$ rpki-client -vvf repo-rpki.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/41ABF792D14122AAA67E42BD42EBB8E02A096620.mft File: 41ABF792D14122AAA67E42BD42EBB8E02A096620.mft (raw, json) Hash identifier: 0ClYURkrEPS+Da1ICeEbPkISGeEYmFLxE/CLGH03H78= Subject key identifier: 04:4E:89:74:0A:C7:98:7C:15:03:D6:3F:FF:BD:4D:A2:C4:9A:8C:33 Authority key identifier: 41:AB:F7:92:D1:41:22:AA:A6:7E:42:BD:42:EB:B8:E0:2A:09:66:20 Certificate issuer: /CN=41ABF792D14122AAA67E42BD42EBB8E02A096620 Certificate serial: 66F7A0B5B7224E2C910008220E2C9CF849C79357 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41ABF792D14122AAA67E42BD42EBB8E02A096620.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/41ABF792D14122AAA67E42BD42EBB8E02A096620.mft Manifest number: 042D Signing time: Fri 10 May 2024 18:22:03 +0000 Manifest this update: Fri 10 May 2024 18:17:03 +0000 Manifest next update: Tue 14 May 2024 05:16:03 +0000 Files and hashes: 1: 3130332e39352e34302e302f32322d3234203d3e203538343935.roa (hash: zKpK86dwBbsrbNIlnGa4PwQDrWYBJhwxrKHgEC9RC7A=) 2: 41ABF792D14122AAA67E42BD42EBB8E02A096620.crl (hash: YIpSNXr+eg4M9kDIX+OpG8ONyQDM3WK15KoobxcNjpc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/41ABF792D14122AAA67E42BD42EBB8E02A096620.crl rsync://repo-rpki.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/41ABF792D14122AAA67E42BD42EBB8E02A096620.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41ABF792D14122AAA67E42BD42EBB8E02A096620.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 16:52:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:f7:a0:b5:b7:22:4e:2c:91:00:08:22:0e:2c:9c:f8:49:c7:93:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41ABF792D14122AAA67E42BD42EBB8E02A096620 Validity Not Before: May 10 18:17:03 2024 GMT Not After : May 14 05:16:03 2024 GMT Subject: CN=044E89740AC7987C1503D63FFFBD4DA2C49A8C33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d6:2f:9c:64:59:6f:0b:de:f7:d1:ec:c3:16: 11:e4:16:7a:1f:52:db:ad:dc:a6:8f:8c:75:9f:27: 82:c9:93:73:08:c0:c6:68:45:c1:5e:f7:f7:0b:d8: 7d:a6:6b:d0:4c:7f:4e:7b:1b:f0:8f:99:a4:db:1b: 32:c0:2f:2e:d1:66:cb:f5:bf:a1:66:27:c4:15:31: 15:cf:7d:06:98:08:4c:46:18:ff:fe:f4:08:51:df: f5:bc:8a:0f:35:fe:ee:71:a4:02:e2:1f:a3:ac:61: 7b:f6:28:ef:6c:9e:c2:92:7d:0f:73:15:89:72:4a: c1:6d:00:fe:ac:70:fc:b5:b2:30:54:33:8c:fa:23: 97:9d:82:fd:30:a7:d2:5d:9d:10:2c:af:39:a5:21: d0:ce:d8:4c:30:0c:4c:58:0c:1e:99:61:cc:23:43: 84:3e:79:3e:ca:7b:31:25:2b:0b:76:53:4f:dc:b9: c1:35:b8:bb:8d:81:4a:97:1a:46:6f:bf:ea:09:3d: 49:92:f0:16:70:3d:a9:76:c7:13:0a:0b:60:70:90: 2d:c7:71:39:3e:43:61:3a:20:f6:3e:ac:52:86:99: 8f:5c:f6:7f:33:0b:8d:d0:d1:d4:f2:14:e4:72:ad: 58:a8:b3:e8:79:73:89:31:6d:04:d8:b5:c1:4f:44: 00:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:4E:89:74:0A:C7:98:7C:15:03:D6:3F:FF:BD:4D:A2:C4:9A:8C:33 X509v3 Authority Key Identifier: keyid:41:AB:F7:92:D1:41:22:AA:A6:7E:42:BD:42:EB:B8:E0:2A:09:66:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/41ABF792D14122AAA67E42BD42EBB8E02A096620.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41ABF792D14122AAA67E42BD42EBB8E02A096620.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/41ABF792D14122AAA67E42BD42EBB8E02A096620.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:ef:88:c3:a2:6d:35:c2:14:25:5f:cf:c7:72:d4:08:34:f6: d4:b1:8e:dd:37:49:8d:d2:e6:8b:73:86:97:d2:90:0a:54:16: ca:ce:2d:df:07:f3:ba:e4:8e:70:79:42:1c:9f:96:0b:9b:b9: 9a:69:c5:0e:63:a2:14:89:5f:7e:51:56:dd:58:27:8e:1b:13: 05:3b:65:1b:63:04:f6:36:4e:34:bc:3b:31:e1:2a:a8:70:67: 38:e1:41:24:7a:ac:87:88:9f:2a:cd:06:18:79:07:db:7c:12: a3:e3:fc:4e:bd:cf:ec:55:34:23:3d:3a:5c:99:2b:7e:83:54: 41:cf:39:bf:fe:af:fb:18:ea:95:ce:af:d0:24:1f:5c:3e:d2: 6b:1d:05:29:31:74:12:b4:a5:3a:84:7b:e8:cb:32:22:8c:9f: 5b:ab:ff:c6:fb:b5:45:7f:c5:8a:18:0f:47:b4:27:50:4c:5e: 13:50:c6:23:bf:81:71:7c:0b:b5:bd:6f:75:8c:c1:70:be:6b: b1:e1:17:83:b6:e2:47:bb:6a:26:db:5f:56:a4:f9:60:85:3d: dc:f8:ba:d4:94:ce:31:d1:84:b2:77:08:28:6d:a9:58:e7:6d: f5:de:3d:ec:51:e4:26:60:a0:79:82:61:f3:72:04:c7:46:f7: 49:50:61:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZvegtbciTiyRAAgiDiyc+EnHk1cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFBQkY3OTJEMTQxMjJBQUE2N0U0MkJENDJFQkI4RTAy QTA5NjYyMDAeFw0yNDA1MTAxODE3MDNaFw0yNDA1MTQwNTE2MDNaMDMxMTAvBgNV BAMTKDA0NEU4OTc0MEFDNzk4N0MxNTAzRDYzRkZGQkQ0REEyQzQ5QThDMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs1i+cZFlvC9730ezDFhHkFnof Utut3KaPjHWfJ4LJk3MIwMZoRcFe9/cL2H2ma9BMf057G/CPmaTbGzLALy7RZsv1 v6FmJ8QVMRXPfQaYCExGGP/+9AhR3/W8ig81/u5xpALiH6OsYXv2KO9snsKSfQ9z FYlySsFtAP6scPy1sjBUM4z6I5edgv0wp9JdnRAsrzmlIdDO2EwwDExYDB6ZYcwj Q4Q+eT7KezElKwt2U0/cucE1uLuNgUqXGkZvv+oJPUmS8BZwPal2xxMKC2BwkC3H cTk+Q2E6IPY+rFKGmY9c9n8zC43Q0dTyFORyrVios+h5c4kxbQTYtcFPRAD7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBE6JdArHmHwVA9Y//71NosSajDMwHwYDVR0j BBgwFoAUQav3ktFBIqqmfkK9Quu44CoJZiAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTQ1ZWJhYi1lYzE2LTQ1ODktYTlhNi04YTM2NjFkNDNlM2UvMC80MUFCRjc5MkQx NDEyMkFBQTY3RTQyQkQ0MkVCQjhFMDJBMDk2NjIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDFBQkY3OTJEMTQxMjJBQUE2N0U0MkJENDJFQkI4RTAyQTA5 NjYyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U0NWViYWItZWMxNi00NTg5LWE5 YTYtOGEzNjYxZDQzZTNlLzAvNDFBQkY3OTJEMTQxMjJBQUE2N0U0MkJENDJFQkI4 RTAyQTA5NjYyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB/viMOibTXCFCVfz8dy1Ag09tSxjt03SY3S 5otzhpfSkApUFsrOLd8H87rkjnB5QhyflgubuZppxQ5johSJX35RVt1YJ44bEwU7 ZRtjBPY2TjS8OzHhKqhwZzjhQSR6rIeInyrNBhh5B9t8EqPj/E69z+xVNCM9OlyZ K36DVEHPOb/+r/sY6pXOr9AkH1w+0msdBSkxdBK0pTqEe+jLMiKMn1ur/8b7tUV/ xYoYD0e0J1BMXhNQxiO/gXF8C7W9b3WMwXC+a7HhF4O24ke7aibbX1ak+WCFPdz4 utSUzjHRhLJ3CChtqVjnbfXePexR5CZgoHmCYfNyBMdG90lQYfc= -----END CERTIFICATE-----Generated at Fri May 10 19:15:56 2024 by rpki-client on console-ams.rpki-client.org