$ rpki-client -vvf repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.mft File: 1C49A098778B751B36DDC816E9E5106C08F3E99E.mft (raw, json) Hash identifier: Mr+klBuJg2SZHSivQjyEXZtJ+afv2d25RMmL1geiYIU= Subject key identifier: 4D:E4:2D:D7:80:26:7D:05:33:B6:77:5E:76:B9:BC:9F:05:0B:E2:67 Authority key identifier: 1C:49:A0:98:77:8B:75:1B:36:DD:C8:16:E9:E5:10:6C:08:F3:E9:9E Certificate issuer: /CN=1C49A098778B751B36DDC816E9E5106C08F3E99E Certificate serial: 751134EB53381688E4F97A09A421EE614CC24447 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C49A098778B751B36DDC816E9E5106C08F3E99E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.mft Manifest number: 0141 Signing time: Tue 28 May 2024 14:02:05 +0000 Manifest this update: Tue 28 May 2024 13:57:05 +0000 Manifest next update: Fri 31 May 2024 18:52:05 +0000 Files and hashes: 1: 3130332e3137372e3138392e302f32342d3234203d3e20313439333533.roa (hash: vZ+6niMdV+dUYnofXQpH/AKII9AzCOM9QtbvbNiD8Wk=) 2: 1C49A098778B751B36DDC816E9E5106C08F3E99E.crl (hash: wMWb8W2a4fLJSFNuP8vr3P3yfD/rtBEnxhYjtorMx+g=) 3: 3130332e3137372e3138382e302f32342d3234203d3e20313439333533.roa (hash: MH4tMh/bjSiTVwxtUrrU8CNsu1hsXrl0cABIA1tFw48=) 4: 3130332e3137372e3138382e302f32332d3233203d3e20313439333533.roa (hash: amC3xp9Xh5S/9IN9xAK1DkoUZZNKfdJbWEZ+D4rP1Ao=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.crl rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C49A098778B751B36DDC816E9E5106C08F3E99E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 May 2024 17:07:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:11:34:eb:53:38:16:88:e4:f9:7a:09:a4:21:ee:61:4c:c2:44:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C49A098778B751B36DDC816E9E5106C08F3E99E Validity Not Before: May 28 13:57:05 2024 GMT Not After : May 31 18:52:05 2024 GMT Subject: CN=4DE42DD780267D0533B6775E76B9BC9F050BE267 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6a:2f:2d:e8:c0:15:21:9a:21:e5:92:8a:69: 52:5e:ad:97:eb:df:da:8b:80:7f:ab:c1:64:6f:97: 22:c6:54:d8:b1:56:98:36:f0:f9:cf:50:88:8f:65: a6:df:72:2c:72:a2:1a:0d:a2:3c:c4:b0:37:29:2d: 84:fa:30:1b:b3:a3:3d:3f:f9:d9:c3:da:bb:19:88: ac:f3:5c:de:2d:e6:21:9a:3f:6d:50:f4:47:4a:65: 9d:fb:4b:fc:f0:57:68:d5:9b:b5:5a:0c:29:14:62: d9:97:0a:7f:aa:13:e7:ab:4a:bd:2b:d3:3e:07:62: d0:e0:42:d5:60:d5:49:bf:4d:71:a9:3a:02:52:7d: 48:15:8c:bf:55:41:b5:eb:44:fe:1c:a7:4c:8c:e3: ab:60:50:c0:b9:d5:6c:6e:a6:b0:72:c1:80:eb:ee: f6:9f:17:76:35:ac:ed:63:e1:03:9e:f9:45:c6:02: b4:08:8b:60:5a:ff:33:ee:e5:57:9a:5b:b5:cf:69: c3:5d:5f:cb:0a:d0:08:2c:f2:06:49:dc:15:c8:83: f6:fd:8f:db:a1:de:22:03:be:2d:5a:8c:00:de:15: d4:6b:f0:58:dd:31:fd:20:59:54:ce:9a:a4:ff:07: 5c:ce:44:a6:e4:89:b4:b1:15:a8:4b:75:06:f2:79: bd:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:E4:2D:D7:80:26:7D:05:33:B6:77:5E:76:B9:BC:9F:05:0B:E2:67 X509v3 Authority Key Identifier: keyid:1C:49:A0:98:77:8B:75:1B:36:DD:C8:16:E9:E5:10:6C:08:F3:E9:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C49A098778B751B36DDC816E9E5106C08F3E99E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:fd:ee:28:0c:a1:3a:c9:43:bf:42:b1:7f:52:dd:77:e2:04: e4:8a:99:cd:0a:27:cc:e6:e2:f9:37:a3:74:25:ea:53:41:b5: 65:17:13:0e:ab:7e:7b:d3:f6:a5:b8:f3:0b:ea:a7:27:14:22: e2:37:4a:99:78:c3:0c:7b:2b:85:89:d4:12:b6:55:42:6e:3d: f0:66:b3:25:bd:29:e9:9b:55:2a:47:8a:5a:39:b5:c8:90:7c: 9a:5f:f1:a0:6d:fe:58:08:dc:a5:cd:15:55:ee:ff:db:5b:ff: 54:90:2f:6e:70:58:cb:94:85:84:d2:40:b5:cd:48:db:eb:b9: 39:97:7c:b1:1d:2d:58:62:f8:54:30:db:11:c6:45:0c:da:61: 35:32:0f:b1:36:63:c9:4e:fd:4c:c4:8f:96:ab:dc:eb:f2:78: 7d:72:f2:37:43:ed:b3:cf:52:63:bd:4a:ef:c8:60:a0:c4:65: 91:5f:51:e5:b9:ab:96:19:5f:af:d1:05:06:af:76:a6:b4:90: c9:13:15:0d:64:44:e7:98:ed:1a:e8:8d:a9:50:0e:5e:91:61: e3:c0:8b:2a:ca:26:31:28:eb:5a:e5:a1:44:97:a2:08:c3:b3: 58:27:47:0d:09:be:d0:de:27:a2:21:f3:8b:26:26:31:d9:63: f8:a9:c9:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdRE061M4Fojk+XoJpCHuYUzCREcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUM0OUEwOTg3NzhCNzUxQjM2RERDODE2RTlFNTEwNkMw OEYzRTk5RTAeFw0yNDA1MjgxMzU3MDVaFw0yNDA1MzExODUyMDVaMDMxMTAvBgNV BAMTKDRERTQyREQ3ODAyNjdEMDUzM0I2Nzc1RTc2QjlCQzlGMDUwQkUyNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqai8t6MAVIZoh5ZKKaVJerZfr 39qLgH+rwWRvlyLGVNixVpg28PnPUIiPZabfcixyohoNojzEsDcpLYT6MBuzoz0/ +dnD2rsZiKzzXN4t5iGaP21Q9EdKZZ37S/zwV2jVm7VaDCkUYtmXCn+qE+erSr0r 0z4HYtDgQtVg1Um/TXGpOgJSfUgVjL9VQbXrRP4cp0yM46tgUMC51WxuprBywYDr 7vafF3Y1rO1j4QOe+UXGArQIi2Ba/zPu5VeaW7XPacNdX8sK0Ags8gZJ3BXIg/b9 j9uh3iIDvi1ajADeFdRr8FjdMf0gWVTOmqT/B1zORKbkibSxFahLdQbyeb1ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTeQt14AmfQUztndedrm8nwUL4mcwHwYDVR0j BBgwFoAUHEmgmHeLdRs23cgW6eUQbAjz6Z4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MzkyZjg5OS1lODNjLTQ3MDYtYTlhMS04MjI1NmJkNDgyMzYvMC8xQzQ5QTA5ODc3 OEI3NTFCMzZEREM4MTZFOUU1MTA2QzA4RjNFOTlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUM0OUEwOTg3NzhCNzUxQjM2RERDODE2RTlFNTEwNkMwOEYz RTk5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODM5MmY4OTktZTgzYy00NzA2LWE5 YTEtODIyNTZiZDQ4MjM2LzAvMUM0OUEwOTg3NzhCNzUxQjM2RERDODE2RTlFNTEw NkMwOEYzRTk5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFj97igMoTrJQ79CsX9S3XfiBOSKmc0KJ8zm 4vk3o3Ql6lNBtWUXEw6rfnvT9qW48wvqpycUIuI3Spl4wwx7K4WJ1BK2VUJuPfBm syW9KembVSpHilo5tciQfJpf8aBt/lgI3KXNFVXu/9tb/1SQL25wWMuUhYTSQLXN SNvruTmXfLEdLVhi+FQw2xHGRQzaYTUyD7E2Y8lO/UzEj5ar3OvyeH1y8jdD7bPP UmO9Su/IYKDEZZFfUeW5q5YZX6/RBQavdqa0kMkTFQ1kROeY7RrojalQDl6RYePA iyrKJjEo61rloUSXogjDs1gnRw0JvtDeJ6Ih84smJjHZY/ipyXg= -----END CERTIFICATE-----Generated at Tue May 28 15:24:02 2024 by rpki-client on console-fra.rpki-client.org