$ rpki-client -vvf repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft File: 6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft (raw, json) Hash identifier: vXgSVq1g9gXdRsaQKrXzFvHIRTg0Tvrl2HbWar9wCoY= Subject key identifier: D4:5E:25:E5:28:BD:2B:A7:FE:F2:15:5D:76:B9:AB:85:2D:55:25:95 Authority key identifier: 6D:6B:AE:DB:FD:BB:AA:46:BF:3D:A2:18:55:70:77:16:27:BE:7B:19 Certificate issuer: /CN=6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19 Certificate serial: 0720187DD01BB6FFFCA5B1A95792EFD6ABDCC52E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.cer Subject info access: rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft Manifest number: 0426 Signing time: Mon 29 Apr 2024 22:50:32 +0000 Manifest this update: Mon 29 Apr 2024 22:45:32 +0000 Manifest next update: Fri 03 May 2024 10:33:32 +0000 Files and hashes: 1: 3130332e3132372e3134342e302f32342d3234203d3e203633383732.roa (hash: qHJoSFcwWIicEL1jBd2OeLAZTilENbCC7wrXnZlj//s=) 2: 323030313a6466333a6330303a3a2f34382d3438203d3e203633383732.roa (hash: sJM1tk0bgY60YrBlTqbx4HpKcfkHSDctJiMtwl8QaNY=) 3: 3130332e3132372e3134342e302f32332d3233203d3e203633383732.roa (hash: ErKkW0Op+NCVig/xvd2sNQM/Nt80klee5k4EKLTP2dA=) 4: 3130332e35322e3137312e302f32342d3234203d3e203633383732.roa (hash: xnJYQdFC1/vH1AegsM4MgkXEa7urffCYTGCNg/x/pj4=) 5: 3130332e35322e3137302e302f32332d3233203d3e203633383732.roa (hash: IItHYU8m8kJIB+aCdi43dIrmAn7Yf1bKtCDMlPIJJ4s=) 6: 3130332e3132372e3134352e302f32342d3234203d3e203633383732.roa (hash: VltRaVYmXEp5RxNunzVAYYL2iPUzGbcd26PZmi7QfWc=) 7: 3130332e35322e3137302e302f32342d3234203d3e203633383732.roa (hash: 2rc5yHScrsGXt49l9WGSkOsRwc5HBfIrfbId/MVBY1Q=) 8: 6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.crl (hash: VbJ1AGDTEMUUDCOSIFwj7O8A3hXemxVc35ssLLvpC6M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.crl rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 22:57:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:20:18:7d:d0:1b:b6:ff:fc:a5:b1:a9:57:92:ef:d6:ab:dc:c5:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19 Validity Not Before: Apr 29 22:45:32 2024 GMT Not After : May 3 10:33:32 2024 GMT Subject: CN=D45E25E528BD2BA7FEF2155D76B9AB852D552595 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4a:e8:ad:64:38:01:56:f4:f2:86:53:a1:19: 62:59:02:92:83:99:b8:de:48:83:d9:b5:f3:57:fc: 18:58:9d:7e:e2:0d:4b:62:5c:6c:37:fa:a3:13:26: e3:81:d5:24:88:c1:be:07:2c:fb:0f:de:f3:b2:5c: 8c:10:c3:0f:02:55:57:10:da:38:d0:81:8e:57:b8: 7a:eb:4d:ac:f2:80:8c:83:cb:91:f7:97:d9:21:36: 9d:74:f9:0d:db:09:72:a9:8d:1e:7b:5a:a9:87:f8: fd:a6:1b:a6:2b:7d:05:dd:a5:b8:4c:88:be:1b:b2: e8:84:90:29:ee:d1:79:22:36:8d:99:4f:c4:3f:1f: 18:77:45:65:16:76:58:e9:77:17:c4:fc:31:22:6e: bb:18:97:e2:07:75:6b:ee:bb:b8:e5:b5:78:60:94: 57:1f:0f:22:d3:ec:fe:2d:42:0a:1f:a5:89:47:3a: ea:07:d7:23:6f:51:ec:8d:27:01:12:6a:89:94:30: 8a:ab:c0:78:fc:3e:c0:29:5d:dc:c7:b0:0c:ae:ea: 83:eb:62:d8:19:ee:b9:ab:7f:bf:92:92:00:0f:0a: ed:16:37:0a:74:f1:2f:62:4c:ad:b0:3c:39:16:c8: e0:b2:a4:b0:2b:41:b6:10:42:0a:51:2d:05:96:2b: 4b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:5E:25:E5:28:BD:2B:A7:FE:F2:15:5D:76:B9:AB:85:2D:55:25:95 X509v3 Authority Key Identifier: keyid:6D:6B:AE:DB:FD:BB:AA:46:BF:3D:A2:18:55:70:77:16:27:BE:7B:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:ca:e6:2e:11:8c:fe:f8:69:72:63:31:a3:eb:17:aa:2a:f0: f1:68:08:e5:af:92:d2:34:58:7f:6d:1d:d7:a1:d5:ec:dc:4a: 45:2e:e2:d6:7b:5b:34:67:18:84:92:db:bb:7e:3e:4b:db:47: 95:f6:c6:58:8d:9a:b5:9c:8b:6b:74:71:bb:c3:c8:9b:62:4a: 85:5e:9a:f7:75:ee:39:e4:c0:30:14:74:ba:b4:14:a7:60:f4: 1c:51:e9:a9:c0:cd:df:fb:04:93:d5:d9:a7:9c:af:55:29:96: fc:8c:0f:fb:ea:ca:33:27:59:18:1f:98:e2:c5:b6:26:8d:fe: fc:97:89:0a:08:1a:e8:38:35:96:88:09:cc:48:2d:76:e4:10: 85:f1:a1:82:86:6f:63:8d:17:4b:a5:d7:b6:b9:e7:05:5a:03: ea:b1:68:0b:ab:89:61:cd:d4:07:32:46:30:93:7f:5e:b5:cf: 7f:2b:47:62:7d:b9:6b:f8:9c:5c:88:65:2b:4f:90:ec:ad:bf: 35:90:5a:aa:4c:d9:72:c2:1f:6d:8c:69:cd:4f:14:6f:16:24: 1a:e7:ac:44:cc:c5:01:6c:08:81:5f:a4:53:2a:5d:ce:8f:db: 20:88:96:aa:ad:8f:99:2a:bf:ea:2d:5e:6f:2b:74:5a:07:69: 71:e2:67:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUByAYfdAbtv/8pbGpV5Lv1qvcxS4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQ2QkFFREJGREJCQUE0NkJGM0RBMjE4NTU3MDc3MTYy N0JFN0IxOTAeFw0yNDA0MjkyMjQ1MzJaFw0yNDA1MDMxMDMzMzJaMDMxMTAvBgNV BAMTKEQ0NUUyNUU1MjhCRDJCQTdGRUYyMTU1RDc2QjlBQjg1MkQ1NTI1OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtSuitZDgBVvTyhlOhGWJZApKD mbjeSIPZtfNX/BhYnX7iDUtiXGw3+qMTJuOB1SSIwb4HLPsP3vOyXIwQww8CVVcQ 2jjQgY5XuHrrTazygIyDy5H3l9khNp10+Q3bCXKpjR57WqmH+P2mG6YrfQXdpbhM iL4bsuiEkCnu0XkiNo2ZT8Q/Hxh3RWUWdljpdxfE/DEibrsYl+IHdWvuu7jltXhg lFcfDyLT7P4tQgofpYlHOuoH1yNvUeyNJwESaomUMIqrwHj8PsApXdzHsAyu6oPr YtgZ7rmrf7+SkgAPCu0WNwp08S9iTK2wPDkWyOCypLArQbYQQgpRLQWWK0sTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1F4l5Si9K6f+8hVddrmrhS1VJZUwHwYDVR0j BBgwFoAUbWuu2/27qka/PaIYVXB3Fie+exkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NmJiMzMzYy05ODJiLTRmY2UtYWM4MS1iYzA2OTIyOWUyNDMvMC82RDZCQUVEQkZE QkJBQTQ2QkYzREEyMTg1NTcwNzcxNjI3QkU3QjE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkQ2QkFFREJGREJCQUE0NkJGM0RBMjE4NTU3MDc3MTYyN0JF N0IxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTZiYjMzM2MtOTgyYi00ZmNlLWFj ODEtYmMwNjkyMjllMjQzLzAvNkQ2QkFFREJGREJCQUE0NkJGM0RBMjE4NTU3MDc3 MTYyN0JFN0IxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGPK5i4RjP74aXJjMaPrF6oq8PFoCOWvktI0 WH9tHdeh1ezcSkUu4tZ7WzRnGISS27t+PkvbR5X2xliNmrWci2t0cbvDyJtiSoVe mvd17jnkwDAUdLq0FKdg9BxR6anAzd/7BJPV2aecr1UplvyMD/vqyjMnWRgfmOLF tiaN/vyXiQoIGug4NZaICcxILXbkEIXxoYKGb2ONF0ul17a55wVaA+qxaAuriWHN 1AcyRjCTf161z38rR2J9uWv4nFyIZStPkOytvzWQWqpM2XLCH22Mac1PFG8WJBrn rETMxQFsCIFfpFMqXc6P2yCIlqqtj5kqv+otXm8rdFoHaXHiZ5Y= -----END CERTIFICATE-----Generated at Tue Apr 30 00:21:06 2024 by rpki-client on console-fra.rpki-client.org