$ rpki-client -vvf repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft File: 0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft (raw, json) Hash identifier: vWqmAxJ2cbayE7i0HSE8FJgIOA7Eb3aHvKD4c0zCVXA= Subject key identifier: 01:40:90:4B:0A:5A:B8:95:6C:76:BC:20:07:48:06:5A:99:68:AD:43 Authority key identifier: 0D:F8:1F:0E:E9:9B:2E:06:DB:6C:AE:E0:5C:C3:01:BE:3A:23:D1:37 Certificate issuer: /CN=0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137 Certificate serial: 1A89F847C6078E10941E6D976B768DDEDD4202DD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft Manifest number: 0428 Signing time: Fri 26 Apr 2024 18:31:35 +0000 Manifest this update: Fri 26 Apr 2024 18:26:35 +0000 Manifest next update: Tue 30 Apr 2024 03:49:35 +0000 Files and hashes: 1: 0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.crl (hash: sVIWw3cTHKhvJ7PwFc1E+hu40ySQKaxwbDbLXKl5POA=) 2: 3130332e3132362e32382e302f32322d3234203d3e20313338313139.roa (hash: cFx4F318lmgqnqfVUsIIY+PXIESbpoeWbWeYkyG5ZuM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.crl rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Apr 2024 02:17:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:89:f8:47:c6:07:8e:10:94:1e:6d:97:6b:76:8d:de:dd:42:02:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137 Validity Not Before: Apr 26 18:26:35 2024 GMT Not After : Apr 30 03:49:35 2024 GMT Subject: CN=0140904B0A5AB8956C76BC200748065A9968AD43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:eb:a7:47:9c:cc:26:af:1b:4b:62:59:da:47: c9:4e:bc:c9:21:3f:eb:2b:eb:43:60:21:05:7b:36: 43:f5:7f:9d:1f:00:10:2b:45:45:5d:0f:83:2f:6e: d6:52:37:76:e3:95:d6:a5:c5:27:ce:72:15:ff:f4: 33:b9:f0:ab:72:59:4a:b6:b1:e7:8d:f1:75:54:b6: 49:01:5a:b9:43:c7:59:92:da:7a:9f:30:b3:88:76: ba:60:24:d8:c5:ec:cb:a3:40:23:7c:e7:1f:bd:7e: b1:be:55:1a:9e:2a:6f:64:09:98:e3:b4:3d:77:ab: 64:3d:5b:8b:91:34:05:8f:7b:87:53:13:ec:18:6b: 1d:d2:d7:05:b6:6d:dc:b1:56:2d:04:a8:c5:3c:e0: 6b:4e:b5:71:4b:1e:fb:94:1e:16:84:f1:c4:98:ce: 2d:a3:64:d9:e8:de:c4:84:e5:6a:d2:d8:8b:03:cb: 36:bf:c4:d5:a0:ec:6d:17:1b:4e:5e:46:fd:7d:31: 98:6c:5a:c1:3d:da:6c:c2:ca:a8:0d:25:08:9a:cf: 0d:39:43:bc:a4:ee:e2:7c:c6:4c:a6:a6:0b:7e:a5: 5a:9b:64:b3:25:4a:6a:1d:7b:b8:e4:ef:3b:a1:11: bd:b2:24:a9:59:53:4b:54:da:97:68:ca:c8:ec:a0: 9e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:40:90:4B:0A:5A:B8:95:6C:76:BC:20:07:48:06:5A:99:68:AD:43 X509v3 Authority Key Identifier: keyid:0D:F8:1F:0E:E9:9B:2E:06:DB:6C:AE:E0:5C:C3:01:BE:3A:23:D1:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:0b:28:74:6b:9e:f9:ef:db:e7:7b:b3:00:7f:3d:c3:f0:69: 3e:e8:5b:cb:fe:65:0e:af:ec:32:72:e3:4d:3b:63:66:2d:73: 32:8b:10:c7:24:57:ae:b5:0e:7f:dd:6c:f7:16:8e:3f:01:2a: 0d:11:07:48:76:dc:9d:e3:32:b6:7a:e3:3b:a7:d8:86:55:11: 19:7a:b0:4a:64:e1:8f:87:35:3e:aa:08:a7:43:79:41:b9:90: 5b:31:c4:71:ba:b4:17:18:f1:f1:a2:23:97:62:e9:ce:46:e4: d2:31:68:5e:b6:22:e4:4a:a4:8a:cf:f2:f1:f4:d0:15:95:58: f8:2f:2a:a8:5a:0e:f5:6f:99:5f:81:46:16:a6:a7:0e:b0:8a: 1e:38:e7:6c:8b:51:21:4c:87:58:25:84:5f:d3:fc:cc:f9:58: 8e:e0:41:e5:df:4d:58:77:f8:f3:8e:9b:6a:06:4a:0a:86:16: b7:6c:7d:42:bc:b6:97:6b:c1:34:fd:df:76:a8:1d:f0:fc:0c: 27:1f:0d:2e:b1:53:38:66:5f:5c:01:90:d5:2c:04:a9:ac:8b: db:16:46:d3:4a:27:4c:bf:04:45:d7:ee:fc:a4:d9:01:95:a0: 90:90:58:17:e0:4f:e7:02:9e:1e:9b:40:26:cb:63:da:d0:6e: ac:02:75:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGon4R8YHjhCUHm2Xa3aN3t1CAt0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMERGODFGMEVFOTlCMkUwNkRCNkNBRUUwNUNDMzAxQkUz QTIzRDEzNzAeFw0yNDA0MjYxODI2MzVaFw0yNDA0MzAwMzQ5MzVaMDMxMTAvBgNV BAMTKDAxNDA5MDRCMEE1QUI4OTU2Qzc2QkMyMDA3NDgwNjVBOTk2OEFENDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo66dHnMwmrxtLYlnaR8lOvMkh P+sr60NgIQV7NkP1f50fABArRUVdD4MvbtZSN3bjldalxSfOchX/9DO58KtyWUq2 seeN8XVUtkkBWrlDx1mS2nqfMLOIdrpgJNjF7MujQCN85x+9frG+VRqeKm9kCZjj tD13q2Q9W4uRNAWPe4dTE+wYax3S1wW2bdyxVi0EqMU84GtOtXFLHvuUHhaE8cSY zi2jZNno3sSE5WrS2IsDyza/xNWg7G0XG05eRv19MZhsWsE92mzCyqgNJQiazw05 Q7yk7uJ8xkympgt+pVqbZLMlSmode7jk7zuhEb2yJKlZU0tU2pdoysjsoJ4pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAUCQSwpauJVsdrwgB0gGWplorUMwHwYDVR0j BBgwFoAUDfgfDumbLgbbbK7gXMMBvjoj0TcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZjZlYTIyMS03N2I3LTQ3OTEtYThhOC1iNTE2NGIwMGYxYzUvMC8wREY4MUYwRUU5 OUIyRTA2REI2Q0FFRTA1Q0MzMDFCRTNBMjNEMTM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMERGODFGMEVFOTlCMkUwNkRCNkNBRUUwNUNDMzAxQkUzQTIz RDEzNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2Y2ZWEyMjEtNzdiNy00NzkxLWE4 YTgtYjUxNjRiMDBmMWM1LzAvMERGODFGMEVFOTlCMkUwNkRCNkNBRUUwNUNDMzAx QkUzQTIzRDEzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMkLKHRrnvnv2+d7swB/PcPwaT7oW8v+ZQ6v 7DJy4007Y2YtczKLEMckV661Dn/dbPcWjj8BKg0RB0h23J3jMrZ64zun2IZVERl6 sEpk4Y+HNT6qCKdDeUG5kFsxxHG6tBcY8fGiI5di6c5G5NIxaF62IuRKpIrP8vH0 0BWVWPgvKqhaDvVvmV+BRhampw6wih4452yLUSFMh1glhF/T/Mz5WI7gQeXfTVh3 +POOm2oGSgqGFrdsfUK8tpdrwTT933aoHfD8DCcfDS6xUzhmX1wBkNUsBKmsi9sW RtNKJ0y/BEXX7vyk2QGVoJCQWBfgT+cCnh6bQCbLY9rQbqwCdRM= -----END CERTIFICATE-----Generated at Sat Apr 27 10:12:43 2024 by rpki-client on console-ams.rpki-client.org