$ rpki-client -vvf repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.mft File: A42F07BEA859C831526717AB1D092E11E7890BDD.mft (raw, json) Hash identifier: 5FVfZLCxege+hqgBoDlQBhSkZXDB9EhUSFKdGMvWYLs= Subject key identifier: 5C:A1:C9:75:D9:98:12:1B:33:22:B8:4D:C2:AB:D1:6D:A8:2C:FC:54 Authority key identifier: A4:2F:07:BE:A8:59:C8:31:52:67:17:AB:1D:09:2E:11:E7:89:0B:DD Certificate issuer: /CN=A42F07BEA859C831526717AB1D092E11E7890BDD Certificate serial: 271F09C794FF3F1C2C846EE785A3E2C3359B7FE3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A42F07BEA859C831526717AB1D092E11E7890BDD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.mft Manifest number: C4 Signing time: Thu 30 May 2024 12:51:28 +0000 Manifest this update: Thu 30 May 2024 12:46:28 +0000 Manifest next update: Sun 02 Jun 2024 14:30:28 +0000 Files and hashes: 1: A42F07BEA859C831526717AB1D092E11E7890BDD.crl (hash: WCENbloTyectSq5Fn0aNNnOdIXUGxtiDNJ7AnAALLX0=) 2: 3130332e3130392e32342e302f32342d3234203d3e20313337333131.roa (hash: T8JVoyiBSoRD/8TMk4a3DmUon8APuxT+fmcE+BsJ2zI=) 3: 3130332e3130392e32352e302f32342d3234203d3e20313337333131.roa (hash: tFfbE+cZyi+YgTmHklD3X/Dz1Mauwcak6IwwHxYX3r4=) 4: 3130332e3130392e32372e302f32342d3234203d3e20313337333131.roa (hash: gnloxyzy+BjMMSb25i/9FjSca8hdqbTZ26gmHJTl0ic=) 5: 3130332e3130392e32362e302f32342d3234203d3e20313337333131.roa (hash: jCig+hn3QKp3Ujwgup1WTWWUat/bt5TgFSQX6AvuGtA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.crl rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A42F07BEA859C831526717AB1D092E11E7890BDD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 12:03:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:1f:09:c7:94:ff:3f:1c:2c:84:6e:e7:85:a3:e2:c3:35:9b:7f:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A42F07BEA859C831526717AB1D092E11E7890BDD Validity Not Before: May 30 12:46:28 2024 GMT Not After : Jun 2 14:30:28 2024 GMT Subject: CN=5CA1C975D998121B3322B84DC2ABD16DA82CFC54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:0f:ff:5b:52:05:5e:8b:ed:f9:d9:ae:ab:3f: 41:ac:8a:47:be:77:3b:05:00:56:a5:0b:6e:5c:a5: 2d:b9:97:b5:eb:e3:a0:ac:e9:63:ed:84:f9:e3:de: aa:40:7f:da:3a:f3:4b:0e:24:05:a7:6d:18:aa:9d: 4c:be:33:91:e9:8b:50:7f:66:6d:ad:aa:c2:28:92: 56:0f:61:f6:d1:2a:de:d0:91:ec:c2:73:dc:b9:88: 31:bd:ae:89:7b:31:00:cb:83:79:72:f7:dd:42:ac: 90:66:76:22:d8:5c:4b:68:e7:2f:f0:50:0a:17:1a: f4:07:bf:28:17:ed:bd:4e:f7:b6:6b:66:5a:cb:98: c1:47:dc:72:8b:84:0f:2d:86:18:13:d8:63:0e:58: ac:63:26:bf:f8:84:d2:e3:31:8c:0e:4d:1f:54:2d: 82:da:10:d0:73:7e:e6:ab:38:b7:49:7b:93:d6:15: 0f:98:17:27:6f:82:8c:c1:5a:58:a9:94:e2:cd:6e: 8e:04:7b:70:f3:34:5a:8b:b8:52:e6:40:37:ed:2f: 95:6a:eb:54:a8:05:13:e0:fd:27:2b:84:e4:31:ed: 6f:89:38:6a:e9:91:d7:52:6a:29:72:a6:d5:68:8a: 8e:9b:a9:19:9f:a3:2d:22:58:ed:89:82:1b:e1:ef: be:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:A1:C9:75:D9:98:12:1B:33:22:B8:4D:C2:AB:D1:6D:A8:2C:FC:54 X509v3 Authority Key Identifier: keyid:A4:2F:07:BE:A8:59:C8:31:52:67:17:AB:1D:09:2E:11:E7:89:0B:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A42F07BEA859C831526717AB1D092E11E7890BDD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:c5:db:1f:b8:05:77:ed:32:c8:00:82:ef:56:55:7d:95:ac: a7:38:57:90:49:32:0d:26:40:a1:2a:a6:2e:c2:a1:18:49:a8: 34:18:9f:d8:8c:6a:db:2d:4f:29:f0:3d:0f:f1:a9:51:3e:47: 3c:8f:0f:c7:6a:b5:e4:d4:af:fa:3a:72:d2:c0:6e:11:6a:d5: 19:11:fa:06:5d:85:b9:33:a3:6b:fa:52:09:90:15:b2:fc:5f: 0e:e7:4a:73:a4:81:66:71:32:b0:e9:ec:de:62:79:89:7a:87: be:03:15:b0:81:ee:40:e9:cc:ce:48:c2:d5:51:89:65:3c:27: 28:59:f9:17:48:e2:e9:f0:28:3a:a8:9f:88:da:7f:a8:91:20: f5:0f:ea:35:af:9f:80:b5:58:9e:5a:d5:cd:7f:33:c0:cb:81: 1a:16:8d:5d:f9:3b:76:98:eb:73:58:52:df:1d:5c:5c:02:c3: ae:67:8c:4a:f0:bf:5c:b8:ca:e8:59:0e:9c:30:88:ca:95:f2: a3:7e:10:ea:48:72:1f:8d:ca:92:08:e5:c6:1a:ab:43:26:b0: d8:31:d9:e9:39:3b:e3:24:3e:19:1f:04:58:6f:0b:9a:23:84: cd:68:8d:be:4a:bf:21:26:c4:14:a1:f0:4b:c1:02:48:ad:62: c3:30:27:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJx8Jx5T/PxwshG7nhaPiwzWbf+MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQyRjA3QkVBODU5QzgzMTUyNjcxN0FCMUQwOTJFMTFF Nzg5MEJERDAeFw0yNDA1MzAxMjQ2MjhaFw0yNDA2MDIxNDMwMjhaMDMxMTAvBgNV BAMTKDVDQTFDOTc1RDk5ODEyMUIzMzIyQjg0REMyQUJEMTZEQTgyQ0ZDNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyD/9bUgVei+352a6rP0Gsike+ dzsFAFalC25cpS25l7Xr46Cs6WPthPnj3qpAf9o680sOJAWnbRiqnUy+M5Hpi1B/ Zm2tqsIoklYPYfbRKt7QkezCc9y5iDG9rol7MQDLg3ly991CrJBmdiLYXEto5y/w UAoXGvQHvygX7b1O97ZrZlrLmMFH3HKLhA8thhgT2GMOWKxjJr/4hNLjMYwOTR9U LYLaENBzfuarOLdJe5PWFQ+YFydvgozBWliplOLNbo4Ee3DzNFqLuFLmQDftL5Vq 61SoBRPg/ScrhOQx7W+JOGrpkddSailyptVoio6bqRmfoy0iWO2Jghvh777rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXKHJddmYEhszIrhNwqvRbags/FQwHwYDVR0j BBgwFoAUpC8HvqhZyDFSZxerHQkuEeeJC90wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ODM1Y2I0YS0yZmI5LTQwZDctYjE1NS1kY2NlN2NiMDAyOTMvMC9BNDJGMDdCRUE4 NTlDODMxNTI2NzE3QUIxRDA5MkUxMUU3ODkwQkRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTQyRjA3QkVBODU5QzgzMTUyNjcxN0FCMUQwOTJFMTFFNzg5 MEJERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDgzNWNiNGEtMmZiOS00MGQ3LWIx NTUtZGNjZTdjYjAwMjkzLzAvQTQyRjA3QkVBODU5QzgzMTUyNjcxN0FCMUQwOTJF MTFFNzg5MEJERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABvF2x+4BXftMsgAgu9WVX2VrKc4V5BJMg0m QKEqpi7CoRhJqDQYn9iMatstTynwPQ/xqVE+RzyPD8dqteTUr/o6ctLAbhFq1RkR +gZdhbkzo2v6UgmQFbL8Xw7nSnOkgWZxMrDp7N5ieYl6h74DFbCB7kDpzM5IwtVR iWU8JyhZ+RdI4unwKDqon4jaf6iRIPUP6jWvn4C1WJ5a1c1/M8DLgRoWjV35O3aY 63NYUt8dXFwCw65njErwv1y4yuhZDpwwiMqV8qN+EOpIch+NypII5cYaq0MmsNgx 2ek5O+MkPhkfBFhvC5ojhM1ojb5KvyEmxBSh8EvBAkitYsMwJ/Y= -----END CERTIFICATE-----Generated at Thu May 30 13:59:36 2024 by rpki-client on console-fra.rpki-client.org