$ rpki-client -vvf repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft File: 456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft (raw, json) Hash identifier: SaIq44XFx65ROjQJAZkKYj/vhYi2wFZeQSHgez842rU= Subject key identifier: A5:A6:C5:46:2A:99:1E:56:7F:97:83:8D:F8:CB:78:A9:0A:FD:D2:52 Authority key identifier: 45:69:57:B6:E3:2A:BD:15:76:13:6B:F4:B3:9E:C4:CC:AD:97:2F:CD Certificate issuer: /CN=456957B6E32ABD1576136BF4B39EC4CCAD972FCD Certificate serial: 0B8FEEB51144C1040BCAF724CF8913D85C2836A5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft Manifest number: D3 Signing time: Sun 19 May 2024 07:51:10 +0000 Manifest this update: Sun 19 May 2024 07:46:10 +0000 Manifest next update: Wed 22 May 2024 11:26:10 +0000 Files and hashes: 1: 323030313a6466303a623538303a3a2f34382d3438203d3e20313338383736.roa (hash: WPA2QrUeZrym7GUv4/JaUTJ+UMPuBXVi0qNhIq7SGXo=) 2: 3130332e3134302e39302e302f32332d3234203d3e20313338383736.roa (hash: f0ac0M2PbiDKp8geVIwoBY5AfaQ8tzoPZGu7yXlLrZw=) 3: 3130332e3134302e39302e302f32342d3234203d3e20313338383736.roa (hash: jsQ3cGwTb93KQ3+TKRABx0l0miUMW9JXJpLX/A8kMmk=) 4: 456957B6E32ABD1576136BF4B39EC4CCAD972FCD.crl (hash: p9gycN3BsWpaWyeXErjN8DkGYUhjP8T997bDsH3mYS4=) 5: 3130332e3134302e39312e302f32342d3234203d3e20313338383736.roa (hash: msDDpIlttirzrCwl737ixXgByLjhqyNcxb8DUAIHxP0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.crl rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 03:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:8f:ee:b5:11:44:c1:04:0b:ca:f7:24:cf:89:13:d8:5c:28:36:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=456957B6E32ABD1576136BF4B39EC4CCAD972FCD Validity Not Before: May 19 07:46:10 2024 GMT Not After : May 22 11:26:10 2024 GMT Subject: CN=A5A6C5462A991E567F97838DF8CB78A90AFDD252 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ef:ab:64:8a:9a:dd:04:b7:51:cc:e3:4e:5e: 45:85:df:30:a1:80:d8:6f:dd:50:aa:7f:0c:28:cf: 15:7a:ed:48:0d:ea:09:51:9a:c3:c2:62:55:b9:03: 7b:0f:a1:fe:0e:f0:61:89:2c:aa:6b:9f:91:48:19: 3e:f7:76:e4:a8:33:62:50:4b:81:93:70:03:f6:9a: c9:96:53:20:86:b3:3b:40:45:f4:c0:ab:db:b5:51: 38:67:c3:52:f5:90:90:25:db:57:d8:e5:ad:07:61: ed:c3:2d:d3:b1:23:9b:60:d3:63:31:89:14:86:74: 09:c9:30:20:b2:10:e6:c2:1d:29:7e:db:a3:70:2e: 1a:50:98:d3:30:9a:67:e6:77:1d:e8:b0:2a:90:36: ca:80:12:bb:bd:b7:07:d3:be:2c:81:28:e3:4e:b1: 8e:80:8e:ca:05:61:fc:e3:c2:77:9b:06:80:90:8e: 60:d0:6c:30:0a:e9:6e:2e:8f:48:5b:7b:b2:29:44: 65:b7:cf:e9:d3:c8:36:0d:1b:a4:57:ba:f1:17:13: bb:59:f0:f3:51:79:96:39:54:26:a0:4f:25:32:6f: 5c:ac:19:97:4e:1f:5b:20:3d:6c:76:73:d1:af:14: c2:10:81:07:bf:5b:a9:7e:56:75:ea:1d:6c:a6:eb: 0f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:A6:C5:46:2A:99:1E:56:7F:97:83:8D:F8:CB:78:A9:0A:FD:D2:52 X509v3 Authority Key Identifier: keyid:45:69:57:B6:E3:2A:BD:15:76:13:6B:F4:B3:9E:C4:CC:AD:97:2F:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:7d:d1:93:04:47:80:a2:c2:d0:0c:20:e4:bc:1a:ad:55:81: 92:79:cf:22:77:47:ba:9c:c4:9d:53:09:d2:89:ba:dd:2c:24: ff:fc:93:8e:e7:30:db:eb:91:d1:d0:b6:a2:9d:b2:31:f3:64: 6f:1d:75:d0:6f:9e:41:c8:37:bf:63:5d:72:50:b4:f3:fc:8a: 1c:e2:1b:65:36:e3:ee:6a:1b:2c:3b:81:46:8f:0a:34:de:23: 21:63:1c:eb:c3:8e:95:32:45:8c:92:b1:36:eb:f4:c3:b0:2f: 7b:e4:6d:aa:19:3a:8e:07:e9:5e:f2:2c:56:ed:4a:12:f4:31: fc:52:65:cb:35:fb:ad:74:b5:db:e4:89:85:ff:20:1b:c9:52: ee:df:83:6d:91:45:b1:71:b6:b7:5b:c3:45:fb:ce:99:77:23: 3c:f7:c5:2f:b8:70:60:f6:84:26:1e:70:1d:47:45:e7:3a:78: cc:4e:48:cf:c0:cb:ba:04:8f:ac:f0:09:19:e8:55:4a:d3:af: db:42:45:eb:79:82:5b:26:4c:9c:48:51:7f:45:41:de:6e:bd: a2:af:72:7c:96:b0:b5:ec:d7:93:a3:2e:93:bb:90:d5:be:17: 9e:8b:f6:b0:18:fb:e7:63:05:09:0a:21:cf:c1:db:5c:71:8f: 09:02:50:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC4/utRFEwQQLyvckz4kT2FwoNqUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU2OTU3QjZFMzJBQkQxNTc2MTM2QkY0QjM5RUM0Q0NB RDk3MkZDRDAeFw0yNDA1MTkwNzQ2MTBaFw0yNDA1MjIxMTI2MTBaMDMxMTAvBgNV BAMTKEE1QTZDNTQ2MkE5OTFFNTY3Rjk3ODM4REY4Q0I3OEE5MEFGREQyNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq76tkiprdBLdRzONOXkWF3zCh gNhv3VCqfwwozxV67UgN6glRmsPCYlW5A3sPof4O8GGJLKprn5FIGT73duSoM2JQ S4GTcAP2msmWUyCGsztARfTAq9u1UThnw1L1kJAl21fY5a0HYe3DLdOxI5tg02Mx iRSGdAnJMCCyEObCHSl+26NwLhpQmNMwmmfmdx3osCqQNsqAEru9twfTviyBKONO sY6AjsoFYfzjwnebBoCQjmDQbDAK6W4uj0hbe7IpRGW3z+nTyDYNG6RXuvEXE7tZ 8PNReZY5VCagTyUyb1ysGZdOH1sgPWx2c9GvFMIQgQe/W6l+VnXqHWym6w+hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpabFRiqZHlZ/l4ON+Mt4qQr90lIwHwYDVR0j BBgwFoAURWlXtuMqvRV2E2v0s57EzK2XL80wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NmE5ZGRmNy01NzZhLTRhNTgtODliYi03ZTg5Mjg5MDIyNzAvMC80NTY5NTdCNkUz MkFCRDE1NzYxMzZCRjRCMzlFQzRDQ0FEOTcyRkNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU2OTU3QjZFMzJBQkQxNTc2MTM2QkY0QjM5RUM0Q0NBRDk3 MkZDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTZhOWRkZjctNTc2YS00YTU4LTg5 YmItN2U4OTI4OTAyMjcwLzAvNDU2OTU3QjZFMzJBQkQxNTc2MTM2QkY0QjM5RUM0 Q0NBRDk3MkZDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADJ90ZMER4CiwtAMIOS8Gq1VgZJ5zyJ3R7qc xJ1TCdKJut0sJP/8k47nMNvrkdHQtqKdsjHzZG8dddBvnkHIN79jXXJQtPP8ihzi G2U24+5qGyw7gUaPCjTeIyFjHOvDjpUyRYySsTbr9MOwL3vkbaoZOo4H6V7yLFbt ShL0MfxSZcs1+610tdvkiYX/IBvJUu7fg22RRbFxtrdbw0X7zpl3Izz3xS+4cGD2 hCYecB1HRec6eMxOSM/Ay7oEj6zwCRnoVUrTr9tCRet5glsmTJxIUX9FQd5uvaKv cnyWsLXs15OjLpO7kNW+F56L9rAY++djBQkKIc/B21xxjwkCUPI= -----END CERTIFICATE-----Generated at Sun May 19 08:24:27 2024 by rpki-client on console-ams.rpki-client.org