$ rpki-client -vvf repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft File: DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft (raw, json) Hash identifier: Wz1w7CQF0uyCZgB5pmb3WL0U9KK/dfsbn8ik9elphUQ= Subject key identifier: E6:38:1B:19:44:69:14:D0:23:31:BB:9B:A8:11:F2:47:91:52:B3:32 Authority key identifier: DC:1F:CA:69:CA:5B:7A:3A:3E:48:25:B3:CA:FC:C3:BD:1B:C0:6E:B7 Certificate issuer: /CN=DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7 Certificate serial: 4109822182B582407761F3F66F8FA8C2D4AFD992 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft Manifest number: 0426 Signing time: Sat 27 Apr 2024 18:20:33 +0000 Manifest this update: Sat 27 Apr 2024 18:15:33 +0000 Manifest next update: Tue 30 Apr 2024 18:56:33 +0000 Files and hashes: 1: 3135302e3132392e35362e302f32322d3234203d3e203435323837.roa (hash: 2IYoXtuqmRblUc6YqV57RYGXJRezJZnujnFsc4kUWn0=) 2: 3130332e33312e3131302e302f32332d3234203d3e203435323837.roa (hash: kui4ZivxNZ9Q3imWjNih9ERmYVIHPMxv7b6absdtP8c=) 3: 3230332e39392e3133302e302f32332d3234203d3e203435323837.roa (hash: oi3i0T/DGnsrkj9V/nmlXKbyA+8x0nN3xH+cnRDEqqw=) 4: 3131312e36382e3131322e302f32302d3234203d3e203435323837.roa (hash: XewTdRzAzPOGQthv9JUKY2qr57QbO/Zlqh2Frx9mXsw=) 5: 3130332e32332e3230302e302f32322d3234203d3e203435323837.roa (hash: ++6lR6EMd9bjV8+OQftsrSAlwRcx9wQmBIjQ2TifJiM=) 6: 323430363a323430303a3a2f33322d3438203d3e203435323837.roa (hash: Ds4sooWsPPhN9QBsUnzPXSJ13sDorHxDSx5pSjqvAr4=) 7: DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.crl (hash: 968lm0mb7wwbFcwo5aVKJ/kI6MQ8Cp/rvgMxKTpcJJU=) 8: 3137352e3137362e3136302e302f32312d3234203d3e203435323837.roa (hash: j3wp/CH+fF/TV6bSFjOGMC3Y+s3y8mNW3QfOPMhtK6U=) 9: 3230322e35362e3136302e302f32322d3234203d3e203435323837.roa (hash: Lif6BHoucrE/Y7Tf/dY+Tgj2gjuc5W4Kc3zC1rLXT1Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.crl rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Apr 2024 18:56:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:09:82:21:82:b5:82:40:77:61:f3:f6:6f:8f:a8:c2:d4:af:d9:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7 Validity Not Before: Apr 27 18:15:33 2024 GMT Not After : Apr 30 18:56:33 2024 GMT Subject: CN=E6381B19446914D02331BB9BA811F2479152B332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:56:d4:e4:ab:80:18:eb:bc:d6:7e:7a:9c:f4: 5d:7e:8f:e0:53:2a:f5:a6:cd:aa:0e:8b:a1:47:37: ee:7b:89:4c:d8:cc:dd:c8:33:cf:27:ea:7b:56:61: a9:75:68:ab:82:12:7f:f2:a0:29:c2:e5:f7:ba:05: 66:81:56:cf:aa:71:d9:03:87:17:51:bc:f8:a2:6b: ca:b0:b5:dc:64:4b:50:6e:6d:1a:3b:6b:13:83:3c: a9:2f:5e:64:cd:41:f7:42:af:b3:48:2d:30:ce:1a: 5f:3d:8e:f7:96:9f:54:17:c1:cf:e1:45:1b:64:be: 44:c1:5c:5f:6b:53:a4:36:46:f4:ff:74:29:fc:cf: 15:43:10:d5:8b:44:e0:0c:98:bd:52:bb:b0:62:7c: 92:00:28:bb:71:47:d7:e9:e5:56:65:ea:a7:00:ef: 5c:d5:ba:fb:63:fd:42:2a:0f:ce:47:06:d2:79:44: 09:09:94:e7:4a:12:56:e2:b7:2f:9c:fe:31:5b:98: 9e:18:96:94:8f:de:c4:3c:9c:23:e1:ed:d7:7c:dd: 2b:ae:34:43:a1:95:be:b7:a1:ef:d4:01:4b:e6:a5: 0a:03:f9:fa:9a:79:1c:73:d8:53:3b:fe:00:ba:de: 26:43:44:32:35:fa:f4:89:aa:99:e3:7e:66:0e:a2: a7:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:38:1B:19:44:69:14:D0:23:31:BB:9B:A8:11:F2:47:91:52:B3:32 X509v3 Authority Key Identifier: keyid:DC:1F:CA:69:CA:5B:7A:3A:3E:48:25:B3:CA:FC:C3:BD:1B:C0:6E:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:41:10:9f:e6:5f:0b:9b:13:55:89:06:cd:c0:69:b4:0c:77: a6:b9:b1:15:50:7a:88:6f:ff:7a:69:aa:29:61:a0:17:96:bf: 3c:3e:5c:29:9d:57:bb:c2:c8:26:3b:5c:a4:48:81:b8:99:85: 7b:9c:01:9b:bf:c4:2c:33:ec:3c:c8:61:8c:af:ac:03:2e:c2: ce:7e:fd:57:c3:2b:4d:37:a0:93:ec:b9:85:94:d9:e1:2b:29: b9:b9:f2:b8:36:fd:9a:06:25:67:99:4b:63:ae:65:18:7d:a5: 14:93:f3:8d:a4:33:36:30:f6:6b:a1:90:6a:b1:ce:46:3a:08: 80:aa:e9:a6:8a:1c:5c:13:d0:63:8e:45:15:ed:88:9f:46:21: 4f:51:c8:08:cb:fd:97:46:f1:8e:5e:20:cd:d9:8a:7d:a4:97: 07:25:06:0d:6e:6f:56:0e:3c:1d:d8:4f:86:f6:f2:05:b3:90: 0c:51:dd:bd:f0:05:14:31:5c:f1:f3:8e:87:97:ef:a4:95:1b: 5b:89:ac:60:4b:7f:29:62:40:c2:f5:7e:1f:b8:79:ca:b2:27: a5:67:2c:f3:fc:74:b7:80:8f:b3:00:9d:e9:57:d3:91:5f:ac: 91:3a:86:be:ca:8e:3e:4a:34:5c:49:37:9e:e8:1a:43:68:fa: 14:16:af:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQQmCIYK1gkB3YfP2b4+owtSv2ZIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMxRkNBNjlDQTVCN0EzQTNFNDgyNUIzQ0FGQ0MzQkQx QkMwNkVCNzAeFw0yNDA0MjcxODE1MzNaFw0yNDA0MzAxODU2MzNaMDMxMTAvBgNV BAMTKEU2MzgxQjE5NDQ2OTE0RDAyMzMxQkI5QkE4MTFGMjQ3OTE1MkIzMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVVtTkq4AY67zWfnqc9F1+j+BT KvWmzaoOi6FHN+57iUzYzN3IM88n6ntWYal1aKuCEn/yoCnC5fe6BWaBVs+qcdkD hxdRvPiia8qwtdxkS1BubRo7axODPKkvXmTNQfdCr7NILTDOGl89jveWn1QXwc/h RRtkvkTBXF9rU6Q2RvT/dCn8zxVDENWLROAMmL1Su7BifJIAKLtxR9fp5VZl6qcA 71zVuvtj/UIqD85HBtJ5RAkJlOdKElbity+c/jFbmJ4YlpSP3sQ8nCPh7dd83Suu NEOhlb63oe/UAUvmpQoD+fqaeRxz2FM7/gC63iZDRDI1+vSJqpnjfmYOoqdBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5jgbGURpFNAjMbubqBHyR5FSszIwHwYDVR0j BBgwFoAU3B/Kacpbejo+SCWzyvzDvRvAbrcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ODI0OWZjMy02Yzg0LTRlOTEtYjA2Ny1hMGM2YTg0MGEzYTkvMC9EQzFGQ0E2OUNB NUI3QTNBM0U0ODI1QjNDQUZDQzNCRDFCQzA2RUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREMxRkNBNjlDQTVCN0EzQTNFNDgyNUIzQ0FGQ0MzQkQxQkMw NkVCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTgyNDlmYzMtNmM4NC00ZTkxLWIw NjctYTBjNmE4NDBhM2E5LzAvREMxRkNBNjlDQTVCN0EzQTNFNDgyNUIzQ0FGQ0Mz QkQxQkMwNkVCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABBBEJ/mXwubE1WJBs3AabQMd6a5sRVQeohv /3ppqilhoBeWvzw+XCmdV7vCyCY7XKRIgbiZhXucAZu/xCwz7DzIYYyvrAMuws5+ /VfDK003oJPsuYWU2eErKbm58rg2/ZoGJWeZS2OuZRh9pRST842kMzYw9muhkGqx zkY6CICq6aaKHFwT0GOORRXtiJ9GIU9RyAjL/ZdG8Y5eIM3Zin2klwclBg1ub1YO PB3YT4b28gWzkAxR3b3wBRQxXPHzjoeX76SVG1uJrGBLfyliQML1fh+4ecqyJ6Vn LPP8dLeAj7MAnelX05FfrJE6hr7Kjj5KNFxJN57oGkNo+hQWr2g= -----END CERTIFICATE-----Generated at Sat Apr 27 20:19:52 2024 by rpki-client on console-ams.rpki-client.org