$ rpki-client -vvf repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft File: DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft (raw, json) Hash identifier: 8T7viEZ4ohkHUKRLvZ64JEC8juht2XF/wVe2uKCs0oQ= Subject key identifier: 1B:D2:2F:63:8C:AA:83:C9:EA:BD:73:BC:A8:C1:74:CD:EB:0F:C4:68 Authority key identifier: DC:34:C8:B5:F4:38:B8:D4:CB:13:F2:45:1A:D1:F0:95:5E:5F:7F:BB Certificate issuer: /CN=DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB Certificate serial: 4422794B2FC361BDB9BC20B6C06BB91B092E8DEA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft Manifest number: 03B6 Signing time: Wed 22 May 2024 17:01:24 +0000 Manifest this update: Wed 22 May 2024 16:56:24 +0000 Manifest next update: Sun 26 May 2024 03:07:24 +0000 Files and hashes: 1: DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.crl (hash: byOylrM9rA8p758MxF9YS0axMahEvAQuHuA5iKfgLZQ=) 2: 34332e3234352e3138342e302f32322d3234203d3e20313331373535.roa (hash: FdRQJx61o8zwGIJ9zIY3DVlQhVXsMm2+z140aBaLXEI=) 3: 3130332e33312e3232342e302f32322d3234203d3e20313331373535.roa (hash: uLShdDz31wKsxyvOiW52gFBOVdF3+UV9dVHHCc2BVjM=) 4: 323030313a6466363a313830303a3a2f34382d3438203d3e20313331373535.roa (hash: Skxlr62Ryw9sa+TLrHI+ISbrFb9KuQKTHXm2jTIYEhY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.crl rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 23:41:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:22:79:4b:2f:c3:61:bd:b9:bc:20:b6:c0:6b:b9:1b:09:2e:8d:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB Validity Not Before: May 22 16:56:24 2024 GMT Not After : May 26 03:07:24 2024 GMT Subject: CN=1BD22F638CAA83C9EABD73BCA8C174CDEB0FC468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:77:bc:66:a4:4b:11:62:20:87:5a:cf:66:e5: 86:4c:a1:79:5f:60:15:98:db:f9:90:90:40:0a:47: 3c:a4:46:cb:5c:c0:12:db:d3:c0:8f:71:36:0e:7f: 77:46:94:44:5e:cd:1d:e0:55:35:96:b5:ec:52:43: 01:a6:b9:7f:9c:09:08:b0:29:c3:2b:47:32:3d:97: dd:e8:06:53:ab:cd:65:5e:02:25:e2:34:7e:cf:15: d5:72:3e:01:ac:7c:25:f5:f1:f4:d1:b8:eb:de:f9: 54:99:d3:4f:d8:c2:17:f8:42:6f:fb:61:82:64:18: f7:c3:38:85:93:c6:35:40:47:f4:4e:e1:27:0d:16: 20:c2:2e:1a:5d:37:22:0d:e2:3b:0b:85:c2:9d:d4: b8:bf:9f:b0:6f:0b:28:24:e7:00:77:5a:13:65:68: ea:34:bb:34:6e:7a:99:d2:96:4b:c4:19:7c:b3:be: 73:0c:08:54:b0:4b:7f:8d:4a:1b:91:97:5e:cb:36: a8:04:92:e2:e5:9f:6f:e1:0b:ca:52:5a:f8:35:d3: 42:d2:3f:ba:f1:93:f7:12:c0:b8:b1:6f:b9:a3:c5: b1:0f:95:a0:78:53:c1:dc:48:54:27:22:1a:55:44: 91:0a:85:88:ce:9e:57:1f:48:2c:c8:e4:90:32:b4: 9c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:D2:2F:63:8C:AA:83:C9:EA:BD:73:BC:A8:C1:74:CD:EB:0F:C4:68 X509v3 Authority Key Identifier: keyid:DC:34:C8:B5:F4:38:B8:D4:CB:13:F2:45:1A:D1:F0:95:5E:5F:7F:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:a9:c7:12:74:bf:3f:96:56:2e:1d:10:bb:47:ea:ca:ad:32: f9:85:58:91:8d:31:d7:37:01:5c:80:35:1a:b2:17:64:88:85: a5:d3:11:1b:72:0a:1a:79:85:4a:67:bd:74:03:0a:09:20:74: 8e:a9:4a:db:d2:cc:80:bb:66:08:4b:41:79:13:8a:75:11:1f: 4c:55:f2:bb:97:34:b2:45:1c:a7:c3:f2:92:52:78:3f:1c:d5: 85:e7:bb:44:4a:82:ed:c5:31:0a:84:f1:cf:01:af:74:53:f5: a6:98:7b:f7:c0:35:c1:22:e1:cc:5c:8d:b0:14:28:56:2f:3a: 02:71:ff:49:c4:2b:66:fa:58:1f:94:86:9b:a1:78:46:1b:fa: ec:8d:c9:8e:01:09:36:07:71:1b:56:2f:37:42:e5:3d:a4:ba: 0a:a9:67:79:eb:d3:59:91:8e:57:1d:bc:cb:d4:9d:7d:24:e7: 73:db:73:8b:28:09:25:a4:1c:cb:d6:1c:b3:8c:31:2f:e4:bc: 37:b0:e9:36:63:7f:4d:7b:be:0d:ea:93:e2:af:38:c2:fb:41: 95:b2:fc:ff:1d:6a:04:f9:85:42:74:e4:09:43:61:04:21:fe: de:3e:0b:2d:d3:ad:0c:3e:4b:e1:30:2b:c7:9d:fe:b9:d3:72: bc:52:3d:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURCJ5Sy/DYb25vCC2wGu5GwkujeowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMzNEM4QjVGNDM4QjhENENCMTNGMjQ1MUFEMUYwOTU1 RTVGN0ZCQjAeFw0yNDA1MjIxNjU2MjRaFw0yNDA1MjYwMzA3MjRaMDMxMTAvBgNV BAMTKDFCRDIyRjYzOENBQTgzQzlFQUJENzNCQ0E4QzE3NENERUIwRkM0NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnd7xmpEsRYiCHWs9m5YZMoXlf YBWY2/mQkEAKRzykRstcwBLb08CPcTYOf3dGlERezR3gVTWWtexSQwGmuX+cCQiw KcMrRzI9l93oBlOrzWVeAiXiNH7PFdVyPgGsfCX18fTRuOve+VSZ00/Ywhf4Qm/7 YYJkGPfDOIWTxjVAR/RO4ScNFiDCLhpdNyIN4jsLhcKd1Li/n7BvCygk5wB3WhNl aOo0uzRuepnSlkvEGXyzvnMMCFSwS3+NShuRl17LNqgEkuLln2/hC8pSWvg100LS P7rxk/cSwLixb7mjxbEPlaB4U8HcSFQnIhpVRJEKhYjOnlcfSCzI5JAytJxNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG9IvY4yqg8nqvXO8qMF0zesPxGgwHwYDVR0j BBgwFoAU3DTItfQ4uNTLE/JFGtHwlV5ff7swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YThmMDQzNS00ZDM4LTQ3ZWYtODUwZi01MWJhNDYxN2ZiM2QvMC9EQzM0QzhCNUY0 MzhCOEQ0Q0IxM0YyNDUxQUQxRjA5NTVFNUY3RkJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREMzNEM4QjVGNDM4QjhENENCMTNGMjQ1MUFEMUYwOTU1RTVG N0ZCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE4ZjA0MzUtNGQzOC00N2VmLTg1 MGYtNTFiYTQ2MTdmYjNkLzAvREMzNEM4QjVGNDM4QjhENENCMTNGMjQ1MUFEMUYw OTU1RTVGN0ZCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEmpxxJ0vz+WVi4dELtH6sqtMvmFWJGNMdc3 AVyANRqyF2SIhaXTERtyChp5hUpnvXQDCgkgdI6pStvSzIC7ZghLQXkTinURH0xV 8ruXNLJFHKfD8pJSeD8c1YXnu0RKgu3FMQqE8c8Br3RT9aaYe/fANcEi4cxcjbAU KFYvOgJx/0nEK2b6WB+UhpuheEYb+uyNyY4BCTYHcRtWLzdC5T2kugqpZ3nr01mR jlcdvMvUnX0k53Pbc4soCSWkHMvWHLOMMS/kvDew6TZjf017vg3qk+KvOML7QZWy /P8dagT5hUJ05AlDYQQh/t4+Cy3TrQw+S+EwK8ed/rnTcrxSPaY= -----END CERTIFICATE-----Generated at Wed May 22 20:05:33 2024 by rpki-client on console-ams.rpki-client.org