$ rpki-client -vvf repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.mft File: A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.mft (raw, json) Hash identifier: qYDcuPK+emVHeeq0KOdn1OdX/pqTj1MGG9Lc0vLY8NQ= Subject key identifier: 65:DB:61:FA:DF:C0:6B:3D:BA:54:08:B2:9D:77:4E:47:28:C9:29:5D Authority key identifier: A9:EB:CF:81:58:EA:BB:1C:16:EF:E1:B8:2B:4E:79:17:0A:E8:76:83 Certificate issuer: /CN=A9EBCF8158EABB1C16EFE1B82B4E79170AE87683 Certificate serial: 0B68333E681A6D98523DBE55DED6780B0EE6C461 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.mft Manifest number: 03F1 Signing time: Fri 17 May 2024 09:41:40 +0000 Manifest this update: Fri 17 May 2024 09:36:40 +0000 Manifest next update: Mon 20 May 2024 20:47:40 +0000 Files and hashes: 1: 3130332e3232372e3235352e302f32342d3234203d3e203539323739.roa (hash: ary38/wnUksoj5G5TUfoLBTvOKShBYmqoXfp7d3t2lA=) 2: 3130332e3232372e3235322e302f32342d3234203d3e203539323739.roa (hash: Db02wqzET4XJGwG97BE316GYXPxUkWcNhMUPsJBPVtc=) 3: 3130332e3232372e3235342e302f32342d3234203d3e203539323739.roa (hash: 9IalcOq9DNSpSKdN0p73lmNbxO+ck56dUSHAVC/BGcM=) 4: 3130332e3232372e3235332e302f32342d3234203d3e203539323739.roa (hash: +tCOtrbUJuYvv0XXZP73tFtlNCTwCEvsZjKS+TTqnzQ=) 5: A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.crl (hash: jESOY1LoGLBVXh7Rm78lwsgbu4PC4StVM2XIVepDC/E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.crl rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 May 2024 14:23:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:68:33:3e:68:1a:6d:98:52:3d:be:55:de:d6:78:0b:0e:e6:c4:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9EBCF8158EABB1C16EFE1B82B4E79170AE87683 Validity Not Before: May 17 09:36:40 2024 GMT Not After : May 20 20:47:40 2024 GMT Subject: CN=65DB61FADFC06B3DBA5408B29D774E4728C9295D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:82:e0:6c:a0:ab:32:dd:5c:a0:4c:86:1c:29: c3:8e:13:3e:01:70:d7:70:da:ef:48:bd:f4:85:b9: db:13:63:79:40:49:63:24:0d:26:f1:3d:79:5b:98: a0:0a:c4:2a:55:ca:9a:46:9b:aa:98:3e:96:7c:df: b7:ac:68:da:61:a0:53:2a:ea:dd:39:df:a7:da:85: fe:b1:31:ce:1c:9e:aa:47:f2:56:e7:d7:5a:e6:b1: 09:6e:57:a8:3d:b6:ab:6d:23:14:17:03:aa:96:4a: 7e:b6:51:a7:9a:dd:86:8f:7d:df:a3:9e:55:ff:37: 57:09:e4:04:2f:a6:a7:85:c7:be:48:b8:70:f5:b8: 45:ea:3d:5a:84:ca:78:4b:5c:8f:e6:65:f9:01:3b: 4d:e5:c3:7d:07:b0:86:7b:2f:2f:62:09:58:7c:56: f2:b7:23:2c:8a:37:fa:55:ee:87:ea:78:4b:b2:49: 05:a0:23:e1:07:6d:d6:52:a4:81:a4:42:58:8f:e2: 8e:d1:e7:6a:a7:1a:97:ce:53:d8:17:69:0b:2a:9a: 65:2a:b7:5f:87:fb:67:c5:5a:e3:15:62:e0:76:6c: f3:8d:f7:30:44:22:32:96:48:97:1f:0d:8a:e4:b1: 02:83:84:89:ee:45:0e:b0:d4:8d:1d:86:c0:2e:19: a8:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:DB:61:FA:DF:C0:6B:3D:BA:54:08:B2:9D:77:4E:47:28:C9:29:5D X509v3 Authority Key Identifier: keyid:A9:EB:CF:81:58:EA:BB:1C:16:EF:E1:B8:2B:4E:79:17:0A:E8:76:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:ed:39:05:ff:2b:ca:9f:a1:16:22:67:d8:0c:7c:15:64:bd: c0:46:cb:fd:a8:a2:3c:39:65:ca:68:41:eb:ac:f7:c2:a8:4b: 0e:d1:15:b5:2f:f0:fb:25:99:a8:01:7b:80:2a:87:95:c1:29: 5d:9f:de:f0:21:00:c9:52:60:8d:ea:f8:0a:af:f0:40:b4:38: 70:a7:c6:2c:e8:fb:a9:68:f2:f9:bb:41:6d:d5:b8:94:57:a4: 77:3e:7a:6c:77:e0:81:11:d1:9c:b1:74:a6:a2:f2:f3:cd:47: 86:c5:af:fe:ac:c6:04:fe:55:a7:3e:d1:6f:17:df:74:1b:81: ca:8c:ad:36:65:95:ff:70:11:35:39:7b:27:fa:d0:48:cd:c1: 3f:8c:e2:ce:85:3d:37:d3:ef:f3:33:05:81:67:e9:6a:df:87: be:05:b3:d0:bd:a4:38:ab:a2:ee:5d:ab:e1:37:ea:b9:2e:81: 3c:65:78:63:a9:22:8d:58:13:61:03:fb:d1:cd:e7:d2:92:4a: 7e:3d:8c:cd:33:bd:85:eb:8c:db:45:68:da:13:f9:3c:fb:99: 33:02:c2:17:e7:8e:77:95:12:0d:25:e4:5c:b7:d5:2d:5d:2e: 17:3c:e4:bb:32:46:b7:19:68:fe:0f:c5:46:e9:d2:ae:64:de: ef:82:2d:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC2gzPmgabZhSPb5V3tZ4Cw7mxGEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFQkNGODE1OEVBQkIxQzE2RUZFMUI4MkI0RTc5MTcw QUU4NzY4MzAeFw0yNDA1MTcwOTM2NDBaFw0yNDA1MjAyMDQ3NDBaMDMxMTAvBgNV BAMTKDY1REI2MUZBREZDMDZCM0RCQTU0MDhCMjlENzc0RTQ3MjhDOTI5NUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvguBsoKsy3VygTIYcKcOOEz4B cNdw2u9IvfSFudsTY3lASWMkDSbxPXlbmKAKxCpVyppGm6qYPpZ837esaNphoFMq 6t0536fahf6xMc4cnqpH8lbn11rmsQluV6g9tqttIxQXA6qWSn62Uaea3YaPfd+j nlX/N1cJ5AQvpqeFx75IuHD1uEXqPVqEynhLXI/mZfkBO03lw30HsIZ7Ly9iCVh8 VvK3IyyKN/pV7ofqeEuySQWgI+EHbdZSpIGkQliP4o7R52qnGpfOU9gXaQsqmmUq t1+H+2fFWuMVYuB2bPON9zBEIjKWSJcfDYrksQKDhInuRQ6w1I0dhsAuGajFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZdth+t/Aaz26VAiynXdORyjJKV0wHwYDVR0j BBgwFoAUqevPgVjquxwW7+G4K055FwrodoMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZWZmZmMyZC1jY2E3LTQ4ZTYtOWNkNi01NjVjMTFjNDU0NDAvMC9BOUVCQ0Y4MTU4 RUFCQjFDMTZFRkUxQjgyQjRFNzkxNzBBRTg3NjgzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlFQkNGODE1OEVBQkIxQzE2RUZFMUI4MkI0RTc5MTcwQUU4 NzY4My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmVmZmZjMmQtY2NhNy00OGU2LTlj ZDYtNTY1YzExYzQ1NDQwLzAvQTlFQkNGODE1OEVBQkIxQzE2RUZFMUI4MkI0RTc5 MTcwQUU4NzY4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANHtOQX/K8qfoRYiZ9gMfBVkvcBGy/2oojw5 ZcpoQeus98KoSw7RFbUv8PslmagBe4Aqh5XBKV2f3vAhAMlSYI3q+Aqv8EC0OHCn xizo+6lo8vm7QW3VuJRXpHc+emx34IER0ZyxdKai8vPNR4bFr/6sxgT+Vac+0W8X 33QbgcqMrTZllf9wETU5eyf60EjNwT+M4s6FPTfT7/MzBYFn6Wrfh74Fs9C9pDir ou5dq+E36rkugTxleGOpIo1YE2ED+9HN59KSSn49jM0zvYXrjNtFaNoT+Tz7mTMC whfnjneVEg0l5Fy31S1dLhc85LsyRrcZaP4PxUbp0q5k3u+CLRQ= -----END CERTIFICATE-----Generated at Fri May 17 10:09:21 2024 by rpki-client on console-fra.rpki-client.org