$ rpki-client -vvf repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft File: 491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft (raw, json) Hash identifier: piXKGrYPV15FcCbsbdHImJZ6DXiLLCWB/oAmvhwOCxg= Subject key identifier: 3F:AC:52:EB:7F:CB:04:26:6B:37:55:07:61:EF:6C:46:80:17:1C:90 Authority key identifier: 49:1B:0E:A5:44:05:63:BE:9B:0F:16:7D:A7:6C:05:E8:5A:9D:2F:95 Certificate issuer: /CN=491B0EA5440563BE9B0F167DA76C05E85A9D2F95 Certificate serial: 21B9EAD2C6BDCDA36D9FDA17D58E1635F02D9344 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft Manifest number: 010B Signing time: Sat 18 May 2024 03:50:53 +0000 Manifest this update: Sat 18 May 2024 03:45:53 +0000 Manifest next update: Tue 21 May 2024 11:58:53 +0000 Files and hashes: 1: 3130332e3132322e3135332e302f32342d3234203d3e20313430343037.roa (hash: QgOHMzbsFR3r8CZ40LpGzTBUcM5q4XDTxNI6YXRv9/Y=) 2: 3130332e3132322e3135322e302f32332d3233203d3e20313430343037.roa (hash: fjlKLkqO1GxwSPpv/2WrD8bBOxVderRxMM3d7ncEZ/g=) 3: 3130332e3132322e3135342e302f32342d3234203d3e20313430343037.roa (hash: PjDcpInUDGVbmcSKeynpOZdnIxdUVC+pGl23UHNgnRw=) 4: 3130332e3132322e3135322e302f32342d3234203d3e20313430343037.roa (hash: xXkDe4p69ALHzitFwVC5Qh9QSqkdrL+gsflIwbmEguo=) 5: 491B0EA5440563BE9B0F167DA76C05E85A9D2F95.crl (hash: ycms+yzyCRlBM0t4VEQ5T1P1nHyoDdcVH1YZvl3gzFY=) 6: 323430333a393063303a3a2f33322d3430203d3e20313430343037.roa (hash: JG8KOqxbECgbQf+OSCTwqwY4T26NznDMwXOMgCZCrus=) 7: 323430333a393063303a3a2f33322d3332203d3e20313430343037.roa (hash: 6Kf9IUmzERoeZfQ7/aZzSWCZomNZD6ZE9tg84PYvtV8=) 8: 3130332e3132322e3135352e302f32342d3234203d3e20313430343037.roa (hash: pkM0PP2sYxMdX3s2gcRzF2zptWpkiNS9b7uyROgopV8=) 9: 3130332e3132322e3135342e302f32332d3233203d3e20313430343037.roa (hash: Kos1n5TN4jr0fuxJg11JU8zGPlHqkIrnGqQE1YukTV0=) 10: 3130332e3132322e3135322e302f32322d3232203d3e20313430343037.roa (hash: jmf/w2sUYaN3SsYMkvJRUGpCPK01T9CRrZgE4WDii0c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.crl rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 05:59:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:b9:ea:d2:c6:bd:cd:a3:6d:9f:da:17:d5:8e:16:35:f0:2d:93:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=491B0EA5440563BE9B0F167DA76C05E85A9D2F95 Validity Not Before: May 18 03:45:53 2024 GMT Not After : May 21 11:58:53 2024 GMT Subject: CN=3FAC52EB7FCB04266B37550761EF6C4680171C90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1f:e1:91:fc:60:4f:45:99:a3:8a:b5:c3:58: 96:5a:35:98:a7:0e:40:cb:aa:2d:6d:e8:9f:f4:8d: 7d:4e:80:07:d4:98:c8:24:7d:3e:9a:b8:4c:46:ed: b4:4c:5f:10:af:27:8a:10:82:22:e3:69:f2:c2:4b: 33:e9:20:74:3b:ad:a1:ef:19:04:42:b6:2e:c9:ef: 6e:c1:c4:51:99:ba:56:35:62:10:9d:ae:3d:af:39: 2f:f6:6a:5e:b0:07:95:84:5f:c0:06:a9:1e:77:f1: f7:fa:3d:c8:0f:42:af:71:b6:de:1e:57:6d:58:49: 77:3a:3f:e7:9f:18:a7:ba:54:af:9e:aa:3c:4c:50: fe:ae:76:52:85:15:90:d2:88:8b:ed:cf:25:67:64: d7:03:29:13:7e:ed:8a:ef:f5:33:75:df:82:9e:10: 36:c7:5f:1d:cc:f9:92:76:b8:ba:44:f7:26:41:b7: 2d:05:ac:9b:5f:11:68:61:16:84:18:84:31:53:58: 4e:0d:3d:fc:43:bc:25:fe:68:d0:5b:35:57:5e:f1: bb:e5:59:1b:a8:34:ed:97:40:82:5e:b8:3d:cb:94: 81:96:3b:5a:cb:30:ef:9d:5b:ad:ce:14:a9:57:55: be:ef:0f:14:6e:16:be:32:41:eb:9f:91:8d:9d:40: e0:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:AC:52:EB:7F:CB:04:26:6B:37:55:07:61:EF:6C:46:80:17:1C:90 X509v3 Authority Key Identifier: keyid:49:1B:0E:A5:44:05:63:BE:9B:0F:16:7D:A7:6C:05:E8:5A:9D:2F:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:cf:59:c9:01:4d:f3:d6:a6:23:3e:53:d1:22:9b:6c:1e:d6: e2:fd:dd:c2:69:27:7d:c3:0c:c6:49:f1:df:58:2c:e6:97:56: 67:96:f0:14:e3:22:79:01:12:2c:38:3d:a2:c3:d3:54:6d:72: 44:e8:97:d1:cc:51:02:85:63:16:e4:bb:a9:e5:91:77:2f:89: d0:87:9c:4d:9a:42:48:e6:bf:fe:b2:38:fd:67:40:32:de:a7: e7:fa:e8:1d:f9:b0:ae:c0:b2:e4:79:29:5f:d5:e8:ac:74:39: 0d:e5:fb:81:47:c6:85:c2:67:be:03:16:7e:7c:3b:ad:da:25: 95:05:62:40:4c:18:2b:15:19:01:77:9f:15:0f:5f:3a:28:61: 2f:9d:f8:d7:ed:40:f9:be:61:47:54:d6:e9:ff:38:eb:e4:fc: b9:56:d1:86:51:3a:17:0b:d9:1c:10:0c:2b:cb:55:b1:3d:0d: 9d:c1:38:f3:40:8e:a2:a4:4e:f6:52:04:3e:e0:58:a2:3c:8c: 3f:e0:d7:f2:15:55:cd:42:43:45:ea:61:92:1c:94:53:33:da: 1c:93:10:f2:ad:83:5e:b0:87:f4:ce:0c:55:78:08:66:da:61: a1:fc:a4:12:4a:4b:91:8b:ed:f8:0c:b3:6a:24:6b:02:43:51: be:4d:ed:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIbnq0sa9zaNtn9oX1Y4WNfAtk0QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDkxQjBFQTU0NDA1NjNCRTlCMEYxNjdEQTc2QzA1RTg1 QTlEMkY5NTAeFw0yNDA1MTgwMzQ1NTNaFw0yNDA1MjExMTU4NTNaMDMxMTAvBgNV BAMTKDNGQUM1MkVCN0ZDQjA0MjY2QjM3NTUwNzYxRUY2QzQ2ODAxNzFDOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoH+GR/GBPRZmjirXDWJZaNZin DkDLqi1t6J/0jX1OgAfUmMgkfT6auExG7bRMXxCvJ4oQgiLjafLCSzPpIHQ7raHv GQRCti7J727BxFGZulY1YhCdrj2vOS/2al6wB5WEX8AGqR538ff6PcgPQq9xtt4e V21YSXc6P+efGKe6VK+eqjxMUP6udlKFFZDSiIvtzyVnZNcDKRN+7Yrv9TN134Ke EDbHXx3M+ZJ2uLpE9yZBty0FrJtfEWhhFoQYhDFTWE4NPfxDvCX+aNBbNVde8bvl WRuoNO2XQIJeuD3LlIGWO1rLMO+dW63OFKlXVb7vDxRuFr4yQeufkY2dQODhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP6xS63/LBCZrN1UHYe9sRoAXHJAwHwYDVR0j BBgwFoAUSRsOpUQFY76bDxZ9p2wF6FqdL5UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MjI5NzgxYS04YWM5LTQ0NTItYjI1Zi01NGU3ZWRmN2Q0YTQvMC80OTFCMEVBNTQ0 MDU2M0JFOUIwRjE2N0RBNzZDMDVFODVBOUQyRjk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDkxQjBFQTU0NDA1NjNCRTlCMEYxNjdEQTc2QzA1RTg1QTlE MkY5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzIyOTc4MWEtOGFjOS00NDUyLWIy NWYtNTRlN2VkZjdkNGE0LzAvNDkxQjBFQTU0NDA1NjNCRTlCMEYxNjdEQTc2QzA1 RTg1QTlEMkY5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABPPWckBTfPWpiM+U9Eim2we1uL93cJpJ33D DMZJ8d9YLOaXVmeW8BTjInkBEiw4PaLD01RtckTol9HMUQKFYxbku6nlkXcvidCH nE2aQkjmv/6yOP1nQDLep+f66B35sK7AsuR5KV/V6Kx0OQ3l+4FHxoXCZ74DFn58 O63aJZUFYkBMGCsVGQF3nxUPXzooYS+d+NftQPm+YUdU1un/OOvk/LlW0YZROhcL 2RwQDCvLVbE9DZ3BOPNAjqKkTvZSBD7gWKI8jD/g1/IVVc1CQ0XqYZIclFMz2hyT EPKtg16wh/TODFV4CGbaYaH8pBJKS5GL7fgMs2okawJDUb5N7Sk= -----END CERTIFICATE-----Generated at Sat May 18 04:52:51 2024 by rpki-client on console-ams.rpki-client.org