$ rpki-client -vvf repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.mft File: 4A243A1EC4991C40D3A6148515E3C51981B425F7.mft (raw, json) Hash identifier: TF4KZM06tOC1GXWndoXEU3b8vuiZd8eOYZy8CwXqj0Q= Subject key identifier: 49:6B:03:FB:FA:51:52:97:8B:96:92:7C:D9:93:C3:77:E2:B5:E8:A8 Authority key identifier: 4A:24:3A:1E:C4:99:1C:40:D3:A6:14:85:15:E3:C5:19:81:B4:25:F7 Certificate issuer: /CN=4A243A1EC4991C40D3A6148515E3C51981B425F7 Certificate serial: 44AA386F929C05F81EEFD33BC900803D9413840F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A243A1EC4991C40D3A6148515E3C51981B425F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.mft Manifest number: C9 Signing time: Sun 19 May 2024 02:40:51 +0000 Manifest this update: Sun 19 May 2024 02:35:51 +0000 Manifest next update: Wed 22 May 2024 02:42:51 +0000 Files and hashes: 1: 4A243A1EC4991C40D3A6148515E3C51981B425F7.crl (hash: yHNjbV9Hc93ijATQqfGjNgrVv5OGd85q9RTLR4tKg24=) 2: 3130332e3130392e3230362e302f32342d3234203d3e20313530393335.roa (hash: Juqtcnw5dFFu5T73BMr7UKHzv1aKbgUnoCmnBMU/IDI=) 3: 3130332e3130392e3230372e302f32342d3234203d3e20313530393335.roa (hash: xadTEIHtejR8XFJ0UP4dte8N2PBaecP1Ye7ZglYgbxc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.crl rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A243A1EC4991C40D3A6148515E3C51981B425F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 02:42:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:aa:38:6f:92:9c:05:f8:1e:ef:d3:3b:c9:00:80:3d:94:13:84:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A243A1EC4991C40D3A6148515E3C51981B425F7 Validity Not Before: May 19 02:35:51 2024 GMT Not After : May 22 02:42:51 2024 GMT Subject: CN=496B03FBFA5152978B96927CD993C377E2B5E8A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ff:4d:d8:d9:70:5a:27:9e:8b:a9:d9:2c:c1: 5d:1a:df:9e:79:be:d5:00:a0:90:11:c3:c8:78:e3: 7b:06:1d:06:10:04:06:72:ff:e4:ef:7a:ba:a2:61: a1:0b:5a:32:4f:a2:dc:95:a6:42:04:8b:b3:97:fe: e8:58:97:67:e5:81:4f:76:32:4c:8b:bc:73:f0:bf: d5:65:59:be:45:48:fe:d4:e5:39:33:16:41:1c:0f: f1:c4:e6:8a:31:71:1d:bf:35:74:43:c2:15:d1:51: 49:55:0a:ef:9b:04:59:12:87:fb:63:da:ed:34:69: 2f:7b:6b:7a:3d:37:c3:a1:53:ad:22:67:f6:b7:9f: 66:fb:6f:09:16:f8:99:a1:d0:b4:89:8a:15:27:cd: 88:a0:d1:8e:75:aa:97:f9:04:c2:53:50:bb:e6:e6: ff:f1:f1:23:a5:5b:94:00:a3:89:a4:16:eb:a8:22: db:ba:c2:3d:5a:be:df:42:ab:96:71:d9:4f:13:b3: 4a:ff:89:6f:9d:b0:26:05:a7:d5:5e:0b:92:90:c6: 6d:c5:b3:f3:0a:b2:0b:89:27:46:28:c0:54:11:55: b6:5e:a2:83:99:53:02:c5:75:e7:8f:f1:5b:d4:db: 1f:53:e5:1f:32:80:e6:aa:33:6b:a4:74:32:dc:01: 76:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:6B:03:FB:FA:51:52:97:8B:96:92:7C:D9:93:C3:77:E2:B5:E8:A8 X509v3 Authority Key Identifier: keyid:4A:24:3A:1E:C4:99:1C:40:D3:A6:14:85:15:E3:C5:19:81:B4:25:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A243A1EC4991C40D3A6148515E3C51981B425F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:40:62:ad:9c:f4:2f:79:f5:f8:fe:7c:78:50:ea:fd:d5:2e: 23:8c:c6:cc:d9:f5:9f:4f:2d:0e:00:8f:68:de:c5:77:bb:c8: 42:1f:cd:a5:7d:fd:55:af:92:ce:ae:3b:6f:08:11:da:5f:81: 0f:cc:1f:a8:f4:94:08:b4:af:1e:99:f6:25:92:dd:3c:32:d5: 0e:31:ba:42:2c:9f:60:30:09:3e:8d:bc:97:7a:87:b0:51:2d: 65:78:8f:db:4f:09:52:6e:a1:03:09:ca:b9:84:18:8a:8b:3a: 69:61:1a:3e:9b:33:e6:ee:00:27:2d:c5:1f:4b:f9:2c:58:f8: 45:07:35:a9:03:8d:a5:79:e5:b0:4c:10:99:12:dd:9d:fb:f9: 43:cc:82:a6:5f:5d:be:13:b3:31:44:14:d5:ed:b9:e2:d1:51: ca:6c:92:0d:59:86:7e:96:af:30:ea:43:e5:fe:83:d3:05:70: a4:96:b7:61:56:95:2c:62:79:8f:f5:f5:25:ac:70:32:42:ce: aa:ca:ec:f9:20:ad:80:3c:19:1d:59:b5:d0:8f:52:8b:ac:ee: 3e:43:c8:81:40:18:25:ea:25:06:89:22:0b:42:a4:05:05:4e: 0e:e7:5a:3b:79:a8:23:b1:de:22:9e:34:fe:2d:89:d6:c7:84: 25:60:d8:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURKo4b5KcBfge79M7yQCAPZQThA8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEEyNDNBMUVDNDk5MUM0MEQzQTYxNDg1MTVFM0M1MTk4 MUI0MjVGNzAeFw0yNDA1MTkwMjM1NTFaFw0yNDA1MjIwMjQyNTFaMDMxMTAvBgNV BAMTKDQ5NkIwM0ZCRkE1MTUyOTc4Qjk2OTI3Q0Q5OTNDMzc3RTJCNUU4QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6/03Y2XBaJ56LqdkswV0a3555 vtUAoJARw8h443sGHQYQBAZy/+TverqiYaELWjJPotyVpkIEi7OX/uhYl2flgU92 MkyLvHPwv9VlWb5FSP7U5TkzFkEcD/HE5ooxcR2/NXRDwhXRUUlVCu+bBFkSh/tj 2u00aS97a3o9N8OhU60iZ/a3n2b7bwkW+Jmh0LSJihUnzYig0Y51qpf5BMJTULvm 5v/x8SOlW5QAo4mkFuuoItu6wj1avt9Cq5Zx2U8Ts0r/iW+dsCYFp9VeC5KQxm3F s/MKsguJJ0YowFQRVbZeooOZUwLFdeeP8VvU2x9T5R8ygOaqM2ukdDLcAXYpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSWsD+/pRUpeLlpJ82ZPDd+K16KgwHwYDVR0j BBgwFoAUSiQ6HsSZHEDTphSFFePFGYG0JfcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Yzg4OTJlYi1kZGMwLTRjYjYtOTU3Yy1iNjUzZjI4YmJmMzkvMC80QTI0M0ExRUM0 OTkxQzQwRDNBNjE0ODUxNUUzQzUxOTgxQjQyNUY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEEyNDNBMUVDNDk5MUM0MEQzQTYxNDg1MTVFM0M1MTk4MUI0 MjVGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWM4ODkyZWItZGRjMC00Y2I2LTk1 N2MtYjY1M2YyOGJiZjM5LzAvNEEyNDNBMUVDNDk5MUM0MEQzQTYxNDg1MTVFM0M1 MTk4MUI0MjVGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACRAYq2c9C959fj+fHhQ6v3VLiOMxszZ9Z9P LQ4Aj2jexXe7yEIfzaV9/VWvks6uO28IEdpfgQ/MH6j0lAi0rx6Z9iWS3Twy1Q4x ukIsn2AwCT6NvJd6h7BRLWV4j9tPCVJuoQMJyrmEGIqLOmlhGj6bM+buACctxR9L +SxY+EUHNakDjaV55bBMEJkS3Z37+UPMgqZfXb4TszFEFNXtueLRUcpskg1Zhn6W rzDqQ+X+g9MFcKSWt2FWlSxieY/19SWscDJCzqrK7PkgrYA8GR1ZtdCPUous7j5D yIFAGCXqJQaJIgtCpAUFTg7nWjt5qCOx3iKeNP4tidbHhCVg2DI= -----END CERTIFICATE-----Generated at Sun May 19 03:37:36 2024 by rpki-client on console-ams.rpki-client.org