$ rpki-client -vvf repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.mft File: 9EA3AB422D824FDD9A25622F84924203216B1ED1.mft (raw, json) Hash identifier: acTTrbYZYC4hKFULX86JjjHSYbZLl/omLoKq/H8gDTA= Subject key identifier: 2B:4F:D9:82:53:6E:E0:4E:49:D3:4E:AD:D2:86:C3:98:5B:6D:31:EB Authority key identifier: 9E:A3:AB:42:2D:82:4F:DD:9A:25:62:2F:84:92:42:03:21:6B:1E:D1 Certificate issuer: /CN=9EA3AB422D824FDD9A25622F84924203216B1ED1 Certificate serial: 204BD39626CB5560F7F318E2027DE3FE63E83F7C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EA3AB422D824FDD9A25622F84924203216B1ED1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.mft Manifest number: 0432 Signing time: Thu 23 May 2024 23:50:59 +0000 Manifest this update: Thu 23 May 2024 23:45:59 +0000 Manifest next update: Mon 27 May 2024 03:04:59 +0000 Files and hashes: 1: 3130332e3134332e3234352e302f32342d3234203d3e20313332363337.roa (hash: vGpl8V1e9xjX3gK4bAkO4MflBoHwIw4joWbSJsRIkWE=) 2: 3130332e3134332e3234342e302f32342d3234203d3e20313332363337.roa (hash: JfqqGzY/i3PLYNU0r1PisXsB/ZXCU8RctXrm8Aws5Z4=) 3: 9EA3AB422D824FDD9A25622F84924203216B1ED1.crl (hash: 6Uz75SXllZW36/3yidp3PVcIurkFDSkDkiAhzZ3lSaw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.crl rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EA3AB422D824FDD9A25622F84924203216B1ED1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 23:29:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:4b:d3:96:26:cb:55:60:f7:f3:18:e2:02:7d:e3:fe:63:e8:3f:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9EA3AB422D824FDD9A25622F84924203216B1ED1 Validity Not Before: May 23 23:45:59 2024 GMT Not After : May 27 03:04:59 2024 GMT Subject: CN=2B4FD982536EE04E49D34EADD286C3985B6D31EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b7:6d:ba:8c:a6:7b:36:d4:5a:eb:34:ce:cf: d3:6e:6c:55:ef:f8:9e:62:27:85:d8:96:e1:80:78: 57:fa:c7:50:ea:42:64:3b:2c:96:ef:49:13:e8:d9: b7:d8:9f:56:ed:54:98:10:d7:47:b2:be:6e:a7:ec: b8:be:d0:0d:06:d3:c1:13:09:ad:32:a8:44:a2:bd: 2b:3e:6d:08:45:51:f3:6a:03:81:48:6a:38:7b:0a: 37:8e:87:5f:8b:f2:ea:6e:51:57:ff:00:77:08:7d: 9e:1e:82:2e:51:e2:3b:51:44:b5:fa:21:60:4d:23: 27:81:68:ab:81:37:04:a2:c0:92:b4:4c:1d:e7:4f: cb:93:46:2d:21:fa:24:ef:c5:1e:52:dd:63:e8:e0: fb:97:e3:9c:31:cd:1f:c8:93:e1:90:63:d4:b4:5b: f4:78:3e:5e:96:62:47:15:37:83:25:b4:8d:06:46: 2a:5e:58:59:41:c7:7d:0e:e6:cd:2d:6e:d6:8a:e6: 27:02:98:46:ab:86:32:80:b7:81:0a:53:b6:aa:7d: 40:21:c6:a9:7c:e9:64:47:1a:03:fa:b1:d0:79:d7: 9f:b8:13:ed:10:a6:42:5b:48:46:b4:9a:63:39:56: 71:cb:7a:54:b7:d8:20:35:e7:eb:6a:81:02:2d:19: d7:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:4F:D9:82:53:6E:E0:4E:49:D3:4E:AD:D2:86:C3:98:5B:6D:31:EB X509v3 Authority Key Identifier: keyid:9E:A3:AB:42:2D:82:4F:DD:9A:25:62:2F:84:92:42:03:21:6B:1E:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EA3AB422D824FDD9A25622F84924203216B1ED1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:a4:f8:41:1a:bd:8f:61:73:0e:c3:35:63:83:09:84:cd:b7: 75:a2:45:67:19:6b:9e:9b:26:f4:18:a5:ab:d9:c2:ac:c6:c6: e5:2f:4f:8c:89:9a:1a:dc:c4:f7:45:46:cb:0d:9e:60:a2:e7: b4:96:57:37:82:39:f5:17:e3:80:91:0a:8c:66:ce:f4:aa:35: 86:49:61:f9:0d:7a:b4:90:e3:69:dc:d9:7d:eb:a0:58:91:2f: 3f:69:ef:e1:9f:2e:e1:24:79:85:83:53:00:2b:2b:48:98:c1: aa:48:b3:e7:31:c4:c1:da:73:5e:44:10:87:3f:f9:64:0a:2c: b6:95:f4:02:cb:7c:d2:18:ae:f7:c2:e0:8b:37:ce:62:ee:d7: e2:20:e6:bb:7f:fd:09:f1:f1:88:0d:dd:cd:e8:77:00:54:45: 4b:28:2a:7d:02:b6:4d:81:21:d4:aa:b5:0c:87:cf:5e:b1:31: 89:fa:fb:ca:6a:b5:df:c5:4c:5b:cd:e1:bf:cb:19:c8:cf:4d: 6e:6d:d0:f6:e2:6c:04:50:73:f6:36:d3:84:10:50:20:fb:1b: 1f:d3:e4:41:7e:a4:bd:8d:c6:58:11:fe:b5:60:de:66:22:69: ed:ff:cf:55:d7:b7:9f:cd:30:ae:0f:49:ed:65:f2:80:a2:76: 1d:ee:69:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIEvTlibLVWD38xjiAn3j/mPoP3wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUVBM0FCNDIyRDgyNEZERDlBMjU2MjJGODQ5MjQyMDMy MTZCMUVEMTAeFw0yNDA1MjMyMzQ1NTlaFw0yNDA1MjcwMzA0NTlaMDMxMTAvBgNV BAMTKDJCNEZEOTgyNTM2RUUwNEU0OUQzNEVBREQyODZDMzk4NUI2RDMxRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzt226jKZ7NtRa6zTOz9NubFXv +J5iJ4XYluGAeFf6x1DqQmQ7LJbvSRPo2bfYn1btVJgQ10eyvm6n7Li+0A0G08ET Ca0yqESivSs+bQhFUfNqA4FIajh7CjeOh1+L8upuUVf/AHcIfZ4egi5R4jtRRLX6 IWBNIyeBaKuBNwSiwJK0TB3nT8uTRi0h+iTvxR5S3WPo4PuX45wxzR/Ik+GQY9S0 W/R4Pl6WYkcVN4MltI0GRipeWFlBx30O5s0tbtaK5icCmEarhjKAt4EKU7aqfUAh xql86WRHGgP6sdB515+4E+0QpkJbSEa0mmM5VnHLelS32CA15+tqgQItGdcrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK0/ZglNu4E5J006t0obDmFttMeswHwYDVR0j BBgwFoAUnqOrQi2CT92aJWIvhJJCAyFrHtEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZjZkNTU4Mi05YTYzLTQxZTUtODk2OS1kYjkxOTI3N2E1ZTUvMC85RUEzQUI0MjJE ODI0RkREOUEyNTYyMkY4NDkyNDIwMzIxNkIxRUQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUVBM0FCNDIyRDgyNEZERDlBMjU2MjJGODQ5MjQyMDMyMTZC MUVEMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2Y2ZDU1ODItOWE2My00MWU1LTg5 NjktZGI5MTkyNzdhNWU1LzAvOUVBM0FCNDIyRDgyNEZERDlBMjU2MjJGODQ5MjQy MDMyMTZCMUVEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACOk+EEavY9hcw7DNWODCYTNt3WiRWcZa56b JvQYpavZwqzGxuUvT4yJmhrcxPdFRssNnmCi57SWVzeCOfUX44CRCoxmzvSqNYZJ YfkNerSQ42nc2X3roFiRLz9p7+GfLuEkeYWDUwArK0iYwapIs+cxxMHac15EEIc/ +WQKLLaV9ALLfNIYrvfC4Is3zmLu1+Ig5rt//Qnx8YgN3c3odwBURUsoKn0Ctk2B IdSqtQyHz16xMYn6+8pqtd/FTFvN4b/LGcjPTW5t0PbibARQc/Y204QQUCD7Gx/T 5EF+pL2NxlgR/rVg3mYiae3/z1XXt5/NMK4PSe1l8oCidh3uaWc= -----END CERTIFICATE-----Generated at Fri May 24 00:21:34 2024 by rpki-client on console-fra.rpki-client.org