$ rpki-client -vvf repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft File: 408585C1D62A4F618C0424E9BEDC3B91411C2276.mft (raw, json) Hash identifier: fZ8P/dlxuiYuzwVnqfycYHsFaF5ERCtAgzvG6qggQII= Subject key identifier: FD:4A:A3:D8:7C:B2:B5:47:51:08:D0:7B:87:B2:3A:6C:C2:87:F2:AD Authority key identifier: 40:85:85:C1:D6:2A:4F:61:8C:04:24:E9:BE:DC:3B:91:41:1C:22:76 Certificate issuer: /CN=408585C1D62A4F618C0424E9BEDC3B91411C2276 Certificate serial: 41C3BD5A98D7409DD30038D993C36EE785FA65A5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408585C1D62A4F618C0424E9BEDC3B91411C2276.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft Manifest number: 0141 Signing time: Sun 19 May 2024 17:21:46 +0000 Manifest this update: Sun 19 May 2024 17:16:46 +0000 Manifest next update: Wed 22 May 2024 21:32:46 +0000 Files and hashes: 1: 408585C1D62A4F618C0424E9BEDC3B91411C2276.crl (hash: pH7Ub3015NXD+FUlHzih9rVdmOoMDdLJQzBWcbxzxv4=) 2: 3130332e3132322e3132312e302f32342d3234203d3e20313338303836.roa (hash: X3Kfrvlbc3BS006u0JOxckKu04Zt9Mkdi7VKYvDdVTw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.crl rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408585C1D62A4F618C0424E9BEDC3B91411C2276.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 19:53:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:c3:bd:5a:98:d7:40:9d:d3:00:38:d9:93:c3:6e:e7:85:fa:65:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=408585C1D62A4F618C0424E9BEDC3B91411C2276 Validity Not Before: May 19 17:16:46 2024 GMT Not After : May 22 21:32:46 2024 GMT Subject: CN=FD4AA3D87CB2B5475108D07B87B23A6CC287F2AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:da:42:1c:12:61:18:94:6f:0e:56:09:97:f8: 2b:22:d8:24:92:fa:04:33:1b:9b:c0:51:c0:72:86: d0:75:7b:21:58:b0:7a:a1:63:e2:ea:a6:cc:d0:d7: b0:f9:7a:67:8b:53:e0:96:73:b4:a5:5f:16:ec:ff: 44:90:e7:41:2e:15:56:42:1f:82:bb:6f:e9:71:fd: 13:10:a4:db:f1:55:9b:3e:0f:87:b0:cb:73:aa:c5: c0:49:5a:0c:b1:79:4f:a7:03:8d:42:66:36:09:5c: 6f:34:04:a6:39:ec:c2:b2:58:d9:9a:ce:a7:28:fc: ea:a7:eb:c0:26:f6:45:36:a9:2b:a2:3d:66:01:0c: f5:66:64:55:ff:02:b5:1e:3c:5a:fb:85:2e:c7:7e: 9f:6b:53:6f:0e:8a:6e:d0:ed:ff:bf:85:cb:c7:5d: 8d:f0:5f:a0:2a:7d:37:71:a5:73:a4:81:d9:8d:d1: a0:9a:f6:e8:5f:2b:79:1d:7d:ab:a9:a9:a3:d3:00: 8a:42:b5:4a:57:17:e7:16:9c:fd:fc:2a:e0:03:c2: 1d:46:65:b6:42:21:e1:39:61:62:0d:d6:4d:94:4e: 98:05:2c:94:e6:df:14:fa:f8:c7:44:0b:8a:2f:13: e7:0f:76:dc:25:0a:47:32:ff:29:54:09:b4:9a:8e: c4:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:4A:A3:D8:7C:B2:B5:47:51:08:D0:7B:87:B2:3A:6C:C2:87:F2:AD X509v3 Authority Key Identifier: keyid:40:85:85:C1:D6:2A:4F:61:8C:04:24:E9:BE:DC:3B:91:41:1C:22:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408585C1D62A4F618C0424E9BEDC3B91411C2276.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:2e:ce:6a:4b:16:6f:9d:04:f1:32:3d:6e:09:ec:81:52:f3: 1f:4b:ec:27:89:d6:1b:a6:22:4b:f0:17:4a:e7:f9:05:9e:fd: 40:7a:71:a2:9e:79:22:8a:84:97:6b:f2:87:5d:af:7a:ab:52: a1:8a:45:fc:6e:ed:14:89:bf:6f:81:8d:ff:94:2b:77:3f:ee: b1:0d:f2:7b:1a:45:a4:e8:6b:df:56:c8:d7:d5:5f:50:5d:6c: cb:c1:0d:ae:36:56:f7:7b:2b:83:60:0f:a6:1d:98:44:28:84: d7:63:0e:d3:5c:cf:e1:ee:7f:d8:6a:5a:26:0d:cb:ad:90:fb: 27:7e:16:09:c4:25:1c:b8:16:b9:2c:4d:a8:b1:d2:e1:16:db: bc:17:1c:3e:3b:9d:a3:f0:f1:6f:40:92:7a:f3:4c:99:37:39: f2:35:ed:8d:7d:93:31:6e:31:b9:2d:76:78:5a:76:64:6b:3c: 92:20:d7:25:0a:df:f5:17:2b:25:83:39:51:21:12:17:ac:57: 76:a7:6f:03:69:08:31:8f:10:81:e5:a6:61:fa:c6:08:b2:6e: 25:c6:31:b9:bf:a8:a6:01:f4:e8:68:7f:9f:28:61:9a:1a:7f: 62:22:f2:58:48:3a:a1:4d:0e:fe:cb:ac:a9:4e:2e:84:2e:4e: 49:09:34:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQcO9WpjXQJ3TADjZk8Nu54X6ZaUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA4NTg1QzFENjJBNEY2MThDMDQyNEU5QkVEQzNCOTE0 MTFDMjI3NjAeFw0yNDA1MTkxNzE2NDZaFw0yNDA1MjIyMTMyNDZaMDMxMTAvBgNV BAMTKEZENEFBM0Q4N0NCMkI1NDc1MTA4RDA3Qjg3QjIzQTZDQzI4N0YyQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC32kIcEmEYlG8OVgmX+Csi2CSS +gQzG5vAUcByhtB1eyFYsHqhY+LqpszQ17D5emeLU+CWc7SlXxbs/0SQ50EuFVZC H4K7b+lx/RMQpNvxVZs+D4ewy3OqxcBJWgyxeU+nA41CZjYJXG80BKY57MKyWNma zqco/Oqn68Am9kU2qSuiPWYBDPVmZFX/ArUePFr7hS7Hfp9rU28Oim7Q7f+/hcvH XY3wX6AqfTdxpXOkgdmN0aCa9uhfK3kdfaupqaPTAIpCtUpXF+cWnP38KuADwh1G ZbZCIeE5YWIN1k2UTpgFLJTm3xT6+MdEC4ovE+cPdtwlCkcy/ylUCbSajsT/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/Uqj2HyytUdRCNB7h7I6bMKH8q0wHwYDVR0j BBgwFoAUQIWFwdYqT2GMBCTpvtw7kUEcInYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i N2UyNmM4My01ZWQyLTRjOGItOGEwMy02Y2IwMGQxZWQzMzgvMC80MDg1ODVDMUQ2 MkE0RjYxOEMwNDI0RTlCRURDM0I5MTQxMUMyMjc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDA4NTg1QzFENjJBNEY2MThDMDQyNEU5QkVEQzNCOTE0MTFD MjI3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjdlMjZjODMtNWVkMi00YzhiLThh MDMtNmNiMDBkMWVkMzM4LzAvNDA4NTg1QzFENjJBNEY2MThDMDQyNEU5QkVEQzNC OTE0MTFDMjI3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHouzmpLFm+dBPEyPW4J7IFS8x9L7CeJ1hum IkvwF0rn+QWe/UB6caKeeSKKhJdr8oddr3qrUqGKRfxu7RSJv2+Bjf+UK3c/7rEN 8nsaRaToa99WyNfVX1BdbMvBDa42Vvd7K4NgD6YdmEQohNdjDtNcz+Huf9hqWiYN y62Q+yd+FgnEJRy4FrksTaix0uEW27wXHD47naPw8W9AknrzTJk3OfI17Y19kzFu MbktdnhadmRrPJIg1yUK3/UXKyWDOVEhEhesV3anbwNpCDGPEIHlpmH6xgiybiXG Mbm/qKYB9Ohof58oYZoaf2Ii8lhIOqFNDv7LrKlOLoQuTkkJNBE= -----END CERTIFICATE-----Generated at Sun May 19 17:53:55 2024 by rpki-client on console-fra.rpki-client.org