$ rpki-client -vvf repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.mft File: 40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.mft (raw, json) Hash identifier: KhGOmJMGKBDkBE7v6nhlds22igX6nOKaAiy5PNjMETA= Subject key identifier: 27:DC:7D:72:1B:BD:B2:C6:EC:AC:9C:EF:A0:FB:18:5F:8F:C3:0B:AC Authority key identifier: 40:94:9C:7C:9D:D0:D3:F8:99:68:1F:F2:EB:53:E4:9C:8F:85:2B:AA Certificate issuer: /CN=40949C7C9DD0D3F899681FF2EB53E49C8F852BAA Certificate serial: 0A7C29D5D0E26766D3B6FE61AE7A13142E2EFA94 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.mft Manifest number: 0C Signing time: Wed 26 Jun 2024 03:21:49 +0000 Manifest this update: Wed 26 Jun 2024 03:16:49 +0000 Manifest next update: Sat 29 Jun 2024 07:27:49 +0000 Files and hashes: 1: 40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.crl (hash: e+NdPDvLpufuBP+B3FhK+TAylZb/0+DxsRi9q59dd7k=) 2: 3135372e36362e302e302f32332d3234203d3e20313430343737.roa (hash: y71ZhCBj0ZFKWRv/ArGsOF0ogDJDqOvjhhVCZLjfrqA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.crl rsync://repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 28 Jun 2024 22:26:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:7c:29:d5:d0:e2:67:66:d3:b6:fe:61:ae:7a:13:14:2e:2e:fa:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40949C7C9DD0D3F899681FF2EB53E49C8F852BAA Validity Not Before: Jun 26 03:16:49 2024 GMT Not After : Jun 29 07:27:49 2024 GMT Subject: CN=27DC7D721BBDB2C6ECAC9CEFA0FB185F8FC30BAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6b:03:f6:f0:bb:cd:ca:d2:19:53:c6:b5:84: f3:5f:68:8c:46:6d:50:56:2f:3f:dd:0b:55:82:14: 4e:8e:4a:09:fb:59:0e:33:7e:76:d0:bc:f6:15:d2: f8:47:0a:4b:92:f9:67:07:64:f6:36:7c:e0:2d:4e: 06:18:1c:9a:65:81:7c:fb:f5:c0:77:de:57:d3:12: aa:a8:33:01:63:c3:2b:b0:70:f9:d1:e3:f6:fe:53: 38:f9:43:9a:aa:0e:b2:9f:e9:4a:ac:75:48:17:b9: 3e:08:a3:2e:d1:7a:a5:34:6b:e4:be:71:a3:6c:dd: 4e:b7:66:6f:c0:b5:e9:4d:9e:b9:de:9b:a2:7b:0a: b3:d9:8d:92:fc:c3:ac:5d:7f:aa:1e:2f:84:fb:21: ff:17:80:a2:2a:da:18:0f:30:57:38:ee:d5:e9:a9: 1b:61:98:f1:89:1a:f4:71:bc:63:46:16:57:56:68: 9c:02:ea:2f:2f:e7:88:94:d2:2f:0e:ac:8e:f6:63: 06:94:51:81:85:8b:6e:95:68:ba:61:50:34:2f:52: 5d:df:49:60:6d:c5:41:c4:60:37:16:35:24:2d:1b: 47:d2:b3:8d:bf:56:a8:16:8e:90:f9:ce:2f:91:51: f3:f0:98:db:6b:6b:93:8b:e6:a8:9e:0f:e3:bc:8f: 35:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:DC:7D:72:1B:BD:B2:C6:EC:AC:9C:EF:A0:FB:18:5F:8F:C3:0B:AC X509v3 Authority Key Identifier: keyid:40:94:9C:7C:9D:D0:D3:F8:99:68:1F:F2:EB:53:E4:9C:8F:85:2B:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:8c:b7:ca:f2:30:c0:14:9f:0e:00:08:7f:23:df:9d:62:c2: c0:38:33:35:f8:56:fe:02:8f:36:5a:d7:e8:df:7c:bd:53:73: f3:0d:70:76:80:e7:75:f9:92:78:08:db:af:ac:a1:09:e8:11: 8d:93:4b:b1:51:82:b0:91:73:55:8f:30:32:77:42:a8:ac:3d: fd:68:10:4f:da:8d:ea:4d:b9:64:4f:bd:a7:77:cc:26:59:0a: 37:c3:83:b9:8e:d6:2d:18:11:33:81:57:d4:78:2a:1c:ff:ce: 63:21:15:a2:64:9b:b1:5f:7e:48:11:c9:04:45:67:c3:ec:73: 6b:a0:51:42:5f:41:48:08:25:fa:31:3c:05:da:07:14:34:39: fc:88:11:64:d1:eb:04:26:19:a8:91:41:9b:a2:20:69:40:e2: 8f:04:79:aa:02:8e:eb:87:78:30:0f:27:53:a3:4c:35:33:9a: b9:e1:52:66:82:eb:00:63:5b:f3:72:6a:eb:a4:b1:d2:3b:6a: 28:78:2b:9a:00:f8:6e:64:36:fc:70:45:7f:0a:61:d3:a6:af: d6:2c:be:95:fc:87:e7:73:6f:e9:91:19:5a:3d:e8:7b:a3:c7: f6:56:f5:2f:cf:80:c8:58:64:55:f1:91:50:cc:43:06:7a:48: 5b:43:f5:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCnwp1dDiZ2bTtv5hrnoTFC4u+pQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA5NDlDN0M5REQwRDNGODk5NjgxRkYyRUI1M0U0OUM4 Rjg1MkJBQTAeFw0yNDA2MjYwMzE2NDlaFw0yNDA2MjkwNzI3NDlaMDMxMTAvBgNV BAMTKDI3REM3RDcyMUJCREIyQzZFQ0FDOUNFRkEwRkIxODVGOEZDMzBCQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLawP28LvNytIZU8a1hPNfaIxG bVBWLz/dC1WCFE6OSgn7WQ4zfnbQvPYV0vhHCkuS+WcHZPY2fOAtTgYYHJplgXz7 9cB33lfTEqqoMwFjwyuwcPnR4/b+Uzj5Q5qqDrKf6UqsdUgXuT4Ioy7ReqU0a+S+ caNs3U63Zm/AtelNnrnem6J7CrPZjZL8w6xdf6oeL4T7If8XgKIq2hgPMFc47tXp qRthmPGJGvRxvGNGFldWaJwC6i8v54iU0i8OrI72YwaUUYGFi26VaLphUDQvUl3f SWBtxUHEYDcWNSQtG0fSs42/VqgWjpD5zi+RUfPwmNtra5OL5qieD+O8jzUlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ9x9chu9ssbsrJzvoPsYX4/DC6wwHwYDVR0j BBgwFoAUQJScfJ3Q0/iZaB/y61PknI+FK6owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OWRhZTk3Zi0xYWQxLTRiMzQtOGZlOS0xYmM2NWIwOTA4ZjMvMC80MDk0OUM3QzlE RDBEM0Y4OTk2ODFGRjJFQjUzRTQ5QzhGODUyQkFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDA5NDlDN0M5REQwRDNGODk5NjgxRkYyRUI1M0U0OUM4Rjg1 MkJBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODlkYWU5N2YtMWFkMS00YjM0LThm ZTktMWJjNjViMDkwOGYzLzAvNDA5NDlDN0M5REQwRDNGODk5NjgxRkYyRUI1M0U0 OUM4Rjg1MkJBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFKMt8ryMMAUnw4ACH8j351iwsA4MzX4Vv4C jzZa1+jffL1Tc/MNcHaA53X5kngI26+soQnoEY2TS7FRgrCRc1WPMDJ3QqisPf1o EE/ajepNuWRPvad3zCZZCjfDg7mO1i0YETOBV9R4Khz/zmMhFaJkm7FffkgRyQRF Z8Psc2ugUUJfQUgIJfoxPAXaBxQ0OfyIEWTR6wQmGaiRQZuiIGlA4o8EeaoCjuuH eDAPJ1OjTDUzmrnhUmaC6wBjW/NyauuksdI7aih4K5oA+G5kNvxwRX8KYdOmr9Ys vpX8h+dzb+mRGVo96Hujx/ZW9S/PgMhYZFXxkVDMQwZ6SFtD9ao= -----END CERTIFICATE-----Generated at Wed Jun 26 06:20:13 2024 by rpki-client on console-fra.rpki-client.org