$ rpki-client -vvf repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft File: DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft (raw, json) Hash identifier: YWnkryBHY8vFXsmxYWJrly8n5sxjDugSGX+IUYE0gsw= Subject key identifier: 46:1C:5B:44:D7:75:1B:FD:32:90:58:EE:E8:71:26:39:A5:3F:71:C8 Authority key identifier: DB:6B:AB:95:61:4F:69:81:1F:2A:E9:B4:83:73:E7:9D:2D:C2:D7:F3 Certificate issuer: /CN=DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3 Certificate serial: 3DE77DC196F7D53ADDF7C7D2544CEACDF36873B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft Manifest number: 042D Signing time: Sun 05 May 2024 07:51:26 +0000 Manifest this update: Sun 05 May 2024 07:46:26 +0000 Manifest next update: Wed 08 May 2024 12:55:26 +0000 Files and hashes: 1: 3130332e3131362e3231382e302f32342d3234203d3e20313337333636.roa (hash: VqU44DIfdTmXaq+8tZOcrZQnn/B7ZccOFZa7JwVFdwY=) 2: 3130332e3131362e3231392e302f32342d3234203d3e20313337333637.roa (hash: YDMHpbVw204f1aVSru0Y2vHYM1ZTPvYLEYPBAdRraF8=) 3: DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.crl (hash: KFPQN25OMj3fa5i80+gDBVOe2402PRIwunEnTB09l1s=) 4: 3130332e3131362e3231372e302f32342d3234203d3e20313337333636.roa (hash: vjkRybTZyEq0act5WTkvvx3z10jCHDylNRjQJ9+NkHc=) 5: 3130332e3131362e3231362e302f32342d3234203d3e20313337333636.roa (hash: TodR+xvqeDeBW/M7X2TI4X2NJNQXcUj3U2bXbOOj+L4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.crl rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 10:05:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:e7:7d:c1:96:f7:d5:3a:dd:f7:c7:d2:54:4c:ea:cd:f3:68:73:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3 Validity Not Before: May 5 07:46:26 2024 GMT Not After : May 8 12:55:26 2024 GMT Subject: CN=461C5B44D7751BFD329058EEE8712639A53F71C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f7:04:cc:8b:0f:d3:6a:b5:41:c2:24:bd:67: 88:f8:28:42:6d:60:86:06:21:8f:44:6f:c0:63:70: d5:c6:7e:91:b8:a0:4a:9a:65:50:22:36:35:c3:f6: ac:e6:5c:36:b8:8a:28:39:42:08:98:8d:a2:45:2e: 7b:84:18:fd:11:51:02:62:66:63:b7:65:ab:ec:e2: cc:a9:06:34:e5:6d:ba:db:48:86:29:e2:63:d5:49: 33:49:2a:b3:6c:32:2a:a2:b4:be:b8:c1:0d:9a:90: 74:5d:36:f0:dd:5a:ef:29:3f:75:65:f5:3c:5f:03: bb:4f:f8:13:92:cb:2c:47:cc:f4:24:f0:da:de:5d: 5d:d1:4f:d2:9e:12:2e:22:f6:a3:43:1e:94:87:1e: 72:71:8c:cd:a7:46:08:a0:01:f9:b9:84:b1:c9:7f: a6:c7:8e:a7:a0:64:65:08:6b:59:67:13:2b:d7:31: 55:61:6e:e3:85:1e:5d:d8:ff:08:90:c9:e2:13:09: 2f:cb:ac:9c:9a:2c:15:f2:99:8f:81:c4:9a:a8:41: f9:2d:e0:71:96:6d:be:06:d1:58:9d:57:d2:5e:b8: fb:2e:5e:8e:59:6f:05:fa:ce:c4:41:b0:6c:2e:e7: 16:1c:75:b8:5d:0a:d7:79:ef:c8:b4:2f:bc:74:fb: 92:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:1C:5B:44:D7:75:1B:FD:32:90:58:EE:E8:71:26:39:A5:3F:71:C8 X509v3 Authority Key Identifier: keyid:DB:6B:AB:95:61:4F:69:81:1F:2A:E9:B4:83:73:E7:9D:2D:C2:D7:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:fe:c0:21:05:ae:7f:58:c6:c2:96:a6:0b:04:d1:28:d3:b2: a8:3d:75:50:58:e5:72:08:30:06:e9:94:b9:1f:09:f3:2e:85: ac:69:2c:08:19:16:0d:2c:16:60:0f:f4:98:9e:bd:73:ee:f9: 6b:e9:24:15:32:8a:dc:aa:6b:fe:9d:a1:d8:4b:c7:c6:a2:1b: 41:89:f9:fc:3b:ae:31:4f:88:94:94:b4:e0:6e:88:53:35:1c: 71:9f:58:6a:b8:5e:14:5c:87:2a:f3:11:a6:55:ff:da:2f:8d: a6:41:57:b0:a2:d6:c5:c6:80:db:42:59:36:cb:1c:c2:f2:05: 86:b9:de:39:03:41:19:a6:aa:51:1a:4f:fe:a1:d3:04:23:2f: 7b:c1:a7:58:0d:f5:bd:11:a5:68:ca:50:82:0e:d6:fa:9c:f4: 08:e6:74:5f:57:cc:19:29:63:0b:af:04:9d:d0:87:90:37:c0: 10:34:39:54:66:54:2b:6b:14:aa:d5:db:e1:60:32:9a:96:ef: 78:b9:84:13:05:1d:e4:b2:62:6a:40:2d:a7:15:66:91:b1:ce: a9:7d:cc:a9:29:4c:12:59:f0:ed:10:37:78:d2:6e:a1:e9:f3: ce:11:71:ca:65:01:10:68:09:54:60:2c:f0:ae:ec:bd:9a:4a: af:16:de:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPed9wZb31Trd98fSVEzqzfNoc7IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI2QkFCOTU2MTRGNjk4MTFGMkFFOUI0ODM3M0U3OUQy REMyRDdGMzAeFw0yNDA1MDUwNzQ2MjZaFw0yNDA1MDgxMjU1MjZaMDMxMTAvBgNV BAMTKDQ2MUM1QjQ0RDc3NTFCRkQzMjkwNThFRUU4NzEyNjM5QTUzRjcxQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC09wTMiw/TarVBwiS9Z4j4KEJt YIYGIY9Eb8BjcNXGfpG4oEqaZVAiNjXD9qzmXDa4iig5QgiYjaJFLnuEGP0RUQJi ZmO3Zavs4sypBjTlbbrbSIYp4mPVSTNJKrNsMiqitL64wQ2akHRdNvDdWu8pP3Vl 9TxfA7tP+BOSyyxHzPQk8NreXV3RT9KeEi4i9qNDHpSHHnJxjM2nRgigAfm5hLHJ f6bHjqegZGUIa1lnEyvXMVVhbuOFHl3Y/wiQyeITCS/LrJyaLBXymY+BxJqoQfkt 4HGWbb4G0VidV9JeuPsuXo5ZbwX6zsRBsGwu5xYcdbhdCtd578i0L7x0+5ITAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURhxbRNd1G/0ykFju6HEmOaU/ccgwHwYDVR0j BBgwFoAU22urlWFPaYEfKum0g3PnnS3C1/MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NmQ3MjBkNS1iN2Q0LTQzOTUtYTA2Yi0xOTkwNGE2M2Y5NDgvMC9EQjZCQUI5NTYx NEY2OTgxMUYyQUU5QjQ4MzczRTc5RDJEQzJEN0YzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREI2QkFCOTU2MTRGNjk4MTFGMkFFOUI0ODM3M0U3OUQyREMy RDdGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODZkNzIwZDUtYjdkNC00Mzk1LWEw NmItMTk5MDRhNjNmOTQ4LzAvREI2QkFCOTU2MTRGNjk4MTFGMkFFOUI0ODM3M0U3 OUQyREMyRDdGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG/+wCEFrn9YxsKWpgsE0SjTsqg9dVBY5XII MAbplLkfCfMuhaxpLAgZFg0sFmAP9JievXPu+WvpJBUyityqa/6dodhLx8aiG0GJ +fw7rjFPiJSUtOBuiFM1HHGfWGq4XhRchyrzEaZV/9ovjaZBV7Ci1sXGgNtCWTbL HMLyBYa53jkDQRmmqlEaT/6h0wQjL3vBp1gN9b0RpWjKUIIO1vqc9AjmdF9XzBkp YwuvBJ3Qh5A3wBA0OVRmVCtrFKrV2+FgMpqW73i5hBMFHeSyYmpALacVZpGxzql9 zKkpTBJZ8O0QN3jSbqHp884RccplARBoCVRgLPCu7L2aSq8W3so= -----END CERTIFICATE-----Generated at Sun May 5 08:19:49 2024 by rpki-client on console-ams.rpki-client.org