$ rpki-client -vvf repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.mft File: DBE91560EBE58F31F01F543D751B03FC02EA7D9E.mft (raw, json) Hash identifier: nl1eQmm7VdZhnO5Z8W6Wbv3SYwtPiIpoU4ppnH5qX4g= Subject key identifier: 6B:2C:9C:5A:CC:F3:D9:D5:3B:D2:68:17:5D:39:8C:16:23:03:07:A3 Authority key identifier: DB:E9:15:60:EB:E5:8F:31:F0:1F:54:3D:75:1B:03:FC:02:EA:7D:9E Certificate issuer: /CN=DBE91560EBE58F31F01F543D751B03FC02EA7D9E Certificate serial: 01E5CD0CA305FB3203C84792040F6F85464156E3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.mft Manifest number: 0428 Signing time: Mon 06 May 2024 07:01:13 +0000 Manifest this update: Mon 06 May 2024 06:56:13 +0000 Manifest next update: Thu 09 May 2024 18:53:13 +0000 Files and hashes: 1: DBE91560EBE58F31F01F543D751B03FC02EA7D9E.crl (hash: zg+Aj8Fc7FGGMuSVy1daG3aH4TTkVrQ/fUyVHKgN9JE=) 2: 323030313a6466333a666438303a3a2f34382d3438203d3e20313430343432.roa (hash: glO/q6t/VHtKrQFv3BraQ+K89UP/iSQWMu5Yq34Jedw=) 3: 3130332e3135322e37322e302f32332d3234203d3e20313430343432.roa (hash: 0hrJvHl26ZrT+bw28/YaOCN1Wb7+2PbRVtspUcaP9Yg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.crl rsync://repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 10:44:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:e5:cd:0c:a3:05:fb:32:03:c8:47:92:04:0f:6f:85:46:41:56:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBE91560EBE58F31F01F543D751B03FC02EA7D9E Validity Not Before: May 6 06:56:13 2024 GMT Not After : May 9 18:53:13 2024 GMT Subject: CN=6B2C9C5ACCF3D9D53BD268175D398C16230307A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7b:2b:96:f8:65:48:31:cf:c7:1b:5a:af:a6: d8:07:20:52:1c:73:09:31:dd:ce:77:f4:3a:dc:67: 37:62:2c:0b:dc:87:74:aa:54:c4:ff:13:11:c6:aa: 2b:a9:8b:39:7a:34:73:1e:6f:3b:ff:73:3d:8c:51: ff:98:9c:55:ac:1a:aa:d8:84:55:25:19:4c:53:9d: 22:a3:25:a0:b7:2b:12:12:cf:9a:ee:5b:35:f2:71: ec:04:a0:1e:ef:7c:5f:c8:8f:dd:92:31:f7:78:4c: d7:8f:84:89:ca:f5:b0:d1:c7:a7:d6:dd:01:d5:5e: 63:5b:7f:df:b4:36:e0:24:2e:ec:12:df:88:c8:3c: d0:1b:fb:5a:88:f6:b0:6c:5d:77:22:f7:7f:ac:55: 6c:8b:47:dc:95:8b:36:70:54:3f:f2:cc:32:51:6d: 70:58:81:4e:c3:db:e6:60:e7:ac:47:ef:ee:22:c7: e5:d5:ea:ae:95:27:f5:70:10:ce:66:70:f3:a1:37: 3b:2c:13:74:cf:1d:dd:da:ff:1b:f3:53:a7:96:20: cf:57:04:ab:e6:b8:93:90:1e:bf:80:bc:27:20:66: c1:e7:66:46:96:93:59:f7:ff:3a:7c:c9:c5:fc:ab: 18:e8:9c:c5:66:0c:0d:60:43:0d:98:2d:30:80:0a: 1f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:2C:9C:5A:CC:F3:D9:D5:3B:D2:68:17:5D:39:8C:16:23:03:07:A3 X509v3 Authority Key Identifier: keyid:DB:E9:15:60:EB:E5:8F:31:F0:1F:54:3D:75:1B:03:FC:02:EA:7D:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:e3:8b:c0:1f:5e:19:9f:23:8d:85:fa:2b:7e:0e:e9:87:b4: 47:31:ec:98:33:fd:7f:3d:a6:49:6c:c7:ed:22:94:f7:19:95: e1:4a:2a:9f:31:4a:e5:b9:64:38:e8:27:71:ea:af:3b:e8:29: d6:78:88:b8:97:df:b3:1b:5b:60:4b:1f:b0:fc:df:14:6e:88: a1:ec:70:a1:bf:31:e0:e9:1c:dc:f5:ef:78:39:16:47:8b:5f: 32:db:24:aa:56:6d:32:c4:8f:31:9a:d4:b1:90:75:f5:ff:cb: a8:a2:2f:b1:35:a8:c2:21:b3:73:0a:db:13:d4:4f:9f:b8:b1: 72:51:f5:7a:c7:da:ec:a3:f1:10:92:52:51:22:67:47:36:df: 13:d7:bd:cc:b9:9f:e1:50:c6:fa:93:dc:b8:44:07:b1:a4:ea: 91:fc:aa:37:06:cf:d5:3d:b6:4e:8e:f2:71:b1:9d:ed:4a:cc: 09:66:2a:d6:ba:64:7f:b4:f2:22:c2:f1:2c:df:b4:1a:a3:4d: b6:54:5f:4c:9c:bc:6e:da:18:7d:00:ee:b7:b0:c6:0c:77:b5: ff:7a:d5:3c:d5:27:01:21:06:13:99:20:f2:e1:76:56:52:64: dd:8c:fa:30:a2:be:15:be:bd:0a:41:3d:bb:0e:4e:82:a7:5b: 42:98:ab:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAeXNDKMF+zIDyEeSBA9vhUZBVuMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJFOTE1NjBFQkU1OEYzMUYwMUY1NDNENzUxQjAzRkMw MkVBN0Q5RTAeFw0yNDA1MDYwNjU2MTNaFw0yNDA1MDkxODUzMTNaMDMxMTAvBgNV BAMTKDZCMkM5QzVBQ0NGM0Q5RDUzQkQyNjgxNzVEMzk4QzE2MjMwMzA3QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAeyuW+GVIMc/HG1qvptgHIFIc cwkx3c539DrcZzdiLAvch3SqVMT/ExHGqiupizl6NHMebzv/cz2MUf+YnFWsGqrY hFUlGUxTnSKjJaC3KxISz5ruWzXycewEoB7vfF/Ij92SMfd4TNePhInK9bDRx6fW 3QHVXmNbf9+0NuAkLuwS34jIPNAb+1qI9rBsXXci93+sVWyLR9yVizZwVD/yzDJR bXBYgU7D2+Zg56xH7+4ix+XV6q6VJ/VwEM5mcPOhNzssE3TPHd3a/xvzU6eWIM9X BKvmuJOQHr+AvCcgZsHnZkaWk1n3/zp8ycX8qxjonMVmDA1gQw2YLTCACh+zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUayycWszz2dU70mgXXTmMFiMDB6MwHwYDVR0j BBgwFoAU2+kVYOvljzHwH1Q9dRsD/ALqfZ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NzI4Yzc3Yi0yMTAwLTRmMmEtOTBkOS0wOGM1M2U4NDFlMWIvMC9EQkU5MTU2MEVC RTU4RjMxRjAxRjU0M0Q3NTFCMDNGQzAyRUE3RDlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREJFOTE1NjBFQkU1OEYzMUYwMUY1NDNENzUxQjAzRkMwMkVB N0Q5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjcyOGM3N2ItMjEwMC00ZjJhLTkw ZDktMDhjNTNlODQxZTFiLzAvREJFOTE1NjBFQkU1OEYzMUYwMUY1NDNENzUxQjAz RkMwMkVBN0Q5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJPji8AfXhmfI42F+it+DumHtEcx7Jgz/X89 pklsx+0ilPcZleFKKp8xSuW5ZDjoJ3HqrzvoKdZ4iLiX37MbW2BLH7D83xRuiKHs cKG/MeDpHNz173g5FkeLXzLbJKpWbTLEjzGa1LGQdfX/y6iiL7E1qMIhs3MK2xPU T5+4sXJR9XrH2uyj8RCSUlEiZ0c23xPXvcy5n+FQxvqT3LhEB7Gk6pH8qjcGz9U9 tk6O8nGxne1KzAlmKta6ZH+08iLC8SzftBqjTbZUX0ycvG7aGH0A7rewxgx3tf96 1TzVJwEhBhOZIPLhdlZSZN2M+jCivhW+vQpBPbsOToKnW0KYqzs= -----END CERTIFICATE-----Generated at Mon May 6 09:06:29 2024 by rpki-client on console-fra.rpki-client.org