$ rpki-client -vvf repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.mft File: 62DD415142DDD76FB165A3918E09BA5891D6ADD0.mft (raw, json) Hash identifier: U20npUZjCnnZ4zge9V7UwH1Eo9ecMyexFhAme0VYoL8= Subject key identifier: 17:25:35:71:5F:D7:8B:59:43:22:0C:B2:E0:A8:8A:71:3B:1C:52:CC Authority key identifier: 62:DD:41:51:42:DD:D7:6F:B1:65:A3:91:8E:09:BA:58:91:D6:AD:D0 Certificate issuer: /CN=62DD415142DDD76FB165A3918E09BA5891D6ADD0 Certificate serial: 0CD443AE0990875487245B735E506AD938F30495 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62DD415142DDD76FB165A3918E09BA5891D6ADD0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.mft Manifest number: 042D Signing time: Thu 25 Apr 2024 10:00:36 +0000 Manifest this update: Thu 25 Apr 2024 09:55:36 +0000 Manifest next update: Sun 28 Apr 2024 15:49:36 +0000 Files and hashes: 1: 3130332e3133312e31382e302f32342d3234203d3e20313338303839.roa (hash: uWFiykS7ASR4i/2oK4WHcOxvM23kiF4ajYTQcf6sVw4=) 2: 3130332e3133312e31362e302f32332d3234203d3e20313338303830.roa (hash: QioTLvDQJPOLmuQX7c7FPxVqknDmy59nYivywHUailU=) 3: 62DD415142DDD76FB165A3918E09BA5891D6ADD0.crl (hash: OXgCrFRA5BkhySmLSZo6qmzorzItf5U2L6FNlf2iEZ4=) 4: 3130332e3133312e31392e302f32342d3234203d3e20313338303839.roa (hash: sln2y1brjKOczFQIAz8CSR6ZbCHQFE48AeB+2G2MmEc=) 5: 3130332e3133312e31382e302f32332d3234203d3e20313338303839.roa (hash: ez01GaUkqipcpRQQkpWHs+clGj6hxJbh4TgasLiuBv4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.crl rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62DD415142DDD76FB165A3918E09BA5891D6ADD0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Apr 2024 15:49:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:d4:43:ae:09:90:87:54:87:24:5b:73:5e:50:6a:d9:38:f3:04:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62DD415142DDD76FB165A3918E09BA5891D6ADD0 Validity Not Before: Apr 25 09:55:36 2024 GMT Not After : Apr 28 15:49:36 2024 GMT Subject: CN=172535715FD78B5943220CB2E0A88A713B1C52CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:57:5d:22:ae:39:dc:60:ae:27:5f:16:5d:3e: 2d:c9:63:11:aa:ff:cd:c3:e2:66:96:42:0b:c0:1f: a7:3b:00:11:37:24:9f:5b:d0:e1:57:80:13:5a:7a: 93:0a:ec:7f:23:8b:41:f3:8d:78:96:1e:7b:6f:70: ac:75:4a:6b:ac:fd:f4:85:f3:2d:5f:cd:5e:6d:14: 3a:38:83:31:1a:ab:a8:a9:f7:58:3c:e4:b3:db:0e: a3:32:a6:af:6d:ba:ae:54:b5:ca:d0:5c:28:e7:9b: 12:87:06:98:c1:38:d7:56:dc:93:a5:d7:2e:92:32: 08:43:55:f0:8a:55:94:48:e2:09:c7:dd:85:e5:be: 37:a5:fb:3c:07:07:4a:52:1f:61:e4:bf:79:be:82: 4e:94:db:43:db:92:ee:ae:34:02:14:de:af:e5:1e: 11:34:44:b2:50:76:65:5a:52:7f:6f:90:78:be:9b: 5d:89:61:2f:66:8f:d5:53:6e:df:cb:21:73:12:d0: ea:c9:7d:0c:7f:b8:a3:fb:4c:0f:2e:d9:6d:1a:27: 12:22:13:7c:8a:f4:df:ce:f1:d7:7e:b7:11:28:ba: d1:62:69:fb:5b:f6:a8:74:b6:73:b8:26:d9:b6:53: 3c:03:69:f4:4a:d5:e1:87:b7:26:70:a8:ad:c7:91: 77:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:25:35:71:5F:D7:8B:59:43:22:0C:B2:E0:A8:8A:71:3B:1C:52:CC X509v3 Authority Key Identifier: keyid:62:DD:41:51:42:DD:D7:6F:B1:65:A3:91:8E:09:BA:58:91:D6:AD:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62DD415142DDD76FB165A3918E09BA5891D6ADD0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:b5:68:56:3b:98:ec:13:22:cb:ee:1d:b5:4e:5d:16:b8:d2: 10:f7:97:3a:18:91:a2:a2:10:1c:fc:57:bd:e2:c2:f3:b0:bf: a3:ea:a4:eb:cb:80:c3:25:e3:97:99:40:51:96:03:f3:fe:9b: e0:e5:a6:0b:a2:31:3d:b3:ca:fd:d7:16:f6:9d:61:94:04:de: a5:30:ad:4f:61:66:00:65:31:76:a3:cd:e6:33:6a:0c:96:fb: 38:38:14:b5:2c:78:b9:39:c0:01:78:a5:b3:42:58:83:e2:ff: 6d:e7:30:f8:9f:c8:61:e4:bd:62:d8:cf:7e:f9:54:8c:c1:1e: 8b:ee:8b:ef:cf:34:fd:a8:64:e2:db:cf:cf:26:8d:ad:ef:4b: f7:e9:56:ef:2e:e0:88:1e:37:c7:a8:6e:f3:ae:64:9a:f4:1a: 1e:76:1d:e1:31:cc:bf:c1:84:84:17:d8:b1:79:4f:b1:52:37: e1:8c:9d:50:a1:60:12:00:4b:e9:48:6b:4a:4f:01:81:6a:0a: 7f:b9:29:18:28:8c:f5:16:66:dd:aa:bf:85:98:37:33:6d:72: f3:14:72:92:d0:4d:90:4f:8b:dd:48:a9:79:a5:4f:42:4f:6e: 6d:b5:58:5a:47:1f:a6:cd:00:93:03:d3:32:79:bf:bb:d0:d4: 6a:74:fa:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDNRDrgmQh1SHJFtzXlBq2TjzBJUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjJERDQxNTE0MkRERDc2RkIxNjVBMzkxOEUwOUJBNTg5 MUQ2QUREMDAeFw0yNDA0MjUwOTU1MzZaFw0yNDA0MjgxNTQ5MzZaMDMxMTAvBgNV BAMTKDE3MjUzNTcxNUZENzhCNTk0MzIyMENCMkUwQTg4QTcxM0IxQzUyQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3V10irjncYK4nXxZdPi3JYxGq /83D4maWQgvAH6c7ABE3JJ9b0OFXgBNaepMK7H8ji0HzjXiWHntvcKx1Smus/fSF 8y1fzV5tFDo4gzEaq6ip91g85LPbDqMypq9tuq5UtcrQXCjnmxKHBpjBONdW3JOl 1y6SMghDVfCKVZRI4gnH3YXlvjel+zwHB0pSH2Hkv3m+gk6U20Pbku6uNAIU3q/l HhE0RLJQdmVaUn9vkHi+m12JYS9mj9VTbt/LIXMS0OrJfQx/uKP7TA8u2W0aJxIi E3yK9N/O8dd+txEoutFiaftb9qh0tnO4Jtm2UzwDafRK1eGHtyZwqK3HkXexAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFyU1cV/Xi1lDIgyy4KiKcTscUswwHwYDVR0j BBgwFoAUYt1BUULd12+xZaORjgm6WJHWrdAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTA0ZjY3MC03ZGFjLTRjZjQtOTkxZC01MDUzOWUzZDNmNWUvMC82MkRENDE1MTQy RERENzZGQjE2NUEzOTE4RTA5QkE1ODkxRDZBREQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjJERDQxNTE0MkRERDc2RkIxNjVBMzkxOEUwOUJBNTg5MUQ2 QUREMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTkwNGY2NzAtN2RhYy00Y2Y0LTk5 MWQtNTA1MzllM2QzZjVlLzAvNjJERDQxNTE0MkRERDc2RkIxNjVBMzkxOEUwOUJB NTg5MUQ2QUREMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIK1aFY7mOwTIsvuHbVOXRa40hD3lzoYkaKi EBz8V73iwvOwv6PqpOvLgMMl45eZQFGWA/P+m+DlpguiMT2zyv3XFvadYZQE3qUw rU9hZgBlMXajzeYzagyW+zg4FLUseLk5wAF4pbNCWIPi/23nMPifyGHkvWLYz375 VIzBHovui+/PNP2oZOLbz88mja3vS/fpVu8u4IgeN8eobvOuZJr0Gh52HeExzL/B hIQX2LF5T7FSN+GMnVChYBIAS+lIa0pPAYFqCn+5KRgojPUWZt2qv4WYNzNtcvMU cpLQTZBPi91IqXmlT0JPbm21WFpHH6bNAJMD0zJ5v7vQ1Gp0+gk= -----END CERTIFICATE-----Generated at Thu Apr 25 10:22:58 2024 by rpki-client on console-fra.rpki-client.org