$ rpki-client -vvf repo-rpki.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.mft File: 4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.mft (raw, json) Hash identifier: fKJ78j+ees6zdVm+0S7b0raRaSzIuWr1RkSK+3CYvaQ= Subject key identifier: CC:CA:36:BB:E8:AD:74:30:A8:1F:AC:CD:DC:4D:8A:17:BD:3D:EE:52 Authority key identifier: 4D:EF:BD:D9:85:4B:E8:D1:E2:8F:73:30:A0:B8:02:C3:EE:6A:D1:F9 Certificate issuer: /CN=4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9 Certificate serial: 4A30832B091FC523F1E94EC1FA180A782305479E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.mft Manifest number: 043D Signing time: Sat 18 May 2024 16:50:01 +0000 Manifest this update: Sat 18 May 2024 16:45:01 +0000 Manifest next update: Wed 22 May 2024 03:09:01 +0000 Files and hashes: 1: 3130332e3132352e3131392e302f32342d3234203d3e20313338313032.roa (hash: 18oVhB2sTi3iocLxX/xcEu6OuCJaTnvrPxNJBGq5PfY=) 2: 3130332e3132352e3131382e302f32342d3234203d3e20313338313032.roa (hash: 97SrnRSrUSZ16NnEkcOkfyw1LKTcRWGpwcN9oS56FBw=) 3: 3130332e3132352e3131362e302f32322d3232203d3e20313338313032.roa (hash: rNIknBN49Czhf1hziOpm6i5yxwizp3oUDeoDC9vUoKQ=) 4: 3130332e3132352e3131362e302f32342d3234203d3e20313338313032.roa (hash: BE++yCjQX47WWB6S5ls0xJdupFNe769usXbGx7dHHBM=) 5: 4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.crl (hash: kRlQj5jRNEjMTjYIkdgk4xtHUONArHviTGidfWiHTlg=) 6: 3130332e3132352e3131372e302f32342d3234203d3e20313338313032.roa (hash: lpfns/g/H9K8Wfv1chRemKmhS+d6ZGfM1lGRlJ6bBVk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.crl rsync://repo-rpki.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:30:83:2b:09:1f:c5:23:f1:e9:4e:c1:fa:18:0a:78:23:05:47:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9 Validity Not Before: May 18 16:45:01 2024 GMT Not After : May 22 03:09:01 2024 GMT Subject: CN=CCCA36BBE8AD7430A81FACCDDC4D8A17BD3DEE52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:83:24:fa:52:8d:38:49:8b:18:b4:ff:b8:26: ad:82:f8:a6:d3:f1:a0:39:9d:92:7e:6f:06:e6:9d: 06:b8:01:b6:77:57:02:ee:80:43:c8:a0:0b:b6:c3: 56:ff:5d:39:9f:d8:5e:cc:dd:df:d2:d4:86:13:0a: bc:57:ef:3d:cc:e6:a7:e3:b0:4c:7b:b6:25:f0:69: d2:46:a9:36:c6:5e:f3:07:8f:ba:c2:e5:68:20:99: 05:e7:76:3d:54:1a:97:f4:f7:e1:d9:3f:d1:de:e4: 4d:3d:fe:3c:e2:ec:7f:a6:40:7b:45:09:fd:91:29: 91:95:5e:b6:8c:ac:c3:5f:0a:5e:84:44:6d:79:43: bc:fb:73:d6:a5:8d:ad:b0:43:37:b3:4a:7c:a8:2c: 7a:e2:63:cc:79:3f:d8:5e:3b:fb:a4:59:40:9e:e6: 0a:f8:24:2c:0f:de:53:0d:46:99:00:e2:a5:dd:32: ad:1f:6b:f6:93:9a:a3:56:3b:cf:d7:26:98:7e:ad: bc:aa:56:f3:d7:c2:ba:e2:26:9c:ef:c5:98:7c:35: 54:ef:41:8d:9c:cf:02:56:bc:45:c4:e1:ec:11:07: e8:f3:62:bf:03:5b:fd:a8:c7:16:34:d9:d8:4e:63: c7:68:c0:e1:a7:3b:96:86:75:87:6a:42:f3:b4:c5: 4d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:CA:36:BB:E8:AD:74:30:A8:1F:AC:CD:DC:4D:8A:17:BD:3D:EE:52 X509v3 Authority Key Identifier: keyid:4D:EF:BD:D9:85:4B:E8:D1:E2:8F:73:30:A0:B8:02:C3:EE:6A:D1:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:7a:cf:69:eb:96:1b:99:dd:94:73:5c:51:47:b7:48:6c:35: 94:4b:bc:18:e0:19:f4:10:94:59:26:98:59:da:5e:74:9e:18: e2:8a:e3:c8:f9:02:be:a6:74:9c:f3:53:ae:d4:02:81:b0:22: 62:24:a2:4d:86:eb:85:9b:b0:87:71:61:78:6f:93:43:b7:f5: 55:51:7b:63:ed:ae:ba:f6:b4:6a:15:f4:af:da:6d:d9:e1:d6: 5f:03:66:09:cc:64:89:5d:e0:04:76:72:26:66:e8:7d:a2:6a: a1:83:b9:d2:e9:25:2c:c8:03:05:1a:19:ed:7a:76:b3:6a:9d: 56:b9:a9:72:1b:36:7e:f3:3a:f3:55:9d:6b:ae:59:ac:a6:fb: 18:cf:7b:61:51:8e:6b:08:d4:42:b8:30:c9:1e:e5:1e:e0:ab: 90:92:be:e8:48:69:4b:b9:5c:1a:78:e4:86:35:e9:84:66:53: 2e:7f:88:c9:cc:c5:73:fa:c6:77:a5:42:7c:7d:3c:86:96:92: 49:c6:f5:3e:39:79:08:95:79:8d:c6:62:28:f6:60:21:31:e8: 2b:47:8a:0d:23:90:72:b3:eb:78:a6:16:c1:ce:f9:2a:83:bc: a0:c8:ee:59:c6:3e:15:c2:07:a2:98:2e:da:86:30:75:5a:a7: 38:21:20:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSjCDKwkfxSPx6U7B+hgKeCMFR54wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERFRkJERDk4NTRCRThEMUUyOEY3MzMwQTBCODAyQzNF RTZBRDFGOTAeFw0yNDA1MTgxNjQ1MDFaFw0yNDA1MjIwMzA5MDFaMDMxMTAvBgNV BAMTKENDQ0EzNkJCRThBRDc0MzBBODFGQUNDRERDNEQ4QTE3QkQzREVFNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcgyT6Uo04SYsYtP+4Jq2C+KbT 8aA5nZJ+bwbmnQa4AbZ3VwLugEPIoAu2w1b/XTmf2F7M3d/S1IYTCrxX7z3M5qfj sEx7tiXwadJGqTbGXvMHj7rC5WggmQXndj1UGpf09+HZP9He5E09/jzi7H+mQHtF Cf2RKZGVXraMrMNfCl6ERG15Q7z7c9alja2wQzezSnyoLHriY8x5P9heO/ukWUCe 5gr4JCwP3lMNRpkA4qXdMq0fa/aTmqNWO8/XJph+rbyqVvPXwrriJpzvxZh8NVTv QY2czwJWvEXE4ewRB+jzYr8DW/2oxxY02dhOY8dowOGnO5aGdYdqQvO0xU0tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzMo2u+itdDCoH6zN3E2KF7097lIwHwYDVR0j BBgwFoAUTe+92YVL6NHij3MwoLgCw+5q0fkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MGRlMjMxZi1mYjhhLTQyN2EtYWEzNi0wYTNmYzk3MjMyOGQvMC80REVGQkREOTg1 NEJFOEQxRTI4RjczMzBBMEI4MDJDM0VFNkFEMUY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNERFRkJERDk4NTRCRThEMUUyOEY3MzMwQTBCODAyQzNFRTZB RDFGOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTBkZTIzMWYtZmI4YS00MjdhLWFh MzYtMGEzZmM5NzIzMjhkLzAvNERFRkJERDk4NTRCRThEMUUyOEY3MzMwQTBCODAy QzNFRTZBRDFGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHZ6z2nrlhuZ3ZRzXFFHt0hsNZRLvBjgGfQQ lFkmmFnaXnSeGOKK48j5Ar6mdJzzU67UAoGwImIkok2G64WbsIdxYXhvk0O39VVR e2Ptrrr2tGoV9K/abdnh1l8DZgnMZIld4AR2ciZm6H2iaqGDudLpJSzIAwUaGe16 drNqnVa5qXIbNn7zOvNVnWuuWaym+xjPe2FRjmsI1EK4MMke5R7gq5CSvuhIaUu5 XBp45IY16YRmUy5/iMnMxXP6xnelQnx9PIaWkknG9T45eQiVeY3GYij2YCEx6CtH ig0jkHKz63imFsHO+SqDvKDI7lnGPhXCB6KYLtqGMHVapzghIJg= -----END CERTIFICATE-----Generated at Sat May 18 17:37:10 2024 by rpki-client on console-fra.rpki-client.org