$ rpki-client -vvf repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft File: 295CEF87CDB74B1A43287E630C3FE568272D2F33.mft (raw, json) Hash identifier: aOWkAEJXXwLtoXkIpMi79IwBXpXHS2kH9Jh9JgbkOKw= Subject key identifier: 0D:3E:C8:3E:1A:90:B1:42:EC:40:BF:9D:9D:C9:73:DF:07:48:2B:BB Authority key identifier: 29:5C:EF:87:CD:B7:4B:1A:43:28:7E:63:0C:3F:E5:68:27:2D:2F:33 Certificate issuer: /CN=295CEF87CDB74B1A43287E630C3FE568272D2F33 Certificate serial: 35417AD6F4315620DEC11266038FAE6E58A3D53A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer Subject info access: rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft Manifest number: 0427 Signing time: Thu 18 Apr 2024 04:21:27 +0000 Manifest this update: Thu 18 Apr 2024 04:16:27 +0000 Manifest next update: Sun 21 Apr 2024 11:21:27 +0000 Files and hashes: 1: 3232332e3133302e32302e302f32342d3234203d3e20313338313238.roa (hash: wl8Opb3UtW3aCwPb+wJXbjNUrXD2htZj13aOmxvdeT8=) 2: 3130332e3230362e3235322e302f32322d3234203d3e2039343232.roa (hash: Jcrotx/J+M9isu15TPRFtjOsEL2f83lMP7ms3K9R7ag=) 3: 3130362e302e34382e302f32322d3234203d3e2039343232.roa (hash: yaEqLrJTqxoFeILIu+UZekmvxpzcTRhQL0lCZNGA0ns=) 4: 3230322e3135342e3138342e302f32312d3234203d3e2039343232.roa (hash: wBck/8zR+tCiplmZgzgPDZAHwgGRWMbNue3rlZdihbM=) 5: 3232332e3133302e32302e302f32332d3234203d3e20313338313238.roa (hash: FlV1AuwNl7ysU1bY79TgE6LY6bMMHPbF6q9bSwCEeGQ=) 6: 3232332e3133302e32312e302f32342d3234203d3e20313338313238.roa (hash: JZr0h02CfpfGKc+SXJek0NEOpoOLyyun/U/N2E0WqY4=) 7: 3230322e34332e3232382e302f32322d3234203d3e2039343232.roa (hash: RBKmP+8qRU8R2NGKr56dkUHUhcp3iiJG1FPRqESRMSk=) 8: 3130332e3234362e302e302f32322d3234203d3e2039343232.roa (hash: a83xqAHnIrIROPAmgZi5ByWKOtXBG5bEUwEOTQmYf5E=) 9: 34332e3232352e3138342e302f32322d3234203d3e2039343232.roa (hash: xzGRBk99TL4T9lvDXaCnqMbedtAnRyUv7J+jeQdk9mM=) 10: 295CEF87CDB74B1A43287E630C3FE568272D2F33.crl (hash: QY0x6RD8HT50NaEMooLIfUfVYlU/O3STkTdwtyj3MsQ=) 11: 3232332e3133302e32322e302f32332d3234203d3e2039343232.roa (hash: TqPxUMrBaso9XPGJHYZF8GTNI3LYPmDJ2M2PapwBIIA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.crl rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Apr 2024 05:14:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:41:7a:d6:f4:31:56:20:de:c1:12:66:03:8f:ae:6e:58:a3:d5:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295CEF87CDB74B1A43287E630C3FE568272D2F33 Validity Not Before: Apr 18 04:16:27 2024 GMT Not After : Apr 21 11:21:27 2024 GMT Subject: CN=0D3EC83E1A90B142EC40BF9D9DC973DF07482BBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c1:26:51:0c:72:a7:fb:9d:f1:76:52:ac:5a: 0b:c4:45:c5:06:1b:bf:62:a7:2a:d0:a9:9a:92:db: 78:9a:dc:69:fd:15:ce:55:67:a7:23:31:eb:3a:21: 2f:2c:ab:83:d5:eb:d8:12:8d:15:ed:ac:b4:ea:a9: 8b:48:dd:83:8b:35:21:49:16:ba:b1:fc:ae:71:8f: e2:79:24:9e:df:5a:f7:f0:8b:7a:1b:bb:29:b4:67: 15:a7:d9:d8:13:24:dc:d2:4f:de:73:fc:04:f7:31: bc:70:4b:17:71:5a:59:35:6d:db:1c:02:31:51:08: 2f:35:6c:ef:a7:33:bc:ee:2d:e9:da:0f:4a:e3:7e: ec:5a:d0:7b:57:dd:03:cf:84:b5:90:99:1d:78:5a: da:cb:4b:53:c7:3e:3f:18:d5:1a:90:ee:c8:f4:62: 8c:92:22:da:c3:34:3c:52:e2:6f:d0:a5:df:bf:b9: 55:8f:10:8d:84:45:76:2a:79:45:ef:cd:cb:72:95: 4f:53:21:91:01:e2:20:19:cd:ca:a3:94:fd:8b:e9: 8d:f4:01:f9:1a:c8:95:5c:e7:83:b2:7c:15:8f:c8: 96:85:3d:36:ff:b6:01:0b:a0:79:9b:93:5d:09:95: 71:17:f4:db:aa:97:73:03:a4:f1:7c:94:01:1b:29: 35:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:3E:C8:3E:1A:90:B1:42:EC:40:BF:9D:9D:C9:73:DF:07:48:2B:BB X509v3 Authority Key Identifier: keyid:29:5C:EF:87:CD:B7:4B:1A:43:28:7E:63:0C:3F:E5:68:27:2D:2F:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:dd:68:fe:94:30:3e:11:58:6d:05:f7:dc:c6:a8:5d:9b:32: da:44:cf:d9:b6:05:a6:b5:0e:0c:87:7a:38:ac:2d:01:ff:f8: 71:c2:c9:8a:27:b4:c2:4b:de:2d:d8:2b:0e:1c:50:d4:a9:a6: ba:6d:1d:9a:19:9a:75:d5:b5:cf:e7:1a:7c:0c:ad:76:eb:f2: 7e:25:aa:a0:b9:98:23:91:02:99:20:85:2b:47:e0:f1:eb:a7: 49:90:db:bc:b2:ac:5b:5c:a0:fd:54:21:0d:41:5f:80:08:5d: 6f:e8:c2:66:79:cd:e4:bf:f7:df:fc:5f:41:25:11:4c:27:4d: e8:76:e4:0c:b3:9a:27:4f:66:bc:26:a3:34:42:fd:6f:c9:0d: 7c:94:a4:30:b2:64:83:ec:eb:b3:1e:0a:5c:2e:c2:8f:d7:a7: b9:c0:29:d8:ef:3b:81:91:37:0e:5a:7f:a8:29:b5:3e:80:04: 18:36:74:23:4c:44:b3:f3:7c:07:80:0d:08:51:d5:07:cf:40: ab:40:5c:b9:61:4e:4f:10:b7:cb:b7:18:8b:4f:7b:73:fe:08: e9:06:aa:8c:87:25:1b:2f:70:75:22:a3:ff:2f:eb:e5:41:c7: 84:93:05:6f:c9:d5:18:77:e6:e4:fb:ef:a0:7d:0e:f1:72:8e: 88:fa:32:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNUF61vQxViDewRJmA4+ublij1TowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk1Q0VGODdDREI3NEIxQTQzMjg3RTYzMEMzRkU1Njgy NzJEMkYzMzAeFw0yNDA0MTgwNDE2MjdaFw0yNDA0MjExMTIxMjdaMDMxMTAvBgNV BAMTKDBEM0VDODNFMUE5MEIxNDJFQzQwQkY5RDlEQzk3M0RGMDc0ODJCQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4wSZRDHKn+53xdlKsWgvERcUG G79ipyrQqZqS23ia3Gn9Fc5VZ6cjMes6IS8sq4PV69gSjRXtrLTqqYtI3YOLNSFJ Frqx/K5xj+J5JJ7fWvfwi3obuym0ZxWn2dgTJNzST95z/AT3MbxwSxdxWlk1bdsc AjFRCC81bO+nM7zuLenaD0rjfuxa0HtX3QPPhLWQmR14WtrLS1PHPj8Y1RqQ7sj0 YoySItrDNDxS4m/Qpd+/uVWPEI2ERXYqeUXvzctylU9TIZEB4iAZzcqjlP2L6Y30 AfkayJVc54OyfBWPyJaFPTb/tgELoHmbk10JlXEX9Nuql3MDpPF8lAEbKTV1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDT7IPhqQsULsQL+dnclz3wdIK7swHwYDVR0j BBgwFoAUKVzvh823SxpDKH5jDD/laCctLzMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ODdkNzliYS1mYjU1LTQ5YTUtOTY3Yi0xZWRjNzQ5ZDAxMjgvMC8yOTVDRUY4N0NE Qjc0QjFBNDMyODdFNjMwQzNGRTU2ODI3MkQyRjMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjk1Q0VGODdDREI3NEIxQTQzMjg3RTYzMEMzRkU1NjgyNzJE MkYzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTg3ZDc5YmEtZmI1NS00OWE1LTk2 N2ItMWVkYzc0OWQwMTI4LzAvMjk1Q0VGODdDREI3NEIxQTQzMjg3RTYzMEMzRkU1 NjgyNzJEMkYzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIbdaP6UMD4RWG0F99zGqF2bMtpEz9m2Baa1 DgyHejisLQH/+HHCyYontMJL3i3YKw4cUNSpprptHZoZmnXVtc/nGnwMrXbr8n4l qqC5mCORApkghStH4PHrp0mQ27yyrFtcoP1UIQ1BX4AIXW/owmZ5zeS/99/8X0El EUwnTeh25AyzmidPZrwmozRC/W/JDXyUpDCyZIPs67MeClwuwo/Xp7nAKdjvO4GR Nw5af6gptT6ABBg2dCNMRLPzfAeADQhR1QfPQKtAXLlhTk8Qt8u3GItPe3P+COkG qoyHJRsvcHUio/8v6+VBx4STBW/J1Rh35uT776B9DvFyjoj6MkA= -----END CERTIFICATE-----Generated at Thu Apr 18 05:01:04 2024 by rpki-client on console-ams.rpki-client.org