$ rpki-client -vvf repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.mft File: 849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.mft (raw, json) Hash identifier: Zheiq6c8U4Uk81DHne/9kG2DW849LZ1F6wzC1+M0f1M= Subject key identifier: A5:6D:0B:F2:8F:FD:D4:E4:3C:1B:A6:05:D9:9B:D8:A5:55:CB:7E:52 Authority key identifier: 84:9E:9E:24:0A:6B:F4:42:3B:1E:7D:22:05:D4:1E:C8:0D:6E:AB:4F Certificate issuer: /CN=849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F Certificate serial: 5E3B8ECE991203BF43467525FC5AA358FE4E9FB4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.mft Manifest number: F7 Signing time: Sun 19 May 2024 15:41:46 +0000 Manifest this update: Sun 19 May 2024 15:36:46 +0000 Manifest next update: Wed 22 May 2024 16:21:46 +0000 Files and hashes: 1: 3130332e362e3136362e302f32342d3234203d3e20313439393335.roa (hash: I0XZkMTHlRJLRJobJ7g+QSkuQLwCJ7V4VMI1qaR/BYY=) 2: 849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.crl (hash: 6W89c8PaHJR4ISJ6jYffrZ7le5Ys274I/WhxMwaB0Og=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.crl rsync://repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 16:21:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:3b:8e:ce:99:12:03:bf:43:46:75:25:fc:5a:a3:58:fe:4e:9f:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F Validity Not Before: May 19 15:36:46 2024 GMT Not After : May 22 16:21:46 2024 GMT Subject: CN=A56D0BF28FFDD4E43C1BA605D99BD8A555CB7E52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:99:05:9b:d1:af:f2:52:2b:86:cb:cb:0e:97: 05:de:9b:e4:46:cf:b8:6e:32:8c:02:2e:65:54:f9: 77:36:b4:3a:41:b6:32:17:b0:98:61:60:e1:c9:bc: b5:30:c2:ed:94:9b:a1:57:42:1d:0a:99:4f:29:fe: 7c:43:c6:b3:dc:ba:2d:ad:96:6f:c8:c3:28:4e:b1: 8b:d4:a3:3f:53:34:0c:92:cf:4e:fe:7f:17:45:8b: f7:d7:f0:7a:44:7a:29:7e:78:a6:d6:39:41:52:c1: 97:67:33:70:da:1e:33:fe:de:06:a5:92:53:12:90: f4:71:2e:ea:40:2d:0a:11:7e:d5:93:30:e1:a0:e5: b3:65:86:a7:07:bc:93:bd:bb:fc:b4:96:eb:ba:94: f6:8a:f2:5f:45:74:8a:a8:d0:3c:c0:47:f6:a5:39: ce:e0:6e:90:9b:1d:df:a9:6b:1a:74:ec:f1:1e:09: 9d:87:71:dc:e4:1e:8f:44:9e:82:24:6d:0e:1b:ea: 71:61:67:df:91:d7:e7:73:7d:6a:fe:cf:07:86:8f: 49:4f:50:99:08:39:e8:b4:07:24:80:c0:f9:bf:b4: a9:51:5f:d6:ce:22:18:67:67:03:1a:37:15:c2:45: 34:7d:63:2d:81:75:39:6d:43:b7:41:67:c0:ae:6b: ae:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:6D:0B:F2:8F:FD:D4:E4:3C:1B:A6:05:D9:9B:D8:A5:55:CB:7E:52 X509v3 Authority Key Identifier: keyid:84:9E:9E:24:0A:6B:F4:42:3B:1E:7D:22:05:D4:1E:C8:0D:6E:AB:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:bd:14:de:e9:cf:8e:9a:4d:b5:df:c5:bb:c1:12:38:01:f7: b8:be:b0:08:3a:e6:2e:3e:98:6d:be:c9:bd:c9:43:43:a1:c2: 27:06:66:5f:83:05:6b:f1:61:c7:bd:61:ce:55:64:dd:f0:ab: fc:b9:cd:cb:ea:58:5c:09:63:f6:d9:51:32:7d:ba:76:58:a6: 9d:79:fc:a4:e3:d4:7f:4d:8c:a1:07:49:0c:cd:ab:74:72:bb: f6:40:99:78:6a:4a:73:1b:e3:46:b7:05:0b:a5:35:97:96:20: f2:26:77:8e:f9:fd:b9:cc:ab:4e:f5:88:a8:4f:7a:13:0d:12: 3c:d0:05:91:e7:b1:42:4b:24:f6:20:8f:64:6c:24:25:3b:30: 7f:9d:ae:cb:bd:27:ae:e4:51:a7:f6:34:7a:1a:4e:73:3b:5a: 9b:fa:45:c9:3c:66:7f:5b:d3:ff:0f:ae:47:60:04:54:98:b9: d9:f6:a2:f0:ec:a6:e8:a1:25:30:e5:03:a3:83:5f:09:29:eb: d5:58:46:83:23:ea:c1:17:b9:61:f8:7f:77:a3:96:6a:64:f8: 36:2c:5a:92:d9:39:27:65:33:48:42:4d:8a:b2:0b:95:a9:21: 6d:10:ef:9f:13:50:37:ad:6f:b7:d2:cd:28:b2:3f:a8:7e:fe: 18:c3:a5:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXjuOzpkSA79DRnUl/FqjWP5On7QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ5RTlFMjQwQTZCRjQ0MjNCMUU3RDIyMDVENDFFQzgw RDZFQUI0RjAeFw0yNDA1MTkxNTM2NDZaFw0yNDA1MjIxNjIxNDZaMDMxMTAvBgNV BAMTKEE1NkQwQkYyOEZGREQ0RTQzQzFCQTYwNUQ5OUJEOEE1NTVDQjdFNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTmQWb0a/yUiuGy8sOlwXem+RG z7huMowCLmVU+Xc2tDpBtjIXsJhhYOHJvLUwwu2Um6FXQh0KmU8p/nxDxrPcui2t lm/IwyhOsYvUoz9TNAySz07+fxdFi/fX8HpEeil+eKbWOUFSwZdnM3DaHjP+3gal klMSkPRxLupALQoRftWTMOGg5bNlhqcHvJO9u/y0luu6lPaK8l9FdIqo0DzAR/al Oc7gbpCbHd+paxp07PEeCZ2HcdzkHo9EnoIkbQ4b6nFhZ9+R1+dzfWr+zweGj0lP UJkIOei0BySAwPm/tKlRX9bOIhhnZwMaNxXCRTR9Yy2BdTltQ7dBZ8Cua66tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpW0L8o/91OQ8G6YF2ZvYpVXLflIwHwYDVR0j BBgwFoAUhJ6eJApr9EI7Hn0iBdQeyA1uq08wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZWViNDVkZS01MTgzLTRhM2EtYjA2ZC04YmI4ZDQ1MDZiMDYvMC84NDlFOUUyNDBB NkJGNDQyM0IxRTdEMjIwNUQ0MUVDODBENkVBQjRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ5RTlFMjQwQTZCRjQ0MjNCMUU3RDIyMDVENDFFQzgwRDZF QUI0Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWVlYjQ1ZGUtNTE4My00YTNhLWIw NmQtOGJiOGQ0NTA2YjA2LzAvODQ5RTlFMjQwQTZCRjQ0MjNCMUU3RDIyMDVENDFF QzgwRDZFQUI0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAC9FN7pz46aTbXfxbvBEjgB97i+sAg65i4+ mG2+yb3JQ0OhwicGZl+DBWvxYce9Yc5VZN3wq/y5zcvqWFwJY/bZUTJ9unZYpp15 /KTj1H9NjKEHSQzNq3Ryu/ZAmXhqSnMb40a3BQulNZeWIPImd475/bnMq071iKhP ehMNEjzQBZHnsUJLJPYgj2RsJCU7MH+drsu9J67kUaf2NHoaTnM7Wpv6Rck8Zn9b 0/8PrkdgBFSYudn2ovDspuihJTDlA6ODXwkp69VYRoMj6sEXuWH4f3ejlmpk+DYs WpLZOSdlM0hCTYqyC5WpIW0Q758TUDetb7fSzSiyP6h+/hjDpTQ= -----END CERTIFICATE-----Generated at Sun May 19 16:36:51 2024 by rpki-client on console-fra.rpki-client.org