$ rpki-client -vvf repo-rpki.idnic.net/repo/5ae2b8b3-dec8-41cf-a16d-e1171561d725/0/D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.mft File: D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.mft (raw, json) Hash identifier: ORrMG2hd/mwLAQUqSbjKjzAQne1RE1qIzFZtii6oqZ0= Subject key identifier: 30:07:35:5A:29:E2:9F:47:45:BC:A7:F0:0A:05:4F:51:FA:0A:C6:DA Authority key identifier: D9:D0:73:0D:B5:12:95:FE:C5:BD:48:0C:DD:42:B5:E8:51:7C:8F:DB Certificate issuer: /CN=D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB Certificate serial: 2FA5419E0C90C5D27C5312084181B6E7DD61C277 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ae2b8b3-dec8-41cf-a16d-e1171561d725/0/D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.mft Manifest number: 015F Signing time: Fri 17 May 2024 12:21:48 +0000 Manifest this update: Fri 17 May 2024 12:16:48 +0000 Manifest next update: Mon 20 May 2024 23:23:48 +0000 Files and hashes: 1: 3130332e3138332e3235302e302f32332d3234203d3e2034383030.roa (hash: o4MSjMa5d9GDiKlBXKifxX/bwpEutGiuQB9fWy7LmpE=) 2: D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.crl (hash: fBhyv5zWhcXj16nW2tFKqCdgwIdPIy6zY53RXovqdwg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ae2b8b3-dec8-41cf-a16d-e1171561d725/0/D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.crl rsync://repo-rpki.idnic.net/repo/5ae2b8b3-dec8-41cf-a16d-e1171561d725/0/D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 May 2024 23:23:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:a5:41:9e:0c:90:c5:d2:7c:53:12:08:41:81:b6:e7:dd:61:c2:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB Validity Not Before: May 17 12:16:48 2024 GMT Not After : May 20 23:23:48 2024 GMT Subject: CN=3007355A29E29F4745BCA7F00A054F51FA0AC6DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:22:e5:d1:5a:2a:c2:80:d3:bf:9c:b8:f7:9e: c0:4c:1f:42:91:d8:5a:a9:97:35:08:4b:b0:e1:f7: 0e:2a:61:ff:7d:11:ed:90:2f:a2:a5:fd:c0:9a:2f: 4f:ed:a6:b3:55:09:8a:30:f2:d6:99:25:ad:73:aa: 41:a7:54:26:e1:ae:ad:0f:2d:b8:86:da:6b:3e:08: 03:da:03:6c:5b:13:92:9d:2d:5b:34:2c:c0:3d:2f: 26:03:a0:aa:96:73:bc:f6:ed:bd:bd:97:88:43:a8: 9f:38:63:0d:4b:7f:41:5a:c2:c3:75:73:c4:cd:20: 0a:47:a3:09:ac:a9:78:45:70:97:cc:aa:69:ac:38: 8d:bc:72:81:ad:8c:37:5a:15:aa:a6:01:6e:ed:5e: 8b:4b:a4:b8:ea:05:9c:d1:0f:7c:60:a1:7b:1d:16: 32:73:6c:62:08:fd:53:fa:e7:94:a5:13:f4:0d:35: 13:0a:78:87:eb:1d:1d:f0:68:fa:1a:ae:05:e1:60: 4d:79:a9:8d:5e:4e:e8:d5:6a:50:59:11:f2:8f:f7: 90:5b:be:f5:71:f4:bf:14:e9:27:98:21:9c:15:17: 25:c6:d8:bb:15:f5:c1:3b:52:14:34:01:5b:fd:d7: ca:9c:38:50:54:33:8e:77:71:b9:c4:b5:32:95:6e: 14:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:07:35:5A:29:E2:9F:47:45:BC:A7:F0:0A:05:4F:51:FA:0A:C6:DA X509v3 Authority Key Identifier: keyid:D9:D0:73:0D:B5:12:95:FE:C5:BD:48:0C:DD:42:B5:E8:51:7C:8F:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ae2b8b3-dec8-41cf-a16d-e1171561d725/0/D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ae2b8b3-dec8-41cf-a16d-e1171561d725/0/D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dc:05:85:b0:3d:b2:c1:c7:d8:80:43:f2:37:e7:2f:c3:4e:2f: 03:89:3d:ba:ee:bc:63:fa:c6:34:1f:a7:35:42:8d:a8:33:b7: d9:f8:63:41:81:df:2b:75:94:27:71:37:f4:9f:23:72:2b:50: 4c:62:51:9b:bd:fd:95:30:d6:28:ec:94:eb:4a:72:33:88:e1: 71:34:62:04:21:99:8f:19:f6:75:05:8e:38:8c:be:13:17:44: 12:be:22:a8:a5:5a:71:ec:cf:9e:a1:fd:fb:c2:27:b7:ed:26: 48:c6:c6:2f:db:30:28:52:99:11:31:57:0d:ba:e8:ed:16:73: aa:29:01:4c:ef:9e:a9:2a:f0:54:51:68:27:c1:7e:ce:d8:78: 9c:40:78:e3:aa:f7:e7:f7:98:f2:66:ee:65:a1:d5:c9:57:51: 70:73:a6:88:f2:3a:6f:ee:fc:0d:71:fc:b3:35:15:9a:49:7f: 8e:10:42:64:a4:82:4e:19:21:69:bc:91:29:6a:37:35:88:9f: 53:b8:13:96:65:15:cf:8d:97:79:69:ed:11:f9:5f:60:6d:c6: 8c:f2:22:77:13:4c:59:5a:2b:0c:7b:9b:de:33:13:f1:f2:10: 04:ab:f9:81:68:97:ad:af:ac:54:c6:d1:08:f0:ad:a3:1f:07: b8:ee:f9:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL6VBngyQxdJ8UxIIQYG2591hwncwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDlEMDczMERCNTEyOTVGRUM1QkQ0ODBDREQ0MkI1RTg1 MTdDOEZEQjAeFw0yNDA1MTcxMjE2NDhaFw0yNDA1MjAyMzIzNDhaMDMxMTAvBgNV BAMTKDMwMDczNTVBMjlFMjlGNDc0NUJDQTdGMDBBMDU0RjUxRkEwQUM2REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUIuXRWirCgNO/nLj3nsBMH0KR 2FqplzUIS7Dh9w4qYf99Ee2QL6Kl/cCaL0/tprNVCYow8taZJa1zqkGnVCbhrq0P LbiG2ms+CAPaA2xbE5KdLVs0LMA9LyYDoKqWc7z27b29l4hDqJ84Yw1Lf0FawsN1 c8TNIApHowmsqXhFcJfMqmmsOI28coGtjDdaFaqmAW7tXotLpLjqBZzRD3xgoXsd FjJzbGII/VP655SlE/QNNRMKeIfrHR3waPoargXhYE15qY1eTujValBZEfKP95Bb vvVx9L8U6SeYIZwVFyXG2LsV9cE7UhQ0AVv918qcOFBUM453cbnEtTKVbhSXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMAc1Winin0dFvKfwCgVPUfoKxtowHwYDVR0j BBgwFoAU2dBzDbUSlf7FvUgM3UK16FF8j9swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YWUyYjhiMy1kZWM4LTQxY2YtYTE2ZC1lMTE3MTU2MWQ3MjUvMC9EOUQwNzMwREI1 MTI5NUZFQzVCRDQ4MENERDQyQjVFODUxN0M4RkRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDlEMDczMERCNTEyOTVGRUM1QkQ0ODBDREQ0MkI1RTg1MTdD OEZEQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWFlMmI4YjMtZGVjOC00MWNmLWEx NmQtZTExNzE1NjFkNzI1LzAvRDlEMDczMERCNTEyOTVGRUM1QkQ0ODBDREQ0MkI1 RTg1MTdDOEZEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANwFhbA9ssHH2IBD8jfnL8NOLwOJPbruvGP6 xjQfpzVCjagzt9n4Y0GB3yt1lCdxN/SfI3IrUExiUZu9/ZUw1ijslOtKcjOI4XE0 YgQhmY8Z9nUFjjiMvhMXRBK+IqilWnHsz56h/fvCJ7ftJkjGxi/bMChSmRExVw26 6O0Wc6opAUzvnqkq8FRRaCfBfs7YeJxAeOOq9+f3mPJm7mWh1clXUXBzpojyOm/u /A1x/LM1FZpJf44QQmSkgk4ZIWm8kSlqNzWIn1O4E5ZlFc+Nl3lp7RH5X2Btxozy IncTTFlaKwx7m94zE/HyEASr+YFol62vrFTG0QjwraMfB7ju+as= -----END CERTIFICATE-----Generated at Fri May 17 14:07:01 2024 by rpki-client on console-fra.rpki-client.org