$ rpki-client -vvf repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.mft File: A532AD36631301388EC939BEB0F099FCDE956410.mft (raw, json) Hash identifier: yj7zuL+Z9F4m3jIPyqKStNdp5w+qGoDXaKAlKBmFANY= Subject key identifier: 81:49:E8:59:D3:03:5C:53:09:9C:80:07:54:C6:55:59:9D:C2:86:DB Authority key identifier: A5:32:AD:36:63:13:01:38:8E:C9:39:BE:B0:F0:99:FC:DE:95:64:10 Certificate issuer: /CN=A532AD36631301388EC939BEB0F099FCDE956410 Certificate serial: 7C1ACA92CD3EB14E435B81C6D85A8A654C235670 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A532AD36631301388EC939BEB0F099FCDE956410.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.mft Manifest number: 03CA Signing time: Sat 18 May 2024 17:00:53 +0000 Manifest this update: Sat 18 May 2024 16:55:53 +0000 Manifest next update: Tue 21 May 2024 23:02:53 +0000 Files and hashes: 1: 3130332e3135352e3139362e302f32342d3234203d3e20313431303731.roa (hash: +iBP1n25amN1BUbKW4c0Cv8N7jOCDGCOsAfJU3KqYkY=) 2: 323430363a373634303a3a2f33322d3332203d3e20313431303731.roa (hash: FULqUc9OVfsHFelY/OWJ9v0pOikh2oi0bwKOdwPWf1U=) 3: 3130332e3135352e3139372e302f32342d3234203d3e20313431303731.roa (hash: kTZlMxGB2xgcXi3FLgIz4de2/PFQXvsRAyg4T49aiL0=) 4: A532AD36631301388EC939BEB0F099FCDE956410.crl (hash: +OQKu09i1qwEdb1CUMLGr/YFyj+0xAuM5TbcZd4H5NM=) 5: 3130332e3135352e3139362e302f32332d3233203d3e20313431303731.roa (hash: tyBaNRvTwRtGPOH3ZDOfohtzCo5kWp2kTb5iqfnfu4w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.crl rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A532AD36631301388EC939BEB0F099FCDE956410.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:1a:ca:92:cd:3e:b1:4e:43:5b:81:c6:d8:5a:8a:65:4c:23:56:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A532AD36631301388EC939BEB0F099FCDE956410 Validity Not Before: May 18 16:55:53 2024 GMT Not After : May 21 23:02:53 2024 GMT Subject: CN=8149E859D3035C53099C800754C655599DC286DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e0:44:a6:6a:77:f8:f2:4c:a9:43:97:75:d3: 1c:fe:ca:03:69:88:0b:84:fc:f0:d3:99:46:09:b4: f2:1b:61:9c:6a:d5:c0:81:87:af:b6:1b:15:bb:2e: fe:84:a3:f1:26:12:fe:27:b2:9f:17:f8:1b:75:0a: 44:85:ec:4d:9d:4e:c9:c4:7b:a8:57:76:f6:7a:2d: 76:48:6d:fe:e6:c5:bf:79:39:67:87:85:e8:7a:d0: 97:cc:64:b3:1c:61:2b:a1:37:10:71:73:ff:94:39: d7:af:83:02:60:b3:6f:6b:70:0c:a3:0e:99:9d:98: ac:36:32:b2:a4:c2:07:ae:af:d5:d4:37:f3:cb:9e: b2:8d:a4:9b:68:f6:74:20:c3:c4:8f:8d:8b:40:79: 81:a6:a8:21:be:21:64:da:5f:57:8f:22:33:b2:60: 51:a8:a6:8e:f8:53:d0:9e:73:83:fa:d5:a3:2b:db: 3b:dc:8e:d7:42:7a:d3:25:1a:c8:86:91:d7:93:2f: da:57:f3:db:3f:73:fb:e0:b1:b0:d2:9a:0c:25:66: cb:2f:f2:22:f1:e7:1b:4a:6c:76:33:95:4f:a6:17: 31:9e:9e:e8:de:38:82:04:55:9b:9e:3f:85:cb:d8: 58:19:35:1f:01:bb:5a:a1:3d:37:c8:20:d5:7a:02: 42:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:49:E8:59:D3:03:5C:53:09:9C:80:07:54:C6:55:59:9D:C2:86:DB X509v3 Authority Key Identifier: keyid:A5:32:AD:36:63:13:01:38:8E:C9:39:BE:B0:F0:99:FC:DE:95:64:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A532AD36631301388EC939BEB0F099FCDE956410.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:48:d2:1c:1a:17:ee:10:98:11:a4:2d:ba:ca:69:e6:91:e7: e8:4a:b9:70:cc:ac:07:c9:01:58:63:df:c6:28:d1:c8:f6:50: 2a:82:e1:29:8d:bd:f6:95:86:e2:b2:e6:36:73:9b:fb:d9:41: a6:bd:c1:bc:e2:bb:6b:0e:4c:4a:bc:56:d0:18:33:d0:f3:32: ce:39:9f:b6:56:84:66:82:e8:28:b1:e7:0b:80:18:55:fd:db: eb:2d:b4:7b:d2:99:f4:a0:96:2c:37:16:7e:eb:d9:88:a0:13: e4:83:94:a9:21:d0:41:93:12:e9:77:7e:41:35:e7:06:c9:d6: 08:70:c8:de:4d:54:0b:79:cb:77:bf:df:04:fb:73:39:a4:4d: 5f:57:39:6e:54:64:9c:ff:34:49:4b:08:1e:52:b7:0d:33:51: 95:db:55:8b:f2:f6:86:ac:39:ac:35:9c:fc:32:2f:f9:c9:5b: 1b:16:d9:ba:ce:86:d4:68:10:6d:6a:ce:38:50:b1:cf:f8:8b: d0:f9:4a:c5:53:33:aa:e6:f3:29:f9:ce:26:7c:41:9c:c8:c2: 16:4e:39:4b:48:2a:d2:b7:54:08:e0:82:4f:6a:19:cb:c1:a1: 25:f2:b3:fa:b7:df:51:e5:56:00:32:58:36:a2:95:01:21:cb: 24:ab:23:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfBrKks0+sU5DW4HG2FqKZUwjVnAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUzMkFEMzY2MzEzMDEzODhFQzkzOUJFQjBGMDk5RkNE RTk1NjQxMDAeFw0yNDA1MTgxNjU1NTNaFw0yNDA1MjEyMzAyNTNaMDMxMTAvBgNV BAMTKDgxNDlFODU5RDMwMzVDNTMwOTlDODAwNzU0QzY1NTU5OURDMjg2REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC64ESmanf48kypQ5d10xz+ygNp iAuE/PDTmUYJtPIbYZxq1cCBh6+2GxW7Lv6Eo/EmEv4nsp8X+Bt1CkSF7E2dTsnE e6hXdvZ6LXZIbf7mxb95OWeHheh60JfMZLMcYSuhNxBxc/+UOdevgwJgs29rcAyj DpmdmKw2MrKkwgeur9XUN/PLnrKNpJto9nQgw8SPjYtAeYGmqCG+IWTaX1ePIjOy YFGopo74U9Cec4P61aMr2zvcjtdCetMlGsiGkdeTL9pX89s/c/vgsbDSmgwlZssv 8iLx5xtKbHYzlU+mFzGenujeOIIEVZueP4XL2FgZNR8Bu1qhPTfIINV6AkLFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgUnoWdMDXFMJnIAHVMZVWZ3ChtswHwYDVR0j BBgwFoAUpTKtNmMTATiOyTm+sPCZ/N6VZBAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OWNlMGM5NC0wZDZjLTQ1YjMtYWFjNi0zNGQwY2U5YjFmMDgvMC9BNTMyQUQzNjYz MTMwMTM4OEVDOTM5QkVCMEYwOTlGQ0RFOTU2NDEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTUzMkFEMzY2MzEzMDEzODhFQzkzOUJFQjBGMDk5RkNERTk1 NjQxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjljZTBjOTQtMGQ2Yy00NWIzLWFh YzYtMzRkMGNlOWIxZjA4LzAvQTUzMkFEMzY2MzEzMDEzODhFQzkzOUJFQjBGMDk5 RkNERTk1NjQxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALBI0hwaF+4QmBGkLbrKaeaR5+hKuXDMrAfJ AVhj38Yo0cj2UCqC4SmNvfaVhuKy5jZzm/vZQaa9wbziu2sOTEq8VtAYM9DzMs45 n7ZWhGaC6Cix5wuAGFX92+sttHvSmfSgliw3Fn7r2YigE+SDlKkh0EGTEul3fkE1 5wbJ1ghwyN5NVAt5y3e/3wT7czmkTV9XOW5UZJz/NElLCB5Stw0zUZXbVYvy9oas Oaw1nPwyL/nJWxsW2brOhtRoEG1qzjhQsc/4i9D5SsVTM6rm8yn5ziZ8QZzIwhZO OUtIKtK3VAjggk9qGcvBoSXys/q331HlVgAyWDailQEhyySrI5s= -----END CERTIFICATE-----Generated at Sat May 18 18:21:12 2024 by rpki-client on console-ams.rpki-client.org