$ rpki-client -vvf repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.mft File: 4A688B72A804A426A9096ECA60105A4D831C5FA8.mft (raw, json) Hash identifier: u4e0Huxsl0SU1bPLq0lTL+apOiwKWyD1u8O80t+qHIY= Subject key identifier: 64:37:AC:3A:AD:3A:D6:B1:3D:83:BD:18:67:CD:AA:AE:D2:96:E6:AF Authority key identifier: 4A:68:8B:72:A8:04:A4:26:A9:09:6E:CA:60:10:5A:4D:83:1C:5F:A8 Certificate issuer: /CN=4A688B72A804A426A9096ECA60105A4D831C5FA8 Certificate serial: 32A0BD8C3BE56CC8C4408C496E0044E234FD673E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A688B72A804A426A9096ECA60105A4D831C5FA8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.mft Manifest number: 020E Signing time: Sun 19 May 2024 14:11:29 +0000 Manifest this update: Sun 19 May 2024 14:06:29 +0000 Manifest next update: Wed 22 May 2024 16:01:29 +0000 Files and hashes: 1: 4A688B72A804A426A9096ECA60105A4D831C5FA8.crl (hash: cHveaE8DOKFJMjwpug600EQbZDTdQ5XxEmp24RsNpt8=) 2: 3130332e3137352e3230362e302f32342d3234203d3e20313437313234.roa (hash: nx3DFIuUzInyTBwQCTgELzBv7Mmwz0hD2tPu+GVUIUM=) 3: 3130332e3137352e3230372e302f32342d3234203d3e20313437313234.roa (hash: GCLVfiGfniy5z5imozVpY1A3ViMb0kJpmh6ub8S484w=) 4: 3130332e3137352e3230362e302f32332d3234203d3e20313437313234.roa (hash: +ktPfyO2j4OODEI23CQFGa7iOeiwX23b+DVVexH2dGM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.crl rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A688B72A804A426A9096ECA60105A4D831C5FA8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 16:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:a0:bd:8c:3b:e5:6c:c8:c4:40:8c:49:6e:00:44:e2:34:fd:67:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A688B72A804A426A9096ECA60105A4D831C5FA8 Validity Not Before: May 19 14:06:29 2024 GMT Not After : May 22 16:01:29 2024 GMT Subject: CN=6437AC3AAD3AD6B13D83BD1867CDAAAED296E6AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4a:b3:cb:ce:46:47:94:97:bf:a6:81:25:40: fb:7a:3a:92:41:8d:c7:bd:a7:86:04:5d:87:ab:4c: 5b:4d:f1:66:19:b1:08:f3:27:e0:98:4c:02:be:23: 22:87:3e:44:26:ee:c2:41:a8:45:be:96:d7:91:be: cb:02:08:1d:23:89:68:c2:1b:cd:91:bd:cf:bd:b6: 80:68:54:ec:fe:28:9f:e1:9f:24:c9:77:8b:15:0d: 5b:31:49:2a:1b:8f:16:6f:f2:b3:4c:4b:9a:ae:da: ee:27:16:10:11:e8:1e:7a:7f:1a:d6:d6:ae:c7:90: ae:c5:22:f6:b5:35:1c:67:e7:60:ec:af:61:f7:7b: 39:fb:16:ce:a4:b8:09:e7:fc:ff:3a:bc:e8:bd:69: df:18:6c:68:bc:e6:ee:3f:e6:c1:fd:cb:5e:07:9a: 67:d9:4a:25:aa:ba:52:e1:11:e9:d4:e2:86:ee:24: e3:06:b6:ff:c1:dd:e0:00:b6:89:c1:b2:89:82:f8: f3:72:d3:e7:b4:63:77:ea:fe:26:2c:88:c2:ef:75: ef:cd:50:75:78:b2:64:4d:66:b5:ae:7a:cc:5b:2f: 63:c8:ab:62:10:fa:78:99:3e:10:93:ef:5e:a4:0b: 60:ec:a6:e3:b2:05:f9:bc:3c:a1:2e:57:83:5c:98: c1:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:37:AC:3A:AD:3A:D6:B1:3D:83:BD:18:67:CD:AA:AE:D2:96:E6:AF X509v3 Authority Key Identifier: keyid:4A:68:8B:72:A8:04:A4:26:A9:09:6E:CA:60:10:5A:4D:83:1C:5F:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A688B72A804A426A9096ECA60105A4D831C5FA8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:56:9f:87:b9:15:2e:d5:54:cd:31:e8:62:7a:09:eb:47:9c: bc:87:0a:b5:ba:54:4f:28:2c:23:61:bb:cc:22:5b:01:ca:0f: a3:9b:fe:44:ca:2c:2b:ea:af:d5:ff:f7:4d:16:44:36:4b:8f: c7:89:ea:5e:20:21:8a:5f:08:d4:4b:ba:fc:99:4a:90:27:19: 27:2a:da:29:a8:5f:c9:4b:43:f1:bd:60:6e:70:8b:a3:aa:73: 8e:b8:81:f9:53:e5:01:e1:16:ff:5f:d4:69:8c:39:19:35:eb: a6:2e:7f:2b:f0:ab:03:60:45:ce:12:28:ae:b6:27:27:fe:81: 5b:d6:fa:c1:5c:95:0a:81:25:3f:36:88:40:f8:f7:bc:13:23: 29:14:38:e1:09:10:6d:38:88:47:41:ec:32:29:94:b9:39:3a: f4:96:30:3e:6f:79:0f:ed:46:7a:86:e0:af:4f:9b:71:9a:56: 1a:ec:f7:38:c2:15:2d:39:b3:f4:7f:50:a5:e1:9c:76:2f:0b: a6:02:55:f9:f8:59:a0:a8:61:9d:43:c1:06:38:8f:be:bd:d0: 66:31:d8:94:31:0d:5d:4c:d8:b6:bc:c2:58:52:43:46:16:09: f8:ee:0f:fc:77:d9:a7:30:5a:da:a1:bb:13:4f:e7:54:34:c5: 3b:f1:52:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMqC9jDvlbMjEQIxJbgBE4jT9Zz4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE2ODhCNzJBODA0QTQyNkE5MDk2RUNBNjAxMDVBNEQ4 MzFDNUZBODAeFw0yNDA1MTkxNDA2MjlaFw0yNDA1MjIxNjAxMjlaMDMxMTAvBgNV BAMTKDY0MzdBQzNBQUQzQUQ2QjEzRDgzQkQxODY3Q0RBQUFFRDI5NkU2QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+SrPLzkZHlJe/poElQPt6OpJB jce9p4YEXYerTFtN8WYZsQjzJ+CYTAK+IyKHPkQm7sJBqEW+lteRvssCCB0jiWjC G82Rvc+9toBoVOz+KJ/hnyTJd4sVDVsxSSobjxZv8rNMS5qu2u4nFhAR6B56fxrW 1q7HkK7FIva1NRxn52Dsr2H3ezn7Fs6kuAnn/P86vOi9ad8YbGi85u4/5sH9y14H mmfZSiWqulLhEenU4obuJOMGtv/B3eAAtonBsomC+PNy0+e0Y3fq/iYsiMLvde/N UHV4smRNZrWuesxbL2PIq2IQ+niZPhCT716kC2DspuOyBfm8PKEuV4NcmMFxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZDesOq061rE9g70YZ82qrtKW5q8wHwYDVR0j BBgwFoAUSmiLcqgEpCapCW7KYBBaTYMcX6gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YWE2YTY3ZC1jYmEzLTQyN2ItOTA1NS01ZjUyOGYyZDIzMmYvMC80QTY4OEI3MkE4 MDRBNDI2QTkwOTZFQ0E2MDEwNUE0RDgzMUM1RkE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEE2ODhCNzJBODA0QTQyNkE5MDk2RUNBNjAxMDVBNEQ4MzFD NUZBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmFhNmE2N2QtY2JhMy00MjdiLTkw NTUtNWY1MjhmMmQyMzJmLzAvNEE2ODhCNzJBODA0QTQyNkE5MDk2RUNBNjAxMDVB NEQ4MzFDNUZBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALRWn4e5FS7VVM0x6GJ6CetHnLyHCrW6VE8o LCNhu8wiWwHKD6Ob/kTKLCvqr9X/900WRDZLj8eJ6l4gIYpfCNRLuvyZSpAnGScq 2imoX8lLQ/G9YG5wi6Oqc464gflT5QHhFv9f1GmMORk166YufyvwqwNgRc4SKK62 Jyf+gVvW+sFclQqBJT82iED497wTIykUOOEJEG04iEdB7DIplLk5OvSWMD5veQ/t RnqG4K9Pm3GaVhrs9zjCFS05s/R/UKXhnHYvC6YCVfn4WaCoYZ1DwQY4j7690GYx 2JQxDV1M2La8wlhSQ0YWCfjuD/x32acwWtqhuxNP51Q0xTvxUmc= -----END CERTIFICATE-----Generated at Sun May 19 15:45:36 2024 by rpki-client on console-fra.rpki-client.org