$ rpki-client -vvf repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft File: B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft (raw, json) Hash identifier: VVo5QR2KyzOYxPm3w6lwTv9iQv+zl1PaQh54wSIZLeg= Subject key identifier: A4:2B:12:5B:2A:83:84:8C:81:66:7B:54:41:E7:04:78:70:00:4A:12 Authority key identifier: B1:44:E4:EB:28:F6:9D:9B:76:C0:C2:49:9B:FD:7B:3E:C5:03:EF:3E Certificate issuer: /CN=B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E Certificate serial: 1759444295DDDF7B33B2EBB8659DE1509333B284 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft Manifest number: 0430 Signing time: Sun 19 May 2024 01:20:38 +0000 Manifest this update: Sun 19 May 2024 01:15:38 +0000 Manifest next update: Wed 22 May 2024 10:33:38 +0000 Files and hashes: 1: 3130332e32382e3130372e302f32342d3234203d3e203538343736.roa (hash: WNerszvd8MTr+p5OB2wZ/C7GZP+ZuKVyIfJm3owcpSw=) 2: 323030313a6466303a3236663a3a2f34382d3438203d3e203538343736.roa (hash: aTrbxcqRQp2Zzs3J6AHgLZq+jAIcg/RWcatHwofULOg=) 3: 3130332e32382e3130362e302f32342d3234203d3e203538343736.roa (hash: qvqPM+jwQCkjTuudleE6RfuKBT981Gv2+PHQYGna4/I=) 4: 3130332e37322e3131312e302f32342d3234203d3e203538343736.roa (hash: NP7z5cwCFZTdJ749n0SddRyuAaOAh9AUSM88iN1HI84=) 5: 34332e3234322e3133332e302f32342d3234203d3e203538343736.roa (hash: QB5lxgxyE10J6adehGxrLnWfEP2qi2z4doQ3FRq16Yw=) 6: 34332e3234322e3133322e302f32342d3234203d3e203538343736.roa (hash: 5jkC14KZMU4fF4QlGT56pMiBx5VDWUUgaF+zaekL5kw=) 7: B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.crl (hash: tHX4lCE//Ac0NZzMPGFTNOae6BCBKo6o0jM86XRQius=) 8: 3130332e37322e3131302e302f32342d3234203d3e203538343736.roa (hash: Yv4+NRKJwpBIb5C/fQENX05YPDaaZFFcSmuPMbCb62c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.crl rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 23:11:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:59:44:42:95:dd:df:7b:33:b2:eb:b8:65:9d:e1:50:93:33:b2:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E Validity Not Before: May 19 01:15:38 2024 GMT Not After : May 22 10:33:38 2024 GMT Subject: CN=A42B125B2A83848C81667B5441E7047870004A12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1f:1c:a8:3c:36:2c:d3:7a:c1:78:ff:e4:cf: 54:7b:ce:b2:f6:53:34:c7:4c:23:ea:aa:33:52:ba: f4:0f:58:cb:6d:04:d2:17:ee:bd:4a:32:3a:b1:c2: a1:5a:8c:a9:df:5c:c3:8f:e0:76:41:40:de:6f:5e: 05:41:72:af:da:7c:e9:e9:9c:90:58:fe:d6:8f:6b: 89:ca:8d:82:8f:48:a2:f3:3c:25:fe:7d:8d:3d:79: a9:cb:08:48:b8:33:0e:0b:fd:b9:22:bc:9d:91:5c: 08:16:ea:12:6c:de:3b:9c:c0:b4:0c:2c:79:c1:31: d9:a9:06:61:1c:97:12:50:8f:0c:91:7a:44:96:ea: 36:57:bd:9e:a0:5d:a6:75:fc:2b:95:d0:ba:3f:20: a4:ef:fc:3c:49:71:fd:b7:6d:7e:fd:24:f2:e0:7b: 9a:fa:4e:ea:29:19:cb:40:06:4f:07:67:20:5c:83: 4c:9e:9a:cf:7b:b7:24:a1:2b:82:c1:8b:6a:20:61: 42:e2:d1:00:06:0d:1a:c3:ae:99:79:f2:47:8b:dc: ef:c0:d1:5a:77:ac:05:ce:57:68:f7:cb:ec:cd:b4: 15:f2:0e:b4:58:91:55:7e:64:5a:79:b2:a2:e8:3c: 76:83:e7:9d:53:73:70:88:94:47:5e:71:f9:c9:12: f4:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:2B:12:5B:2A:83:84:8C:81:66:7B:54:41:E7:04:78:70:00:4A:12 X509v3 Authority Key Identifier: keyid:B1:44:E4:EB:28:F6:9D:9B:76:C0:C2:49:9B:FD:7B:3E:C5:03:EF:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:ab:bc:ce:c0:d3:b3:e4:8f:e0:fc:f6:69:0d:f9:1e:99:cb: db:02:89:00:ff:5e:dd:70:85:69:2d:fc:c3:28:8c:d1:ff:86: 98:3c:bb:3e:0f:5d:fb:e0:dd:65:66:e5:fb:30:d7:a0:24:62: 1a:ba:b5:02:66:22:8f:ba:cc:88:7f:72:84:a9:0b:b6:31:59: 66:0a:31:44:eb:f8:22:71:20:ea:cb:9f:5f:17:04:4d:7d:1e: 4d:45:70:26:9e:ac:c4:9d:13:9e:19:76:af:6d:46:a7:ec:f5: 70:74:c4:f9:f9:c6:30:71:58:2b:fe:bf:69:25:32:8d:d8:f3: cc:99:63:12:74:b8:51:0b:cf:43:fe:5b:d8:81:21:97:30:93: 95:93:95:4a:d9:76:bf:52:b5:a7:7f:8d:56:3c:ff:ea:e1:06: fe:c8:e9:a8:4e:c0:36:c8:4c:d2:df:22:1f:39:94:2e:5a:33: 21:b7:dc:5d:49:fe:59:11:b6:5b:f8:a4:42:43:9d:a5:43:d0: c6:67:ad:24:78:9e:14:c4:6a:21:01:a1:26:34:3d:aa:1d:e7: af:88:a0:41:ee:d8:9a:d8:f4:c8:56:d0:7c:12:a5:08:c4:52: 2c:cb:ae:37:63:93:de:9a:0e:e6:5c:ec:48:0b:5d:68:e3:26: 96:b2:a7:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF1lEQpXd33szsuu4ZZ3hUJMzsoQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE0NEU0RUIyOEY2OUQ5Qjc2QzBDMjQ5OUJGRDdCM0VD NTAzRUYzRTAeFw0yNDA1MTkwMTE1MzhaFw0yNDA1MjIxMDMzMzhaMDMxMTAvBgNV BAMTKEE0MkIxMjVCMkE4Mzg0OEM4MTY2N0I1NDQxRTcwNDc4NzAwMDRBMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgHxyoPDYs03rBeP/kz1R7zrL2 UzTHTCPqqjNSuvQPWMttBNIX7r1KMjqxwqFajKnfXMOP4HZBQN5vXgVBcq/afOnp nJBY/taPa4nKjYKPSKLzPCX+fY09eanLCEi4Mw4L/bkivJ2RXAgW6hJs3jucwLQM LHnBMdmpBmEclxJQjwyRekSW6jZXvZ6gXaZ1/CuV0Lo/IKTv/DxJcf23bX79JPLg e5r6TuopGctABk8HZyBcg0yems97tyShK4LBi2ogYULi0QAGDRrDrpl58keL3O/A 0Vp3rAXOV2j3y+zNtBXyDrRYkVV+ZFp5sqLoPHaD551Tc3CIlEdecfnJEvSvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpCsSWyqDhIyBZntUQecEeHAAShIwHwYDVR0j BBgwFoAUsUTk6yj2nZt2wMJJm/17PsUD7z4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m N2Y0OTA2OC1jMGNhLTRhMjEtOWE4YS1lZWQyNmZjZGQxYWEvMC9CMTQ0RTRFQjI4 RjY5RDlCNzZDMEMyNDk5QkZEN0IzRUM1MDNFRjNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjE0NEU0RUIyOEY2OUQ5Qjc2QzBDMjQ5OUJGRDdCM0VDNTAz RUYzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjdmNDkwNjgtYzBjYS00YTIxLTlh OGEtZWVkMjZmY2RkMWFhLzAvQjE0NEU0RUIyOEY2OUQ5Qjc2QzBDMjQ5OUJGRDdC M0VDNTAzRUYzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGyrvM7A07Pkj+D89mkN+R6Zy9sCiQD/Xt1w hWkt/MMojNH/hpg8uz4PXfvg3WVm5fsw16AkYhq6tQJmIo+6zIh/coSpC7YxWWYK MUTr+CJxIOrLn18XBE19Hk1FcCaerMSdE54Zdq9tRqfs9XB0xPn5xjBxWCv+v2kl Mo3Y88yZYxJ0uFELz0P+W9iBIZcwk5WTlUrZdr9Stad/jVY8/+rhBv7I6ahOwDbI TNLfIh85lC5aMyG33F1J/lkRtlv4pEJDnaVD0MZnrSR4nhTEaiEBoSY0Paod56+I oEHu2JrY9MhW0HwSpQjEUizLrjdjk96aDuZc7EgLXWjjJpayp/E= -----END CERTIFICATE-----Generated at Sun May 19 02:58:10 2024 by rpki-client on console-ams.rpki-client.org