$ rpki-client -vvf repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.mft File: 99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.mft (raw, json) Hash identifier: ADiYy3oacWc0pJuWePGBOPMoRYqKGQldFzavUg4mZkg= Subject key identifier: 51:D7:59:57:D1:75:34:07:05:A5:0F:75:1E:AA:3F:98:74:A8:4A:2D Authority key identifier: 99:CD:13:E1:44:9F:A4:48:AB:F9:FC:6A:74:D3:B1:31:3D:DF:AB:CF Certificate issuer: /CN=99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF Certificate serial: 63F558BB26727A8B63DACEF20CF00420C9DED7E7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.mft Manifest number: 042F Signing time: Sat 18 May 2024 06:11:13 +0000 Manifest this update: Sat 18 May 2024 06:06:13 +0000 Manifest next update: Tue 21 May 2024 12:28:13 +0000 Files and hashes: 1: 99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.crl (hash: KmI6hctlBACPuEqpDbvG6S8Z8L4ia8VUyDFlhDAz7F8=) 2: 323030313a6466323a393130303a3a2f34382d3438203d3e20313336383433.roa (hash: +LRNYiVKkpwjdkkGjV08o6K88IkP9184MsZ/i+jtsoQ=) 3: 3130332e3130312e35322e302f32342d3234203d3e20313336383433.roa (hash: qlOeA5YidKv3/GP/mXvGGT1Y0qiUqdI9yWF4RzRDN/o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.crl rsync://repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 12:28:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:f5:58:bb:26:72:7a:8b:63:da:ce:f2:0c:f0:04:20:c9:de:d7:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF Validity Not Before: May 18 06:06:13 2024 GMT Not After : May 21 12:28:13 2024 GMT Subject: CN=51D75957D175340705A50F751EAA3F9874A84A2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b9:7c:34:1f:55:74:74:87:ae:59:c1:00:98: 7f:92:fb:92:fe:ea:21:72:54:a9:df:0b:02:ab:71: a4:de:51:c9:0b:fb:fb:0c:49:77:4c:de:d7:81:53: 6f:80:66:1b:dd:53:af:1b:f9:58:5c:a9:59:4f:28: 2a:8a:04:a6:46:c6:40:6d:e8:12:58:08:f9:e8:9b: 81:70:cb:69:8c:76:36:58:84:89:9a:01:34:0d:da: 8d:a9:77:15:2a:0a:b9:08:5f:a4:86:63:97:8a:9f: 2d:76:09:1e:8d:2a:0a:e8:36:f2:41:7d:36:46:25: d4:cb:95:9d:97:f9:9f:c5:cc:32:60:be:bd:11:60: da:78:f2:06:e0:b0:4e:d8:0a:d4:ce:a3:b8:8e:64: 36:11:ac:c0:56:39:ff:c8:02:78:11:d3:58:0d:aa: 73:2d:47:7e:b4:27:b8:6a:c1:e8:d8:28:b6:20:ee: ec:0c:f3:02:20:43:98:19:a2:1e:e3:7b:f4:fe:f7: fc:b1:56:93:9b:6d:0c:df:a2:96:f0:59:48:82:5d: 19:ce:0c:39:7d:71:dc:82:72:86:0a:0c:7b:6f:a0: d2:79:ce:07:4c:f1:e7:62:c8:85:8f:a4:61:45:d7: 11:d9:e2:95:ad:59:ea:e1:14:85:3a:0e:b8:26:8b: e3:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:D7:59:57:D1:75:34:07:05:A5:0F:75:1E:AA:3F:98:74:A8:4A:2D X509v3 Authority Key Identifier: keyid:99:CD:13:E1:44:9F:A4:48:AB:F9:FC:6A:74:D3:B1:31:3D:DF:AB:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:5d:97:ce:be:36:a0:08:e6:ed:ab:65:3b:5c:56:6c:1c:91: b7:2a:46:76:9e:0e:50:d4:ab:84:d4:5b:91:cd:c6:6b:5c:f2: a7:7b:39:2b:ad:85:4f:43:cb:21:bd:fe:1a:65:c8:f9:8d:ac: 3b:a1:0c:f1:7d:55:92:87:3c:a5:f4:f9:e7:1e:86:4a:97:63: 9f:cc:bd:ea:5c:f3:2d:45:6e:97:38:c7:44:db:e5:84:fd:5f: 18:b5:92:47:c9:49:be:bc:dd:26:b3:a5:b9:55:73:ef:4b:4b: d5:06:d3:7b:ae:7b:27:12:66:04:8f:74:65:b0:85:5c:09:fd: 5a:41:ee:44:55:b2:a9:9e:55:e3:7c:98:b6:6b:0c:42:93:15: c7:8b:13:3c:0b:ce:18:94:50:f9:d8:3a:78:38:55:10:86:20: e1:f8:a6:72:9a:29:e8:c6:fd:7c:b5:78:32:02:a0:9d:5b:6d: 04:58:f2:3a:53:4e:f6:d2:28:68:70:dc:97:dd:ee:60:79:d2: 75:07:b6:ed:00:a6:77:e9:53:eb:c6:d2:e4:dc:ff:bb:34:80: 41:f3:bb:bc:4c:58:25:03:a8:92:30:f5:19:00:d9:31:11:00: da:53:8d:1f:9a:a9:eb:f1:60:c6:70:28:08:f9:18:a1:23:a6: 4e:4f:1b:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY/VYuyZyeotj2s7yDPAEIMne1+cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTlDRDEzRTE0NDlGQTQ0OEFCRjlGQzZBNzREM0IxMzEz RERGQUJDRjAeFw0yNDA1MTgwNjA2MTNaFw0yNDA1MjExMjI4MTNaMDMxMTAvBgNV BAMTKDUxRDc1OTU3RDE3NTM0MDcwNUE1MEY3NTFFQUEzRjk4NzRBODRBMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJuXw0H1V0dIeuWcEAmH+S+5L+ 6iFyVKnfCwKrcaTeUckL+/sMSXdM3teBU2+AZhvdU68b+VhcqVlPKCqKBKZGxkBt 6BJYCPnom4Fwy2mMdjZYhImaATQN2o2pdxUqCrkIX6SGY5eKny12CR6NKgroNvJB fTZGJdTLlZ2X+Z/FzDJgvr0RYNp48gbgsE7YCtTOo7iOZDYRrMBWOf/IAngR01gN qnMtR360J7hqwejYKLYg7uwM8wIgQ5gZoh7je/T+9/yxVpObbQzfopbwWUiCXRnO DDl9cdyCcoYKDHtvoNJ5zgdM8ediyIWPpGFF1xHZ4pWtWerhFIU6Drgmi+OvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUddZV9F1NAcFpQ91Hqo/mHSoSi0wHwYDVR0j BBgwFoAUmc0T4USfpEir+fxqdNOxMT3fq88wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTBiNGYxNS03NzIwLTRmMmEtODM0My04ZTM3ZmFlODdhNTQvMC85OUNEMTNFMTQ0 OUZBNDQ4QUJGOUZDNkE3NEQzQjEzMTNEREZBQkNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTlDRDEzRTE0NDlGQTQ0OEFCRjlGQzZBNzREM0IxMzEzRERG QUJDRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2EwYjRmMTUtNzcyMC00ZjJhLTgz NDMtOGUzN2ZhZTg3YTU0LzAvOTlDRDEzRTE0NDlGQTQ0OEFCRjlGQzZBNzREM0Ix MzEzRERGQUJDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIVdl86+NqAI5u2rZTtcVmwckbcqRnaeDlDU q4TUW5HNxmtc8qd7OSuthU9DyyG9/hplyPmNrDuhDPF9VZKHPKX0+ecehkqXY5/M vepc8y1Fbpc4x0Tb5YT9Xxi1kkfJSb683SazpblVc+9LS9UG03uueycSZgSPdGWw hVwJ/VpB7kRVsqmeVeN8mLZrDEKTFceLEzwLzhiUUPnYOng4VRCGIOH4pnKaKejG /Xy1eDICoJ1bbQRY8jpTTvbSKGhw3Jfd7mB50nUHtu0ApnfpU+vG0uTc/7s0gEHz u7xMWCUDqJIw9RkA2TERANpTjR+aqevxYMZwKAj5GKEjpk5PG1k= -----END CERTIFICATE-----Generated at Sat May 18 07:39:11 2024 by rpki-client on console-ams.rpki-client.org