$ rpki-client -vvf repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.mft File: 0E8637C23FD7FD1ABF91B025E48040909797EA6C.mft (raw, json) Hash identifier: 9f4yuB3t4rVMSnbtlXsDVAJ0ABn5dMZm9f97dWKwlKQ= Subject key identifier: CF:2B:F8:3C:9C:64:20:B8:A3:D9:04:34:B7:92:BF:3A:97:18:F3:F2 Authority key identifier: 0E:86:37:C2:3F:D7:FD:1A:BF:91:B0:25:E4:80:40:90:97:97:EA:6C Certificate issuer: /CN=0E8637C23FD7FD1ABF91B025E48040909797EA6C Certificate serial: 1D1B0430812689D4B84FC6CAEE3B458535D324A0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E8637C23FD7FD1ABF91B025E48040909797EA6C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.mft Manifest number: 0430 Signing time: Fri 17 May 2024 21:21:08 +0000 Manifest this update: Fri 17 May 2024 21:16:08 +0000 Manifest next update: Tue 21 May 2024 07:23:08 +0000 Files and hashes: 1: 0E8637C23FD7FD1ABF91B025E48040909797EA6C.crl (hash: Znpv4yrONbTgDAXCxuPaXI/geCES/9cNFc+CFDRwU7o=) 2: 3130332e37372e3135362e302f32322d3234203d3e20313335343834.roa (hash: 9SqRFgAKSZtglj8SJMT6xDo8TLDgBaPNb3W5M5mh30o=) 3: 323430373a396338303a3a2f33322d3438203d3e20313335343834.roa (hash: iRGngGS3WhH4y0nT2tQiunIYM1vAVi1V3XPR4yNJBTw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.crl rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E8637C23FD7FD1ABF91B025E48040909797EA6C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 05:59:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:1b:04:30:81:26:89:d4:b8:4f:c6:ca:ee:3b:45:85:35:d3:24:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E8637C23FD7FD1ABF91B025E48040909797EA6C Validity Not Before: May 17 21:16:08 2024 GMT Not After : May 21 07:23:08 2024 GMT Subject: CN=CF2BF83C9C6420B8A3D90434B792BF3A9718F3F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:2d:d8:1b:6c:f5:92:fe:4e:e6:56:23:9a:83: e0:19:cc:eb:48:40:37:fe:b1:bf:34:ee:f3:14:ea: 0e:1f:09:ab:52:ab:79:57:2e:19:1a:d9:59:e8:cb: 6f:6f:b8:a3:d0:de:5a:0f:21:8e:e8:6c:da:bd:bd: 51:c0:e6:1a:36:14:a4:22:18:0e:b6:f6:a1:d4:3e: 95:90:e5:78:be:79:24:fe:54:ff:ff:5b:38:b9:97: 48:8d:a1:e5:01:a8:ba:ee:9f:6a:42:3c:c2:21:11: 28:31:6a:2e:41:f6:21:4b:84:8a:55:6c:a3:1e:a1: 4d:c2:ea:17:e0:0e:f4:2a:0d:c7:b5:56:ce:e5:ba: a3:e6:01:26:b8:b1:6c:12:3a:4e:bf:6f:0e:ec:9d: ec:73:3c:f9:ae:04:52:b6:37:e2:09:48:69:4d:69: ed:07:46:57:0a:c4:95:50:0d:46:4c:c9:59:fd:28: 1d:ae:96:ff:3f:cf:5b:61:c1:15:72:bd:fd:85:6a: 1b:10:8e:c0:07:2b:b6:99:04:d3:d6:9b:e3:8a:e3: 7e:bb:0b:f4:a0:79:b3:ae:71:cc:33:88:0a:33:54: 80:bc:74:04:dc:80:73:f0:be:7a:74:1d:06:78:c8: e0:ff:5f:9c:a2:66:a7:2c:a7:c4:fd:b6:a5:bf:9a: dd:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:2B:F8:3C:9C:64:20:B8:A3:D9:04:34:B7:92:BF:3A:97:18:F3:F2 X509v3 Authority Key Identifier: keyid:0E:86:37:C2:3F:D7:FD:1A:BF:91:B0:25:E4:80:40:90:97:97:EA:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E8637C23FD7FD1ABF91B025E48040909797EA6C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:e4:2f:58:01:b0:74:87:0b:b3:18:4f:64:3d:e7:5a:08:82: 1f:ac:18:c7:ab:9e:47:d8:21:2b:ac:5e:d7:00:5e:57:40:9a: 21:18:62:e8:5f:43:7c:57:0b:69:67:48:d2:0b:da:a6:6d:86: db:50:2f:96:25:b6:d0:a6:a8:48:fc:27:de:fb:e3:ab:18:79: 02:96:45:aa:a7:e7:67:9b:6f:1f:e5:d0:d4:f7:ec:8e:4b:a5: 38:e1:e9:d4:28:dc:ca:4b:3c:d3:ff:ba:1e:ee:a2:3c:19:0e: 3e:0c:12:a5:e8:14:8c:26:6a:4a:37:cc:c8:7d:eb:3b:f8:03: ad:f3:9c:73:44:08:e3:15:ec:2a:53:a0:23:86:c3:9b:e7:af: ee:99:ec:f0:f4:3c:51:76:ad:3e:8a:65:c5:29:69:b1:44:95: 54:e6:89:bf:1a:84:5d:2b:0d:40:5e:8c:e5:26:c1:05:df:e6: d3:6f:98:0a:6f:27:3b:2b:f1:c9:16:c5:59:d0:c3:84:b9:2c: de:de:7e:8b:42:3b:15:59:35:fd:31:0d:f1:a6:1b:75:a1:40: 2d:64:e4:fc:30:93:bf:9f:62:b9:36:8d:24:b5:c3:22:bb:38: a2:c7:f2:66:f2:b1:d9:9a:cf:71:0c:cc:4d:1c:ad:2c:15:71: 00:39:d5:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHRsEMIEmidS4T8bK7jtFhTXTJKAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU4NjM3QzIzRkQ3RkQxQUJGOTFCMDI1RTQ4MDQwOTA5 Nzk3RUE2QzAeFw0yNDA1MTcyMTE2MDhaFw0yNDA1MjEwNzIzMDhaMDMxMTAvBgNV BAMTKENGMkJGODNDOUM2NDIwQjhBM0Q5MDQzNEI3OTJCRjNBOTcxOEYzRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLLdgbbPWS/k7mViOag+AZzOtI QDf+sb807vMU6g4fCatSq3lXLhka2Vnoy29vuKPQ3loPIY7obNq9vVHA5ho2FKQi GA629qHUPpWQ5Xi+eST+VP//Wzi5l0iNoeUBqLrun2pCPMIhESgxai5B9iFLhIpV bKMeoU3C6hfgDvQqDce1Vs7luqPmASa4sWwSOk6/bw7snexzPPmuBFK2N+IJSGlN ae0HRlcKxJVQDUZMyVn9KB2ulv8/z1thwRVyvf2FahsQjsAHK7aZBNPWm+OK4367 C/SgebOuccwziAozVIC8dATcgHPwvnp0HQZ4yOD/X5yiZqcsp8T9tqW/mt3LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzyv4PJxkILij2QQ0t5K/OpcY8/IwHwYDVR0j BBgwFoAUDoY3wj/X/Rq/kbAl5IBAkJeX6mwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YzNmMjI4OC04OGNmLTRkMmItYmJhNi1hMDNkZDVmODM3NjEvMC8wRTg2MzdDMjNG RDdGRDFBQkY5MUIwMjVFNDgwNDA5MDk3OTdFQTZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEU4NjM3QzIzRkQ3RkQxQUJGOTFCMDI1RTQ4MDQwOTA5Nzk3 RUE2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWMzZjIyODgtODhjZi00ZDJiLWJi YTYtYTAzZGQ1ZjgzNzYxLzAvMEU4NjM3QzIzRkQ3RkQxQUJGOTFCMDI1RTQ4MDQw OTA5Nzk3RUE2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK7kL1gBsHSHC7MYT2Q951oIgh+sGMernkfY ISusXtcAXldAmiEYYuhfQ3xXC2lnSNIL2qZthttQL5YlttCmqEj8J97746sYeQKW Raqn52ebbx/l0NT37I5LpTjh6dQo3MpLPNP/uh7uojwZDj4MEqXoFIwmako3zMh9 6zv4A63znHNECOMV7CpToCOGw5vnr+6Z7PD0PFF2rT6KZcUpabFElVTmib8ahF0r DUBejOUmwQXf5tNvmApvJzsr8ckWxVnQw4S5LN7efotCOxVZNf0xDfGmG3WhQC1k 5Pwwk7+fYrk2jSS1wyK7OKLH8mbysdmaz3EMzE0crSwVcQA51e0= -----END CERTIFICATE-----Generated at Fri May 17 21:59:49 2024 by rpki-client on console-ams.rpki-client.org