$ rpki-client -vvf repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft File: A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft (raw, json) Hash identifier: qrdDGutwZzDLVn53gRd71Sb0tfq5urp7PAiDsb3DTeQ= Subject key identifier: 86:C2:A0:AA:58:03:43:79:24:7A:F6:28:6F:CF:80:5A:D4:1C:EE:A8 Authority key identifier: A6:49:57:71:5E:7D:CE:EC:3A:7D:4C:31:76:CC:97:ED:8E:5D:B3:1A Certificate issuer: /CN=A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A Certificate serial: 1CE4B03AB9486C97B83606FEBB4F01EBC53AA801 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft Manifest number: BA Signing time: Sat 18 May 2024 09:01:53 +0000 Manifest this update: Sat 18 May 2024 08:56:53 +0000 Manifest next update: Tue 21 May 2024 17:25:53 +0000 Files and hashes: 1: A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.crl (hash: 6ohX3z6kMEjNc3kh5gVpZQY6SFMlG7hbi6u/V4hcSlc=) 2: 3130332e3230332e39302e302f32342d3234203d3e20313530393236.roa (hash: U4Z+bwQe4/9hzVZXd08kiuviVZg4+Wj747umijHOWT8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.crl rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 14:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:e4:b0:3a:b9:48:6c:97:b8:36:06:fe:bb:4f:01:eb:c5:3a:a8:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A Validity Not Before: May 18 08:56:53 2024 GMT Not After : May 21 17:25:53 2024 GMT Subject: CN=86C2A0AA58034379247AF6286FCF805AD41CEEA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:35:ae:19:63:eb:a7:4d:95:f2:1f:5b:34:ab: 30:cf:ab:69:dc:ff:e0:7e:90:be:aa:33:d2:0e:cf: 68:88:44:2c:fe:27:9e:b9:d8:b1:bf:79:57:e3:23: 46:c7:a8:92:ca:9b:08:94:8e:a3:f5:13:34:d9:09: 0e:b3:99:03:57:b5:e4:82:88:a2:13:ea:15:ff:3d: 57:39:ec:bb:1e:1a:94:46:fd:4c:14:6d:b4:ba:a5: 04:64:32:c9:61:6b:74:14:de:2b:ca:d7:3e:8b:1d: 66:8d:01:b1:c6:4b:c6:a8:6f:d1:9d:68:70:ce:4e: 16:91:df:2c:fe:e8:83:71:1c:ff:64:80:ce:41:6b: 14:ab:f1:c3:ff:ac:48:73:c1:43:c2:c2:57:b9:bf: 5c:0c:36:b1:69:8d:36:99:12:f7:02:6d:05:fc:40: 5b:b2:38:41:67:d7:d9:48:54:59:a9:88:e9:c8:7d: ba:f6:d7:e9:57:74:3e:62:07:dd:ad:3c:70:0d:8d: 05:c5:4f:bf:a0:cf:fd:b9:45:f8:b9:41:fe:f9:21: bd:b6:5b:43:43:2f:c1:ae:e1:88:aa:35:e7:ed:dc: 9e:ac:20:25:5f:4a:ac:21:a5:8f:a6:a4:10:5e:28: 83:56:77:4f:71:c4:71:f5:eb:3c:3f:d3:2d:cb:95: 68:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:C2:A0:AA:58:03:43:79:24:7A:F6:28:6F:CF:80:5A:D4:1C:EE:A8 X509v3 Authority Key Identifier: keyid:A6:49:57:71:5E:7D:CE:EC:3A:7D:4C:31:76:CC:97:ED:8E:5D:B3:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:08:31:0f:40:94:ea:28:1c:7d:69:74:4f:c1:bf:04:53:f1: 4d:48:cb:06:70:86:5b:48:e3:74:cb:34:44:b6:d9:c2:66:24: a4:fb:32:21:e6:b4:a3:03:af:ad:f9:c1:01:30:8f:bf:33:ce: 6c:d5:22:eb:a1:ef:82:ba:e5:28:58:b3:2f:e9:2f:69:c5:32: 3f:ee:dd:cc:88:57:18:9e:36:92:76:aa:ad:cc:e1:22:1d:6c: e5:43:d7:df:d7:b5:33:c8:84:9b:c7:7b:32:40:6b:78:c9:05: 50:06:d0:be:75:77:ef:a2:99:fe:10:31:2b:38:78:d3:5e:36: 79:ed:d6:c4:77:95:68:5f:12:76:17:cb:b6:55:87:b3:e7:80: 8c:0d:f7:76:76:12:f1:45:20:66:a8:2c:22:36:91:89:3d:8e: 6e:ea:7c:6b:71:41:0e:72:73:18:9f:6b:b6:de:84:d6:63:70: 89:89:0e:61:cb:06:3b:8e:88:9f:82:8e:85:f7:97:18:74:50: b3:05:b7:d0:a1:50:6c:33:5b:ec:c2:c9:ee:be:09:f9:91:59: 97:1e:61:c9:90:19:c0:5f:ef:27:df:1e:ac:63:40:b8:6f:e1: e8:c9:ab:7c:1c:bf:09:cb:91:32:e2:11:85:5e:4d:c4:6e:ca: 38:35:d6:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHOSwOrlIbJe4Ngb+u08B68U6qAEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY0OTU3NzE1RTdEQ0VFQzNBN0Q0QzMxNzZDQzk3RUQ4 RTVEQjMxQTAeFw0yNDA1MTgwODU2NTNaFw0yNDA1MjExNzI1NTNaMDMxMTAvBgNV BAMTKDg2QzJBMEFBNTgwMzQzNzkyNDdBRjYyODZGQ0Y4MDVBRDQxQ0VFQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDENa4ZY+unTZXyH1s0qzDPq2nc /+B+kL6qM9IOz2iIRCz+J5652LG/eVfjI0bHqJLKmwiUjqP1EzTZCQ6zmQNXteSC iKIT6hX/PVc57LseGpRG/UwUbbS6pQRkMslha3QU3ivK1z6LHWaNAbHGS8aob9Gd aHDOThaR3yz+6INxHP9kgM5BaxSr8cP/rEhzwUPCwle5v1wMNrFpjTaZEvcCbQX8 QFuyOEFn19lIVFmpiOnIfbr21+lXdD5iB92tPHANjQXFT7+gz/25Rfi5Qf75Ib22 W0NDL8Gu4YiqNeft3J6sICVfSqwhpY+mpBBeKINWd09xxHH16zw/0y3LlWjzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhsKgqlgDQ3kkevYob8+AWtQc7qgwHwYDVR0j BBgwFoAUpklXcV59zuw6fUwxdsyX7Y5dsxowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YTAxMjlhOC0yN2U4LTQwNDYtODk4OS04NjViMjU3ZWE2Y2EvMC9BNjQ5NTc3MTVF N0RDRUVDM0E3RDRDMzE3NkNDOTdFRDhFNURCMzFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTY0OTU3NzE1RTdEQ0VFQzNBN0Q0QzMxNzZDQzk3RUQ4RTVE QjMxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWEwMTI5YTgtMjdlOC00MDQ2LTg5 ODktODY1YjI1N2VhNmNhLzAvQTY0OTU3NzE1RTdEQ0VFQzNBN0Q0QzMxNzZDQzk3 RUQ4RTVEQjMxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABsIMQ9AlOooHH1pdE/BvwRT8U1IywZwhltI 43TLNES22cJmJKT7MiHmtKMDr635wQEwj78zzmzVIuuh74K65ShYsy/pL2nFMj/u 3cyIVxieNpJ2qq3M4SIdbOVD19/XtTPIhJvHezJAa3jJBVAG0L51d++imf4QMSs4 eNNeNnnt1sR3lWhfEnYXy7ZVh7PngIwN93Z2EvFFIGaoLCI2kYk9jm7qfGtxQQ5y cxifa7behNZjcImJDmHLBjuOiJ+CjoX3lxh0ULMFt9ChUGwzW+zCye6+CfmRWZce YcmQGcBf7yffHqxjQLhv4ejJq3wcvwnLkTLiEYVeTcRuyjg11m8= -----END CERTIFICATE-----Generated at Sat May 18 09:23:12 2024 by rpki-client on console-fra.rpki-client.org