$ rpki-client -vvf repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft File: 4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft (raw, json) Hash identifier: JpMXiSB6mgCvXs5cc3MWQcvvt8By9npA86Tcca2l+9I= Subject key identifier: 12:CA:16:24:67:22:B2:C9:12:F5:91:34:AE:DC:1E:92:1C:E6:07:AC Authority key identifier: 4C:34:08:B6:E0:82:54:22:DC:2D:07:1E:49:0B:D7:CB:1F:BD:2A:3F Certificate issuer: /CN=4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F Certificate serial: 184E781DE76AA6B495B6B070BAD028B61DE8881D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft Manifest number: 03A9 Signing time: Sat 18 May 2024 03:22:01 +0000 Manifest this update: Sat 18 May 2024 03:17:01 +0000 Manifest next update: Tue 21 May 2024 03:54:01 +0000 Files and hashes: 1: 4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.crl (hash: HUwf0idA84TQZMTB0cNYII7O20Wuwyp9G6TsgQQHOLA=) 2: 3130332e37312e34342e302f32332d3233203d3e203436303232.roa (hash: G5B0HC2aXViSpQQEGJXxnI8AviYMAdHZFblKovaKrUk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.crl rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 03:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:4e:78:1d:e7:6a:a6:b4:95:b6:b0:70:ba:d0:28:b6:1d:e8:88:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F Validity Not Before: May 18 03:17:01 2024 GMT Not After : May 21 03:54:01 2024 GMT Subject: CN=12CA16246722B2C912F59134AEDC1E921CE607AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1b:94:8e:cc:08:34:35:fa:c9:fd:ae:56:1d: 89:88:73:3c:2b:b3:b6:37:7d:08:0f:a5:2f:89:d4: 28:37:99:07:61:11:5b:f8:b2:df:76:73:35:e4:d2: 09:f7:56:3d:2c:20:4b:91:65:cc:b3:34:cb:f8:5f: 9c:65:f3:dc:bb:c7:92:56:c2:11:df:fa:3e:17:00: 4d:3f:b2:05:89:7d:40:50:58:e8:ca:ae:75:09:30: 5c:d0:6b:7b:eb:0e:a2:91:71:e7:bb:f7:85:8b:7c: f9:49:9c:1a:c9:bd:72:35:3f:e8:16:ce:70:21:00: 78:d4:4e:fe:63:b0:c7:97:c5:93:6c:2e:d0:1a:c7: dc:55:24:d4:91:d2:9e:82:e6:85:23:5e:b4:12:bc: e6:47:88:af:1b:0f:8e:74:ff:b8:b0:c1:e1:e2:85: a8:1c:01:27:01:83:6c:fd:f7:d0:b5:ae:ff:13:12: 53:81:8b:34:9a:f1:7e:c0:d9:ae:c6:f3:19:9c:d2: 6c:86:eb:56:ce:24:58:30:58:1d:4e:0f:88:ee:09: 4a:95:9d:d9:62:61:72:34:bd:87:cb:09:82:2b:30: 96:eb:07:c0:d0:26:f9:c2:68:89:49:ab:f4:95:b1: 6c:e9:c4:23:98:0a:fb:de:fa:80:dd:98:29:51:4a: e5:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:CA:16:24:67:22:B2:C9:12:F5:91:34:AE:DC:1E:92:1C:E6:07:AC X509v3 Authority Key Identifier: keyid:4C:34:08:B6:E0:82:54:22:DC:2D:07:1E:49:0B:D7:CB:1F:BD:2A:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:15:0b:8e:2d:ae:d1:16:cb:dd:ac:60:1b:67:4a:c2:05:1c: 7f:05:d3:14:86:6a:4f:2c:33:a2:9c:1d:4c:25:29:16:ad:20: a5:fb:6d:62:59:8c:32:7c:55:4f:8a:f7:02:6b:e0:fd:92:5a: 8c:4f:06:28:7c:33:df:41:83:9b:b1:c6:b7:4a:6e:fa:7d:75: a9:00:69:1a:f6:f7:e3:64:9d:de:95:5a:1d:4b:48:8f:ed:37: 88:cc:f5:02:f1:80:0a:d2:39:18:64:29:9f:3f:d1:6e:99:41: 92:90:ad:37:9b:45:4f:5e:3f:1e:c3:04:f0:36:16:e7:c9:4c: d3:26:e7:a4:c6:2d:9c:26:c2:62:da:c9:80:24:ad:4d:7a:af: 06:31:d7:69:0f:a4:dd:52:6f:04:05:53:10:4c:d1:8c:d5:83: a6:61:05:e8:d4:07:1b:e8:8c:15:3f:9e:33:68:34:b3:35:ec: aa:5f:86:7c:df:bc:58:ab:eb:9d:f7:1f:48:c1:b1:59:71:d9: 96:e5:96:3d:3b:6b:ec:c1:24:8f:09:1b:7b:4a:52:eb:6e:c0: 8d:9e:2f:22:91:71:fc:4e:d1:ff:b1:56:0e:23:a6:6c:66:f3: 18:0b:41:21:0a:c6:75:cc:bf:d2:08:ec:97:ec:e2:60:ac:73: 7a:6c:36:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGE54HedqprSVtrBwutAoth3oiB0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEMzNDA4QjZFMDgyNTQyMkRDMkQwNzFFNDkwQkQ3Q0Ix RkJEMkEzRjAeFw0yNDA1MTgwMzE3MDFaFw0yNDA1MjEwMzU0MDFaMDMxMTAvBgNV BAMTKDEyQ0ExNjI0NjcyMkIyQzkxMkY1OTEzNEFFREMxRTkyMUNFNjA3QUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqG5SOzAg0NfrJ/a5WHYmIczwr s7Y3fQgPpS+J1Cg3mQdhEVv4st92czXk0gn3Vj0sIEuRZcyzNMv4X5xl89y7x5JW whHf+j4XAE0/sgWJfUBQWOjKrnUJMFzQa3vrDqKRcee794WLfPlJnBrJvXI1P+gW znAhAHjUTv5jsMeXxZNsLtAax9xVJNSR0p6C5oUjXrQSvOZHiK8bD450/7iwweHi hagcAScBg2z999C1rv8TElOBizSa8X7A2a7G8xmc0myG61bOJFgwWB1OD4juCUqV ndliYXI0vYfLCYIrMJbrB8DQJvnCaIlJq/SVsWzpxCOYCvve+oDdmClRSuVhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEsoWJGcisskS9ZE0rtwekhzmB6wwHwYDVR0j BBgwFoAUTDQItuCCVCLcLQceSQvXyx+9Kj8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MWM5Y2U1YS02NjkwLTQ5MDEtOWUwYS1jMjdiMzE5MzE2YmUvMC80QzM0MDhCNkUw ODI1NDIyREMyRDA3MUU0OTBCRDdDQjFGQkQyQTNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEMzNDA4QjZFMDgyNTQyMkRDMkQwNzFFNDkwQkQ3Q0IxRkJE MkEzRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODFjOWNlNWEtNjY5MC00OTAxLTll MGEtYzI3YjMxOTMxNmJlLzAvNEMzNDA4QjZFMDgyNTQyMkRDMkQwNzFFNDkwQkQ3 Q0IxRkJEMkEzRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHIVC44trtEWy92sYBtnSsIFHH8F0xSGak8s M6KcHUwlKRatIKX7bWJZjDJ8VU+K9wJr4P2SWoxPBih8M99Bg5uxxrdKbvp9dakA aRr29+Nknd6VWh1LSI/tN4jM9QLxgArSORhkKZ8/0W6ZQZKQrTebRU9ePx7DBPA2 FufJTNMm56TGLZwmwmLayYAkrU16rwYx12kPpN1SbwQFUxBM0YzVg6ZhBejUBxvo jBU/njNoNLM17KpfhnzfvFir6533H0jBsVlx2Zbllj07a+zBJI8JG3tKUutuwI2e LyKRcfxO0f+xVg4jpmxm8xgLQSEKxnXMv9II7Jfs4mCsc3psNs0= -----END CERTIFICATE-----Generated at Sat May 18 04:39:31 2024 by rpki-client on console-fra.rpki-client.org