$ rpki-client -vvf repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.mft File: 439A4981549ABB151B12D6EC85FC8D0DBF99A81E.mft (raw, json) Hash identifier: dOoqgUyCVknItUXu+XXvG8CRycklLZBKwrXgfqUy1jY= Subject key identifier: 79:1F:39:C5:D3:7D:1D:D9:10:E3:71:83:31:F1:E0:EC:A7:F2:8E:74 Authority key identifier: 43:9A:49:81:54:9A:BB:15:1B:12:D6:EC:85:FC:8D:0D:BF:99:A8:1E Certificate issuer: /CN=439A4981549ABB151B12D6EC85FC8D0DBF99A81E Certificate serial: 36CD32F0577E28A9786710EB584C301E91B6A16D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.mft Manifest number: 037D Signing time: Sat 18 May 2024 19:50:36 +0000 Manifest this update: Sat 18 May 2024 19:45:36 +0000 Manifest next update: Wed 22 May 2024 00:06:36 +0000 Files and hashes: 1: 3130332e3233332e3130322e302f32332d3234203d3e20313336313037.roa (hash: L0dlmjWXkxJvdn4t+iXJ5037JqisWcHiL+tC2nqDEkQ=) 2: 439A4981549ABB151B12D6EC85FC8D0DBF99A81E.crl (hash: EuagL4WCtRkiNBdzxiArnG7zq2dE+y0G+NKmgLcwGOI=) 3: 3130332e3131322e3234342e302f32332d3234203d3e20313336313037.roa (hash: GKnOru3M4ZxY1+iKBI3BylbRWZMIqy5k51NOVuznOLU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.crl rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:cd:32:f0:57:7e:28:a9:78:67:10:eb:58:4c:30:1e:91:b6:a1:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=439A4981549ABB151B12D6EC85FC8D0DBF99A81E Validity Not Before: May 18 19:45:36 2024 GMT Not After : May 22 00:06:36 2024 GMT Subject: CN=791F39C5D37D1DD910E3718331F1E0ECA7F28E74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:46:ad:88:59:7f:45:45:cc:dc:dd:e5:71:32: fe:08:86:49:db:af:0c:8a:78:b4:c3:b5:94:fb:01: 28:42:86:d8:0f:3e:f3:34:61:f8:ef:a1:dd:bd:87: 17:d2:dc:d1:58:92:eb:75:be:66:93:fb:75:9c:66: 51:05:d3:ac:cd:a2:21:9f:2e:43:6e:2b:e5:4d:26: 66:3f:19:cc:8e:61:f7:0a:08:2b:04:4e:5d:50:e0: 75:c5:46:ac:33:02:4a:57:5d:73:7c:91:27:35:38: 74:46:c9:90:62:24:76:38:d2:2e:04:d2:fc:0e:f8: e8:2b:32:b3:9f:e6:4b:8a:03:84:75:26:bb:dd:1b: 18:19:7e:13:9e:dd:c3:4c:cd:ee:98:10:78:f3:3d: 0d:c0:d0:94:b5:a8:35:b0:a6:c6:f5:66:ef:ec:ab: 53:12:74:73:0f:86:49:c1:5b:5f:31:7d:c2:31:c7: d1:e0:70:a6:c9:9a:a8:0a:87:e2:27:7a:e6:c0:dd: 96:54:91:3b:84:9c:44:e8:dd:dd:f9:19:0f:df:17: 24:69:31:cc:80:af:21:89:fd:60:1a:38:45:70:95: ee:aa:ad:9c:78:1d:97:fe:3e:dc:84:27:62:4d:a5: e7:f4:6a:2d:90:27:77:68:c4:83:0c:5c:60:c3:6a: 0e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:1F:39:C5:D3:7D:1D:D9:10:E3:71:83:31:F1:E0:EC:A7:F2:8E:74 X509v3 Authority Key Identifier: keyid:43:9A:49:81:54:9A:BB:15:1B:12:D6:EC:85:FC:8D:0D:BF:99:A8:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:c4:2c:21:3f:3d:92:36:ad:bb:80:9a:b6:d7:ce:2f:f9:7d: 3d:16:be:32:f3:13:f5:e5:98:58:d9:35:ce:9c:d3:05:da:1f: af:88:03:a4:e1:16:4e:d4:4c:0c:91:db:ba:86:ae:e7:c9:13: da:f4:47:76:cc:db:6f:23:54:1a:c1:f5:2b:ff:90:10:a4:f9: 57:35:06:74:01:03:f1:32:d4:d6:34:d0:4d:73:09:c0:d0:a0: 25:85:71:72:a6:fe:99:3a:94:bc:2d:18:6b:0e:a5:06:79:ad: 2f:b3:eb:ed:30:c7:05:48:fc:48:92:de:9e:7b:85:9f:92:02: 1e:2f:8d:30:7f:83:d0:9b:fb:ed:2b:b7:40:6e:84:4a:70:2b: 93:1c:86:84:d6:f0:80:60:c2:b3:a6:13:e4:99:d9:5c:4d:c5: 06:3b:2d:7d:ac:a3:ec:a2:86:c1:59:50:ab:1d:c6:7c:28:3a: 53:df:cd:cd:f0:03:48:94:5b:cd:b1:73:fa:04:1f:51:4a:7e: 3f:e9:29:bc:ae:06:36:bb:39:37:d7:f8:8f:8e:b9:9a:95:ca: 72:bc:c9:cb:76:3c:d0:bc:49:e3:cf:00:41:0d:ae:ef:d7:68: 83:43:c2:5b:03:a3:bf:8e:4d:c9:43:d3:6d:cb:68:f0:59:3f: 3a:d8:93:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNs0y8Fd+KKl4ZxDrWEwwHpG2oW0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDM5QTQ5ODE1NDlBQkIxNTFCMTJENkVDODVGQzhEMERC Rjk5QTgxRTAeFw0yNDA1MTgxOTQ1MzZaFw0yNDA1MjIwMDA2MzZaMDMxMTAvBgNV BAMTKDc5MUYzOUM1RDM3RDFERDkxMEUzNzE4MzMxRjFFMEVDQTdGMjhFNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDURq2IWX9FRczc3eVxMv4Ihknb rwyKeLTDtZT7AShChtgPPvM0Yfjvod29hxfS3NFYkut1vmaT+3WcZlEF06zNoiGf LkNuK+VNJmY/GcyOYfcKCCsETl1Q4HXFRqwzAkpXXXN8kSc1OHRGyZBiJHY40i4E 0vwO+OgrMrOf5kuKA4R1JrvdGxgZfhOe3cNMze6YEHjzPQ3A0JS1qDWwpsb1Zu/s q1MSdHMPhknBW18xfcIxx9HgcKbJmqgKh+IneubA3ZZUkTuEnETo3d35GQ/fFyRp McyAryGJ/WAaOEVwle6qrZx4HZf+PtyEJ2JNpef0ai2QJ3doxIMMXGDDag7dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeR85xdN9HdkQ43GDMfHg7KfyjnQwHwYDVR0j BBgwFoAUQ5pJgVSauxUbEtbshfyNDb+ZqB4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTQ3MjMxZi0wMmRkLTQ5ZTgtYWEyNS0yZDU0YzBhOTk5Y2EvMC80MzlBNDk4MTU0 OUFCQjE1MUIxMkQ2RUM4NUZDOEQwREJGOTlBODFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDM5QTQ5ODE1NDlBQkIxNTFCMTJENkVDODVGQzhEMERCRjk5 QTgxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE0NzIzMWYtMDJkZC00OWU4LWFh MjUtMmQ1NGMwYTk5OWNhLzAvNDM5QTQ5ODE1NDlBQkIxNTFCMTJENkVDODVGQzhE MERCRjk5QTgxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMjELCE/PZI2rbuAmrbXzi/5fT0WvjLzE/Xl mFjZNc6c0wXaH6+IA6ThFk7UTAyR27qGrufJE9r0R3bM228jVBrB9Sv/kBCk+Vc1 BnQBA/Ey1NY00E1zCcDQoCWFcXKm/pk6lLwtGGsOpQZ5rS+z6+0wxwVI/EiS3p57 hZ+SAh4vjTB/g9Cb++0rt0BuhEpwK5MchoTW8IBgwrOmE+SZ2VxNxQY7LX2so+yi hsFZUKsdxnwoOlPfzc3wA0iUW82xc/oEH1FKfj/pKbyuBja7OTfX+I+OuZqVynK8 yct2PNC8SePPAEENru/XaINDwlsDo7+OTclD023LaPBZPzrYk1Y= -----END CERTIFICATE-----Generated at Sat May 18 21:30:46 2024 by rpki-client on console-ams.rpki-client.org