$ rpki-client -vvf repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/2D18956397FA6055A44153CABF07303FD6E55E44.mft File: 2D18956397FA6055A44153CABF07303FD6E55E44.mft (raw, json) Hash identifier: upO7fpjgIcqUcePqe7coE8IsVgV9zpIHZrAYmwJdkxg= Subject key identifier: 08:30:A7:68:39:C3:43:11:E8:44:1A:A5:5D:80:15:31:F5:00:3D:81 Authority key identifier: 2D:18:95:63:97:FA:60:55:A4:41:53:CA:BF:07:30:3F:D6:E5:5E:44 Certificate issuer: /CN=2D18956397FA6055A44153CABF07303FD6E55E44 Certificate serial: 38CC797280331A3EBBA6DC5CBC5825867B95038B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D18956397FA6055A44153CABF07303FD6E55E44.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/2D18956397FA6055A44153CABF07303FD6E55E44.mft Manifest number: 0431 Signing time: Wed 01 May 2024 17:41:46 +0000 Manifest this update: Wed 01 May 2024 17:36:46 +0000 Manifest next update: Sun 05 May 2024 01:02:46 +0000 Files and hashes: 1: 3130332e3135352e3230312e302f32342d3234203d3e20313431303733.roa (hash: HprrK1DrRXvF+DEBv59pb8TodIbhtEldkv1xON1F4K4=) 2: 3130332e3135352e3230302e302f32342d3234203d3e20313431303733.roa (hash: ro68L8+4CyvNYq+FXBZFKPjGXWYM2Z+yKLpFOIXc79U=) 3: 3130332e3135352e3230302e302f32332d3233203d3e20313431303733.roa (hash: cG0jqtiRaam6yK6FpJnEUJ21yH0pEKL1sDn6IHOg6BA=) 4: 3130332e3135352e3230302e302f32332d3234203d3e20313431303733.roa (hash: QlzJ/xeVRrTJPumT32aGQMH+v6gP8YnAasN6CoqTH+4=) 5: 323430363a373734303a3a2f33322d3332203d3e20313431303733.roa (hash: qlalw0TKUEkhAOIlr5yuFJmB2Ev+HKMNrhiNPtAu/8I=) 6: 2D18956397FA6055A44153CABF07303FD6E55E44.crl (hash: IhO9Mfad/jbWJx2hY/9zHPAK5KOfrVikeys2B6FFZnU=) 7: 323430363a373734303a3a2f33322d3438203d3e20313431303733.roa (hash: MVU1WBH4Bf5DRpQvoLi6KqhCgXU126whT3cse5/TdSk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/2D18956397FA6055A44153CABF07303FD6E55E44.crl rsync://repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/2D18956397FA6055A44153CABF07303FD6E55E44.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D18956397FA6055A44153CABF07303FD6E55E44.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 19:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:cc:79:72:80:33:1a:3e:bb:a6:dc:5c:bc:58:25:86:7b:95:03:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D18956397FA6055A44153CABF07303FD6E55E44 Validity Not Before: May 1 17:36:46 2024 GMT Not After : May 5 01:02:46 2024 GMT Subject: CN=0830A76839C34311E8441AA55D801531F5003D81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:bf:89:f2:1d:0a:26:28:e9:fc:ab:39:61:24: 31:79:21:33:23:b8:e1:0f:ff:ef:bf:3f:cf:4c:a3: d5:ee:a1:37:c7:ac:ae:1c:d3:af:16:04:24:27:9e: 24:25:a9:f9:1c:dc:aa:c4:ee:11:ac:53:67:47:d6: 03:76:51:a2:7b:4e:ef:1d:e2:79:47:a6:ca:b0:af: a5:83:b0:6f:dd:26:a8:2a:15:23:35:8a:01:fe:f3: dc:76:44:a5:3f:4d:73:d8:d3:af:1d:05:e9:42:b4: d8:08:12:fd:1a:8b:2c:11:45:f1:aa:e4:a4:6f:85: 54:bb:1a:70:a1:e8:45:63:80:07:92:b8:c0:3d:bf: cb:e9:43:72:2f:94:d9:5f:24:6c:33:57:bb:c3:eb: 26:71:d0:71:d8:1d:ce:a8:25:7f:af:0b:34:32:95: 8d:cb:40:58:6a:d2:96:b3:1c:a3:80:db:9d:32:6b: c4:78:1f:26:33:a6:1e:08:0d:8e:79:5f:13:b0:3e: 83:49:d6:f9:48:3c:71:dc:c2:81:d1:aa:cd:d1:39: 4c:2c:1b:38:48:95:de:d5:4b:ac:9a:da:24:17:4d: b5:80:ea:46:a4:f6:8f:50:28:30:26:fa:3b:49:8d: 22:79:a0:d6:64:1c:70:91:fd:3a:5d:55:9d:7c:ea: 74:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:30:A7:68:39:C3:43:11:E8:44:1A:A5:5D:80:15:31:F5:00:3D:81 X509v3 Authority Key Identifier: keyid:2D:18:95:63:97:FA:60:55:A4:41:53:CA:BF:07:30:3F:D6:E5:5E:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/2D18956397FA6055A44153CABF07303FD6E55E44.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D18956397FA6055A44153CABF07303FD6E55E44.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/2D18956397FA6055A44153CABF07303FD6E55E44.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:ef:cc:ca:67:ee:20:eb:a4:cc:51:ff:43:f1:31:c5:66:a8: dc:69:09:e8:e1:9d:dd:e8:6b:f8:42:f1:a0:73:fb:54:c0:3b: 7a:24:0c:10:11:d1:73:4c:1e:19:73:00:bd:9e:bc:7f:21:0c: fc:19:08:87:db:e4:e6:52:0d:e6:5f:b7:e0:18:0e:24:23:92: 3c:4a:26:6e:c7:7b:74:80:52:9b:0b:f6:0c:70:06:1c:90:70: a2:ec:8e:21:30:d1:a3:fb:aa:de:6c:de:42:c6:89:af:ac:e2: 91:f2:e0:5b:ea:97:2f:ed:ca:02:ec:d9:eb:fc:0c:b3:cb:50: 87:81:3b:f9:11:c4:ee:06:0e:be:17:1e:f9:8c:28:d2:a5:37: ea:d7:7e:ae:50:53:f0:47:18:ff:2f:cc:34:93:6a:bd:5c:59: 38:37:b1:0a:b7:c1:a6:d6:6c:14:de:3e:2a:6b:a5:1e:18:24: 35:88:89:3e:4b:d5:7c:ae:60:31:f7:be:62:21:b2:60:90:93: eb:48:bd:59:0c:22:b6:a6:e7:34:9e:47:8f:5f:79:e0:59:e8: 70:78:15:b3:d1:5b:08:77:0d:2d:7b:5e:60:fd:71:30:2b:e2: cb:98:bb:c1:f3:00:06:38:46:17:15:a6:1c:5b:cf:28:0c:87: 64:3d:bb:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOMx5coAzGj67ptxcvFglhnuVA4swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQxODk1NjM5N0ZBNjA1NUE0NDE1M0NBQkYwNzMwM0ZE NkU1NUU0NDAeFw0yNDA1MDExNzM2NDZaFw0yNDA1MDUwMTAyNDZaMDMxMTAvBgNV BAMTKDA4MzBBNzY4MzlDMzQzMTFFODQ0MUFBNTVEODAxNTMxRjUwMDNEODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1v4nyHQomKOn8qzlhJDF5ITMj uOEP/++/P89Mo9XuoTfHrK4c068WBCQnniQlqfkc3KrE7hGsU2dH1gN2UaJ7Tu8d 4nlHpsqwr6WDsG/dJqgqFSM1igH+89x2RKU/TXPY068dBelCtNgIEv0aiywRRfGq 5KRvhVS7GnCh6EVjgAeSuMA9v8vpQ3IvlNlfJGwzV7vD6yZx0HHYHc6oJX+vCzQy lY3LQFhq0pazHKOA250ya8R4HyYzph4IDY55XxOwPoNJ1vlIPHHcwoHRqs3ROUws GzhIld7VS6ya2iQXTbWA6kak9o9QKDAm+jtJjSJ5oNZkHHCR/TpdVZ186nSzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCDCnaDnDQxHoRBqlXYAVMfUAPYEwHwYDVR0j BBgwFoAULRiVY5f6YFWkQVPKvwcwP9blXkQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ODU4Zjg1Yy1hNDU4LTRhNTgtYmJkZS00YmZiMzQzZGM0YjAvMC8yRDE4OTU2Mzk3 RkE2MDU1QTQ0MTUzQ0FCRjA3MzAzRkQ2RTU1RTQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQxODk1NjM5N0ZBNjA1NUE0NDE1M0NBQkYwNzMwM0ZENkU1 NUU0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDg1OGY4NWMtYTQ1OC00YTU4LWJi ZGUtNGJmYjM0M2RjNGIwLzAvMkQxODk1NjM5N0ZBNjA1NUE0NDE1M0NBQkYwNzMw M0ZENkU1NUU0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAALvzMpn7iDrpMxR/0PxMcVmqNxpCejhnd3o a/hC8aBz+1TAO3okDBAR0XNMHhlzAL2evH8hDPwZCIfb5OZSDeZft+AYDiQjkjxK Jm7He3SAUpsL9gxwBhyQcKLsjiEw0aP7qt5s3kLGia+s4pHy4Fvqly/tygLs2ev8 DLPLUIeBO/kRxO4GDr4XHvmMKNKlN+rXfq5QU/BHGP8vzDSTar1cWTg3sQq3wabW bBTePiprpR4YJDWIiT5L1XyuYDH3vmIhsmCQk+tIvVkMIram5zSeR49feeBZ6HB4 FbPRWwh3DS17XmD9cTAr4suYu8HzAAY4RhcVphxbzygMh2Q9u2A= -----END CERTIFICATE-----Generated at Wed May 1 19:11:08 2024 by rpki-client on console-fra.rpki-client.org