$ rpki-client -vvf repo-rpki.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.mft File: A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.mft (raw, json) Hash identifier: QG9Syn3OqNT64TTZ4EuRiJJElvTjginjidX2IJbDYBs= Subject key identifier: B4:84:AB:AA:00:31:F7:2B:9E:C6:9E:C4:34:3A:79:E0:0C:A4:B0:5F Authority key identifier: A7:9F:D3:07:C3:7E:8C:55:9F:65:A5:8E:C9:CE:95:BE:26:6F:8A:6D Certificate issuer: /CN=A79FD307C37E8C559F65A58EC9CE95BE266F8A6D Certificate serial: 10AC9081CD3AFED2854B49F679CBCA14A94C0A84 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.mft Manifest number: 0430 Signing time: Sat 18 May 2024 14:41:17 +0000 Manifest this update: Sat 18 May 2024 14:36:17 +0000 Manifest next update: Wed 22 May 2024 02:25:17 +0000 Files and hashes: 1: 3230322e3133382e3232342e302f31392d3234203d3e2039363537.roa (hash: zr7p0ptZFkfmeZC4cG7dacYW6mYkWxf8b5Bjh3o9UdQ=) 2: A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.crl (hash: l1jglyme3T6GfG9awngX1gAux20xlCmUrHLaXGY9se8=) 3: 323430333a393530303a3a2f33322d3336203d3e2039363537.roa (hash: AKHJfEPSvltjLxiZ9wS/5F+0ITgA+QVfBk2H2qGUfA4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.crl rsync://repo-rpki.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:ac:90:81:cd:3a:fe:d2:85:4b:49:f6:79:cb:ca:14:a9:4c:0a:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A79FD307C37E8C559F65A58EC9CE95BE266F8A6D Validity Not Before: May 18 14:36:17 2024 GMT Not After : May 22 02:25:17 2024 GMT Subject: CN=B484ABAA0031F72B9EC69EC4343A79E00CA4B05F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:d4:2a:78:cb:b2:f5:87:99:54:c2:5f:48:8c: ec:d5:ac:30:69:68:b2:47:7a:6f:94:27:a6:b9:9a: 38:b5:b4:25:cb:b3:01:e9:6f:8f:be:de:79:87:e4: 4f:3e:7f:bf:13:bf:d4:87:17:11:f0:41:2b:d0:d7: e7:40:54:9b:5d:8b:cb:4c:01:3d:63:f9:5c:ae:e1: 9e:8c:9f:42:f7:fb:55:f3:d7:6f:5d:63:16:18:c5: cf:59:17:da:9c:8c:0f:2d:65:04:65:07:d0:74:d8: f0:a0:f4:cb:93:6f:37:2a:fd:34:cc:8e:91:66:d5: 89:19:db:65:28:b0:57:be:38:94:f6:04:39:af:33: 38:65:6b:6c:3c:d9:47:1f:e7:9e:02:9f:98:e7:19: 8b:dc:ab:18:ff:93:7e:b0:2f:e1:6c:74:5c:f0:22: da:7e:d9:70:6a:02:12:3d:d4:54:15:9f:24:58:7f: 86:82:52:c8:87:46:88:21:aa:02:8a:db:23:f9:87: 05:a9:43:04:a4:13:21:d4:0f:7e:64:cf:f6:6a:e8: c2:a3:83:aa:f1:0c:40:7b:41:63:14:bf:a0:97:f6: 3d:aa:67:7f:c2:63:57:64:22:e6:83:b4:4b:bf:3a: 30:0a:27:52:ce:5d:44:72:b4:fb:82:29:50:61:7b: 94:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:84:AB:AA:00:31:F7:2B:9E:C6:9E:C4:34:3A:79:E0:0C:A4:B0:5F X509v3 Authority Key Identifier: keyid:A7:9F:D3:07:C3:7E:8C:55:9F:65:A5:8E:C9:CE:95:BE:26:6F:8A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:b0:05:87:11:9d:ea:87:62:7d:20:f3:2b:0d:6a:c0:ca:78: 8a:2c:d5:bc:c5:8b:6d:eb:0d:65:ad:58:77:77:b8:d5:6c:48: 28:7d:ec:84:8e:ba:b5:09:ec:bc:ab:d4:0c:01:96:fa:d7:31: 22:a3:66:76:9a:92:eb:7c:c1:45:0b:ae:3d:82:7a:8f:56:86: 61:64:86:ad:5f:5d:70:ae:f9:0d:a5:1b:f0:20:80:09:87:88: d3:6a:de:f0:a6:2e:16:0d:3f:80:27:3b:8c:a8:5c:08:b7:8b: b8:75:1a:bd:d9:3c:52:92:40:8e:ff:40:5e:3f:ba:e4:9b:e9: c2:64:24:1a:31:22:94:b3:f1:78:fe:00:54:5b:f0:b1:8b:11: 58:f8:24:a9:c2:8d:f6:4f:16:d2:97:7b:e2:d6:b9:21:e5:84: 7f:70:96:2a:47:ac:5f:ac:2e:64:0e:79:da:7a:09:6d:d8:ce: ee:9c:74:2b:b8:fa:ed:9b:1f:1d:26:17:40:ce:f5:dd:1e:82: 22:0a:1d:f1:60:18:f0:f1:4b:27:17:e2:e7:5f:b4:94:6d:98: 30:8c:9b:53:8f:9d:3e:20:aa:e9:3c:a5:1d:0a:05:0b:ac:db: 9e:e1:f5:9a:fa:9b:4c:f1:40:fc:6d:6d:17:22:4e:ff:94:ce: 1f:ae:32:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEKyQgc06/tKFS0n2ecvKFKlMCoQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc5RkQzMDdDMzdFOEM1NTlGNjVBNThFQzlDRTk1QkUy NjZGOEE2RDAeFw0yNDA1MTgxNDM2MTdaFw0yNDA1MjIwMjI1MTdaMDMxMTAvBgNV BAMTKEI0ODRBQkFBMDAzMUY3MkI5RUM2OUVDNDM0M0E3OUUwMENBNEIwNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn1Cp4y7L1h5lUwl9IjOzVrDBp aLJHem+UJ6a5mji1tCXLswHpb4++3nmH5E8+f78Tv9SHFxHwQSvQ1+dAVJtdi8tM AT1j+Vyu4Z6Mn0L3+1Xz129dYxYYxc9ZF9qcjA8tZQRlB9B02PCg9MuTbzcq/TTM jpFm1YkZ22UosFe+OJT2BDmvMzhla2w82Ucf554Cn5jnGYvcqxj/k36wL+FsdFzw Itp+2XBqAhI91FQVnyRYf4aCUsiHRoghqgKK2yP5hwWpQwSkEyHUD35kz/Zq6MKj g6rxDEB7QWMUv6CX9j2qZ3/CY1dkIuaDtEu/OjAKJ1LOXURytPuCKVBhe5S7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtISrqgAx9yuexp7ENDp54AyksF8wHwYDVR0j BBgwFoAUp5/TB8N+jFWfZaWOyc6VviZvim0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OGY2YmViOC1lNGU4LTRlMzktODI3NS0xYzZkNzdjM2VlZjgvMC9BNzlGRDMwN0Mz N0U4QzU1OUY2NUE1OEVDOUNFOTVCRTI2NkY4QTZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTc5RkQzMDdDMzdFOEM1NTlGNjVBNThFQzlDRTk1QkUyNjZG OEE2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzhmNmJlYjgtZTRlOC00ZTM5LTgy NzUtMWM2ZDc3YzNlZWY4LzAvQTc5RkQzMDdDMzdFOEM1NTlGNjVBNThFQzlDRTk1 QkUyNjZGOEE2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJOwBYcRneqHYn0g8ysNasDKeIos1bzFi23r DWWtWHd3uNVsSCh97ISOurUJ7Lyr1AwBlvrXMSKjZnaakut8wUULrj2Ceo9WhmFk hq1fXXCu+Q2lG/AggAmHiNNq3vCmLhYNP4AnO4yoXAi3i7h1Gr3ZPFKSQI7/QF4/ uuSb6cJkJBoxIpSz8Xj+AFRb8LGLEVj4JKnCjfZPFtKXe+LWuSHlhH9wlipHrF+s LmQOedp6CW3Yzu6cdCu4+u2bHx0mF0DO9d0egiIKHfFgGPDxSycX4udftJRtmDCM m1OPnT4gquk8pR0KBQus257h9Zr6m0zxQPxtbRciTv+Uzh+uMi4= -----END CERTIFICATE-----Generated at Sat May 18 15:25:22 2024 by rpki-client on console-fra.rpki-client.org