$ rpki-client -vvf repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft File: 9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft (raw, json) Hash identifier: cBQOJONkdXXLSSldAFgcr3eiIyvGAqkbGc6Gxug9hEY= Subject key identifier: 2E:F9:40:4D:9A:7A:19:36:93:0C:60:31:E9:CF:7A:16:12:3F:44:2B Authority key identifier: 9F:AA:E7:3A:F6:8F:08:D5:79:3C:C3:2C:5C:4E:A8:C5:F5:D2:43:7A Certificate issuer: /CN=9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A Certificate serial: 7595C466102D4F59CE12B34EEDC7191EB56F4E2E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft Manifest number: 0142 Signing time: Tue 28 May 2024 22:10:00 +0000 Manifest this update: Tue 28 May 2024 22:05:00 +0000 Manifest next update: Sat 01 Jun 2024 06:25:00 +0000 Files and hashes: 1: 3130332e3136392e3232372e302f32342d3234203d3e20313432333633.roa (hash: 2gcsGWrwNMsQNKXI5tKhPs55zDtiRTAJh20IdsKpBxc=) 2: 9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.crl (hash: tcsFLHuBWU2hJ6clWnBpsHz6ZAmO/q5ADzgy1TmDKeY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.crl rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 04:52:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:95:c4:66:10:2d:4f:59:ce:12:b3:4e:ed:c7:19:1e:b5:6f:4e:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A Validity Not Before: May 28 22:05:00 2024 GMT Not After : Jun 1 06:25:00 2024 GMT Subject: CN=2EF9404D9A7A1936930C6031E9CF7A16123F442B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:bb:10:3e:83:36:59:46:f4:0d:c6:43:6d:49: d7:3f:6c:c5:6b:40:5a:3a:08:cf:61:f9:fb:26:8b: 50:82:04:d3:03:93:f3:ef:b4:74:4e:f1:74:fb:5f: 9c:d7:5d:73:88:05:a1:08:30:b3:82:cd:2a:d6:e4: 22:53:4d:f9:67:e1:2c:bc:05:1c:fe:77:93:a7:5f: b6:52:2e:b1:2c:f0:46:a0:2a:64:62:a9:3c:62:5f: f4:dc:eb:d8:8c:ca:5b:91:77:dd:21:b1:2c:1b:7c: 5f:88:3c:60:98:6a:68:cd:55:02:02:44:a8:90:1d: b2:45:d0:83:ef:8f:20:09:2c:eb:3c:5e:43:91:b8: 78:d5:ce:b7:59:88:91:ee:9c:ba:7d:8c:99:3c:fc: 93:15:84:3b:74:2c:6b:4f:91:15:0d:aa:ca:f3:b6: 31:44:6a:00:c0:e5:ca:e4:a3:a8:4b:44:6e:6b:1f: b2:4a:3a:12:f1:d4:fa:c5:37:27:97:5f:19:4d:46: 70:94:87:e7:f7:21:32:ae:7e:c5:9f:13:44:6d:6d: 86:aa:07:ad:84:19:42:d1:e5:4b:ca:ef:f0:a1:a3: 6f:5a:22:18:50:61:0a:74:b5:74:c2:a7:60:da:41: 5c:ad:e4:51:c2:da:31:d3:3d:aa:cb:c5:32:bb:86: 0b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:F9:40:4D:9A:7A:19:36:93:0C:60:31:E9:CF:7A:16:12:3F:44:2B X509v3 Authority Key Identifier: keyid:9F:AA:E7:3A:F6:8F:08:D5:79:3C:C3:2C:5C:4E:A8:C5:F5:D2:43:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:34:4d:99:79:12:24:af:34:46:59:5d:e5:28:fa:59:6f:7f: 87:6c:d2:87:46:7d:f5:07:db:46:0f:1f:e6:f1:d9:f8:9b:29: 4e:87:72:11:77:b4:b3:00:bd:19:07:a7:15:80:56:0c:e0:b4: f0:0f:f4:db:59:d6:54:eb:62:ff:56:06:c4:07:aa:59:87:5e: 95:0b:eb:6a:3d:5c:09:ef:1c:4b:d6:db:a0:16:28:42:16:01: 9a:3c:e3:1d:93:e7:50:5e:77:b0:12:6c:46:d7:8b:48:d4:6f: 10:e0:c7:27:2e:1d:b6:f1:f9:f0:c0:3a:81:28:e1:32:04:be: 67:9c:79:49:84:e7:f4:0b:39:37:4f:88:01:35:d6:bc:a8:1d: 1b:f8:3e:00:b2:a3:dc:89:34:4a:dd:52:20:2f:0d:5d:4c:f2: af:08:a7:59:3a:15:07:6a:8b:94:4b:4e:e4:e8:f7:ad:4e:d2: 93:08:ba:6f:fa:1e:5b:ec:10:bd:54:7d:d3:9d:f4:21:a9:0d: 1e:81:a0:05:78:b4:e1:a9:92:a0:2d:aa:c7:b4:48:3a:89:61: 43:a6:0a:2f:58:4e:24:a5:8c:2c:b5:dc:9a:11:08:74:b7:9c: a2:d6:68:74:2d:0e:4b:31:d4:4e:99:85:b7:dd:63:f9:94:de: df:61:66:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdZXEZhAtT1nOErNO7ccZHrVvTi4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZBQUU3M0FGNjhGMDhENTc5M0NDMzJDNUM0RUE4QzVG NUQyNDM3QTAeFw0yNDA1MjgyMjA1MDBaFw0yNDA2MDEwNjI1MDBaMDMxMTAvBgNV BAMTKDJFRjk0MDREOUE3QTE5MzY5MzBDNjAzMUU5Q0Y3QTE2MTIzRjQ0MkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsuxA+gzZZRvQNxkNtSdc/bMVr QFo6CM9h+fsmi1CCBNMDk/PvtHRO8XT7X5zXXXOIBaEIMLOCzSrW5CJTTfln4Sy8 BRz+d5OnX7ZSLrEs8EagKmRiqTxiX/Tc69iMyluRd90hsSwbfF+IPGCYamjNVQIC RKiQHbJF0IPvjyAJLOs8XkORuHjVzrdZiJHunLp9jJk8/JMVhDt0LGtPkRUNqsrz tjFEagDA5crko6hLRG5rH7JKOhLx1PrFNyeXXxlNRnCUh+f3ITKufsWfE0RtbYaq B62EGULR5UvK7/Cho29aIhhQYQp0tXTCp2DaQVyt5FHC2jHTParLxTK7hguvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULvlATZp6GTaTDGAx6c96FhI/RCswHwYDVR0j BBgwFoAUn6rnOvaPCNV5PMMsXE6oxfXSQ3owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OWFlOTgyOC0wZTgyLTQ0MzQtYjhmMi0yZDhhZDU5Y2VhODgvMC85RkFBRTczQUY2 OEYwOEQ1NzkzQ0MzMkM1QzRFQThDNUY1RDI0MzdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUZBQUU3M0FGNjhGMDhENTc5M0NDMzJDNUM0RUE4QzVGNUQy NDM3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDlhZTk4MjgtMGU4Mi00NDM0LWI4 ZjItMmQ4YWQ1OWNlYTg4LzAvOUZBQUU3M0FGNjhGMDhENTc5M0NDMzJDNUM0RUE4 QzVGNUQyNDM3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH80TZl5EiSvNEZZXeUo+llvf4ds0odGffUH 20YPH+bx2fibKU6HchF3tLMAvRkHpxWAVgzgtPAP9NtZ1lTrYv9WBsQHqlmHXpUL 62o9XAnvHEvW26AWKEIWAZo84x2T51Bed7ASbEbXi0jUbxDgxycuHbbx+fDAOoEo 4TIEvmeceUmE5/QLOTdPiAE11ryoHRv4PgCyo9yJNErdUiAvDV1M8q8Ip1k6FQdq i5RLTuTo961O0pMIum/6HlvsEL1UfdOd9CGpDR6BoAV4tOGpkqAtqse0SDqJYUOm Ci9YTiSljCy13JoRCHS3nKLWaHQtDksx1E6ZhbfdY/mU3t9hZq0= -----END CERTIFICATE-----Generated at Tue May 28 22:49:02 2024 by rpki-client on console-ams.rpki-client.org