAp0mJ7oeR/Q/SwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE2MzVENDIyNzQzQUE4QzMxQ0E4MkM3RjUwM0I5NUZG QjY0QTRERjAeFw0yNDA1MTMyMjU2MTNaFw0yNDA1MTcwMDQwMTNaMDMxMTAvBgNV BAMTKDE5QjQ1NzA2NkRBMzk4ODMxRjA4OTNCNDZDNkI1NTA4RTQ5MzE1OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBz1wRIuTskqsOxOAxwSAEK6nV +VQy4ebg/bAvhTeyJhxStLeZOf/XMYy2yueB48TZHzWWSDMw1L2ZgDsLuEXoCWPK NO8Hm8gqRW4Fg6LuNyg28TMyQS1m+4sS4wEdf8VvhCBcvvKBlor39r4Z2edYQFTd jM0ti7qaeEI7UvcZCwXohuVpDu93dH8AkfACwxZ/U8JMPkfou7ADG0nzPGIvjr7v xoX80tRahv3EjDdrETCTUusl40D6xBMJYYzrfRC1QnkODEI4LvlZ8XFgEtGFuwoO q4udRuwzBU+yta/ET5GnbgmmQIltvPqO1CLSoA5156hX64S7d8sNSGmgkQqtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGbRXBm2jmIMfCJO0bGtVCOSTFZowHwYDVR0j BBgwFoAUmmNdQidDqowxyoLH9QO5X/tkpN8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZGEzMjk2Ny1kNTU4LTRhMzQtYmU4ZS02NGVmNGNmYzA0ZTMvMC85QTYzNUQ0MjI3 NDNBQThDMzFDQTgyQzdGNTAzQjk1RkZCNjRBNERGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE2MzVENDIyNzQzQUE4QzMxQ0E4MkM3RjUwM0I5NUZGQjY0 QTRERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWRhMzI5NjctZDU1OC00YTM0LWJl OGUtNjRlZjRjZmMwNGUzLzAvOUE2MzVENDIyNzQzQUE4QzMxQ0E4MkM3RjUwM0I5 NUZGQjY0QTRERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKSftjx8TZwOzmX2rWqbzTaqoNx7cO8h8J84 eKnfReBHaAmrATbqdY0HP2NuqLM/V0yfgr4BQpY5GVK8GxaPZidSDhmzhGtyHJOs pKtmdFiRW+fuQXH2IDHHi4n8W1S9g1HylCwIpO+souPeV3NgyGllgrxk42GI88Xp VJxaZMg1Jdd5oHcO6CIaO3BZ0lc8IyOWJRWU7Jb7l/nTEtxYbkz9ILb75Nly9F+P qwk+TgoPtU0r6zcc9rgJx9XG0Sj4oUx96db5j5l7ie9e/erRk2Lk0BBNt5kUo9Qf SeGPwjnN3DIgz8KbcG6h/AAVyPLP+QsdHMlEkNIaL9KLPEcH6xk= -----END CERTIFICATE-----Generated at Mon May 13 23:49:29 2024 by rpki-client on console-fra.rpki-client.org