$ rpki-client -vvf repo-rpki.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/47E5E36B848613534A65DDE4FBA27AB59A745B50.mft File: 47E5E36B848613534A65DDE4FBA27AB59A745B50.mft (raw, json) Hash identifier: /VkE1+p5SrzUxfS73b1+mLRwgKZm0eNEI2nIezoozcI= Subject key identifier: 9F:0D:51:82:CD:A1:35:60:2D:81:0A:6D:F6:E6:A8:B4:1B:DC:0F:79 Authority key identifier: 47:E5:E3:6B:84:86:13:53:4A:65:DD:E4:FB:A2:7A:B5:9A:74:5B:50 Certificate issuer: /CN=47E5E36B848613534A65DDE4FBA27AB59A745B50 Certificate serial: 77E7DA2F1F99DDEB3A42A9DA154DDC14A7A6B405 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47E5E36B848613534A65DDE4FBA27AB59A745B50.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/47E5E36B848613534A65DDE4FBA27AB59A745B50.mft Manifest number: 0159 Signing time: Sat 18 May 2024 02:51:37 +0000 Manifest this update: Sat 18 May 2024 02:46:37 +0000 Manifest next update: Tue 21 May 2024 04:08:37 +0000 Files and hashes: 1: 3130332e3138362e33322e302f32342d3234203d3e20313439363930.roa (hash: App6gzoZL+6B7IkXL5lVIhupQOwXL3Migp5IdQkJtCk=) 2: 47E5E36B848613534A65DDE4FBA27AB59A745B50.crl (hash: xecmljm73atlkSbOfNzZFn+M25Bm62SHkTh2tGaZKd4=) 3: 3130332e3138362e33332e302f32342d3234203d3e20313439363930.roa (hash: CsIgMldmwXmur7lXxDH391y5qIPr4k/ng23x1qfiBpQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/47E5E36B848613534A65DDE4FBA27AB59A745B50.crl rsync://repo-rpki.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/47E5E36B848613534A65DDE4FBA27AB59A745B50.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47E5E36B848613534A65DDE4FBA27AB59A745B50.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 04:08:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:e7:da:2f:1f:99:dd:eb:3a:42:a9:da:15:4d:dc:14:a7:a6:b4:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47E5E36B848613534A65DDE4FBA27AB59A745B50 Validity Not Before: May 18 02:46:37 2024 GMT Not After : May 21 04:08:37 2024 GMT Subject: CN=9F0D5182CDA135602D810A6DF6E6A8B41BDC0F79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:63:ae:75:3f:48:ef:9e:9c:39:7d:4a:b0:1c: d1:89:5c:7c:91:8e:96:6f:92:7d:1c:a1:12:6d:44: 46:f0:b8:80:dd:1c:e5:da:eb:db:06:01:f8:79:f2: 25:63:05:37:49:c3:4e:d1:fa:0e:ce:7b:4d:97:a5: c3:89:05:71:02:0b:ec:4f:02:72:62:8a:59:63:3b: 2b:5d:b3:e3:ed:41:e0:64:67:1a:a8:46:cc:2a:e1: f3:e2:82:37:eb:87:b8:75:c6:7c:5a:cd:86:46:a8: a2:15:53:a8:85:39:96:20:d1:da:77:25:2d:03:e6: 57:63:0d:99:af:af:7c:d4:02:9d:70:b0:5a:f6:cf: d6:92:82:e6:ca:73:86:96:e5:3f:5b:2c:d3:02:d5: 88:2b:55:97:24:99:c7:6a:51:69:60:86:39:3b:4c: d3:5b:5e:9f:93:fc:73:6c:75:2c:28:b9:4a:a2:9c: 35:9b:89:47:86:33:da:d9:05:12:74:9a:ef:77:43: f8:4d:d1:2e:87:8d:85:6b:84:f4:2f:96:ba:98:c2: 01:6d:c7:ce:e2:e3:45:56:40:d7:1d:de:c7:7e:6e: 77:3f:0b:a4:e9:16:e8:13:61:dc:b6:35:a2:6d:c7: 14:4a:96:16:99:06:7b:c3:6c:c7:26:d2:41:50:00: f3:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:0D:51:82:CD:A1:35:60:2D:81:0A:6D:F6:E6:A8:B4:1B:DC:0F:79 X509v3 Authority Key Identifier: keyid:47:E5:E3:6B:84:86:13:53:4A:65:DD:E4:FB:A2:7A:B5:9A:74:5B:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/47E5E36B848613534A65DDE4FBA27AB59A745B50.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47E5E36B848613534A65DDE4FBA27AB59A745B50.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/47E5E36B848613534A65DDE4FBA27AB59A745B50.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:4a:1f:15:23:fd:a6:ca:5a:49:08:7b:b0:44:80:3f:49:e0: 92:c5:83:61:f2:7a:a6:4e:de:c3:bc:a5:56:0a:8c:5b:76:81: 7e:34:cf:14:b3:da:60:91:7a:7f:56:39:00:5e:a2:41:76:45: 4e:fe:cc:fb:12:f6:0f:ef:ed:11:23:46:ed:22:ec:c0:b9:c6: a9:1a:6d:97:f4:57:c2:49:88:63:c6:ed:2d:d3:fb:14:9d:0d: c5:ad:aa:0f:22:c6:ab:ac:53:a4:5b:46:01:0b:45:d4:fb:5c: 05:c8:64:dc:c0:52:2e:d3:56:7f:fd:6e:c9:05:11:90:94:d5: 75:91:88:cd:fb:30:30:d3:cb:44:30:0b:d3:fa:a6:11:57:18: d9:42:34:6d:92:f1:47:51:f0:2f:8d:07:16:9e:9f:b0:27:46: ea:84:8c:72:08:52:62:f2:e2:7c:95:e4:9d:59:db:f8:4a:5f: dc:c7:2b:71:25:3e:ee:8b:7f:44:c2:9a:17:53:fe:3d:88:a7: 5f:ff:12:e8:2c:e7:54:fc:0f:c2:d4:79:35:34:f7:4d:ed:f6: da:98:37:15:96:c4:ec:10:07:69:58:76:38:9b:4f:07:19:89: d9:e0:e3:6b:da:22:b0:39:6b:f7:21:3b:5d:db:65:dc:ad:0e: 88:ce:b6:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd+faLx+Z3es6QqnaFU3cFKemtAUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdFNUUzNkI4NDg2MTM1MzRBNjVEREU0RkJBMjdBQjU5 QTc0NUI1MDAeFw0yNDA1MTgwMjQ2MzdaFw0yNDA1MjEwNDA4MzdaMDMxMTAvBgNV BAMTKDlGMEQ1MTgyQ0RBMTM1NjAyRDgxMEE2REY2RTZBOEI0MUJEQzBGNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIY651P0jvnpw5fUqwHNGJXHyR jpZvkn0coRJtREbwuIDdHOXa69sGAfh58iVjBTdJw07R+g7Oe02XpcOJBXECC+xP AnJiilljOytds+PtQeBkZxqoRswq4fPigjfrh7h1xnxazYZGqKIVU6iFOZYg0dp3 JS0D5ldjDZmvr3zUAp1wsFr2z9aSgubKc4aW5T9bLNMC1YgrVZckmcdqUWlghjk7 TNNbXp+T/HNsdSwouUqinDWbiUeGM9rZBRJ0mu93Q/hN0S6HjYVrhPQvlrqYwgFt x87i40VWQNcd3sd+bnc/C6TpFugTYdy2NaJtxxRKlhaZBnvDbMcm0kFQAPPFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnw1Rgs2hNWAtgQpt9uaotBvcD3kwHwYDVR0j BBgwFoAUR+Xja4SGE1NKZd3k+6J6tZp0W1AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k Y2U5ZjQzZC0wOGJhLTRkMDItOGYzOC03NDczMmYxNWNkOGMvMC80N0U1RTM2Qjg0 ODYxMzUzNEE2NURERTRGQkEyN0FCNTlBNzQ1QjUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDdFNUUzNkI4NDg2MTM1MzRBNjVEREU0RkJBMjdBQjU5QTc0 NUI1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGNlOWY0M2QtMDhiYS00ZDAyLThm MzgtNzQ3MzJmMTVjZDhjLzAvNDdFNUUzNkI4NDg2MTM1MzRBNjVEREU0RkJBMjdB QjU5QTc0NUI1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADpKHxUj/abKWkkIe7BEgD9J4JLFg2HyeqZO 3sO8pVYKjFt2gX40zxSz2mCRen9WOQBeokF2RU7+zPsS9g/v7REjRu0i7MC5xqka bZf0V8JJiGPG7S3T+xSdDcWtqg8ixqusU6RbRgELRdT7XAXIZNzAUi7TVn/9bskF EZCU1XWRiM37MDDTy0QwC9P6phFXGNlCNG2S8UdR8C+NBxaen7AnRuqEjHIIUmLy 4nyV5J1Z2/hKX9zHK3ElPu6Lf0TCmhdT/j2Ip1//Eugs51T8D8LUeTU0903t9tqY NxWWxOwQB2lYdjibTwcZidng42vaIrA5a/chO13bZdytDojOtpI= -----END CERTIFICATE-----Generated at Sat May 18 03:47:49 2024 by rpki-client on console-fra.rpki-client.org