$ rpki-client -vvf repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft File: 43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft (raw, json) Hash identifier: Eqle/VkvpK45yG63O3CPlDipRUOs6Tjjw0VE3Q4Tc0o= Subject key identifier: BC:F8:C4:A7:9B:F2:55:32:A8:A0:B5:D5:9A:8B:2C:35:E0:88:65:46 Authority key identifier: 43:35:2C:F2:FE:94:54:8E:EF:08:0C:0D:6A:6D:A5:C0:7E:E6:27:AB Certificate issuer: /CN=43352CF2FE94548EEF080C0D6A6DA5C07EE627AB Certificate serial: 0E86C0BA581757215ECF615DD13F9345E85A51C0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft Manifest number: 48 Signing time: Fri 17 May 2024 14:21:27 +0000 Manifest this update: Fri 17 May 2024 14:16:27 +0000 Manifest next update: Mon 20 May 2024 21:39:27 +0000 Files and hashes: 1: 43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.crl (hash: H4bRcQEub0T4xMWYtN3HgJ/6H9Qg1oe8bTVFVlMTM8k=) 2: 3230332e3134352e36302e302f32332d3234203d3e203435323935.roa (hash: NgE3mFgixmRqDUvhEsRJeIwGbiaNuwZG/XeEADh0BcY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.crl rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 May 2024 21:39:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:86:c0:ba:58:17:57:21:5e:cf:61:5d:d1:3f:93:45:e8:5a:51:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43352CF2FE94548EEF080C0D6A6DA5C07EE627AB Validity Not Before: May 17 14:16:27 2024 GMT Not After : May 20 21:39:27 2024 GMT Subject: CN=BCF8C4A79BF25532A8A0B5D59A8B2C35E0886546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5e:62:d2:92:bd:dc:87:44:13:37:ff:ba:00: 0a:ba:16:fb:73:e7:5c:14:8f:68:cd:20:47:df:6f: c3:c3:81:35:da:74:62:74:bb:9d:2a:a2:41:b0:62: 7c:92:eb:20:ec:0f:f3:77:4c:49:ce:91:e1:3a:7c: 98:64:04:c7:61:fa:9a:8c:98:31:c3:91:5d:10:ed: d8:8f:f4:1f:42:93:4e:38:fc:bc:28:6f:5c:25:ba: 14:61:7a:a3:3c:a9:af:73:d4:dd:d6:75:bb:36:8b: 8a:a8:9d:53:8a:c0:cf:84:3b:b9:ea:bf:ff:02:48: bc:ea:61:c2:0b:c9:f2:7b:3a:65:9c:9e:41:cb:e5: d9:56:42:ee:fb:dd:71:00:80:5e:26:cd:ae:90:30: bc:f5:0d:e9:80:a0:30:9e:65:6b:2b:81:f5:07:37: 16:db:74:c9:ba:a9:7c:3e:ff:32:5d:6d:8b:43:20: 71:13:98:13:c0:36:63:18:48:39:0c:ee:18:42:6e: ae:3c:da:7d:6f:4d:da:ca:15:e2:2f:30:c3:23:56: 32:9e:c9:2d:ea:f0:1a:22:0f:3f:5c:ca:03:0d:67: a7:a9:e7:43:d5:e8:ea:5b:03:dc:16:0b:d5:3e:4f: 08:2e:2c:e8:f1:b8:35:a4:41:85:a5:c7:9e:f2:d5: 4a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:F8:C4:A7:9B:F2:55:32:A8:A0:B5:D5:9A:8B:2C:35:E0:88:65:46 X509v3 Authority Key Identifier: keyid:43:35:2C:F2:FE:94:54:8E:EF:08:0C:0D:6A:6D:A5:C0:7E:E6:27:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:a9:fe:e8:0e:57:c4:eb:2d:2c:37:c1:fb:83:91:0e:ad:fb: e3:f2:73:d9:9c:ea:09:79:fe:33:78:9a:a7:ec:1b:26:79:99: b5:2b:c1:02:82:27:0e:c4:2f:e1:5c:f7:15:f3:fd:3c:ce:f0: 1b:df:0f:a3:ea:be:e1:2d:bb:01:5f:e6:23:a0:8f:a0:34:f9: 38:db:e9:6d:36:62:b9:79:8c:ce:fc:68:0c:f8:0f:a0:44:fb: c1:af:91:d8:4e:34:81:9c:f3:27:b1:4f:83:9e:a1:2b:4b:46: 5a:75:d8:4d:83:57:3d:b9:56:5f:b4:81:6d:83:fe:f8:8b:26: fe:b3:c9:6b:84:ed:bc:4f:f2:3d:32:8c:e5:1d:bf:ef:ba:af: 80:3b:da:ba:cb:da:a1:46:cd:ea:a6:6d:93:77:40:29:6a:d6: c1:a3:d7:42:57:7b:19:e4:4e:ec:af:3f:e7:9a:8e:a7:ca:d6: 4a:02:bb:28:f4:0d:18:c3:db:83:2d:ce:b4:cc:1e:0b:44:47: c6:bd:17:0c:d2:e8:19:00:fb:00:b0:34:33:e7:21:fe:58:bf: d4:07:4b:5c:f5:f8:f7:ce:a2:3a:ac:2f:0b:d8:4b:74:e2:12: f6:29:50:90:e5:64:27:c5:29:2e:36:74:f2:a5:6f:15:46:33: 5d:66:92:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDobAulgXVyFez2Fd0T+TRehaUcAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDMzNTJDRjJGRTk0NTQ4RUVGMDgwQzBENkE2REE1QzA3 RUU2MjdBQjAeFw0yNDA1MTcxNDE2MjdaFw0yNDA1MjAyMTM5MjdaMDMxMTAvBgNV BAMTKEJDRjhDNEE3OUJGMjU1MzJBOEEwQjVENTlBOEIyQzM1RTA4ODY1NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmXmLSkr3ch0QTN/+6AAq6Fvtz 51wUj2jNIEffb8PDgTXadGJ0u50qokGwYnyS6yDsD/N3TEnOkeE6fJhkBMdh+pqM mDHDkV0Q7diP9B9Ck044/Lwob1wluhRheqM8qa9z1N3Wdbs2i4qonVOKwM+EO7nq v/8CSLzqYcILyfJ7OmWcnkHL5dlWQu773XEAgF4mza6QMLz1DemAoDCeZWsrgfUH NxbbdMm6qXw+/zJdbYtDIHETmBPANmMYSDkM7hhCbq482n1vTdrKFeIvMMMjVjKe yS3q8BoiDz9cygMNZ6ep50PV6OpbA9wWC9U+TwguLOjxuDWkQYWlx57y1UoZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvPjEp5vyVTKooLXVmossNeCIZUYwHwYDVR0j BBgwFoAUQzUs8v6UVI7vCAwNam2lwH7mJ6swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l N2Q5Zjc0NS1mYWE0LTQ4Y2UtODNiMS0wYmRlMzNjMjQ0N2YvMC80MzM1MkNGMkZF OTQ1NDhFRUYwODBDMEQ2QTZEQTVDMDdFRTYyN0FCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDMzNTJDRjJGRTk0NTQ4RUVGMDgwQzBENkE2REE1QzA3RUU2 MjdBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTdkOWY3NDUtZmFhNC00OGNlLTgz YjEtMGJkZTMzYzI0NDdmLzAvNDMzNTJDRjJGRTk0NTQ4RUVGMDgwQzBENkE2REE1 QzA3RUU2MjdBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD2p/ugOV8TrLSw3wfuDkQ6t++Pyc9mc6gl5 /jN4mqfsGyZ5mbUrwQKCJw7EL+Fc9xXz/TzO8BvfD6PqvuEtuwFf5iOgj6A0+Tjb 6W02Yrl5jM78aAz4D6BE+8GvkdhONIGc8yexT4OeoStLRlp12E2DVz25Vl+0gW2D /viLJv6zyWuE7bxP8j0yjOUdv++6r4A72rrL2qFGzeqmbZN3QClq1sGj10JXexnk TuyvP+eajqfK1koCuyj0DRjD24MtzrTMHgtER8a9FwzS6BkA+wCwNDPnIf5Yv9QH S1z1+PfOojqsLwvYS3TiEvYpUJDlZCfFKS42dPKlbxVGM11mkh0= -----END CERTIFICATE-----Generated at Fri May 17 16:04:38 2024 by rpki-client on console-fra.rpki-client.org