$ rpki-client -vvf repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft File: A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft (raw, json) Hash identifier: 3djHhKK3qBUXIqDA0hozYLfU4s4pmNhdzrQaRTME+PI= Subject key identifier: 69:AF:29:04:04:06:20:61:5B:B5:87:A5:77:9E:5D:2C:81:01:FA:83 Authority key identifier: A9:E9:DB:B7:BC:3B:B1:6F:6A:6A:84:8E:43:07:E8:76:F9:F1:A5:06 Certificate issuer: /CN=A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506 Certificate serial: 1EEFB7CF5BC3ACC9A08E72CACD31DD6ACCD03207 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft Manifest number: 0245 Signing time: Thu 30 May 2024 12:51:28 +0000 Manifest this update: Thu 30 May 2024 12:46:28 +0000 Manifest next update: Sun 02 Jun 2024 13:29:28 +0000 Files and hashes: 1: A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.crl (hash: C0wbxjVCFWqB1ScoElnQKB7KIqQvUH66c8cbyouflFU=) 2: 3130332e3136362e3132352e302f32342d3234203d3e20313431393437.roa (hash: egnfM/Fp4UdwuWEpUWSdxpcnYQvSqfa+lGvzoQRmlJc=) 3: 3130332e3136362e3132342e302f32342d3234203d3e20313431393437.roa (hash: ro3e2oTU4Bzqcv5mcE0CznmwyiTlHLs5/sM2KGvahsk=) 4: 3130332e3136362e3132342e302f32332d3233203d3e20313431393437.roa (hash: OwO3OpqIIz2gJPEH6CtP2uU6jpmtHeoO1nNMRt4qXSM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.crl rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 13:29:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:ef:b7:cf:5b:c3:ac:c9:a0:8e:72:ca:cd:31:dd:6a:cc:d0:32:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506 Validity Not Before: May 30 12:46:28 2024 GMT Not After : Jun 2 13:29:28 2024 GMT Subject: CN=69AF2904040620615BB587A5779E5D2C8101FA83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:16:ed:68:1d:59:1b:45:2e:95:45:1d:1d:06: 44:35:bf:b4:dc:aa:80:c7:46:8b:16:0d:ed:7c:0c: 3c:30:a7:e0:01:d9:4a:a1:14:e0:d5:cc:4c:40:b6: 24:c7:e9:f2:7a:be:dd:7a:8b:1d:cc:3b:aa:9c:cc: 9d:39:8f:f0:e2:77:11:67:49:d5:48:fb:4e:5e:de: 41:eb:30:40:58:41:4e:1c:8c:12:cd:83:10:a4:fd: 88:5d:3e:bb:22:d0:ae:fa:5d:4b:c3:5b:a6:55:f1: d7:ef:c0:57:1a:4a:68:12:46:b1:35:59:f8:12:34: 53:3a:27:4c:c0:ee:de:db:7c:7c:c2:56:b3:a2:f0: 39:16:41:e6:a7:18:03:7c:14:72:e1:a1:1f:8f:1a: eb:c4:55:96:d4:6a:48:1e:65:98:12:7b:cc:e9:bd: f2:c4:58:4b:f8:97:a6:d9:fa:f7:f7:21:47:e4:a9: c4:dd:ba:24:aa:6c:d0:b8:8f:43:a4:70:fd:a0:68: ba:09:86:d4:d5:2c:c4:31:e7:83:60:cd:a4:e7:ce: 78:60:ca:2a:e2:b9:61:66:7a:cf:66:b8:e0:7d:ba: 72:95:5f:55:19:ed:c6:41:5a:b9:1b:ad:f4:db:26: d5:dd:1a:f1:8d:70:68:3e:43:ad:c1:44:76:ca:f0: cb:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:AF:29:04:04:06:20:61:5B:B5:87:A5:77:9E:5D:2C:81:01:FA:83 X509v3 Authority Key Identifier: keyid:A9:E9:DB:B7:BC:3B:B1:6F:6A:6A:84:8E:43:07:E8:76:F9:F1:A5:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d54e456d-dbe2-460c-86d4-ebc2d1156176/0/A9E9DBB7BC3BB16F6A6A848E4307E876F9F1A506.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:fd:aa:95:28:31:e4:71:1e:04:3e:18:5e:ec:cf:d0:80:f6: 66:37:2c:9a:f3:50:d4:41:72:89:0c:2a:01:e7:27:fc:9b:a8: 6c:81:14:eb:0c:1a:e3:78:c7:af:c1:68:77:54:c8:65:a7:ea: 9d:74:e2:86:37:6e:96:7a:1b:29:b7:d2:07:ab:08:32:c7:04: 97:7a:d6:d2:e1:3a:36:6e:2b:83:9a:6e:6d:40:a8:84:e0:e6: b4:be:41:f9:83:7f:d0:0a:6e:b6:75:1a:a6:1f:c2:8c:8f:36: cf:bc:60:95:e3:9c:31:54:c0:86:7c:7f:5a:bf:8c:0c:c5:b3: ac:79:09:2c:b2:b4:03:67:4c:da:3f:bc:78:f2:30:80:2f:85: 8b:87:bd:13:4b:81:56:19:1f:43:22:7f:75:59:bb:7d:b6:42: a4:ec:e5:72:41:61:51:9a:7a:59:b3:0c:02:da:55:15:4a:5b: c2:39:ed:3c:c7:e3:22:9b:b4:ad:6c:bb:f8:f9:23:7d:64:e1: 3e:0a:c4:34:ad:97:6f:18:13:d1:89:5e:ce:09:d7:e5:b9:ca: 8e:3e:09:30:68:08:ee:c6:af:9a:59:b9:36:cd:1a:72:db:65: f6:bb:2f:d2:c5:40:a6:70:bf:4b:df:94:5a:be:5a:04:6a:d5: ce:2a:f8:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHu+3z1vDrMmgjnLKzTHdaszQMgcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFOURCQjdCQzNCQjE2RjZBNkE4NDhFNDMwN0U4NzZG OUYxQTUwNjAeFw0yNDA1MzAxMjQ2MjhaFw0yNDA2MDIxMzI5MjhaMDMxMTAvBgNV BAMTKDY5QUYyOTA0MDQwNjIwNjE1QkI1ODdBNTc3OUU1RDJDODEwMUZBODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzFu1oHVkbRS6VRR0dBkQ1v7Tc qoDHRosWDe18DDwwp+AB2UqhFODVzExAtiTH6fJ6vt16ix3MO6qczJ05j/DidxFn SdVI+05e3kHrMEBYQU4cjBLNgxCk/YhdPrsi0K76XUvDW6ZV8dfvwFcaSmgSRrE1 WfgSNFM6J0zA7t7bfHzCVrOi8DkWQeanGAN8FHLhoR+PGuvEVZbUakgeZZgSe8zp vfLEWEv4l6bZ+vf3IUfkqcTduiSqbNC4j0OkcP2gaLoJhtTVLMQx54NgzaTnznhg yiriuWFmes9muOB9unKVX1UZ7cZBWrkbrfTbJtXdGvGNcGg+Q63BRHbK8Mt1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaa8pBAQGIGFbtYeld55dLIEB+oMwHwYDVR0j BBgwFoAUqenbt7w7sW9qaoSOQwfodvnxpQYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTRlNDU2ZC1kYmUyLTQ2MGMtODZkNC1lYmMyZDExNTYxNzYvMC9BOUU5REJCN0JD M0JCMTZGNkE2QTg0OEU0MzA3RTg3NkY5RjFBNTA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlFOURCQjdCQzNCQjE2RjZBNkE4NDhFNDMwN0U4NzZGOUYx QTUwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDU0ZTQ1NmQtZGJlMi00NjBjLTg2 ZDQtZWJjMmQxMTU2MTc2LzAvQTlFOURCQjdCQzNCQjE2RjZBNkE4NDhFNDMwN0U4 NzZGOUYxQTUwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB/9qpUoMeRxHgQ+GF7sz9CA9mY3LJrzUNRB cokMKgHnJ/ybqGyBFOsMGuN4x6/BaHdUyGWn6p104oY3bpZ6Gym30gerCDLHBJd6 1tLhOjZuK4Oabm1AqITg5rS+QfmDf9AKbrZ1GqYfwoyPNs+8YJXjnDFUwIZ8f1q/ jAzFs6x5CSyytANnTNo/vHjyMIAvhYuHvRNLgVYZH0Mif3VZu322QqTs5XJBYVGa elmzDALaVRVKW8I57TzH4yKbtK1su/j5I31k4T4KxDStl28YE9GJXs4J1+W5yo4+ CTBoCO7Gr5pZuTbNGnLbZfa7L9LFQKZwv0vflFq+WgRq1c4q+IA= -----END CERTIFICATE-----Generated at Thu May 30 15:04:03 2024 by rpki-client on console-ams.rpki-client.org