$ rpki-client -vvf repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.mft File: 14043163A8BFF50600F16410DE27B7A0DEEC1E61.mft (raw, json) Hash identifier: gJgbsj4Kp9I4JAATf9+5UsF5yiZtWjXRag3VW1v/ok0= Subject key identifier: 8B:5C:01:2C:0F:3B:4C:9A:5E:7E:30:DE:64:63:73:73:6F:29:D3:5F Authority key identifier: 14:04:31:63:A8:BF:F5:06:00:F1:64:10:DE:27:B7:A0:DE:EC:1E:61 Certificate issuer: /CN=14043163A8BFF50600F16410DE27B7A0DEEC1E61 Certificate serial: 074EF33AC085886D89652EF6C4A0D50280A07479 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14043163A8BFF50600F16410DE27B7A0DEEC1E61.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.mft Manifest number: A4 Signing time: Wed 29 May 2024 15:51:14 +0000 Manifest this update: Wed 29 May 2024 15:46:14 +0000 Manifest next update: Sat 01 Jun 2024 18:00:14 +0000 Files and hashes: 1: 3130332e3136322e3135312e302f32342d3234203d3e20313431363536.roa (hash: RgazfL0KrmuCp1vr/P9wy4y9FHjXM+eQLuPOI2aAkA8=) 2: 14043163A8BFF50600F16410DE27B7A0DEEC1E61.crl (hash: 1LiegAzzxSLvTaTjbKgH6gS5lo/8v/G1zzssgbqgecI=) 3: 3130332e3136322e3135302e302f32342d3234203d3e20313431363536.roa (hash: JQ+nYf4J37VdncjuMza1wJwfd1qll385tom60reY5fo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.crl rsync://repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14043163A8BFF50600F16410DE27B7A0DEEC1E61.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 18:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:4e:f3:3a:c0:85:88:6d:89:65:2e:f6:c4:a0:d5:02:80:a0:74:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14043163A8BFF50600F16410DE27B7A0DEEC1E61 Validity Not Before: May 29 15:46:14 2024 GMT Not After : Jun 1 18:00:14 2024 GMT Subject: CN=8B5C012C0F3B4C9A5E7E30DE646373736F29D35F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6f:08:f0:80:fe:07:e6:26:16:10:7e:1c:9a: 04:a2:4f:a9:13:7e:89:16:cd:73:96:e7:3f:61:03: a5:44:a1:16:14:8d:b7:6b:e9:46:37:fb:81:28:7f: ca:0d:4a:8d:a6:7b:bd:9f:88:f3:7a:4a:02:60:83: 6a:01:a5:45:05:22:69:50:19:e6:6b:84:f4:0a:0c: 37:87:63:aa:ec:e4:1c:bf:23:e8:4a:d6:8f:af:89: 70:1c:5e:37:2c:81:b1:f1:2f:99:69:1e:25:9d:b1: 8b:64:cb:9b:d6:58:06:4a:03:87:ab:74:bb:0d:83: ef:65:a9:e6:8a:82:be:e3:74:40:7c:e9:01:72:bb: 81:71:3f:72:87:d5:c2:dc:02:77:9b:71:92:61:9f: 24:51:ad:d3:a7:b3:34:8f:9a:c5:05:65:1e:84:df: 2a:6b:3b:a6:a1:39:3e:b4:52:32:3b:eb:46:32:d5: 2c:dd:4a:a4:e2:69:40:fd:3e:6a:c4:1d:48:2c:81: 77:a3:47:c5:76:3d:92:5e:8d:39:7d:e0:f4:1e:d4: d0:2f:95:ed:73:2c:b5:88:91:c6:60:63:66:ba:5c: 8b:a9:e1:49:0e:b5:c7:91:3c:c7:9a:96:90:30:21: ca:d5:d1:70:fb:d3:4f:f7:c2:6f:fe:5d:0d:63:79: 08:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:5C:01:2C:0F:3B:4C:9A:5E:7E:30:DE:64:63:73:73:6F:29:D3:5F X509v3 Authority Key Identifier: keyid:14:04:31:63:A8:BF:F5:06:00:F1:64:10:DE:27:B7:A0:DE:EC:1E:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14043163A8BFF50600F16410DE27B7A0DEEC1E61.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:28:d5:8e:77:cb:a4:7f:f1:77:b6:ae:48:ac:fe:f2:fc:2d: 37:63:e4:58:d4:1b:eb:be:2d:e1:9f:92:df:35:2b:9d:2d:4f: 3a:4f:d9:77:ad:c2:db:56:e3:05:c5:9a:a9:37:a0:1a:d5:a7: 6f:0d:3e:4d:eb:21:4f:06:25:35:f5:58:f6:b7:52:6e:46:7f: 28:f6:39:2e:5b:c8:ca:f2:c2:45:28:1b:c2:5e:c1:da:78:b2: 10:ef:3b:c4:30:e6:70:43:5a:46:12:8f:69:d5:b6:ff:0d:a5: ae:41:26:4b:a4:8f:4e:e7:fc:00:ed:e6:5d:72:15:c3:9d:ec: 21:6e:30:27:10:e8:29:e2:b6:c3:17:4d:3a:ea:f1:b0:6f:b8: 9f:e8:de:45:74:50:68:1c:85:5f:93:5d:b0:f9:02:6d:86:c6: e8:2a:7b:d6:35:86:db:d8:9b:23:78:ef:4f:62:64:d4:5d:63: 10:18:08:b1:fa:41:a8:c7:09:cc:74:96:dd:0f:c9:57:a6:38: 38:31:6b:49:98:8e:c9:bb:8c:24:d7:b1:ae:bb:f4:7f:54:dc: 6f:9b:8b:eb:9b:0d:75:67:21:09:d3:09:eb:f0:90:a4:18:f6: c5:e6:d3:b5:17:dc:0b:95:87:1d:99:c5:76:a0:bc:68:f9:d1: f0:59:3b:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB07zOsCFiG2JZS72xKDVAoCgdHkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQwNDMxNjNBOEJGRjUwNjAwRjE2NDEwREUyN0I3QTBE RUVDMUU2MTAeFw0yNDA1MjkxNTQ2MTRaFw0yNDA2MDExODAwMTRaMDMxMTAvBgNV BAMTKDhCNUMwMTJDMEYzQjRDOUE1RTdFMzBERTY0NjM3MzczNkYyOUQzNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/bwjwgP4H5iYWEH4cmgSiT6kT fokWzXOW5z9hA6VEoRYUjbdr6UY3+4Eof8oNSo2me72fiPN6SgJgg2oBpUUFImlQ GeZrhPQKDDeHY6rs5By/I+hK1o+viXAcXjcsgbHxL5lpHiWdsYtky5vWWAZKA4er dLsNg+9lqeaKgr7jdEB86QFyu4FxP3KH1cLcAnebcZJhnyRRrdOnszSPmsUFZR6E 3yprO6ahOT60UjI760Yy1SzdSqTiaUD9PmrEHUgsgXejR8V2PZJejTl94PQe1NAv le1zLLWIkcZgY2a6XIup4UkOtceRPMealpAwIcrV0XD700/3wm/+XQ1jeQhDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi1wBLA87TJpefjDeZGNzc28p018wHwYDVR0j BBgwFoAUFAQxY6i/9QYA8WQQ3ie3oN7sHmEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZWQ5ZWEyMC0zNDNkLTRhY2ItOTU4MS04MWY5ZDdlYTkyZmUvMC8xNDA0MzE2M0E4 QkZGNTA2MDBGMTY0MTBERTI3QjdBMERFRUMxRTYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTQwNDMxNjNBOEJGRjUwNjAwRjE2NDEwREUyN0I3QTBERUVD MUU2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWVkOWVhMjAtMzQzZC00YWNiLTk1 ODEtODFmOWQ3ZWE5MmZlLzAvMTQwNDMxNjNBOEJGRjUwNjAwRjE2NDEwREUyN0I3 QTBERUVDMUU2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACIo1Y53y6R/8Xe2rkis/vL8LTdj5FjUG+u+ LeGfkt81K50tTzpP2XetwttW4wXFmqk3oBrVp28NPk3rIU8GJTX1WPa3Um5Gfyj2 OS5byMrywkUoG8Jewdp4shDvO8Qw5nBDWkYSj2nVtv8Npa5BJkukj07n/ADt5l1y FcOd7CFuMCcQ6CnitsMXTTrq8bBvuJ/o3kV0UGgchV+TXbD5Am2Gxugqe9Y1htvY myN4709iZNRdYxAYCLH6QajHCcx0lt0PyVemODgxa0mYjsm7jCTXsa679H9U3G+b i+ubDXVnIQnTCevwkKQY9sXm07UX3AuVhx2ZxXagvGj50fBZOxQ= -----END CERTIFICATE-----Generated at Wed May 29 17:52:44 2024 by rpki-client on console-ams.rpki-client.org