$ rpki-client -vvf repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.mft File: 9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.mft (raw, json) Hash identifier: NDqbBqU8vbm10KBSkM/xCFbzBqBUsS23daevuKM8rTk= Subject key identifier: 1E:E7:CE:A9:6F:9B:9C:91:1A:97:C1:E5:8A:42:C2:3A:31:20:00:6B Authority key identifier: 9A:5A:87:60:AD:E6:8B:FD:34:28:CC:06:FE:6D:AC:98:27:28:AE:95 Certificate issuer: /CN=9A5A8760ADE68BFD3428CC06FE6DAC982728AE95 Certificate serial: 6258632B7291E1433244F22FCC61F2A1D0D4240B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.mft Manifest number: EF Signing time: Mon 27 May 2024 20:02:04 +0000 Manifest this update: Mon 27 May 2024 19:57:04 +0000 Manifest next update: Thu 30 May 2024 23:01:04 +0000 Files and hashes: 1: 3130332e35392e34342e302f32332d3234203d3e20313338383831.roa (hash: Jn9KLaP/iXKotp33KugPV3FQeCL4lXPV9miMOHqJSj4=) 2: 3130332e35392e34342e302f32342d3234203d3e20313338383831.roa (hash: EGPVlPIcLKjEU8YJqtGrfCoS8d9O6Z6ovsBRAOjskXw=) 3: 3130332e35392e34352e302f32342d3234203d3e20313338383831.roa (hash: CXip5HZWHq4Z06qt+SqUdhuk3DvcxlsyB9CHoztPl1k=) 4: 9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.crl (hash: m8NDMn7nOgX26lBL9JTA09JjXcCY7HZt25xtm+HogVI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.crl rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 May 2024 21:55:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:58:63:2b:72:91:e1:43:32:44:f2:2f:cc:61:f2:a1:d0:d4:24:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A5A8760ADE68BFD3428CC06FE6DAC982728AE95 Validity Not Before: May 27 19:57:04 2024 GMT Not After : May 30 23:01:04 2024 GMT Subject: CN=1EE7CEA96F9B9C911A97C1E58A42C23A3120006B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:84:40:1f:b0:94:f7:97:0d:78:bd:78:e9:7c: 75:7f:9e:65:66:f6:8f:ff:88:00:86:94:58:a6:da: 45:2a:45:07:46:cb:10:13:ac:c2:31:c9:b5:81:29: 7e:37:1e:14:27:d2:6b:90:c0:e8:0c:39:5c:d3:1d: ab:0a:a5:0c:be:39:e5:2b:d7:5e:09:a5:0d:5b:bb: b3:79:71:2a:fe:05:d5:22:99:56:db:d5:d0:60:5f: 38:2c:0d:51:4f:3c:67:3d:6f:c4:28:74:b1:f5:aa: 3b:5a:36:8c:dc:d6:3f:0f:f6:26:46:88:a4:3c:44: 9f:ad:7c:4d:9d:5c:2e:e2:f2:d8:1a:f7:9e:51:bc: fe:78:04:54:fe:5e:53:48:7c:b7:0f:5b:ba:d7:6c: c6:f1:cf:9f:c3:b8:eb:6e:5c:75:ea:69:a7:fe:cc: bc:47:13:4f:8a:b6:53:c8:bd:57:0e:8c:40:19:18: 92:e1:56:3c:0f:94:76:f7:5e:30:ac:ee:75:2c:82: 9a:f8:90:dd:0c:0e:52:f8:5e:ad:b3:de:34:f4:2f: bd:19:a0:98:2a:58:c3:6c:13:52:26:26:e1:9c:19: 96:d6:72:96:b2:bf:c2:d2:4c:99:5b:56:73:33:01: 3e:4d:b4:96:d1:3f:26:62:71:45:69:f8:c4:f9:9f: bc:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:E7:CE:A9:6F:9B:9C:91:1A:97:C1:E5:8A:42:C2:3A:31:20:00:6B X509v3 Authority Key Identifier: keyid:9A:5A:87:60:AD:E6:8B:FD:34:28:CC:06:FE:6D:AC:98:27:28:AE:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:2f:a4:d2:05:b8:3f:81:3b:d9:b7:df:9e:9a:9f:d0:f5:47: c6:bf:2c:74:34:52:c5:87:8b:cd:93:22:d0:5d:1e:de:62:85: cd:53:54:20:3f:7f:16:04:79:f3:21:0c:d6:80:8b:95:0b:2d: d7:64:17:53:63:fb:4d:a1:ca:22:a6:23:56:21:89:fa:f3:93: e6:cd:b0:a5:b7:59:7e:c0:b2:1d:6b:80:2f:a9:4d:7b:c8:1c: 72:12:2a:59:43:4a:73:9a:98:0b:6d:2b:d4:be:55:9e:00:12: 12:d9:e3:89:ba:6f:36:e0:55:93:ac:a4:a9:79:04:f7:28:38: a4:4a:01:76:58:0e:c2:8d:53:88:a4:8d:4c:a1:6c:03:07:8e: 3c:48:4e:c9:ea:25:69:1b:b4:09:a1:77:58:ba:20:b6:60:7b: a3:6d:b7:85:db:56:04:61:c2:91:38:86:ff:54:72:a1:53:91: fd:6d:2a:b9:29:0a:12:27:f5:86:ba:3b:09:1c:39:49:e1:a4: af:40:33:d4:56:36:8e:a1:c3:94:91:17:48:8d:11:e9:ba:15: 80:61:61:51:84:d8:9e:8d:53:bd:18:b0:9e:5e:88:bd:35:52: 70:14:0a:e5:9f:bf:d7:ec:f6:01:65:7e:00:77:af:45:3e:bf: b1:15:74:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYlhjK3KR4UMyRPIvzGHyodDUJAswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE1QTg3NjBBREU2OEJGRDM0MjhDQzA2RkU2REFDOTgy NzI4QUU5NTAeFw0yNDA1MjcxOTU3MDRaFw0yNDA1MzAyMzAxMDRaMDMxMTAvBgNV BAMTKDFFRTdDRUE5NkY5QjlDOTExQTk3QzFFNThBNDJDMjNBMzEyMDAwNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxhEAfsJT3lw14vXjpfHV/nmVm 9o//iACGlFim2kUqRQdGyxATrMIxybWBKX43HhQn0muQwOgMOVzTHasKpQy+OeUr 114JpQ1bu7N5cSr+BdUimVbb1dBgXzgsDVFPPGc9b8QodLH1qjtaNozc1j8P9iZG iKQ8RJ+tfE2dXC7i8tga955RvP54BFT+XlNIfLcPW7rXbMbxz5/DuOtuXHXqaaf+ zLxHE0+KtlPIvVcOjEAZGJLhVjwPlHb3XjCs7nUsgpr4kN0MDlL4Xq2z3jT0L70Z oJgqWMNsE1ImJuGcGZbWcpayv8LSTJlbVnMzAT5NtJbRPyZicUVp+MT5n7yTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHufOqW+bnJEal8HlikLCOjEgAGswHwYDVR0j BBgwFoAUmlqHYK3mi/00KMwG/m2smCcorpUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTc1OThlNC0yMDY0LTRlY2ItOThmNi1iMjU5YTc0OTk2YTEvMC85QTVBODc2MEFE RTY4QkZEMzQyOENDMDZGRTZEQUM5ODI3MjhBRTk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE1QTg3NjBBREU2OEJGRDM0MjhDQzA2RkU2REFDOTgyNzI4 QUU5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTE3NTk4ZTQtMjA2NC00ZWNiLTk4 ZjYtYjI1OWE3NDk5NmExLzAvOUE1QTg3NjBBREU2OEJGRDM0MjhDQzA2RkU2REFD OTgyNzI4QUU5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABkvpNIFuD+BO9m3356an9D1R8a/LHQ0UsWH i82TItBdHt5ihc1TVCA/fxYEefMhDNaAi5ULLddkF1Nj+02hyiKmI1Yhifrzk+bN sKW3WX7Ash1rgC+pTXvIHHISKllDSnOamAttK9S+VZ4AEhLZ44m6bzbgVZOspKl5 BPcoOKRKAXZYDsKNU4ikjUyhbAMHjjxITsnqJWkbtAmhd1i6ILZge6Ntt4XbVgRh wpE4hv9UcqFTkf1tKrkpChIn9Ya6OwkcOUnhpK9AM9RWNo6hw5SRF0iNEem6FYBh YVGE2J6NU70YsJ5eiL01UnAUCuWfv9fs9gFlfgB3r0U+v7EVdJs= -----END CERTIFICATE-----Generated at Mon May 27 22:50:40 2024 by rpki-client on console-ams.rpki-client.org