$ rpki-client -vvf repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.mft File: 4E52504397B6835784BD4E67D8048C0D1CE3B242.mft (raw, json) Hash identifier: V04/Q3Zrprkw+LVcDOL4RXiXWUN4ZNnQGrHKtil/9Fs= Subject key identifier: 69:74:4F:E4:45:41:60:06:14:91:18:9A:CB:DB:DB:8B:74:C3:47:FD Authority key identifier: 4E:52:50:43:97:B6:83:57:84:BD:4E:67:D8:04:8C:0D:1C:E3:B2:42 Certificate issuer: /CN=4E52504397B6835784BD4E67D8048C0D1CE3B242 Certificate serial: 70CE3FB799AE72E900ED8A2312C368B0FD9D2727 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E52504397B6835784BD4E67D8048C0D1CE3B242.cer Subject info access: rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.mft Manifest number: 0437 Signing time: Wed 29 May 2024 14:12:56 +0000 Manifest this update: Wed 29 May 2024 14:07:56 +0000 Manifest next update: Sat 01 Jun 2024 19:34:56 +0000 Files and hashes: 1: 4E52504397B6835784BD4E67D8048C0D1CE3B242.crl (hash: CEgk9bZA/D/wjfEc3DH8mDBibSYVtmqhDmhuP9OetcY=) 2: 323430333a653630303a3a2f33322d3332203d3e203538333736.roa (hash: cG/qRiVO8XZpJR2pnd55F8E6Q6uysG6sWyyzi0UdGZ8=) 3: 323430333a653630303a6630303a3a2f34302d3430203d3e203538333736.roa (hash: BsGdZY71kM9WGVRu7WRUBvpeo5E9H6fYoH5n+xgCUaw=) 4: 3130332e32392e3134382e302f32322d3234203d3e203538333736.roa (hash: QoAVfdASj6D8T0CMnu+YHXTIwvRtbw5aH8lE5/mRzrU=) 5: 34332e3234352e3138382e302f32322d3234203d3e203538333736.roa (hash: VMPZ5L66xVw8XFPJfATRvasXZxh8TUn2qALiFpXxjyw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.crl rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E52504397B6835784BD4E67D8048C0D1CE3B242.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 19:34:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:ce:3f:b7:99:ae:72:e9:00:ed:8a:23:12:c3:68:b0:fd:9d:27:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E52504397B6835784BD4E67D8048C0D1CE3B242 Validity Not Before: May 29 14:07:56 2024 GMT Not After : Jun 1 19:34:56 2024 GMT Subject: CN=69744FE4454160061491189ACBDBDB8B74C347FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c7:40:40:3d:88:5b:cc:ec:b1:e7:fe:3e:aa: e1:78:8d:14:00:d4:fd:c3:a9:7d:7c:52:fa:86:8e: f2:61:cd:1c:1f:78:25:bb:5b:e9:0d:fb:5c:b0:37: 90:15:a8:f0:5b:53:87:db:f3:30:44:f2:2f:cb:b3: b6:4f:17:1f:42:f0:7d:17:0b:3d:23:bd:cf:e9:47: 8b:99:37:71:f6:b8:cb:ed:56:2c:45:95:71:28:c7: bb:b9:a5:30:c7:89:b7:bd:18:b7:5f:ca:b1:5c:aa: 94:7a:94:0b:e6:e1:a3:6c:7b:85:a4:dc:ec:b2:2d: e6:9d:3e:b2:cf:c6:7a:da:30:c0:f6:78:99:0f:0c: 24:aa:79:e3:4a:69:f6:eb:6e:26:af:1e:52:43:98: eb:7a:7e:d6:1e:d0:6e:29:4e:e4:5b:96:f8:88:c9: 6e:3e:41:04:79:a8:cb:b6:ed:af:bc:79:10:60:d9: 34:d7:ee:1f:ba:ff:b6:64:0e:34:2b:37:92:02:5c: 5a:24:73:e8:c0:28:2d:90:71:00:e5:5d:c2:64:c5: c1:77:ba:3a:73:79:37:b9:4e:74:ae:59:02:90:06: e3:d1:81:7e:05:fa:d6:6f:aa:44:25:7a:07:52:bc: cf:5d:79:4b:75:57:a6:b0:33:63:85:1e:0b:38:19: 93:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:74:4F:E4:45:41:60:06:14:91:18:9A:CB:DB:DB:8B:74:C3:47:FD X509v3 Authority Key Identifier: keyid:4E:52:50:43:97:B6:83:57:84:BD:4E:67:D8:04:8C:0D:1C:E3:B2:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E52504397B6835784BD4E67D8048C0D1CE3B242.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:b8:25:a4:0c:0e:b0:67:23:f3:14:fb:8d:62:7a:ed:d9:89: e5:96:37:20:da:e4:ad:72:0c:80:4c:ce:e9:17:3a:80:24:a3: 50:c5:7a:9d:91:a5:db:57:e3:a1:67:11:24:25:79:16:c5:5e: 9d:ee:78:41:d6:24:d1:19:e5:55:a8:e5:43:ad:c8:22:04:f9: 3d:93:c0:42:2b:d6:fe:d5:65:da:05:a4:88:e7:12:8c:c3:cf: 79:9c:0c:74:bb:22:96:8c:5e:c6:8c:e3:1b:38:e9:05:3d:5e: 49:ed:14:cb:79:16:9c:b4:c0:ea:44:94:fb:41:3c:61:29:f1: 7e:24:77:86:36:c3:5e:90:b2:1a:aa:6c:69:4f:e3:18:07:1a: b8:be:1e:5b:17:ae:bc:91:96:09:f2:4d:d5:29:27:05:d2:9d: e8:2b:bf:b5:56:aa:52:51:85:1f:0d:74:df:9b:42:e9:94:88: 81:02:50:c7:0d:e7:0b:6f:4c:82:a5:a9:7a:a1:65:0f:dc:79: 57:f1:40:e9:08:8a:8f:af:31:e4:a5:4e:d8:80:ac:63:fe:03: b8:b8:48:23:63:4d:b7:5a:a4:ab:56:00:1f:55:af:5a:35:69: f0:9a:ef:a3:34:d8:42:88:0c:a7:07:4d:d9:b4:22:7e:ac:a6: d1:d3:2e:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcM4/t5mucukA7YojEsNosP2dJycwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEU1MjUwNDM5N0I2ODM1Nzg0QkQ0RTY3RDgwNDhDMEQx Q0UzQjI0MjAeFw0yNDA1MjkxNDA3NTZaFw0yNDA2MDExOTM0NTZaMDMxMTAvBgNV BAMTKDY5NzQ0RkU0NDU0MTYwMDYxNDkxMTg5QUNCREJEQjhCNzRDMzQ3RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6x0BAPYhbzOyx5/4+quF4jRQA 1P3DqX18UvqGjvJhzRwfeCW7W+kN+1ywN5AVqPBbU4fb8zBE8i/Ls7ZPFx9C8H0X Cz0jvc/pR4uZN3H2uMvtVixFlXEox7u5pTDHibe9GLdfyrFcqpR6lAvm4aNse4Wk 3OyyLeadPrLPxnraMMD2eJkPDCSqeeNKafbrbiavHlJDmOt6ftYe0G4pTuRblviI yW4+QQR5qMu27a+8eRBg2TTX7h+6/7ZkDjQrN5ICXFokc+jAKC2QcQDlXcJkxcF3 ujpzeTe5TnSuWQKQBuPRgX4F+tZvqkQlegdSvM9deUt1V6awM2OFHgs4GZN3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaXRP5EVBYAYUkRiay9vbi3TDR/0wHwYDVR0j BBgwFoAUTlJQQ5e2g1eEvU5n2ASMDRzjskIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OTFkM2MzMC05NWRjLTRiNzItYWUxYi1hZDFlOThiMGUxNzkvMC80RTUyNTA0Mzk3 QjY4MzU3ODRCRDRFNjdEODA0OEMwRDFDRTNCMjQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEU1MjUwNDM5N0I2ODM1Nzg0QkQ0RTY3RDgwNDhDMEQxQ0Uz QjI0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODkxZDNjMzAtOTVkYy00YjcyLWFl MWItYWQxZTk4YjBlMTc5LzAvNEU1MjUwNDM5N0I2ODM1Nzg0QkQ0RTY3RDgwNDhD MEQxQ0UzQjI0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFy4JaQMDrBnI/MU+41ieu3ZieWWNyDa5K1y DIBMzukXOoAko1DFep2RpdtX46FnESQleRbFXp3ueEHWJNEZ5VWo5UOtyCIE+T2T wEIr1v7VZdoFpIjnEozDz3mcDHS7IpaMXsaM4xs46QU9XkntFMt5Fpy0wOpElPtB PGEp8X4kd4Y2w16QshqqbGlP4xgHGri+HlsXrryRlgnyTdUpJwXSnegrv7VWqlJR hR8NdN+bQumUiIECUMcN5wtvTIKlqXqhZQ/ceVfxQOkIio+vMeSlTtiArGP+A7i4 SCNjTbdapKtWAB9Vr1o1afCa76M02EKIDKcHTdm0In6sptHTLuQ= -----END CERTIFICATE-----Generated at Wed May 29 16:03:32 2024 by rpki-client on console-fra.rpki-client.org