$ rpki-client -vvf repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft File: 4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft (raw, json) Hash identifier: G2zL609U4ejyy+SoDGUB+8jN8/dOe4sSp8m5MZyakhM= Subject key identifier: AD:FC:28:38:EC:6E:7E:FC:C0:B0:DC:7E:F9:2C:2C:D7:48:4B:7E:86 Authority key identifier: 4B:E0:EB:AF:EF:1E:20:6C:AD:8B:4E:AD:6D:6A:08:D3:A8:C0:1B:50 Certificate issuer: /CN=4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50 Certificate serial: 13EBCEFC85E9675FD9CE19196AFBF7B20B417800 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft Manifest number: 0127 Signing time: Wed 29 May 2024 14:00:45 +0000 Manifest this update: Wed 29 May 2024 13:55:45 +0000 Manifest next update: Sat 01 Jun 2024 22:43:45 +0000 Files and hashes: 1: 4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.crl (hash: DlTKnYcs4PHurmkN2SL+0XLx5mDoS2r0xMb7rYynLE4=) 2: 3130332e38362e3132382e302f32332d3234203d3e2034383030.roa (hash: 5wAJE/LmxqbMs3nxfgecCCcSEDka4Ww9C3wxn6FR96s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.crl rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 20:40:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:eb:ce:fc:85:e9:67:5f:d9:ce:19:19:6a:fb:f7:b2:0b:41:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50 Validity Not Before: May 29 13:55:45 2024 GMT Not After : Jun 1 22:43:45 2024 GMT Subject: CN=ADFC2838EC6E7EFCC0B0DC7EF92C2CD7484B7E86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:56:8e:9e:f1:ca:ee:d9:f4:dd:78:a6:50:ee: b4:fa:ab:c8:1a:f7:5d:27:41:f5:11:3c:da:14:4c: 22:26:c4:ab:50:0d:fa:d6:b6:0d:57:8a:05:71:28: 61:45:72:de:f3:0c:db:32:a0:10:4e:4d:26:08:b9: 28:af:81:01:ee:8b:87:cf:30:3a:b9:b7:32:3f:de: 21:2a:80:ca:f1:76:76:ef:88:5c:9a:e4:89:0f:84: 98:da:15:dc:47:47:b0:c0:00:dc:50:ae:78:3e:22: 67:1c:ca:91:d6:e5:1c:1a:cc:a0:a5:2a:6e:a7:62: 3c:e2:f1:49:dd:39:3d:63:70:34:50:05:45:f7:57: b0:d4:00:75:52:ea:1e:c0:d5:d0:ba:ef:62:19:08: 87:9a:58:ae:67:e4:8c:fd:90:7e:52:cb:da:79:a0: 59:a2:1b:ff:bd:c6:c1:9d:3e:76:8c:5e:92:db:b6: 05:59:ba:d6:91:19:6e:f4:13:57:f5:4e:51:3a:0a: ab:1c:cd:88:39:fa:44:6c:24:6c:e1:e6:43:a5:50: 44:02:a6:40:cc:a0:6b:2d:ff:c5:b1:1b:20:1d:cb: fb:c5:e3:a4:45:f7:40:6d:a5:b4:59:c3:6e:06:3b: ba:18:c5:f5:c1:fd:35:03:6f:db:c6:71:b0:65:4e: 3e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:FC:28:38:EC:6E:7E:FC:C0:B0:DC:7E:F9:2C:2C:D7:48:4B:7E:86 X509v3 Authority Key Identifier: keyid:4B:E0:EB:AF:EF:1E:20:6C:AD:8B:4E:AD:6D:6A:08:D3:A8:C0:1B:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:99:d7:93:57:55:38:7f:9c:c8:ae:f4:c9:6e:4e:e1:20:67: f6:80:9c:56:7d:8e:80:88:ac:33:9d:42:ef:54:f3:aa:e3:ad: c8:6b:5e:f7:f9:f0:2b:41:d7:26:5c:e6:fe:ed:c8:5d:7c:ca: e3:a1:a9:69:a3:41:b4:35:fc:2d:d1:63:0e:1e:e7:b5:71:a0: da:61:16:2a:dd:6f:d9:05:7a:0a:69:79:8c:de:69:4f:ae:c3: 41:fe:88:09:01:dc:fe:af:3e:a1:bf:35:3d:94:9f:cd:a6:d4: 52:d1:cc:b0:f4:bd:e4:60:d7:cc:b6:e5:db:e7:ea:57:51:cb: 76:14:bc:d2:26:e4:ae:b7:45:60:6e:69:b3:36:a9:78:9c:9b: 81:b8:63:43:31:dc:4f:d4:ba:83:3a:83:ea:62:2b:b5:89:ee: d1:c6:15:d1:26:6a:96:f3:c0:da:bc:39:aa:d9:66:ae:3b:2f: 7f:14:78:10:3c:a0:38:6e:10:25:d2:6b:b0:2a:4c:04:e7:28: 98:6f:bf:b5:53:a2:4e:db:bc:2a:6b:9c:96:63:4e:9e:fa:bc: fa:d4:b4:54:c7:f2:5c:37:84:35:62:ec:e1:de:7b:dd:07:a3: 64:9f:a1:c0:5b:e5:1e:d7:db:bc:6e:e2:b3:35:08:af:79:53: 7f:f8:3e:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE+vO/IXpZ1/ZzhkZavv3sgtBeAAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJFMEVCQUZFRjFFMjA2Q0FEOEI0RUFENkQ2QTA4RDNB OEMwMUI1MDAeFw0yNDA1MjkxMzU1NDVaFw0yNDA2MDEyMjQzNDVaMDMxMTAvBgNV BAMTKEFERkMyODM4RUM2RTdFRkNDMEIwREM3RUY5MkMyQ0Q3NDg0QjdFODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1Vo6e8cru2fTdeKZQ7rT6q8ga 910nQfURPNoUTCImxKtQDfrWtg1XigVxKGFFct7zDNsyoBBOTSYIuSivgQHui4fP MDq5tzI/3iEqgMrxdnbviFya5IkPhJjaFdxHR7DAANxQrng+ImccypHW5RwazKCl Km6nYjzi8UndOT1jcDRQBUX3V7DUAHVS6h7A1dC672IZCIeaWK5n5Iz9kH5Sy9p5 oFmiG/+9xsGdPnaMXpLbtgVZutaRGW70E1f1TlE6CqsczYg5+kRsJGzh5kOlUEQC pkDMoGst/8WxGyAdy/vF46RF90BtpbRZw24GO7oYxfXB/TUDb9vGcbBlTj6VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrfwoOOxufvzAsNx++Sws10hLfoYwHwYDVR0j BBgwFoAUS+Drr+8eIGyti06tbWoI06jAG1AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OGE3ZjM1NS1mMjI1LTQ4ZjMtODdmOC0wYmZiMGM4ZTU4ZjAvMC80QkUwRUJBRkVG MUUyMDZDQUQ4QjRFQUQ2RDZBMDhEM0E4QzAxQjUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEJFMEVCQUZFRjFFMjA2Q0FEOEI0RUFENkQ2QTA4RDNBOEMw MUI1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOThhN2YzNTUtZjIyNS00OGYzLTg3 ZjgtMGJmYjBjOGU1OGYwLzAvNEJFMEVCQUZFRjFFMjA2Q0FEOEI0RUFENkQ2QTA4 RDNBOEMwMUI1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGOZ15NXVTh/nMiu9MluTuEgZ/aAnFZ9joCI rDOdQu9U86rjrchrXvf58CtB1yZc5v7tyF18yuOhqWmjQbQ1/C3RYw4e57VxoNph Firdb9kFegppeYzeaU+uw0H+iAkB3P6vPqG/NT2Un82m1FLRzLD0veRg18y25dvn 6ldRy3YUvNIm5K63RWBuabM2qXicm4G4Y0Mx3E/UuoM6g+piK7WJ7tHGFdEmapbz wNq8OarZZq47L38UeBA8oDhuECXSa7AqTATnKJhvv7VTok7bvCprnJZjTp76vPrU tFTH8lw3hDVi7OHee90Ho2SfocBb5R7X27xu4rM1CK95U3/4PoQ= -----END CERTIFICATE-----Generated at Wed May 29 17:52:14 2024 by rpki-client on console-ams.rpki-client.org