$ rpki-client -vvf repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft File: CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft (raw, json) Hash identifier: ZXEcE5dc2pXcER9nqCJ12QerJ7IUQZNn7nkk8lwee+8= Subject key identifier: A4:51:CA:C4:DE:4F:31:57:A0:A8:67:70:E4:CF:CF:6F:78:E0:84:9A Authority key identifier: CD:68:1E:40:6D:2E:CD:8A:CA:28:E4:F0:7B:9A:FA:9D:F6:48:C4:E9 Certificate issuer: /CN=CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9 Certificate serial: 213490A1E2B1D03865FA33837FA8CA510287C18B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft Manifest number: 0425 Signing time: Fri 26 Apr 2024 07:21:04 +0000 Manifest this update: Fri 26 Apr 2024 07:16:04 +0000 Manifest next update: Mon 29 Apr 2024 14:24:04 +0000 Files and hashes: 1: 3230322e3134392e3132382e302f31392d3234203d3e2034383333.roa (hash: ZN8o4ODVqkbXPmGxoJFWhpabljcqPPXXnJZ7PHBNNdE=) 2: CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.crl (hash: qYxow27SARlRcWY5ilrpTI9ddt3w75fnBYFobRg4LdY=) 3: 323430343a3630303a3a2f33322d3438203d3e2034383333.roa (hash: 5Qo+fr2lsqF0nsr209QbzL88jwzoelNwSyDDKjgUnWM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.crl rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Apr 2024 14:24:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:34:90:a1:e2:b1:d0:38:65:fa:33:83:7f:a8:ca:51:02:87:c1:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9 Validity Not Before: Apr 26 07:16:04 2024 GMT Not After : Apr 29 14:24:04 2024 GMT Subject: CN=A451CAC4DE4F3157A0A86770E4CFCF6F78E0849A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ef:9a:4b:28:87:99:12:fe:5a:ca:4a:d3:ba: 8a:fc:9c:76:25:dc:7c:d6:7a:3a:c7:e2:fe:ef:08: 64:1f:7d:76:4b:05:bf:37:7f:4f:8a:34:94:a6:ce: 2b:42:c1:fb:6e:2c:ee:6f:c0:54:a8:f0:98:53:bd: 87:62:cb:f8:a5:b0:cf:04:7b:4a:d1:45:a5:00:72: dd:9d:29:14:23:b3:85:56:a0:d5:ac:81:9d:31:30: 04:d3:1c:4f:d7:3a:e7:14:ae:95:d8:24:0a:79:1c: 38:46:a4:1b:d0:52:53:77:6b:3f:2e:01:fb:bb:57: 96:0d:58:0c:9d:9b:76:a4:75:72:4c:26:49:94:16: ba:a5:81:78:e5:b7:a3:77:45:0f:ca:3d:80:fb:4b: de:c1:9c:9f:53:57:e5:75:91:7a:29:1f:94:9f:aa: 37:ca:54:13:2c:ea:ee:91:32:8d:13:41:22:1e:d9: bb:4d:cb:59:19:86:9c:00:0f:91:d6:3c:6c:12:a2: a6:36:95:21:5f:0e:e1:a8:84:25:02:af:86:67:1e: cf:d2:4e:af:a8:d0:6d:e2:85:91:df:dd:e0:9b:05: cf:c8:15:af:48:ce:69:c9:84:f3:e6:63:d3:3e:b2: e0:fd:17:64:bd:79:cf:b8:6d:df:d2:8e:63:4a:fa: e7:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:51:CA:C4:DE:4F:31:57:A0:A8:67:70:E4:CF:CF:6F:78:E0:84:9A X509v3 Authority Key Identifier: keyid:CD:68:1E:40:6D:2E:CD:8A:CA:28:E4:F0:7B:9A:FA:9D:F6:48:C4:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:f9:de:b1:4e:a0:c0:fa:55:e1:08:b1:c1:08:d7:23:b0:42: 75:de:a5:a3:39:d5:28:b3:f4:f1:09:03:96:f1:2e:53:10:a0: 3a:07:c8:4a:0b:7f:26:e2:1d:05:14:99:61:d3:9a:00:75:15: 83:4c:73:c0:94:1f:97:4b:75:46:32:02:e3:c7:08:57:d2:e1: d7:3c:8c:c2:50:16:56:b4:7d:35:06:42:8b:57:b9:d2:93:2b: 27:9c:9d:17:d0:29:90:c4:b7:cd:06:fc:32:87:7f:90:9c:34: 47:19:c7:ad:09:6d:9d:95:4d:02:14:d8:5b:0b:0a:14:56:37: 2e:b4:fd:bd:84:2e:5d:1c:0a:e9:3c:a4:cf:1a:bb:f7:46:44: e2:27:58:fd:40:18:f8:36:06:62:22:16:92:49:c7:54:9e:1f: 49:c7:2d:a5:15:d3:cf:8a:fb:0b:03:5e:d0:ae:04:28:cc:d5: cb:55:e6:83:31:95:3d:f2:3e:04:a0:d7:78:f5:59:00:74:62: 24:09:a4:c6:ed:13:69:e5:47:c3:72:f5:b9:c5:f9:27:be:c6: 89:d1:c9:16:36:a5:34:8b:0a:4b:dc:71:3e:ee:6f:af:85:09: 3c:c1:e9:12:2d:a9:3f:4d:80:3e:83:c1:19:dd:b2:35:e3:36: 65:9d:82:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUITSQoeKx0Dhl+jODf6jKUQKHwYswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q2ODFFNDA2RDJFQ0Q4QUNBMjhFNEYwN0I5QUZBOURG NjQ4QzRFOTAeFw0yNDA0MjYwNzE2MDRaFw0yNDA0MjkxNDI0MDRaMDMxMTAvBgNV BAMTKEE0NTFDQUM0REU0RjMxNTdBMEE4Njc3MEU0Q0ZDRjZGNzhFMDg0OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY75pLKIeZEv5aykrTuor8nHYl 3HzWejrH4v7vCGQffXZLBb83f0+KNJSmzitCwftuLO5vwFSo8JhTvYdiy/ilsM8E e0rRRaUAct2dKRQjs4VWoNWsgZ0xMATTHE/XOucUrpXYJAp5HDhGpBvQUlN3az8u Afu7V5YNWAydm3akdXJMJkmUFrqlgXjlt6N3RQ/KPYD7S97BnJ9TV+V1kXopH5Sf qjfKVBMs6u6RMo0TQSIe2btNy1kZhpwAD5HWPGwSoqY2lSFfDuGohCUCr4ZnHs/S Tq+o0G3ihZHf3eCbBc/IFa9IzmnJhPPmY9M+suD9F2S9ec+4bd/SjmNK+uf7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpFHKxN5PMVegqGdw5M/Pb3jghJowHwYDVR0j BBgwFoAUzWgeQG0uzYrKKOTwe5r6nfZIxOkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NmMxZjUxYS04NjQ1LTRlYjEtYTJmZi1lMjdjMjRjOGUwYzgvMC9DRDY4MUU0MDZE MkVDRDhBQ0EyOEU0RjA3QjlBRkE5REY2NDhDNEU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0Q2ODFFNDA2RDJFQ0Q4QUNBMjhFNEYwN0I5QUZBOURGNjQ4 QzRFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjZjMWY1MWEtODY0NS00ZWIxLWEy ZmYtZTI3YzI0YzhlMGM4LzAvQ0Q2ODFFNDA2RDJFQ0Q4QUNBMjhFNEYwN0I5QUZB OURGNjQ4QzRFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKL53rFOoMD6VeEIscEI1yOwQnXepaM51Siz 9PEJA5bxLlMQoDoHyEoLfybiHQUUmWHTmgB1FYNMc8CUH5dLdUYyAuPHCFfS4dc8 jMJQFla0fTUGQotXudKTKyecnRfQKZDEt80G/DKHf5CcNEcZx60JbZ2VTQIU2FsL ChRWNy60/b2ELl0cCuk8pM8au/dGROInWP1AGPg2BmIiFpJJx1SeH0nHLaUV08+K +wsDXtCuBCjM1ctV5oMxlT3yPgSg13j1WQB0YiQJpMbtE2nlR8Ny9bnF+Se+xonR yRY2pTSLCkvccT7ub6+FCTzB6RItqT9NgD6DwRndsjXjNmWdgm8= -----END CERTIFICATE-----Generated at Sat Apr 27 10:12:50 2024 by rpki-client on console-ams.rpki-client.org