$ rpki-client -vvf repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.mft File: B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.mft (raw, json) Hash identifier: 6R+grtvzJA5ywTr3gQ9tnv8ISQGJU3C0HLDnYeoNEq8= Subject key identifier: 7B:A5:7A:71:C6:0F:47:03:2F:D2:1A:AE:D0:92:C8:C2:3D:93:F0:4C Authority key identifier: B1:1E:5C:9B:4E:32:24:60:FD:70:13:87:F2:5B:9E:AE:FE:67:C3:EC Certificate issuer: /CN=B11E5C9B4E322460FD701387F25B9EAEFE67C3EC Certificate serial: 3ED92856218CE47C453C65A717174664A92EF1DB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.mft Manifest number: 0397 Signing time: Thu 09 May 2024 07:50:33 +0000 Manifest this update: Thu 09 May 2024 07:45:32 +0000 Manifest next update: Sun 12 May 2024 17:02:32 +0000 Files and hashes: 1: 3130332e3231302e3132312e302f32342d3234203d3e20313334363538.roa (hash: 93STvYwP33sQVD8uCooaJ5TZI+YUUwkh4BNTAhbmnIU=) 2: 3130332e3231302e3132332e302f32342d3234203d3e20313334363538.roa (hash: kE35of1HiLWE0i2kR3lik1KvOLsVycQ/ubm1N1Zytv8=) 3: 3130332e3231302e3132302e302f32322d3234203d3e20313334363538.roa (hash: 9vLlNCuN7WBZuxV6gCrvtazhXlVDBmBcoPZguohry3g=) 4: 3130332e3231302e3132322e302f32342d3234203d3e20313334363538.roa (hash: yL52fqAXTaBNhpX2QuhtjgtaEHKpbUc+IQPv9BCdw/4=) 5: 323430343a366338303a3a2f33322d3438203d3e20313334363538.roa (hash: F+H/eFlyZOnBcdQ2FT7kTjPg5M0qhRxJ4P7IISkNLn0=) 6: 3130332e3231302e3132302e302f32342d3234203d3e20313334363538.roa (hash: VAwVeYjx+OA/wwtBId4g3VfNiH0gRCWb56k/T/PmnBY=) 7: B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.crl (hash: Go2DXnaV4pnG7GafOOZn1fbMp/VtAaVeZxGlyEc4JcU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.crl rsync://repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 13:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:d9:28:56:21:8c:e4:7c:45:3c:65:a7:17:17:46:64:a9:2e:f1:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B11E5C9B4E322460FD701387F25B9EAEFE67C3EC Validity Not Before: May 9 07:45:32 2024 GMT Not After : May 12 17:02:32 2024 GMT Subject: CN=7BA57A71C60F47032FD21AAED092C8C23D93F04C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b3:1f:79:8c:85:cb:61:98:06:57:98:03:85: b1:ea:3f:65:3a:4d:00:0d:d4:4f:eb:27:9d:b3:7f: 8f:fd:a2:47:d0:87:5f:55:81:17:49:32:dd:b7:08: fa:19:f4:7a:55:82:da:db:dd:ee:3d:db:0f:28:2e: c2:65:c4:bb:f6:9f:df:29:b2:65:36:f2:80:a0:65: bf:47:d5:89:88:46:62:e7:a2:57:33:07:91:f4:81: e8:62:c9:01:e9:4f:fb:98:93:79:12:ac:a7:c0:b1: 31:a2:43:fd:87:44:a3:87:1a:52:1c:dd:23:cb:e5: 0f:a9:d3:38:81:17:61:60:5f:a0:29:7d:13:80:f9: da:8b:18:b3:1d:2b:03:03:46:8d:4e:e4:df:22:42: d9:ed:ef:2b:65:cb:89:01:30:0d:d2:6a:cb:55:df: 3c:08:4a:d7:e6:6f:af:55:c4:bd:2c:38:5c:e1:f4: c6:e5:8a:21:b8:53:e6:ee:17:78:78:da:9b:0b:37: 30:19:a7:e4:14:2e:1f:91:af:22:bd:b1:0f:86:b5: 6b:2d:b4:9d:34:13:d8:dc:f6:2e:bd:71:a5:aa:f6: c9:a5:69:77:9f:45:d8:ef:80:f5:60:f7:98:5c:29: dd:cb:38:3d:61:d5:50:bb:6f:8b:fb:a7:a8:0e:c7: 9e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:A5:7A:71:C6:0F:47:03:2F:D2:1A:AE:D0:92:C8:C2:3D:93:F0:4C X509v3 Authority Key Identifier: keyid:B1:1E:5C:9B:4E:32:24:60:FD:70:13:87:F2:5B:9E:AE:FE:67:C3:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:6e:7a:f8:89:e8:17:0f:c5:95:24:7f:59:40:b9:54:ce:65: 0f:ac:4c:a1:bb:32:c9:f1:32:7e:a0:23:a7:92:58:48:a7:e2: 33:2e:0a:fc:b3:ca:14:b5:81:70:14:93:1f:d3:ca:16:00:0c: 17:71:a6:f6:4a:35:f6:a8:f5:64:bd:de:cd:16:d3:1e:4c:9a: b5:89:1f:5c:da:5f:d8:fa:2a:be:6e:54:33:54:f4:97:35:8e: 4a:84:36:8c:5b:95:b0:46:b7:55:1a:28:59:85:88:3c:ea:87: 9f:73:b2:31:cd:8f:e1:cf:69:9c:87:e6:48:07:a8:21:1d:b5: fa:12:32:35:c1:68:05:30:3b:b3:62:21:7d:bb:d4:cc:c9:90: 51:2b:8b:b5:85:96:13:e3:ce:12:65:14:47:2a:0c:a6:3f:89: 13:51:f7:34:99:eb:4d:92:67:c9:ea:b5:f0:f2:a9:0e:e8:85: ed:43:14:85:29:69:20:62:86:e7:d2:e8:fe:60:b1:2d:28:28: 0d:c5:a7:71:96:1e:b0:c0:69:0f:3f:57:a3:36:9a:12:7f:ed: 45:2b:c6:cd:6d:04:c2:5d:25:c6:fa:4a:a0:53:12:c9:9c:f4: cc:ad:1f:a2:1b:76:3e:d0:c3:51:d8:39:8a:86:ec:87:7a:ea: 9e:e3:3a:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPtkoViGM5HxFPGWnFxdGZKku8dswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjExRTVDOUI0RTMyMjQ2MEZENzAxMzg3RjI1QjlFQUVG RTY3QzNFQzAeFw0yNDA1MDkwNzQ1MzJaFw0yNDA1MTIxNzAyMzJaMDMxMTAvBgNV BAMTKDdCQTU3QTcxQzYwRjQ3MDMyRkQyMUFBRUQwOTJDOEMyM0Q5M0YwNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVsx95jIXLYZgGV5gDhbHqP2U6 TQAN1E/rJ52zf4/9okfQh19VgRdJMt23CPoZ9HpVgtrb3e492w8oLsJlxLv2n98p smU28oCgZb9H1YmIRmLnolczB5H0gehiyQHpT/uYk3kSrKfAsTGiQ/2HRKOHGlIc 3SPL5Q+p0ziBF2FgX6ApfROA+dqLGLMdKwMDRo1O5N8iQtnt7ytly4kBMA3SastV 3zwIStfmb69VxL0sOFzh9MbliiG4U+buF3h42psLNzAZp+QULh+RryK9sQ+GtWst tJ00E9jc9i69caWq9smlaXefRdjvgPVg95hcKd3LOD1h1VC7b4v7p6gOx56TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe6V6ccYPRwMv0hqu0JLIwj2T8EwwHwYDVR0j BBgwFoAUsR5cm04yJGD9cBOH8luerv5nw+wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDQ4NzM2MC04NzM1LTQxZDctOTdhOC1kYmIzNGQ3OWVmZjQvMC9CMTFFNUM5QjRF MzIyNDYwRkQ3MDEzODdGMjVCOUVBRUZFNjdDM0VDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjExRTVDOUI0RTMyMjQ2MEZENzAxMzg3RjI1QjlFQUVGRTY3 QzNFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQ0ODczNjAtODczNS00MWQ3LTk3 YTgtZGJiMzRkNzllZmY0LzAvQjExRTVDOUI0RTMyMjQ2MEZENzAxMzg3RjI1QjlF QUVGRTY3QzNFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF1ueviJ6BcPxZUkf1lAuVTOZQ+sTKG7Msnx Mn6gI6eSWEin4jMuCvyzyhS1gXAUkx/TyhYADBdxpvZKNfao9WS93s0W0x5MmrWJ H1zaX9j6Kr5uVDNU9Jc1jkqENoxblbBGt1UaKFmFiDzqh59zsjHNj+HPaZyH5kgH qCEdtfoSMjXBaAUwO7NiIX271MzJkFEri7WFlhPjzhJlFEcqDKY/iRNR9zSZ602S Z8nqtfDyqQ7ohe1DFIUpaSBihufS6P5gsS0oKA3Fp3GWHrDAaQ8/V6M2mhJ/7UUr xs1tBMJdJcb6SqBTEsmc9MytH6Ibdj7Qw1HYOYqG7Id66p7jOjM= -----END CERTIFICATE-----Generated at Thu May 9 10:21:34 2024 by rpki-client on console-fra.rpki-client.org