$ rpki-client -vvf repo-rpki.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/4551A032C44485FF6593E043527E3E1CE35B4C46.mft File: 4551A032C44485FF6593E043527E3E1CE35B4C46.mft (raw, json) Hash identifier: Iyc19y9WcssuMMq+3qei/Vz/qWegbkiGjZRPsCaKMdA= Subject key identifier: 2D:4F:B4:06:1A:18:F3:BA:A6:2C:D1:75:EA:2A:45:12:7F:10:DC:48 Authority key identifier: 45:51:A0:32:C4:44:85:FF:65:93:E0:43:52:7E:3E:1C:E3:5B:4C:46 Certificate issuer: /CN=4551A032C44485FF6593E043527E3E1CE35B4C46 Certificate serial: 71FC1560422A62F8EC62011FF06C0A9CFAC9D02D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4551A032C44485FF6593E043527E3E1CE35B4C46.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/4551A032C44485FF6593E043527E3E1CE35B4C46.mft Manifest number: 0430 Signing time: Sun 19 May 2024 18:01:04 +0000 Manifest this update: Sun 19 May 2024 17:56:04 +0000 Manifest next update: Wed 22 May 2024 18:09:04 +0000 Files and hashes: 1: 3130332e3231392e37322e302f32322d3234203d3e20313335343635.roa (hash: wbbKDZO0cS8axGTP+KftJq2ilwTGWE4DbpWiMPouDs0=) 2: 4551A032C44485FF6593E043527E3E1CE35B4C46.crl (hash: 39zo81bmcBV/Wddr/WohSmrhZcQvkOZqhEIxS6FYz2Q=) 3: 323430353a346338303a3a2f33322d3438203d3e20313335343635.roa (hash: QYHKTKZ5gsFoLw6uZHDxB3rhXHB/nvwJjJOjQl/PuUQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/4551A032C44485FF6593E043527E3E1CE35B4C46.crl rsync://repo-rpki.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/4551A032C44485FF6593E043527E3E1CE35B4C46.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4551A032C44485FF6593E043527E3E1CE35B4C46.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 18:09:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:fc:15:60:42:2a:62:f8:ec:62:01:1f:f0:6c:0a:9c:fa:c9:d0:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4551A032C44485FF6593E043527E3E1CE35B4C46 Validity Not Before: May 19 17:56:04 2024 GMT Not After : May 22 18:09:04 2024 GMT Subject: CN=2D4FB4061A18F3BAA62CD175EA2A45127F10DC48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e0:a0:6a:09:b1:4b:83:bb:e3:bf:6e:6e:18: f0:bb:70:26:12:49:c7:c4:93:e1:ad:44:d0:7d:03: b9:6e:7b:9c:11:66:01:19:31:38:9d:60:3e:e9:e6: 2c:c4:fc:12:96:a5:c6:b3:46:44:5f:14:91:75:60: 20:12:29:14:cb:c2:45:72:42:1e:4e:6b:5c:84:5f: 12:f6:2e:3e:cd:0a:30:3a:8b:41:c0:4f:89:1c:c3: c9:f0:b7:f4:bc:a5:65:18:03:4f:f6:19:62:1f:7d: 7c:ec:88:97:38:86:5d:f6:ec:57:54:5e:7a:41:5c: 40:cb:87:fa:e7:9e:76:d5:5f:64:9a:a0:7d:26:66: 12:f5:82:01:12:d3:96:39:2c:67:ef:03:a3:16:03: b4:22:0d:e9:cc:4d:f8:ae:e0:f3:5f:28:1f:82:40: 70:28:02:9b:5f:37:7c:eb:26:9f:5e:50:e8:8a:52: 40:1c:24:8c:7c:aa:dc:d1:9a:39:ff:82:bd:48:51: 4a:18:a2:5d:7c:bc:ad:9c:e3:dd:76:50:d0:25:81: b9:d4:d0:a7:e8:c5:cb:9d:07:e4:4f:e8:84:be:df: ca:99:6c:a7:95:f6:6c:fe:ec:9a:3f:49:76:72:06: f0:64:fe:69:56:fc:31:23:49:8f:54:4d:d6:64:11: 5c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:4F:B4:06:1A:18:F3:BA:A6:2C:D1:75:EA:2A:45:12:7F:10:DC:48 X509v3 Authority Key Identifier: keyid:45:51:A0:32:C4:44:85:FF:65:93:E0:43:52:7E:3E:1C:E3:5B:4C:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/4551A032C44485FF6593E043527E3E1CE35B4C46.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4551A032C44485FF6593E043527E3E1CE35B4C46.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/4551A032C44485FF6593E043527E3E1CE35B4C46.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:db:9d:73:7e:ac:2a:94:06:de:35:c7:53:74:c0:dc:7c:6f: 1f:69:5b:37:e1:e9:6c:6a:ba:69:9a:e4:34:a7:15:f6:1e:e3: 85:51:82:c3:78:f7:8b:5c:9d:40:e9:c5:66:8e:0d:86:2a:d8: d0:be:b9:9c:ec:b5:5d:9f:c7:a6:7a:92:a0:a5:7a:a5:ce:e0: a0:c6:5a:b0:ef:0d:a7:3d:24:a2:68:a2:bb:49:a8:03:5b:5f: 00:86:b8:b7:30:17:5e:03:42:7e:2f:24:bc:01:3c:87:63:6f: 82:be:e1:2f:0f:dd:3b:82:00:08:6e:c1:ee:b4:f8:53:73:47: db:36:fd:32:cc:38:c5:e9:bf:1e:d0:90:55:ad:77:18:6d:cb: 01:19:35:ce:22:a6:fb:35:36:94:62:7a:f8:17:c1:78:23:0a: 4d:48:71:1b:c3:27:0a:79:ed:f4:02:34:58:65:ad:be:91:74: db:44:0f:8e:1b:97:8e:cb:91:c0:cb:d4:47:a5:b5:15:3f:74: e4:b3:b8:bf:4c:31:c1:32:7b:1d:0a:0a:03:ae:ff:f1:64:18: dc:60:df:ec:f7:5a:4b:ad:8e:26:02:1f:cf:68:a2:03:8c:c8: e5:67:c9:39:8b:58:a1:c9:cd:20:a2:d2:f6:35:b9:d6:48:fb: a5:ea:cb:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcfwVYEIqYvjsYgEf8GwKnPrJ0C0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU1MUEwMzJDNDQ0ODVGRjY1OTNFMDQzNTI3RTNFMUNF MzVCNEM0NjAeFw0yNDA1MTkxNzU2MDRaFw0yNDA1MjIxODA5MDRaMDMxMTAvBgNV BAMTKDJENEZCNDA2MUExOEYzQkFBNjJDRDE3NUVBMkE0NTEyN0YxMERDNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA4KBqCbFLg7vjv25uGPC7cCYS ScfEk+GtRNB9A7lue5wRZgEZMTidYD7p5izE/BKWpcazRkRfFJF1YCASKRTLwkVy Qh5Oa1yEXxL2Lj7NCjA6i0HAT4kcw8nwt/S8pWUYA0/2GWIffXzsiJc4hl327FdU XnpBXEDLh/rnnnbVX2SaoH0mZhL1ggES05Y5LGfvA6MWA7QiDenMTfiu4PNfKB+C QHAoAptfN3zrJp9eUOiKUkAcJIx8qtzRmjn/gr1IUUoYol18vK2c4912UNAlgbnU 0KfoxcudB+RP6IS+38qZbKeV9mz+7Jo/SXZyBvBk/mlW/DEjSY9UTdZkEVxDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULU+0BhoY87qmLNF16ipFEn8Q3EgwHwYDVR0j BBgwFoAURVGgMsREhf9lk+BDUn4+HONbTEYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m M2E2MmM5YS1kNGYwLTQ1NGItODA3Zi04NGY5YjNjMjAyYjMvMC80NTUxQTAzMkM0 NDQ4NUZGNjU5M0UwNDM1MjdFM0UxQ0UzNUI0QzQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU1MUEwMzJDNDQ0ODVGRjY1OTNFMDQzNTI3RTNFMUNFMzVC NEM0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjNhNjJjOWEtZDRmMC00NTRiLTgw N2YtODRmOWIzYzIwMmIzLzAvNDU1MUEwMzJDNDQ0ODVGRjY1OTNFMDQzNTI3RTNF MUNFMzVCNEM0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJTbnXN+rCqUBt41x1N0wNx8bx9pWzfh6Wxq umma5DSnFfYe44VRgsN494tcnUDpxWaODYYq2NC+uZzstV2fx6Z6kqCleqXO4KDG WrDvDac9JKJoortJqANbXwCGuLcwF14DQn4vJLwBPIdjb4K+4S8P3TuCAAhuwe60 +FNzR9s2/TLMOMXpvx7QkFWtdxhtywEZNc4ipvs1NpRievgXwXgjCk1IcRvDJwp5 7fQCNFhlrb6RdNtED44bl47LkcDL1EeltRU/dOSzuL9MMcEyex0KCgOu//FkGNxg 3+z3WkutjiYCH89oogOMyOVnyTmLWKHJzSCi0vY1udZI+6Xqy24= -----END CERTIFICATE-----Generated at Sun May 19 18:31:47 2024 by rpki-client on console-fra.rpki-client.org