$ rpki-client -vvf repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.mft File: 4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.mft (raw, json) Hash identifier: VuBjc0pXft1dNnevb0CLJ/j5nvhPRChtj7pY96frI6g= Subject key identifier: BE:F3:77:73:71:36:8F:B7:EE:D8:A2:91:23:7E:3A:B2:5B:E2:68:30 Authority key identifier: 4D:57:27:02:D7:7E:3A:9A:4A:FA:80:33:A2:A3:DC:59:7B:2C:8D:A1 Certificate issuer: /CN=4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1 Certificate serial: 6718CEAAB46E8B6480D1868E9D22B76CC9625B34 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.mft Manifest number: 011C Signing time: Tue 28 May 2024 04:21:34 +0000 Manifest this update: Tue 28 May 2024 04:16:34 +0000 Manifest next update: Fri 31 May 2024 16:08:34 +0000 Files and hashes: 1: 3131382e3135312e3232302e302f32322d3234203d3e2039333236.roa (hash: q0vXEWTv6bPANPzczgqOID0LPJ+XyEYAtwXFM33FLrY=) 2: 4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.crl (hash: /MQdkWTDshjfQphL1cUHj+EGynUsqaVfDGqE6n30NA0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.crl rsync://repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 May 2024 13:54:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:18:ce:aa:b4:6e:8b:64:80:d1:86:8e:9d:22:b7:6c:c9:62:5b:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1 Validity Not Before: May 28 04:16:34 2024 GMT Not After : May 31 16:08:34 2024 GMT Subject: CN=BEF3777371368FB7EED8A291237E3AB25BE26830 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d7:9b:32:ad:94:c4:13:58:bd:32:dc:d6:f1: 43:23:82:6f:bc:bb:95:6a:b0:7d:54:37:42:19:04: 44:0c:24:85:4e:95:3d:c7:5e:23:fc:83:58:1c:f6: 25:e6:3f:95:2e:94:45:bc:e6:8c:f5:d9:b5:b4:b0: c4:7f:a1:23:96:38:08:3d:7c:07:a0:4e:33:f6:42: b0:ee:6a:a4:36:08:e5:64:d3:c9:df:37:b8:52:73: 16:03:06:c2:5d:f9:55:a9:3f:f6:d3:ee:2f:fb:24: 8b:49:34:43:89:26:00:56:d1:d5:74:70:2d:48:4e: a6:c0:f4:f0:b8:3a:0f:11:94:12:99:bb:13:70:0e: b6:a4:fd:dc:ba:68:e4:30:6a:9b:9c:28:7b:70:79: 9e:ff:1a:1b:c0:54:75:52:87:6d:94:2b:4a:e6:07: 3d:99:03:63:a8:ef:2a:a3:24:bc:ba:e5:c2:f5:3d: 82:18:46:ca:3f:34:8d:a2:9a:7d:f9:64:90:64:cb: 31:3c:29:92:e4:2d:e3:af:c3:f5:6e:02:8e:d6:65: e5:71:e3:b0:be:37:c2:48:2a:32:a7:5a:8d:df:55: 62:0e:68:d9:7d:56:23:81:fc:45:1e:64:8f:b9:43: 3c:9c:ed:d5:4a:8b:16:b6:2e:cb:b4:69:22:bd:85: 36:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:F3:77:73:71:36:8F:B7:EE:D8:A2:91:23:7E:3A:B2:5B:E2:68:30 X509v3 Authority Key Identifier: keyid:4D:57:27:02:D7:7E:3A:9A:4A:FA:80:33:A2:A3:DC:59:7B:2C:8D:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:0d:05:6e:88:6e:7b:8f:ff:a7:c8:2c:f0:ad:3c:fb:a6:fd: aa:31:60:95:1a:cc:f3:2f:50:e8:77:22:6b:68:26:27:85:25: 5e:0d:5b:73:67:a4:5e:a6:a4:b6:22:b6:67:3e:a8:b3:87:3e: 61:ca:6b:dc:98:a7:17:ad:14:8c:85:18:fc:10:12:74:11:1d: 5b:f0:b8:7a:fa:c7:8c:46:87:0a:66:77:55:2e:17:90:75:d4: ca:1a:13:25:1c:e4:14:9e:a0:19:60:4c:83:86:5a:57:3e:d9: c8:96:07:42:6e:7c:fc:99:44:10:5d:a0:72:9e:7e:33:3a:82: da:b1:6b:e0:1c:98:ec:c9:3c:3d:2a:2c:de:0a:73:9a:9b:aa: a6:44:a0:ef:eb:69:1c:c7:ac:d1:95:39:ca:09:a6:0e:d0:dc: ea:db:e0:1d:98:01:46:08:06:2b:b6:1c:36:5e:df:60:79:d5: 7c:dc:66:c2:a5:d6:df:31:4c:65:c7:cf:a9:84:43:1e:05:2e: a3:d7:b3:fe:bb:a1:24:b8:58:84:75:c6:2d:9d:25:d1:20:07: 6b:5a:61:ea:99:b8:1d:65:b6:c7:2c:6d:c6:1a:77:91:35:d3: 7d:56:a3:cf:2e:6f:9e:9a:16:74:0a:b1:70:09:64:92:25:f9: 9e:f3:28:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZxjOqrRui2SA0YaOnSK3bMliWzQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ1NzI3MDJENzdFM0E5QTRBRkE4MDMzQTJBM0RDNTk3 QjJDOERBMTAeFw0yNDA1MjgwNDE2MzRaFw0yNDA1MzExNjA4MzRaMDMxMTAvBgNV BAMTKEJFRjM3NzczNzEzNjhGQjdFRUQ4QTI5MTIzN0UzQUIyNUJFMjY4MzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB15syrZTEE1i9MtzW8UMjgm+8 u5VqsH1UN0IZBEQMJIVOlT3HXiP8g1gc9iXmP5UulEW85oz12bW0sMR/oSOWOAg9 fAegTjP2QrDuaqQ2COVk08nfN7hScxYDBsJd+VWpP/bT7i/7JItJNEOJJgBW0dV0 cC1ITqbA9PC4Og8RlBKZuxNwDrak/dy6aOQwapucKHtweZ7/GhvAVHVSh22UK0rm Bz2ZA2Oo7yqjJLy65cL1PYIYRso/NI2imn35ZJBkyzE8KZLkLeOvw/VuAo7WZeVx 47C+N8JIKjKnWo3fVWIOaNl9ViOB/EUeZI+5Qzyc7dVKixa2Lsu0aSK9hTZTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvvN3c3E2j7fu2KKRI346slviaDAwHwYDVR0j BBgwFoAUTVcnAtd+OppK+oAzoqPcWXssjaEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ODE4NGZhYi0wZmE1LTQzYmItODExYy0yZWViMGE1ZmU4ZDcvMC80RDU3MjcwMkQ3 N0UzQTlBNEFGQTgwMzNBMkEzREM1OTdCMkM4REExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEQ1NzI3MDJENzdFM0E5QTRBRkE4MDMzQTJBM0RDNTk3QjJD OERBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjgxODRmYWItMGZhNS00M2JiLTgx MWMtMmVlYjBhNWZlOGQ3LzAvNEQ1NzI3MDJENzdFM0E5QTRBRkE4MDMzQTJBM0RD NTk3QjJDOERBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAUNBW6IbnuP/6fILPCtPPum/aoxYJUazPMv UOh3ImtoJieFJV4NW3NnpF6mpLYitmc+qLOHPmHKa9yYpxetFIyFGPwQEnQRHVvw uHr6x4xGhwpmd1UuF5B11MoaEyUc5BSeoBlgTIOGWlc+2ciWB0JufPyZRBBdoHKe fjM6gtqxa+AcmOzJPD0qLN4Kc5qbqqZEoO/raRzHrNGVOcoJpg7Q3Orb4B2YAUYI Biu2HDZe32B51XzcZsKl1t8xTGXHz6mEQx4FLqPXs/67oSS4WIR1xi2dJdEgB2ta YeqZuB1ltscsbcYad5E1031Wo88ub56aFnQKsXAJZJIl+Z7zKMw= -----END CERTIFICATE-----Generated at Tue May 28 05:06:10 2024 by rpki-client on console-fra.rpki-client.org