$ rpki-client -vvf repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.mft File: ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.mft (raw, json) Hash identifier: izuEpDObyjINmqhOIKaWz2IqB2cnydHkYstzIPOBBiM= Subject key identifier: 21:B7:60:6D:89:28:B2:F5:84:B6:05:F7:BB:6A:22:CD:BB:EF:1B:7A Authority key identifier: AD:FF:CB:4A:8D:29:AE:5B:A5:53:F9:23:57:6F:7E:1B:7E:13:3C:AE Certificate issuer: /CN=ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE Certificate serial: 79DFF323825B6085E308B729B05EABB292E84BD4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.mft Manifest number: 0208 Signing time: Sun 05 May 2024 10:00:55 +0000 Manifest this update: Sun 05 May 2024 09:55:55 +0000 Manifest next update: Wed 08 May 2024 17:08:55 +0000 Files and hashes: 1: ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.crl (hash: +TKxPB1CCvbFElbZHasyc0+b8T+OrG5nYqUx6hSJ7uw=) 2: 3130332e3137352e3135342e302f32332d3234203d3e20313331313131.roa (hash: 6rno8nNqkAd+YUENZppfLXca9A/r9ECyp1Qp5BYH5Uo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.crl rsync://repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 12:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:df:f3:23:82:5b:60:85:e3:08:b7:29:b0:5e:ab:b2:92:e8:4b:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE Validity Not Before: May 5 09:55:55 2024 GMT Not After : May 8 17:08:55 2024 GMT Subject: CN=21B7606D8928B2F584B605F7BB6A22CDBBEF1B7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b9:b8:f9:26:35:e9:81:fb:69:64:b0:48:15: 58:6c:9d:94:f0:da:7c:65:83:2b:8a:e2:53:ca:6e: fb:22:71:0c:50:f7:b6:03:78:d6:46:f0:52:ca:c3: a0:37:a0:50:6e:38:eb:85:c6:33:01:c7:67:75:fc: c4:74:cb:d4:8b:53:20:0c:37:19:35:79:1e:53:56: 04:2b:1c:d5:f8:07:00:42:e5:a3:51:af:f7:36:e8: 87:0c:e8:6f:be:58:98:0a:c4:73:27:f6:c7:d2:15: 21:47:6e:f4:23:d7:33:96:b8:bc:1b:e5:56:fc:b3: 68:69:bc:37:80:99:65:e8:92:2a:4b:2b:fd:ed:d6: 1e:f2:fc:13:a5:3c:16:dc:a4:d0:3d:6a:21:00:7c: f4:80:ac:bd:96:4a:1d:1b:97:0f:eb:95:64:13:a4: cf:b0:61:a7:7e:2c:86:a1:94:32:e8:0c:9d:c7:6a: 01:de:da:f2:3d:cc:d3:5f:d5:f8:a0:6e:4b:87:81: c1:17:ec:89:b8:a1:57:05:ca:f2:d8:e3:80:5b:39: 77:00:86:28:b7:8a:a2:8b:c0:36:8f:9c:21:d0:c7: da:e6:e5:e0:69:c2:c1:d7:98:f9:07:1e:25:cb:f7: 3b:a3:ba:f7:0d:4b:91:8c:57:63:26:f7:41:7a:8e: af:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:B7:60:6D:89:28:B2:F5:84:B6:05:F7:BB:6A:22:CD:BB:EF:1B:7A X509v3 Authority Key Identifier: keyid:AD:FF:CB:4A:8D:29:AE:5B:A5:53:F9:23:57:6F:7E:1B:7E:13:3C:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:24:61:28:c7:7c:36:ee:47:84:b4:7e:51:92:19:b0:cb:99: 25:f7:38:f3:6c:26:0e:a5:f9:92:c4:f0:e2:86:0d:82:76:27: 89:82:0f:45:1a:73:4f:e9:0b:29:f6:80:54:73:fd:a8:c2:05: a0:0e:ca:39:7b:de:76:91:3a:29:9d:45:df:a4:8f:b8:5a:ef: 1c:3f:f4:8c:c7:0f:67:b7:3f:81:57:f8:98:47:6e:74:cb:f1: 01:1d:17:39:0d:f4:6a:fc:90:51:4b:c5:a2:a7:22:25:c7:25: 84:e4:7c:09:e7:d4:4a:97:92:c3:7c:4e:01:61:94:76:35:e2: 87:29:6a:1e:16:de:28:79:af:ed:a1:3b:7b:1b:5e:c8:bf:50: b5:21:30:3c:54:77:b8:dd:f6:1e:e5:93:43:fd:57:16:a8:66: ac:1d:29:8d:9e:f1:81:78:a6:d1:23:86:86:f6:61:85:79:2c: 2b:b1:19:c7:0a:88:cd:4e:04:12:46:c1:42:fe:d5:23:a0:43: 18:52:3d:98:ce:0e:4c:9b:4d:74:13:42:05:1e:79:f8:56:c4: ca:48:f1:71:f2:97:2f:17:9a:aa:80:d3:fe:9e:b3:ef:ea:76: 0e:d4:70:22:82:4b:2d:57:f5:22:68:02:62:c7:68:15:f0:4d: 68:5e:41:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUed/zI4JbYIXjCLcpsF6rspLoS9QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURGRkNCNEE4RDI5QUU1QkE1NTNGOTIzNTc2RjdFMUI3 RTEzM0NBRTAeFw0yNDA1MDUwOTU1NTVaFw0yNDA1MDgxNzA4NTVaMDMxMTAvBgNV BAMTKDIxQjc2MDZEODkyOEIyRjU4NEI2MDVGN0JCNkEyMkNEQkJFRjFCN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJubj5JjXpgftpZLBIFVhsnZTw 2nxlgyuK4lPKbvsicQxQ97YDeNZG8FLKw6A3oFBuOOuFxjMBx2d1/MR0y9SLUyAM Nxk1eR5TVgQrHNX4BwBC5aNRr/c26IcM6G++WJgKxHMn9sfSFSFHbvQj1zOWuLwb 5Vb8s2hpvDeAmWXokipLK/3t1h7y/BOlPBbcpNA9aiEAfPSArL2WSh0blw/rlWQT pM+wYad+LIahlDLoDJ3HagHe2vI9zNNf1figbkuHgcEX7Im4oVcFyvLY44BbOXcA hii3iqKLwDaPnCHQx9rm5eBpwsHXmPkHHiXL9zujuvcNS5GMV2Mm90F6jq+tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIbdgbYkosvWEtgX3u2oizbvvG3owHwYDVR0j BBgwFoAUrf/LSo0prlulU/kjV29+G34TPK4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MGJlMmRmOC0yYzM2LTQ2NTItYTUwYy1mNjQyMGQyY2Q5ZDMvMC9BREZGQ0I0QThE MjlBRTVCQTU1M0Y5MjM1NzZGN0UxQjdFMTMzQ0FFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQURGRkNCNEE4RDI5QUU1QkE1NTNGOTIzNTc2RjdFMUI3RTEz M0NBRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTBiZTJkZjgtMmMzNi00NjUyLWE1 MGMtZjY0MjBkMmNkOWQzLzAvQURGRkNCNEE4RDI5QUU1QkE1NTNGOTIzNTc2RjdF MUI3RTEzM0NBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGQkYSjHfDbuR4S0flGSGbDLmSX3OPNsJg6l +ZLE8OKGDYJ2J4mCD0Uac0/pCyn2gFRz/ajCBaAOyjl73naROimdRd+kj7ha7xw/ 9IzHD2e3P4FX+JhHbnTL8QEdFzkN9Gr8kFFLxaKnIiXHJYTkfAnn1EqXksN8TgFh lHY14ocpah4W3ih5r+2hO3sbXsi/ULUhMDxUd7jd9h7lk0P9VxaoZqwdKY2e8YF4 ptEjhob2YYV5LCuxGccKiM1OBBJGwUL+1SOgQxhSPZjODkybTXQTQgUeefhWxMpI 8XHyly8XmqqA0/6es+/qdg7UcCKCSy1X9SJoAmLHaBXwTWheQTY= -----END CERTIFICATE-----Generated at Sun May 5 12:23:54 2024 by rpki-client on console-fra.rpki-client.org