$ rpki-client -vvf repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.mft File: EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.mft (raw, json) Hash identifier: BiOJezw9k0Qs73WvVJFDv/rd+iHwL5USuFh9Bb36gdM= Subject key identifier: AA:42:54:E7:4A:6D:41:F6:90:A2:39:A1:D8:34:45:77:17:C8:21:2E Authority key identifier: EE:12:F1:79:A5:D1:F5:2E:C0:33:67:72:82:AE:7E:2E:72:E0:F2:C3 Certificate issuer: /CN=EE12F179A5D1F52EC033677282AE7E2E72E0F2C3 Certificate serial: 2A7BD33D99CECBF5A937D8A21B7510A08CE707C1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.mft Manifest number: 9A Signing time: Fri 17 May 2024 13:51:12 +0000 Manifest this update: Fri 17 May 2024 13:46:12 +0000 Manifest next update: Mon 20 May 2024 17:36:12 +0000 Files and hashes: 1: 3130332e38352e35332e302f32342d3234203d3e20313530353535.roa (hash: doyuf8eRvd+63t7q/Bi7rswWwspb1HsxgDidip/3Y9E=) 2: 3130332e38352e35322e302f32342d3234203d3e20313530353535.roa (hash: uEfRKBrj9focFbKgNj9zeas/dS4YfUO48M9d10QtWPs=) 3: EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.crl (hash: ZRGj+OS5EYX5JcrcHxbwR0cRAt3uR+N+AuuE6pE+hcs=) 4: 3130332e38352e35322e302f32332d3233203d3e20313530353535.roa (hash: GbWOpuHzPBdwwIqoAjGhLRQUe4xL4Nv4J4BhkLSYOlQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.crl rsync://repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 May 2024 17:36:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:7b:d3:3d:99:ce:cb:f5:a9:37:d8:a2:1b:75:10:a0:8c:e7:07:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE12F179A5D1F52EC033677282AE7E2E72E0F2C3 Validity Not Before: May 17 13:46:12 2024 GMT Not After : May 20 17:36:12 2024 GMT Subject: CN=AA4254E74A6D41F690A239A1D834457717C8212E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:1a:07:ec:0a:5d:a3:1e:08:b5:e4:b1:62:cb: cf:41:7b:76:57:6f:66:91:d7:d5:35:c6:4d:02:1b: 72:a5:07:eb:21:82:d2:13:ca:d6:0a:ab:73:63:27: 13:73:fd:5b:c1:f9:ec:e2:45:a9:02:33:38:ca:6a: 34:d4:ab:ca:12:1b:e2:f1:08:dd:79:1a:95:15:71: 77:ce:e6:13:d6:10:85:4b:49:c8:bc:6f:3c:07:e3: b6:13:47:b9:85:35:11:c9:2c:18:1d:6f:ea:d2:64: ad:c6:75:b8:43:29:ea:e9:f9:41:e4:84:8a:1f:58: ae:c1:17:f1:4b:c8:c9:34:55:b5:37:bb:b9:19:51: 66:91:18:ed:f6:ca:6b:1c:c4:63:62:e0:04:9b:0b: 63:6b:83:9e:18:5b:81:d7:dc:21:1e:42:bd:e3:9b: 0e:51:cb:32:fa:b3:b2:11:cb:0c:77:eb:23:c7:f2: 60:eb:0f:ad:ff:42:4f:46:5f:c1:9d:d6:d9:b3:80: 80:66:89:b2:e1:30:2a:4a:75:bf:fa:ce:e1:33:05: 99:b5:49:c9:c5:64:32:13:1c:68:56:71:ec:3d:3c: 0b:48:cb:1e:23:41:b1:b4:d5:79:83:6f:7b:a4:d6: 30:74:8c:35:1c:b9:0d:35:02:4e:00:f3:ae:5d:7d: b0:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:42:54:E7:4A:6D:41:F6:90:A2:39:A1:D8:34:45:77:17:C8:21:2E X509v3 Authority Key Identifier: keyid:EE:12:F1:79:A5:D1:F5:2E:C0:33:67:72:82:AE:7E:2E:72:E0:F2:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:d4:19:3e:2c:8e:21:76:ba:3c:5a:21:27:88:b8:96:db:54: a2:cf:2c:1e:a2:4b:5f:05:f4:f0:8b:fa:92:e3:89:0e:74:52: 94:c1:ba:0b:73:a2:68:32:1d:1f:dc:52:a8:43:b1:76:5e:7d: 6b:dd:24:7b:6f:c0:ff:1f:90:a5:bf:9c:ae:f0:89:00:51:81: 80:fb:e2:de:ea:c1:3d:9f:67:17:65:7d:cf:29:e9:27:1f:37: 55:dd:c6:e1:d6:c8:fd:f9:d7:a8:b2:0e:61:c5:99:3f:ec:77: de:22:df:73:4c:06:cc:27:2a:6f:4d:5d:85:7f:f2:0e:a3:a6: e3:b1:e7:7c:02:3e:54:85:f8:50:65:da:f6:13:74:98:36:01: 8f:17:04:bf:5e:4d:fd:4a:a8:f5:0d:d5:16:39:10:3a:ec:a7: 01:29:61:37:29:7c:44:3f:be:b5:be:54:27:82:3a:ab:1d:3e: 3d:ef:21:c6:ca:94:98:bf:70:7f:96:ef:7f:3a:ea:50:2f:1f: 71:b3:b4:cf:1c:90:ec:61:cf:03:97:76:d7:4a:3d:84:71:fb: 84:17:47:5c:f7:4f:91:27:86:fd:fa:87:6a:b0:49:fa:b2:8b: 45:3a:06:7f:e7:df:ff:97:2c:cd:c9:08:50:8b:03:be:9e:37: b5:c7:ca:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKnvTPZnOy/WpN9iiG3UQoIznB8EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUUxMkYxNzlBNUQxRjUyRUMwMzM2NzcyODJBRTdFMkU3 MkUwRjJDMzAeFw0yNDA1MTcxMzQ2MTJaFw0yNDA1MjAxNzM2MTJaMDMxMTAvBgNV BAMTKEFBNDI1NEU3NEE2RDQxRjY5MEEyMzlBMUQ4MzQ0NTc3MTdDODIxMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeGgfsCl2jHgi15LFiy89Be3ZX b2aR19U1xk0CG3KlB+shgtITytYKq3NjJxNz/VvB+eziRakCMzjKajTUq8oSG+Lx CN15GpUVcXfO5hPWEIVLSci8bzwH47YTR7mFNRHJLBgdb+rSZK3GdbhDKerp+UHk hIofWK7BF/FLyMk0VbU3u7kZUWaRGO32ymscxGNi4ASbC2Nrg54YW4HX3CEeQr3j mw5RyzL6s7IRywx36yPH8mDrD63/Qk9GX8Gd1tmzgIBmibLhMCpKdb/6zuEzBZm1 ScnFZDITHGhWcew9PAtIyx4jQbG01XmDb3uk1jB0jDUcuQ01Ak4A865dfbCrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqkJU50ptQfaQojmh2DRFdxfIIS4wHwYDVR0j BBgwFoAU7hLxeaXR9S7AM2dygq5+LnLg8sMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MGQxZjRjZS0xNjliLTQzMWEtODI4Ni1jNWYzYTA3YmJiZTMvMC9FRTEyRjE3OUE1 RDFGNTJFQzAzMzY3NzI4MkFFN0UyRTcyRTBGMkMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUUxMkYxNzlBNUQxRjUyRUMwMzM2NzcyODJBRTdFMkU3MkUw RjJDMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTBkMWY0Y2UtMTY5Yi00MzFhLTgy ODYtYzVmM2EwN2JiYmUzLzAvRUUxMkYxNzlBNUQxRjUyRUMwMzM2NzcyODJBRTdF MkU3MkUwRjJDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAILUGT4sjiF2ujxaISeIuJbbVKLPLB6iS18F 9PCL+pLjiQ50UpTBugtzomgyHR/cUqhDsXZefWvdJHtvwP8fkKW/nK7wiQBRgYD7 4t7qwT2fZxdlfc8p6ScfN1XdxuHWyP3516iyDmHFmT/sd94i33NMBswnKm9NXYV/ 8g6jpuOx53wCPlSF+FBl2vYTdJg2AY8XBL9eTf1KqPUN1RY5EDrspwEpYTcpfEQ/ vrW+VCeCOqsdPj3vIcbKlJi/cH+W73866lAvH3GztM8ckOxhzwOXdtdKPYRx+4QX R1z3T5Enhv36h2qwSfqyi0U6Bn/n3/+XLM3JCFCLA76eN7XHyjA= -----END CERTIFICATE-----Generated at Fri May 17 15:21:32 2024 by rpki-client on console-ams.rpki-client.org