$ rpki-client -vvf repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.mft File: 408395914A1A74FF4E6AB1DE063F82C61E0801F2.mft (raw, json) Hash identifier: tcyYyR/DSaOFYw6wz1mrg8ISb0BU5J1LN13aWHDEJqk= Subject key identifier: 44:DA:2E:69:0B:B1:98:D1:07:46:C9:2B:77:CB:ED:9C:EF:04:B5:28 Authority key identifier: 40:83:95:91:4A:1A:74:FF:4E:6A:B1:DE:06:3F:82:C6:1E:08:01:F2 Certificate issuer: /CN=408395914A1A74FF4E6AB1DE063F82C61E0801F2 Certificate serial: 6A743D008B5AA05948F7917C9A8EE8E5893F5B7E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408395914A1A74FF4E6AB1DE063F82C61E0801F2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.mft Manifest number: 03BD Signing time: Mon 20 May 2024 03:50:55 +0000 Manifest this update: Mon 20 May 2024 03:45:55 +0000 Manifest next update: Thu 23 May 2024 05:03:55 +0000 Files and hashes: 1: 3130332e3134332e32302e302f32342d3234203d3e20313339343035.roa (hash: +oXnPFJJvwc61WUVTOPwyI8ikG9eZxhp1R/huTTQBPY=) 2: 408395914A1A74FF4E6AB1DE063F82C61E0801F2.crl (hash: rJ/rUu6Olw6w3Cd0XDtYGn8ZlPaWF2A+XaSv6zlRLOY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.crl rsync://repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408395914A1A74FF4E6AB1DE063F82C61E0801F2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 05:03:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:74:3d:00:8b:5a:a0:59:48:f7:91:7c:9a:8e:e8:e5:89:3f:5b:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=408395914A1A74FF4E6AB1DE063F82C61E0801F2 Validity Not Before: May 20 03:45:55 2024 GMT Not After : May 23 05:03:55 2024 GMT Subject: CN=44DA2E690BB198D10746C92B77CBED9CEF04B528 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:40:6a:4e:34:f0:64:89:77:af:e5:05:a7:b2: 0b:31:a8:52:ff:eb:5b:1f:4b:fe:c8:40:d1:d6:2a: 74:4e:9b:19:58:0a:20:50:4d:38:7a:62:e4:71:25: 2d:a0:d9:f5:d3:93:d4:73:ab:70:57:fb:10:c9:c1: e2:bf:6d:cd:13:87:cc:24:e1:47:5d:39:85:8f:86: 56:ea:9c:51:16:ec:e2:68:93:2e:f3:79:21:20:cc: a0:b6:b9:e0:a2:6b:df:fa:51:bc:72:d3:96:57:f4: f2:d7:1e:4c:00:5f:3f:8d:9e:a2:1a:9d:a0:12:f5: f0:5a:48:ee:ad:3e:df:bb:e1:1b:9f:a5:ba:64:8a: f8:31:44:52:0a:90:07:c3:f6:66:3c:f9:72:f8:27: 06:af:3c:d8:cd:79:f9:10:d8:df:a2:db:62:08:76: 50:0d:fe:2a:44:36:94:f7:ee:00:96:c5:6a:8a:fc: 2b:7d:2f:bf:a0:d7:61:15:9e:52:1d:32:e9:3a:a8: b6:9d:1b:4b:49:8d:8e:34:aa:45:23:b5:23:5e:9b: aa:95:14:f7:dd:86:ef:4c:80:bb:f7:34:7b:52:18: cf:6d:4d:fd:8d:92:1d:aa:16:cc:b1:6e:51:4e:47: e5:a3:80:99:6e:45:42:06:9a:12:cb:5b:28:1f:5c: 2b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:DA:2E:69:0B:B1:98:D1:07:46:C9:2B:77:CB:ED:9C:EF:04:B5:28 X509v3 Authority Key Identifier: keyid:40:83:95:91:4A:1A:74:FF:4E:6A:B1:DE:06:3F:82:C6:1E:08:01:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408395914A1A74FF4E6AB1DE063F82C61E0801F2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:8a:24:63:b1:0f:02:f5:60:62:53:fb:73:3e:25:4f:c0:a7: 0a:0b:2d:86:27:02:b7:96:dc:ca:b8:5c:29:61:54:c7:16:fa: fe:15:10:a4:d3:38:35:85:0c:65:8c:8a:74:dc:ec:06:f0:b9: 56:a9:4d:6f:80:08:bf:63:62:ad:06:68:2d:f8:ce:46:94:30: f0:64:64:c0:dc:3c:6d:8f:c8:46:45:c5:8a:ef:6c:51:78:79: fb:a3:ce:9d:fa:2b:8e:93:ae:0f:12:da:16:6c:48:9d:19:aa: 20:30:f3:55:42:6a:7a:30:2c:de:c1:94:e2:9d:0f:ed:fd:80: e8:13:71:f9:18:4b:71:6d:b2:98:c0:fb:04:4e:78:49:ba:07: 4e:23:ee:f2:1d:eb:d5:6e:bc:89:38:05:4e:c6:f2:ad:d6:ba: 57:da:4b:a9:9b:ad:94:26:8a:37:80:a3:e6:00:35:b2:1b:49: 82:58:0f:bc:eb:61:1a:aa:c4:d3:f2:e8:4a:d1:f0:a7:7d:18: dd:7e:e3:c3:bf:d7:45:6a:47:73:85:f2:3a:e9:12:1c:0c:cb: e8:fe:40:26:e3:70:cc:26:fb:c0:1f:6c:b6:bc:ce:ba:55:b7: e3:84:1a:e2:e2:64:e9:9d:d3:bc:e8:a0:d0:12:eb:1e:f0:50: 27:7e:be:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUanQ9AItaoFlI95F8mo7o5Yk/W34wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA4Mzk1OTE0QTFBNzRGRjRFNkFCMURFMDYzRjgyQzYx RTA4MDFGMjAeFw0yNDA1MjAwMzQ1NTVaFw0yNDA1MjMwNTAzNTVaMDMxMTAvBgNV BAMTKDQ0REEyRTY5MEJCMTk4RDEwNzQ2QzkyQjc3Q0JFRDlDRUYwNEI1MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeQGpONPBkiXev5QWnsgsxqFL/ 61sfS/7IQNHWKnROmxlYCiBQTTh6YuRxJS2g2fXTk9Rzq3BX+xDJweK/bc0Th8wk 4UddOYWPhlbqnFEW7OJoky7zeSEgzKC2ueCia9/6Ubxy05ZX9PLXHkwAXz+NnqIa naAS9fBaSO6tPt+74RufpbpkivgxRFIKkAfD9mY8+XL4JwavPNjNefkQ2N+i22II dlAN/ipENpT37gCWxWqK/Ct9L7+g12EVnlIdMuk6qLadG0tJjY40qkUjtSNem6qV FPfdhu9MgLv3NHtSGM9tTf2Nkh2qFsyxblFOR+WjgJluRUIGmhLLWygfXCtlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURNouaQuxmNEHRskrd8vtnO8EtSgwHwYDVR0j BBgwFoAUQIOVkUoadP9OarHeBj+Cxh4IAfIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NzhjM2M2OS0zNmQwLTRhZTgtYThkZi02M2QzZjQ0Y2NkOGQvMC80MDgzOTU5MTRB MUE3NEZGNEU2QUIxREUwNjNGODJDNjFFMDgwMUYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDA4Mzk1OTE0QTFBNzRGRjRFNkFCMURFMDYzRjgyQzYxRTA4 MDFGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzc4YzNjNjktMzZkMC00YWU4LWE4 ZGYtNjNkM2Y0NGNjZDhkLzAvNDA4Mzk1OTE0QTFBNzRGRjRFNkFCMURFMDYzRjgy QzYxRTA4MDFGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJOKJGOxDwL1YGJT+3M+JU/ApwoLLYYnAreW 3Mq4XClhVMcW+v4VEKTTODWFDGWMinTc7AbwuVapTW+ACL9jYq0GaC34zkaUMPBk ZMDcPG2PyEZFxYrvbFF4efujzp36K46Trg8S2hZsSJ0ZqiAw81VCanowLN7BlOKd D+39gOgTcfkYS3FtspjA+wROeEm6B04j7vId69VuvIk4BU7G8q3WulfaS6mbrZQm ijeAo+YANbIbSYJYD7zrYRqqxNPy6ErR8Kd9GN1+48O/10VqR3OF8jrpEhwMy+j+ QCbjcMwm+8AfbLa8zrpVt+OEGuLiZOmd07zooNAS6x7wUCd+vos= -----END CERTIFICATE-----Generated at Mon May 20 04:29:39 2024 by rpki-client on console-fra.rpki-client.org