$ rpki-client -vvf repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/4C44F6F543BDBB858D3656D41A36660407672BDE.mft File: 4C44F6F543BDBB858D3656D41A36660407672BDE.mft (raw, json) Hash identifier: 4yyI48eAXI/9AQ7FUqvza8NNuEpwEA4pUwu/o+tZlEw= Subject key identifier: 9D:9B:8E:B1:BF:C6:5C:24:44:EA:5E:32:FF:83:1C:5E:3B:BD:89:AE Authority key identifier: 4C:44:F6:F5:43:BD:BB:85:8D:36:56:D4:1A:36:66:04:07:67:2B:DE Certificate issuer: /CN=4C44F6F543BDBB858D3656D41A36660407672BDE Certificate serial: 54A69FD8A4E777025EF401E5980F75022C74FC03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C44F6F543BDBB858D3656D41A36660407672BDE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/4C44F6F543BDBB858D3656D41A36660407672BDE.mft Manifest number: 0180 Signing time: Sat 18 May 2024 17:10:50 +0000 Manifest this update: Sat 18 May 2024 17:05:50 +0000 Manifest next update: Tue 21 May 2024 21:17:50 +0000 Files and hashes: 1: 3130332e32392e3138342e302f32342d3234203d3e203536323630.roa (hash: efLj25ix/3XnSCIV+vTekRdxejFibzSStSh3VR+XRXM=) 2: 4C44F6F543BDBB858D3656D41A36660407672BDE.crl (hash: CG0eaZSgFKVKor9uyb0h8iGNcr2tZy/YqqgzqaXNEF8=) 3: 3130332e31312e3130362e302f32342d3234203d3e203538343832.roa (hash: cPQxkRbYm6Bo7MNN5+VG7KYJgSzyhPpJLdeOsTLN/Nc=) 4: 3130332e31312e3130372e302f32342d3234203d3e203538343832.roa (hash: knHWSv1RKHTEczSFkhAUfOUck8SGrm1/yToncehqe58=) 5: 3130332e32392e3138352e302f32342d3234203d3e203536323630.roa (hash: TcgbGNuyBQlZcuhqAjEp4zRcaDrtCAHLYUBwM9jkuOU=) 6: 3130332e32392e3138342e302f32332d3233203d3e203536323630.roa (hash: Nsp3rpvc2YxoshFdcWRRW5YXfWkFYR9yncxDLnk5/TU=) 7: 3130332e31312e3130362e302f32332d3233203d3e203538343832.roa (hash: r36IpWiddqSe2zW9aauzX3GvETRMeirha6HKjehr0hU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/4C44F6F543BDBB858D3656D41A36660407672BDE.crl rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/4C44F6F543BDBB858D3656D41A36660407672BDE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C44F6F543BDBB858D3656D41A36660407672BDE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:a6:9f:d8:a4:e7:77:02:5e:f4:01:e5:98:0f:75:02:2c:74:fc:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C44F6F543BDBB858D3656D41A36660407672BDE Validity Not Before: May 18 17:05:50 2024 GMT Not After : May 21 21:17:50 2024 GMT Subject: CN=9D9B8EB1BFC65C2444EA5E32FF831C5E3BBD89AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a2:f6:06:e2:b0:80:fe:7c:0e:f9:c6:b7:71: 67:c6:6e:cb:f7:17:0c:f5:ab:bc:71:9e:e0:b5:4c: 20:a5:f4:21:f7:16:96:d8:0a:5e:30:a1:83:70:89: ed:ab:04:c9:d7:04:3a:59:4c:3b:3a:00:1d:cb:4a: 0a:bf:24:19:db:f5:de:27:67:b1:b3:0b:2f:fb:b8: 8f:68:dd:79:14:d4:09:2c:fe:46:12:e9:f2:7f:c0: c0:46:cb:c6:60:d2:08:68:cf:6a:b1:d3:46:2e:4a: d7:de:a3:28:d5:92:f9:e8:b2:c6:1d:b0:29:7f:72: d8:22:b8:0c:a9:37:4f:f9:50:d9:00:b1:f5:59:31: 83:3a:94:cb:d2:5a:df:78:64:bb:76:7f:5c:8b:f5: 5e:53:04:7d:94:5b:38:fd:53:19:c4:a9:c2:43:8d: b2:c4:26:b1:94:88:54:65:39:ca:1b:ab:25:e4:f9: ad:37:a5:82:00:1d:84:85:64:57:19:d3:8c:bc:a5: 3f:64:82:04:80:19:28:f9:43:07:ce:7d:0b:7b:c2: ab:83:4d:f2:1d:49:b2:a0:5f:b1:04:6b:1b:23:eb: a9:d2:15:0b:91:b9:4d:4b:1a:22:59:ca:ae:07:37: d3:57:44:9d:33:f5:3b:7b:08:5f:4b:e0:5d:bb:bf: 72:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:9B:8E:B1:BF:C6:5C:24:44:EA:5E:32:FF:83:1C:5E:3B:BD:89:AE X509v3 Authority Key Identifier: keyid:4C:44:F6:F5:43:BD:BB:85:8D:36:56:D4:1A:36:66:04:07:67:2B:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/4C44F6F543BDBB858D3656D41A36660407672BDE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C44F6F543BDBB858D3656D41A36660407672BDE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/4C44F6F543BDBB858D3656D41A36660407672BDE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:f7:7a:0f:2a:46:24:66:38:bb:a2:bc:7a:a5:b1:26:13:f5: 27:89:44:7d:b8:ed:0c:9a:c9:1d:2d:50:b0:56:b7:bf:15:f8: 24:0e:d4:fb:63:70:2e:2c:ff:96:4a:7c:b6:6a:4c:69:f8:aa: d8:c5:e3:3c:57:e5:d5:d8:1e:03:ce:c2:43:60:19:eb:ee:3f: ec:67:4c:52:04:0b:ca:99:a1:b7:92:d6:4d:68:1e:7a:22:d1: 5e:ab:09:17:9e:15:65:e7:b8:eb:36:75:8a:92:7c:f0:66:5b: 8a:9a:ee:d3:ae:9c:be:f8:32:29:78:9e:6b:9f:43:aa:bd:3a: 75:40:0b:d4:3c:92:c5:8f:a9:ad:87:d6:1c:8e:3e:9e:33:6a: 89:40:f9:e0:ff:8f:bc:c6:ba:c8:3a:e7:14:1d:a4:47:eb:f9: 5f:3a:95:55:9d:ff:3e:74:4a:00:92:9c:cb:81:11:01:0d:de: 6c:1e:b5:1b:1c:d2:36:a9:b3:93:16:a6:9a:1b:02:d2:7e:92: 62:97:54:53:71:99:66:d1:38:9e:7e:f9:a2:17:34:a6:d1:8f: d1:26:2a:c4:33:59:b4:5e:50:92:a0:b0:78:6f:ac:21:1d:f0: e4:c9:2a:6b:7e:12:94:cb:13:d7:44:15:af:74:18:ae:9a:c9: 4f:55:76:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVKaf2KTndwJe9AHlmA91Aix0/AMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEM0NEY2RjU0M0JEQkI4NThEMzY1NkQ0MUEzNjY2MDQw NzY3MkJERTAeFw0yNDA1MTgxNzA1NTBaFw0yNDA1MjEyMTE3NTBaMDMxMTAvBgNV BAMTKDlEOUI4RUIxQkZDNjVDMjQ0NEVBNUUzMkZGODMxQzVFM0JCRDg5QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbovYG4rCA/nwO+ca3cWfGbsv3 Fwz1q7xxnuC1TCCl9CH3FpbYCl4woYNwie2rBMnXBDpZTDs6AB3LSgq/JBnb9d4n Z7GzCy/7uI9o3XkU1Aks/kYS6fJ/wMBGy8Zg0ghoz2qx00YuStfeoyjVkvnossYd sCl/ctgiuAypN0/5UNkAsfVZMYM6lMvSWt94ZLt2f1yL9V5TBH2UWzj9UxnEqcJD jbLEJrGUiFRlOcobqyXk+a03pYIAHYSFZFcZ04y8pT9kggSAGSj5QwfOfQt7wquD TfIdSbKgX7EEaxsj66nSFQuRuU1LGiJZyq4HN9NXRJ0z9Tt7CF9L4F27v3KVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnZuOsb/GXCRE6l4y/4McXju9ia4wHwYDVR0j BBgwFoAUTET29UO9u4WNNlbUGjZmBAdnK94wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWYyYzY2Yy0xZjg3LTRkOTgtYTQ2Ny0zMjE4YjY0NWIzYWMvMC80QzQ0RjZGNTQz QkRCQjg1OEQzNjU2RDQxQTM2NjYwNDA3NjcyQkRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEM0NEY2RjU0M0JEQkI4NThEMzY1NkQ0MUEzNjY2MDQwNzY3 MkJERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODVmMmM2NmMtMWY4Ny00ZDk4LWE0 NjctMzIxOGI2NDViM2FjLzAvNEM0NEY2RjU0M0JEQkI4NThEMzY1NkQ0MUEzNjY2 MDQwNzY3MkJERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHn3eg8qRiRmOLuivHqlsSYT9SeJRH247Qya yR0tULBWt78V+CQO1PtjcC4s/5ZKfLZqTGn4qtjF4zxX5dXYHgPOwkNgGevuP+xn TFIEC8qZobeS1k1oHnoi0V6rCReeFWXnuOs2dYqSfPBmW4qa7tOunL74Mil4nmuf Q6q9OnVAC9Q8ksWPqa2H1hyOPp4zaolA+eD/j7zGusg65xQdpEfr+V86lVWd/z50 SgCSnMuBEQEN3mwetRsc0japs5MWppobAtJ+kmKXVFNxmWbROJ5++aIXNKbRj9Em KsQzWbReUJKgsHhvrCEd8OTJKmt+EpTLE9dEFa90GK6ayU9Vdqc= -----END CERTIFICATE-----Generated at Sat May 18 17:37:10 2024 by rpki-client on console-fra.rpki-client.org