$ rpki-client -vvf repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft File: AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft (raw, json) Hash identifier: hqm6Z9ouloKOcY29XltBFg8WKzRFMrGIWMrCPAzLlQ4= Subject key identifier: 22:4D:CF:9D:DC:86:60:AD:CA:93:4A:B1:8B:20:45:01:D9:56:1E:29 Authority key identifier: AD:9B:CA:DB:23:5B:6D:EE:6C:AD:4E:B4:C5:3A:A8:B3:BA:73:FE:F2 Certificate issuer: /CN=AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2 Certificate serial: 3D638C58159059295B3C0F9D3E04520BADC1EACB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft Manifest number: CB Signing time: Fri 31 May 2024 11:31:00 +0000 Manifest this update: Fri 31 May 2024 11:26:00 +0000 Manifest next update: Mon 03 Jun 2024 19:14:00 +0000 Files and hashes: 1: AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.crl (hash: ZWtMahxVAMJ1Iob5QJgzOgVomxf4r+qsTDo8XhycXYs=) 2: 3130332e3135332e38322e302f32342d3234203d3e20313430343539.roa (hash: wqjblhIuvAMPwPaIwFtObEssF7KIl5fdywAhszOgrIw=) 3: 3130332e3135332e38332e302f32342d3234203d3e20313339393637.roa (hash: kert8DjZFZG3h4rCknF6lI82qh6y9UTKORk1t7qqQVA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.crl rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 07:22:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:63:8c:58:15:90:59:29:5b:3c:0f:9d:3e:04:52:0b:ad:c1:ea:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2 Validity Not Before: May 31 11:26:00 2024 GMT Not After : Jun 3 19:14:00 2024 GMT Subject: CN=224DCF9DDC8660ADCA934AB18B204501D9561E29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:54:cf:2c:28:30:c8:ab:cb:27:75:39:cd:74: 0a:ae:af:4e:d6:5e:5a:10:ea:7f:12:d1:28:6d:d3: 7d:a6:65:3b:ab:1b:2b:ca:5f:b7:de:0e:56:0f:2a: d1:ab:ec:48:93:3a:8e:4f:29:66:3b:27:54:3f:25: 05:97:b1:94:e6:61:33:09:58:e7:56:7c:a4:f0:5a: d4:5a:14:ef:da:9d:06:b2:d1:72:e8:2a:7e:16:53: e5:4a:c6:46:da:44:12:9f:ff:a0:b2:46:ce:a0:c6: 54:a5:a7:47:5b:bc:18:5b:26:e2:a6:bf:27:11:03: 4d:cd:a5:df:35:60:89:4f:7a:e1:ca:bc:fe:21:87: 3b:39:b8:6a:a3:62:50:3d:e3:d0:b4:8b:4e:c9:dd: 56:b4:57:48:2c:86:7f:e0:10:67:d0:51:de:14:ae: f1:0b:1e:f2:a7:f5:4f:b9:31:33:02:dd:74:c7:cd: 94:dc:75:82:44:f7:c2:e6:48:41:e6:05:ea:b1:6c: 8c:0a:ed:4e:91:79:cc:8a:bc:e4:dc:ed:3f:66:c7: 62:dc:bd:ca:2a:f1:1f:64:39:5a:d4:b1:e0:3e:ae: ae:11:72:1b:95:ff:b2:e2:64:97:08:40:2f:b3:de: 5d:43:64:e5:55:6f:77:6c:c3:7f:aa:96:18:2d:a1: cc:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:4D:CF:9D:DC:86:60:AD:CA:93:4A:B1:8B:20:45:01:D9:56:1E:29 X509v3 Authority Key Identifier: keyid:AD:9B:CA:DB:23:5B:6D:EE:6C:AD:4E:B4:C5:3A:A8:B3:BA:73:FE:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:c0:49:ed:88:35:e5:ac:bd:93:da:a3:80:e8:0a:fe:4e:8a: cf:9c:29:ac:a4:10:9b:69:9e:35:f1:8c:8f:14:6b:05:f2:e2: 1e:4d:48:3b:8a:ee:b4:81:24:42:72:67:88:74:48:4a:3c:9b: 72:83:2e:f1:b6:22:1a:f1:74:01:ba:7d:d3:3c:6d:55:b0:94: 22:a2:f1:b1:a1:b3:f7:07:85:c9:96:8c:84:8a:90:d6:62:2a: 26:62:68:3f:5a:c9:85:0f:d8:e1:67:82:b8:1e:a5:50:cf:6f: 8e:e5:78:fc:7a:d3:90:ac:28:b9:09:fe:bd:21:ee:d8:e8:85: 5d:c0:26:fa:f4:01:98:72:cd:db:cc:30:89:14:43:53:8e:94: 81:ba:df:bd:4d:6a:1d:5f:b1:7a:a7:13:a2:a1:4f:e4:06:3f: 62:4b:b1:d8:68:3a:02:b9:a9:fd:fd:75:52:be:ec:b4:eb:38: 1d:1e:a7:11:4b:1d:55:5d:f7:19:53:01:79:f0:51:eb:a6:81: 08:83:55:22:c9:8d:87:34:a5:e3:1f:cb:7e:0a:4a:00:34:fb: fc:8c:03:b6:26:d1:b1:c1:7c:a5:b0:b9:f4:e3:af:5d:fe:29: b8:28:7f:7b:09:4e:a7:98:c1:ef:6c:a7:71:27:29:5a:f4:df: 2d:2e:ba:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPWOMWBWQWSlbPA+dPgRSC63B6sswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQ5QkNBREIyMzVCNkRFRTZDQUQ0RUI0QzUzQUE4QjNC QTczRkVGMjAeFw0yNDA1MzExMTI2MDBaFw0yNDA2MDMxOTE0MDBaMDMxMTAvBgNV BAMTKDIyNERDRjlEREM4NjYwQURDQTkzNEFCMThCMjA0NTAxRDk1NjFFMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoVM8sKDDIq8sndTnNdAqur07W XloQ6n8S0Sht032mZTurGyvKX7feDlYPKtGr7EiTOo5PKWY7J1Q/JQWXsZTmYTMJ WOdWfKTwWtRaFO/anQay0XLoKn4WU+VKxkbaRBKf/6CyRs6gxlSlp0dbvBhbJuKm vycRA03Npd81YIlPeuHKvP4hhzs5uGqjYlA949C0i07J3Va0V0gshn/gEGfQUd4U rvELHvKn9U+5MTMC3XTHzZTcdYJE98LmSEHmBeqxbIwK7U6RecyKvOTc7T9mx2Lc vcoq8R9kOVrUseA+rq4RchuV/7LiZJcIQC+z3l1DZOVVb3dsw3+qlhgtocyfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIk3PndyGYK3Kk0qxiyBFAdlWHikwHwYDVR0j BBgwFoAUrZvK2yNbbe5srU60xTqos7pz/vIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTc2ZGIxZS1iZjlhLTQ5YTgtYmY3Ni05ZjMxNGU3ZDFkOGUvMC9BRDlCQ0FEQjIz NUI2REVFNkNBRDRFQjRDNTNBQThCM0JBNzNGRUYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUQ5QkNBREIyMzVCNkRFRTZDQUQ0RUI0QzUzQUE4QjNCQTcz RkVGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U3NmRiMWUtYmY5YS00OWE4LWJm NzYtOWYzMTRlN2QxZDhlLzAvQUQ5QkNBREIyMzVCNkRFRTZDQUQ0RUI0QzUzQUE4 QjNCQTczRkVGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADHASe2INeWsvZPao4DoCv5Ois+cKaykEJtp njXxjI8UawXy4h5NSDuK7rSBJEJyZ4h0SEo8m3KDLvG2IhrxdAG6fdM8bVWwlCKi 8bGhs/cHhcmWjISKkNZiKiZiaD9ayYUP2OFngrgepVDPb47lePx605CsKLkJ/r0h 7tjohV3AJvr0AZhyzdvMMIkUQ1OOlIG6371Nah1fsXqnE6KhT+QGP2JLsdhoOgK5 qf39dVK+7LTrOB0epxFLHVVd9xlTAXnwUeumgQiDVSLJjYc0peMfy34KSgA0+/yM A7Ym0bHBfKWwufTjr13+Kbgof3sJTqeYwe9sp3EnKVr03y0uuss= -----END CERTIFICATE-----Generated at Fri May 31 13:04:18 2024 by rpki-client on console-fra.rpki-client.org