$ rpki-client -vvf repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.mft File: D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.mft (raw, json) Hash identifier: 3psznYfJiPyRO7lBymPChY0rVUA+dTJYCpZxdmYA0Is= Subject key identifier: BF:DA:30:CE:6B:E4:EC:88:76:C6:77:4C:A2:4F:D9:6E:20:5C:51:38 Authority key identifier: D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F Certificate issuer: /CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F Certificate serial: 1DD657802BD3B63C757321CF21AC0A971E150130 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.mft Manifest number: 0425 Signing time: Sat 27 Apr 2024 01:00:48 +0000 Manifest this update: Sat 27 Apr 2024 00:55:48 +0000 Manifest next update: Tue 30 Apr 2024 06:00:48 +0000 Files and hashes: 1: 323430303a643934303a3630303a3a2f34382d3438203d3e20313336303838.roa (hash: tkFf04XzSbiZzFzCj42IrMkvhq77zUkWMcu5ihzrlh8=) 2: 323430303a643934303a3130303a3a2f34382d3438203d3e20313336303838.roa (hash: pqa046/kDgWridI0eeVsLbVA7W9TBemm+G5uW07nV7A=) 3: 323430303a643934303a32303a3a2f34382d3438203d3e20313336303838.roa (hash: E3gXB5X+MONP8MChkALZDllTFPGZ3v+31eQcA8VOcvE=) 4: 323430303a643934303a33303a3a2f34382d3438203d3e20313336303838.roa (hash: HAikvyoZYFbSWqOQlZGFhknKh+zJh+n4L5U9bwOzPgA=) 5: 323430303a643934303a3230303a3a2f34382d3438203d3e20313336303838.roa (hash: 4Ty2vpIt889S6H4qW9mr7XDARxD9ahCYWHY74BSfHxA=) 6: 323430303a643934303a3330303a3a2f34382d3438203d3e20313336303838.roa (hash: 3qRmPlR/FnWGuKcwPRRezRITCmfZ+nD7X+NLKnwnpu4=) 7: 323430303a643934303a633030303a3a2f34382d3438203d3e20313336303838.roa (hash: F29ZRqV9/P8f9Bb0GV42/JZhJkU+3iLBwCesxvn03To=) 8: 323430303a643934303a35303a3a2f34382d3438203d3e20313336303838.roa (hash: lfQk188MA7Fg4901KKGuu0eq4gU1IsurmKrl78X8x1I=) 9: 323430303a643934303a3430303a3a2f34382d3438203d3e20313336303838.roa (hash: vkFRAWHA6zDzqaRlOlgmbyjWVceLMdZQtv0jAk3Ycmg=) 10: 323430303a643934303a3530303a3a2f34382d3438203d3e20313336303838.roa (hash: 0XKgv2rdZk74yjyQRGVUzMuceMYlUpbj5+T34egz0mk=) 11: 3130332e38372e3232392e302f32342d3234203d3e20313336303838.roa (hash: v2YeJBPUOT4XSBZslIL593suBiT27b8zEfKoCux8KaI=) 12: 323430303a643934303a3930303a3a2f34382d3438203d3e20313336303838.roa (hash: UqJzaGDMj/9QRl/If/AmwnrU4C8Nroi8tU3YpQHjbvc=) 13: 323430303a643934303a31303a3a2f34382d3438203d3e20313336303838.roa (hash: 2mbyFw3hZ4hey50/0nJhDFHQzsaL/VpiRr8DSTKGjnE=) 14: 323430303a643934303a3830303a3a2f34382d3438203d3e20313336303838.roa (hash: XajAdh0NP0wtiEj6pNSRIBGXFhMt44jIjkllcbDnrZQ=) 15: 323430303a643934303a3730303a3a2f34382d3438203d3e20313336303838.roa (hash: bEAB+CErGsTUCNuZ5dph2YraaUfmMaM9ov2sSa/1/4M=) 16: 323430303a643934303a36303a3a2f34382d3438203d3e20313336303838.roa (hash: Di4ceC00swYAY2ajmt6nL1ON1wrElmI+FqxcAs1Tl0I=) 17: D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.crl (hash: FoEtrO5oIf0Ae9aWeDnUkPEDN8YF6urg18vByhrSF30=) 18: 323430303a643934303a34303a3a2f34382d3438203d3e20313336303838.roa (hash: 37Y51NqG6RIW9Ye9YqLAn0T63iw6/opDZzTqQ3Ft3Pk=) 19: 3130332e38372e3233302e302f32342d3234203d3e20313336303838.roa (hash: Bby0xkG9xWa7b0mZmHZcgRfs5Ah4kVGh+6tmlg4qiTQ=) 20: 323430303a643934303a37303a3a2f34382d3438203d3e20313336303838.roa (hash: EsPa8hxjv7Ky/fPKqpL6Zzz+eJ9NF7DJZxNe2aFsid0=) 21: 323430303a643934303a38303a3a2f34382d3438203d3e20313336303838.roa (hash: h9Ebheahc7r304UdGTGN/Fftf1E0g6Al8u9X5c1wBbs=) 22: 3130332e38372e3232382e302f32342d3234203d3e20313336303838.roa (hash: tUBQwmNfTtd1ZRc1pL2Njk/ECLWut6S4/vSZi1KRM38=) 23: 323430303a643934303a39303a3a2f34382d3438203d3e20313336303838.roa (hash: ugrZ/azzNQrkUJzCNcQ4p1EmUsnyGels89IkeC/5AHg=) 24: 3130332e38372e3233312e302f32342d3234203d3e20313336303838.roa (hash: +mJefirNVXI6XsMgfalNCJOE9NMEhcTErJJNZPBMNcQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.crl rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Apr 2024 02:17:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:d6:57:80:2b:d3:b6:3c:75:73:21:cf:21:ac:0a:97:1e:15:01:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F Validity Not Before: Apr 27 00:55:48 2024 GMT Not After : Apr 30 06:00:48 2024 GMT Subject: CN=BFDA30CE6BE4EC8876C6774CA24FD96E205C5138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f2:a3:ce:ba:16:f8:6e:a2:84:00:8c:a8:70: 1b:b8:a5:fc:f0:59:7c:90:bf:ef:8a:93:85:7e:b8: 84:da:32:72:6d:2e:72:27:ad:75:a8:71:42:3f:ad: d0:84:4c:24:56:72:eb:f1:54:28:13:da:59:22:3e: 7e:8f:1e:93:be:d4:d3:b9:cd:bb:97:0d:d5:7e:59: f0:7b:ae:3c:c7:89:04:c3:5f:aa:7c:78:d6:f5:65: d8:56:ee:3d:69:95:c4:67:51:1f:c4:4f:b7:01:9b: 23:c7:94:7b:c0:56:19:68:54:35:eb:70:0d:ae:a6: d7:4f:a0:e5:77:b4:08:28:cf:cc:d1:03:e9:a0:09: 63:cc:51:01:f2:e6:a9:4b:94:a0:b6:2b:6c:22:dd: 1f:f2:8b:ec:1a:ce:f1:40:55:97:6a:42:35:35:dc: 0b:ba:1a:1e:e8:2a:08:02:2e:46:88:9c:81:9d:e5: 36:28:c1:f6:77:43:c9:aa:83:7f:02:bf:22:be:77: 37:61:13:cf:bd:d4:f1:4d:37:dd:5c:8e:55:38:c2: 34:35:e9:3c:57:cf:6f:ad:f1:db:0a:db:04:f6:35: ca:ad:82:7e:83:5e:9d:f2:26:7b:bc:65:32:4e:85: 0b:00:03:53:f6:d8:f9:97:f4:77:4c:9a:37:b0:96: a1:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:DA:30:CE:6B:E4:EC:88:76:C6:77:4C:A2:4F:D9:6E:20:5C:51:38 X509v3 Authority Key Identifier: keyid:D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:f0:af:8e:c5:2b:71:de:ea:5a:b5:57:4f:d4:5e:60:66:02: 22:7d:61:41:cf:ac:7f:09:67:35:5f:48:c8:40:9b:1e:fa:bc: 6c:7a:99:12:4c:7f:da:94:1f:fb:1e:a9:7d:5e:a7:78:a4:70: ea:da:c0:38:29:cb:91:24:83:1e:1d:be:96:02:98:aa:12:24: 41:05:00:21:1e:98:05:00:84:5d:bb:c9:a7:a5:d0:f8:3e:e3: 3b:6e:43:74:b3:16:a3:10:ad:b9:25:fd:e1:cb:d9:6d:59:51: 8e:71:07:50:9d:a6:8f:fe:43:e2:e5:cc:7d:bf:a9:23:c9:d2: 94:fe:9f:00:f2:44:1d:3f:9b:9b:2a:07:81:57:72:4f:ef:cc: 21:2e:91:12:b2:58:bb:bd:07:9d:7d:85:eb:99:36:d9:71:e1: 42:59:5c:a4:d2:36:d4:67:3d:40:1c:50:07:50:75:d4:ae:3e: a3:13:a3:68:97:72:3d:55:e4:35:ed:8a:cd:c8:3a:65:97:f7: c2:49:61:8c:29:e6:7c:5f:0b:c4:d4:b8:c2:66:fa:c7:6f:e3: ef:20:56:7b:bc:14:d8:45:5c:47:74:e6:b2:d6:17:82:4b:2d: 94:74:fc:da:b0:a5:2a:80:61:e2:56:0f:b0:37:16:74:50:ed: 20:44:98:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHdZXgCvTtjx1cyHPIawKlx4VATAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNGQjYxRDc0NkE0NDc2N0Q0NTE4RDZFOUZEMUZCRDhE MEJFOTIzRjAeFw0yNDA0MjcwMDU1NDhaFw0yNDA0MzAwNjAwNDhaMDMxMTAvBgNV BAMTKEJGREEzMENFNkJFNEVDODg3NkM2Nzc0Q0EyNEZEOTZFMjA1QzUxMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH8qPOuhb4bqKEAIyocBu4pfzw WXyQv++Kk4V+uITaMnJtLnInrXWocUI/rdCETCRWcuvxVCgT2lkiPn6PHpO+1NO5 zbuXDdV+WfB7rjzHiQTDX6p8eNb1ZdhW7j1plcRnUR/ET7cBmyPHlHvAVhloVDXr cA2uptdPoOV3tAgoz8zRA+mgCWPMUQHy5qlLlKC2K2wi3R/yi+wazvFAVZdqQjU1 3Au6Gh7oKggCLkaInIGd5TYowfZ3Q8mqg38CvyK+dzdhE8+91PFNN91cjlU4wjQ1 6TxXz2+t8dsK2wT2Ncqtgn6DXp3yJnu8ZTJOhQsAA1P22PmX9HdMmjewlqELAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv9owzmvk7Ih2xndMok/ZbiBcUTgwHwYDVR0j BBgwFoAU0/th10akR2fUUY1un9H72NC+kj8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 M2Y0ZWMxYy05NTM1LTRjYmYtOWM3YS1mZDMyYzgzMGVkYmEvMC9EM0ZCNjFENzQ2 QTQ0NzY3RDQ1MThENkU5RkQxRkJEOEQwQkU5MjNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDNGQjYxRDc0NkE0NDc2N0Q0NTE4RDZFOUZEMUZCRDhEMEJF OTIzRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzNmNGVjMWMtOTUzNS00Y2JmLTlj N2EtZmQzMmM4MzBlZGJhLzAvRDNGQjYxRDc0NkE0NDc2N0Q0NTE4RDZFOUZEMUZC RDhEMEJFOTIzRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHXwr47FK3He6lq1V0/UXmBmAiJ9YUHPrH8J ZzVfSMhAmx76vGx6mRJMf9qUH/seqX1ep3ikcOrawDgpy5Ekgx4dvpYCmKoSJEEF ACEemAUAhF27yael0Pg+4ztuQ3SzFqMQrbkl/eHL2W1ZUY5xB1Cdpo/+Q+LlzH2/ qSPJ0pT+nwDyRB0/m5sqB4FXck/vzCEukRKyWLu9B519heuZNtlx4UJZXKTSNtRn PUAcUAdQddSuPqMTo2iXcj1V5DXtis3IOmWX98JJYYwp5nxfC8TUuMJm+sdv4+8g Vnu8FNhFXEd05rLWF4JLLZR0/NqwpSqAYeJWD7A3FnRQ7SBEmLQ= -----END CERTIFICATE-----Generated at Sat Apr 27 10:12:51 2024 by rpki-client on console-ams.rpki-client.org