$ rpki-client -vvf repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft File: 4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft (raw, json) Hash identifier: ePT7vUTsUCFMPqg93PpTfJzQw2tsP0SmC0IX0V50FYQ= Subject key identifier: 7A:7A:00:6C:2A:E0:1A:08:FA:30:10:22:3C:54:E1:57:4A:46:E5:CB Authority key identifier: 4A:9E:8C:61:BE:36:70:D8:65:B8:A7:9D:7D:32:79:85:50:E6:4F:2B Certificate issuer: /CN=4A9E8C61BE3670D865B8A79D7D32798550E64F2B Certificate serial: 78F30BFA9FB30A19BD24DDAC117ABBE95FDAFABF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft Manifest number: 59 Signing time: Fri 10 May 2024 12:42:09 +0000 Manifest this update: Fri 10 May 2024 12:37:09 +0000 Manifest next update: Mon 13 May 2024 22:24:09 +0000 Files and hashes: 1: 3130332e3234352e33382e302f32332d3234203d3e203535363838.roa (hash: oGbgr5rAuO5/J6hihuXmCT2HWwKFHcNvVH06dZqJ3NM=) 2: 4A9E8C61BE3670D865B8A79D7D32798550E64F2B.crl (hash: GYNE0EwPFS2F26DLpi3nArpIE4dse3FIrGzIQJS8WpE=) 3: 323030313a6466323a656434303a3a2f34382d3438203d3e203535363838.roa (hash: X0UMWkxgVZNkrtQ2paeqeH5GA2dE2MM2bedsBqpV/OQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.crl rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 20:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:f3:0b:fa:9f:b3:0a:19:bd:24:dd:ac:11:7a:bb:e9:5f:da:fa:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A9E8C61BE3670D865B8A79D7D32798550E64F2B Validity Not Before: May 10 12:37:09 2024 GMT Not After : May 13 22:24:09 2024 GMT Subject: CN=7A7A006C2AE01A08FA3010223C54E1574A46E5CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:68:74:17:3a:4c:01:18:c6:05:34:f0:8e:0d: 6f:7a:4c:36:2b:16:95:1b:ad:86:21:1c:12:37:87: 68:9f:f2:01:d8:d1:75:38:3c:d1:ee:5a:17:2e:60: 01:cc:2d:42:b2:b0:65:b8:12:f8:8f:ac:50:75:18: b0:e7:6e:0b:7f:7a:69:9f:1b:77:7d:3a:74:a6:67: 49:c3:46:ac:0a:a1:d4:a2:27:44:7c:53:8c:74:c3: a8:9a:05:5e:ed:b3:30:2e:ae:c2:ce:1f:06:e4:a9: b5:93:41:cf:86:8f:47:b3:ca:41:96:1c:fe:35:07: 34:04:f1:ac:f4:0f:f5:5c:49:85:d1:97:f4:5c:4e: 51:da:0d:4c:ad:0a:44:ac:ac:d4:e7:a4:91:e4:f0: 61:5b:97:94:59:31:bb:dd:47:c8:ac:28:1b:08:7e: bf:f4:98:59:79:5f:82:cf:00:18:6d:6a:d6:83:e7: 4a:03:6b:41:f6:93:ef:88:0a:7f:db:72:c6:43:77: 9c:46:07:77:9b:79:0f:99:47:6c:a9:1b:18:89:c8: f8:ed:96:7c:44:9f:de:58:64:3f:df:53:ff:95:af: 3c:72:99:37:94:02:6c:f9:bb:d6:92:2d:d4:25:51: ee:b7:dd:13:9e:6b:db:3c:4b:c3:ca:00:e0:17:dd: 47:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:7A:00:6C:2A:E0:1A:08:FA:30:10:22:3C:54:E1:57:4A:46:E5:CB X509v3 Authority Key Identifier: keyid:4A:9E:8C:61:BE:36:70:D8:65:B8:A7:9D:7D:32:79:85:50:E6:4F:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:64:65:08:7f:3a:a8:2b:e5:07:df:fe:e2:0e:39:ec:e0:74: 7a:89:15:0a:5f:3d:4e:b2:64:1b:64:7b:16:c8:e5:e3:a8:33: a6:32:65:bd:4a:92:ac:ae:54:a8:55:44:27:49:15:20:8b:bb: e6:4f:ed:6d:9b:d7:53:8f:36:05:d4:6f:69:93:45:15:d9:ec: 93:6f:7b:70:00:b0:62:2d:12:ad:50:ac:00:b2:a0:37:08:b2: 52:d3:f5:50:61:7a:dc:e0:9e:ab:4b:82:b6:82:23:ea:6f:ed: ad:7c:17:0d:17:ab:5c:7b:0e:90:d7:6a:fe:0e:3f:9e:6e:22: dd:d5:85:5f:96:1b:95:72:f1:01:e0:58:6b:8a:8e:9b:f8:b9: 55:33:3e:83:9b:92:ae:90:1c:f6:2b:c3:1e:c0:05:9f:aa:e9: 60:27:26:6c:66:61:14:d7:4f:56:86:75:6f:6e:20:66:2f:74: 23:3f:42:94:bb:8d:d5:99:be:55:7b:47:e6:ed:80:ec:f4:57: 67:b3:d9:e3:e4:37:ad:65:a2:cd:ff:7d:2f:f9:e0:41:bc:bc: 00:2e:47:f1:06:7f:e5:b7:17:6e:33:f4:a5:5d:61:6d:83:7a: 0b:c7:e8:68:97:61:66:21:ba:98:51:ee:16:13:f5:f9:bb:c0: 69:d5:8b:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUePML+p+zChm9JN2sEXq76V/a+r8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE5RThDNjFCRTM2NzBEODY1QjhBNzlEN0QzMjc5ODU1 MEU2NEYyQjAeFw0yNDA1MTAxMjM3MDlaFw0yNDA1MTMyMjI0MDlaMDMxMTAvBgNV BAMTKDdBN0EwMDZDMkFFMDFBMDhGQTMwMTAyMjNDNTRFMTU3NEE0NkU1Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClaHQXOkwBGMYFNPCODW96TDYr FpUbrYYhHBI3h2if8gHY0XU4PNHuWhcuYAHMLUKysGW4EviPrFB1GLDnbgt/emmf G3d9OnSmZ0nDRqwKodSiJ0R8U4x0w6iaBV7tszAursLOHwbkqbWTQc+Gj0ezykGW HP41BzQE8az0D/VcSYXRl/RcTlHaDUytCkSsrNTnpJHk8GFbl5RZMbvdR8isKBsI fr/0mFl5X4LPABhtataD50oDa0H2k++ICn/bcsZDd5xGB3ebeQ+ZR2ypGxiJyPjt lnxEn95YZD/fU/+VrzxymTeUAmz5u9aSLdQlUe633ROea9s8S8PKAOAX3UfpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUenoAbCrgGgj6MBAiPFThV0pG5cswHwYDVR0j BBgwFoAUSp6MYb42cNhluKedfTJ5hVDmTyswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YzQ5MzVkOC05NmEyLTQ1NjQtODVhMy0zMmE1MzE4OTM2N2UvMC80QTlFOEM2MUJF MzY3MEQ4NjVCOEE3OUQ3RDMyNzk4NTUwRTY0RjJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEE5RThDNjFCRTM2NzBEODY1QjhBNzlEN0QzMjc5ODU1MEU2 NEYyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2M0OTM1ZDgtOTZhMi00NTY0LTg1 YTMtMzJhNTMxODkzNjdlLzAvNEE5RThDNjFCRTM2NzBEODY1QjhBNzlEN0QzMjc5 ODU1MEU2NEYyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALFkZQh/Oqgr5Qff/uIOOezgdHqJFQpfPU6y ZBtkexbI5eOoM6YyZb1KkqyuVKhVRCdJFSCLu+ZP7W2b11OPNgXUb2mTRRXZ7JNv e3AAsGItEq1QrACyoDcIslLT9VBhetzgnqtLgraCI+pv7a18Fw0Xq1x7DpDXav4O P55uIt3VhV+WG5Vy8QHgWGuKjpv4uVUzPoObkq6QHPYrwx7ABZ+q6WAnJmxmYRTX T1aGdW9uIGYvdCM/QpS7jdWZvlV7R+btgOz0V2ez2ePkN61los3/fS/54EG8vAAu R/EGf+W3F24z9KVdYW2DegvH6GiXYWYhuphR7hYT9fm7wGnVi/0= -----END CERTIFICATE-----Generated at Fri May 10 14:02:49 2024 by rpki-client on console-ams.rpki-client.org