$ rpki-client -vvf repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.mft File: 9CD5DECA8E146A0231AE872283EA0F93B5784114.mft (raw, json) Hash identifier: ustkyYIT9BvySM369oe3yaU8Mj8FNNtoUENW68wLatg= Subject key identifier: B2:0B:47:6F:44:83:F8:08:3D:39:94:6E:7F:55:F7:47:5C:F0:29:4C Authority key identifier: 9C:D5:DE:CA:8E:14:6A:02:31:AE:87:22:83:EA:0F:93:B5:78:41:14 Certificate issuer: /CN=9CD5DECA8E146A0231AE872283EA0F93B5784114 Certificate serial: 126D5B211B8E4D162970C50C777F996E6457B560 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CD5DECA8E146A0231AE872283EA0F93B5784114.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.mft Manifest number: D4 Signing time: Fri 17 May 2024 19:40:45 +0000 Manifest this update: Fri 17 May 2024 19:35:45 +0000 Manifest next update: Mon 20 May 2024 21:16:45 +0000 Files and hashes: 1: 3130332e3132332e38352e302f32342d3234203d3e20313530343939.roa (hash: uwqBwp8xmAtxSQ3/5C3QaJZht8gnRzu1J+NXVbvy6i8=) 2: 9CD5DECA8E146A0231AE872283EA0F93B5784114.crl (hash: Rg3FHiPc/D+asvP2rMNUW+XNKpu9NOk/Go4QPcbRxEk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.crl rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CD5DECA8E146A0231AE872283EA0F93B5784114.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 May 2024 21:16:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:6d:5b:21:1b:8e:4d:16:29:70:c5:0c:77:7f:99:6e:64:57:b5:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CD5DECA8E146A0231AE872283EA0F93B5784114 Validity Not Before: May 17 19:35:45 2024 GMT Not After : May 20 21:16:45 2024 GMT Subject: CN=B20B476F4483F8083D39946E7F55F7475CF0294C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b5:cd:cf:31:0f:97:f1:c5:1c:d4:83:72:26: b8:d8:60:c5:e4:e3:12:5d:82:60:b7:6b:21:63:83: b7:aa:5f:87:34:b5:fc:fe:6c:55:10:63:0c:49:df: 60:ad:96:c3:eb:0a:38:e2:b3:b7:5c:6c:53:7e:0d: 57:0b:79:45:8e:41:e2:03:b0:38:d5:38:4b:cf:1b: 76:c5:ee:d4:75:09:e3:03:37:a1:48:3a:86:bf:0d: a0:ca:b3:73:60:05:96:96:d2:84:f3:39:3d:c2:03: 95:9d:64:28:da:57:77:c5:bf:80:e1:73:5c:6a:37: fa:1c:55:7c:3e:c3:4c:76:4f:a4:9d:09:86:1d:83: b8:d1:bc:2d:25:8c:a8:fa:70:90:8b:be:c4:57:ed: 6e:e1:5d:00:12:f1:7a:84:03:ba:61:9c:7c:5c:97: 35:1c:8d:84:d7:74:d6:3f:ed:e2:6f:aa:42:45:4c: a2:5d:5e:cd:12:55:2b:68:c2:6e:6d:91:95:18:00: aa:91:65:10:c8:20:85:a3:a5:e4:6f:52:30:9d:06: bd:2e:e7:35:f7:60:89:9f:96:4c:0f:09:8a:d7:d2: b0:02:5d:8f:11:a5:33:00:65:08:38:77:b8:ba:75: 3e:72:ce:1f:7d:0b:a9:52:d5:bd:00:ef:38:70:10: bc:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:0B:47:6F:44:83:F8:08:3D:39:94:6E:7F:55:F7:47:5C:F0:29:4C X509v3 Authority Key Identifier: keyid:9C:D5:DE:CA:8E:14:6A:02:31:AE:87:22:83:EA:0F:93:B5:78:41:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CD5DECA8E146A0231AE872283EA0F93B5784114.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fd2b4f77-74d0-4797-aee0-9ea907654730/0/9CD5DECA8E146A0231AE872283EA0F93B5784114.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:5d:ac:ed:98:22:40:dc:a8:f6:1a:9c:ca:5f:4d:c1:11:eb: c8:87:fd:e3:b0:e1:8b:9f:20:94:d4:a4:12:10:48:bd:8a:00: ae:85:79:af:79:fb:cf:3f:67:93:4a:31:da:59:62:58:b3:de: ce:e9:81:3c:bf:7c:49:11:60:24:a8:0a:b3:4e:94:c6:08:e4: 0f:b4:7d:d9:05:2a:57:d6:d1:f8:69:e9:3f:7b:e2:36:12:a5: 79:66:b7:97:3d:8f:b7:76:36:96:8b:41:8e:29:05:c3:3d:71: 3d:9f:94:2b:66:82:b4:89:7f:db:06:52:ac:f4:1c:ec:f4:6e: 1b:b4:de:f9:0c:7c:0e:c6:a3:0c:7d:8a:4c:fd:03:aa:ec:b3: 4c:fe:c6:e3:f2:5f:f7:20:d3:2e:b0:0b:1f:3e:2e:22:61:0b: 4d:3a:64:39:aa:2e:36:ba:01:7e:7e:cf:5f:92:f2:2b:19:ca: d9:2e:5f:9c:d5:a7:76:7a:ce:ec:1c:bd:e2:38:e8:2a:ba:c3: 99:b5:b0:d5:13:41:87:e5:eb:73:04:8a:59:14:5f:91:be:d4: 5c:12:d4:3e:9b:49:1e:25:0c:99:d0:a4:5c:07:8c:ca:53:be: d2:98:fe:01:b5:3f:2f:9f:ac:d0:50:eb:8b:5e:b3:f3:5e:a4: 51:eb:b0:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEm1bIRuOTRYpcMUMd3+ZbmRXtWAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNENURFQ0E4RTE0NkEwMjMxQUU4NzIyODNFQTBGOTNC NTc4NDExNDAeFw0yNDA1MTcxOTM1NDVaFw0yNDA1MjAyMTE2NDVaMDMxMTAvBgNV BAMTKEIyMEI0NzZGNDQ4M0Y4MDgzRDM5OTQ2RTdGNTVGNzQ3NUNGMDI5NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmtc3PMQ+X8cUc1INyJrjYYMXk 4xJdgmC3ayFjg7eqX4c0tfz+bFUQYwxJ32CtlsPrCjjis7dcbFN+DVcLeUWOQeID sDjVOEvPG3bF7tR1CeMDN6FIOoa/DaDKs3NgBZaW0oTzOT3CA5WdZCjaV3fFv4Dh c1xqN/ocVXw+w0x2T6SdCYYdg7jRvC0ljKj6cJCLvsRX7W7hXQAS8XqEA7phnHxc lzUcjYTXdNY/7eJvqkJFTKJdXs0SVStowm5tkZUYAKqRZRDIIIWjpeRvUjCdBr0u 5zX3YImflkwPCYrX0rACXY8RpTMAZQg4d7i6dT5yzh99C6lS1b0A7zhwELwxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsgtHb0SD+Ag9OZRuf1X3R1zwKUwwHwYDVR0j BBgwFoAUnNXeyo4UagIxrocig+oPk7V4QRQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZDJiNGY3Ny03NGQwLTQ3OTctYWVlMC05ZWE5MDc2NTQ3MzAvMC85Q0Q1REVDQThF MTQ2QTAyMzFBRTg3MjI4M0VBMEY5M0I1Nzg0MTE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUNENURFQ0E4RTE0NkEwMjMxQUU4NzIyODNFQTBGOTNCNTc4 NDExNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmQyYjRmNzctNzRkMC00Nzk3LWFl ZTAtOWVhOTA3NjU0NzMwLzAvOUNENURFQ0E4RTE0NkEwMjMxQUU4NzIyODNFQTBG OTNCNTc4NDExNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALNdrO2YIkDcqPYanMpfTcER68iH/eOw4Yuf IJTUpBIQSL2KAK6Fea95+88/Z5NKMdpZYliz3s7pgTy/fEkRYCSoCrNOlMYI5A+0 fdkFKlfW0fhp6T974jYSpXlmt5c9j7d2NpaLQY4pBcM9cT2flCtmgrSJf9sGUqz0 HOz0bhu03vkMfA7Gowx9ikz9A6rss0z+xuPyX/cg0y6wCx8+LiJhC006ZDmqLja6 AX5+z1+S8isZytkuX5zVp3Z6zuwcveI46Cq6w5m1sNUTQYfl63MEilkUX5G+1FwS 1D6bSR4lDJnQpFwHjMpTvtKY/gG1Py+frNBQ64tes/NepFHrsKs= -----END CERTIFICATE-----Generated at Fri May 17 21:06:48 2024 by rpki-client on console-ams.rpki-client.org