$ rpki-client -vvf repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft File: D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft (raw, json) Hash identifier: nXu8WyvIyUDfJnc73wONvFLGlWPrhuYuN0TVayrhHGI= Subject key identifier: 2D:18:9A:69:45:CD:97:31:CF:4E:6F:7E:A2:F0:F5:EC:44:7E:64:5B Authority key identifier: D7:85:2A:F0:5D:FB:B9:7A:CD:46:A3:73:99:F2:0D:EA:19:C2:EF:2C Certificate issuer: /CN=D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C Certificate serial: 71DF5EC63809423E31FE3352935835F336455C76 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft Manifest number: 0243 Signing time: Fri 31 May 2024 17:11:48 +0000 Manifest this update: Fri 31 May 2024 17:06:48 +0000 Manifest next update: Mon 03 Jun 2024 23:00:48 +0000 Files and hashes: 1: D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.crl (hash: roSQxAm0q6ttkz1q5L5wB/ejw1oxzN3gacisQBeMCow=) 2: 3130332e3136342e3137322e302f32342d3234203d3e20313338313331.roa (hash: fzXBkhYAUHRvqm/IOJ/TPlrf08VB6iOak4Th7M2bxfg=) 3: 3130332e3136342e3137332e302f32342d3234203d3e20313338313331.roa (hash: joZaN20RVj6C58TuxjMGymNK7Lv0pgecDFF+jskA6D0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.crl rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 23:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:df:5e:c6:38:09:42:3e:31:fe:33:52:93:58:35:f3:36:45:5c:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C Validity Not Before: May 31 17:06:48 2024 GMT Not After : Jun 3 23:00:48 2024 GMT Subject: CN=2D189A6945CD9731CF4E6F7EA2F0F5EC447E645B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8b:d2:59:27:6e:61:29:f8:36:2f:fe:55:13: 4e:88:7e:7b:37:bd:3f:33:94:c4:fe:f3:87:bf:d0: 5e:1e:4e:a3:9b:44:6f:3b:81:19:f0:82:6b:98:bc: 23:b6:22:10:a8:67:d5:02:08:b2:72:7f:a8:a6:99: ca:41:a6:00:e7:99:b9:a1:97:48:b3:cb:f9:5d:95: 8f:87:d8:b4:e1:b6:9a:ae:00:4e:64:6a:bb:6f:29: 00:e4:22:eb:f8:5b:fb:b8:61:73:0a:3f:d4:69:33: 9b:55:8c:ea:a4:7c:16:c2:b8:ac:f1:5b:bf:04:3e: fa:8d:cf:d6:cd:f8:43:64:a9:05:0e:5d:9d:db:4f: 8d:f2:8e:3b:d0:61:0b:5b:a9:26:0b:5a:12:a8:e5: 37:ed:2b:56:fd:0f:0a:17:ab:75:1b:80:76:04:22: 24:14:a2:ee:bc:73:c9:63:94:78:95:c1:81:2a:00: 0a:de:3d:2f:7f:1a:80:ec:2a:f6:38:aa:9c:63:d5: 1e:c1:61:e5:25:5d:64:ac:32:31:d4:ba:db:c7:2b: a3:79:a4:aa:0c:e3:90:ef:9d:c7:2e:68:6d:dd:35: 8b:fe:28:01:60:e9:2d:87:aa:91:d7:8b:84:f3:09: 39:73:1e:80:7f:5b:ca:02:00:52:03:4a:3f:8b:4c: 9e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:18:9A:69:45:CD:97:31:CF:4E:6F:7E:A2:F0:F5:EC:44:7E:64:5B X509v3 Authority Key Identifier: keyid:D7:85:2A:F0:5D:FB:B9:7A:CD:46:A3:73:99:F2:0D:EA:19:C2:EF:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:09:78:e0:fb:ca:86:b3:59:9b:78:4e:3a:c8:18:df:6e:74: 20:4c:be:3d:53:87:00:5e:4f:74:0e:2f:80:db:f2:5d:ce:b4: 43:56:b1:c0:71:87:87:3a:3f:ee:29:62:3e:b0:09:bc:3a:e4: 6b:f4:2e:81:aa:d3:2b:02:aa:05:26:b8:58:f0:2b:75:54:1f: 90:7a:a5:e9:d7:05:37:c1:52:49:0c:87:5a:e8:51:8b:b1:4f: 2b:91:53:cb:aa:73:7c:66:0d:dd:72:8e:bf:65:04:07:a9:af: 4c:75:cd:89:8d:51:89:2b:c9:cb:f6:40:f1:4b:df:8f:cd:86: 84:94:05:08:80:20:f7:0f:ed:0e:cb:f7:3e:00:2c:09:d3:e0: 66:d2:6d:53:b4:23:d1:89:38:b5:d8:aa:99:90:79:ba:5e:d9: 8a:e9:24:f6:36:a3:05:b8:48:f0:2e:d0:db:3d:68:c8:0d:3d: 8a:0a:bd:d7:6e:07:57:26:18:2c:df:1c:6a:e1:dc:d7:a1:82: 64:a3:e1:5e:52:6d:ce:3c:f6:80:83:dd:94:39:68:ff:8e:99: 8b:6b:37:94:3f:86:a7:83:c5:d8:43:c7:ed:e0:9a:32:39:e0: de:b7:97:21:ac:c9:5d:2d:c4:27:20:a4:7d:60:a2:50:96:8c: 8f:86:3b:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcd9exjgJQj4x/jNSk1g18zZFXHYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc4NTJBRjA1REZCQjk3QUNENDZBMzczOTlGMjBERUEx OUMyRUYyQzAeFw0yNDA1MzExNzA2NDhaFw0yNDA2MDMyMzAwNDhaMDMxMTAvBgNV BAMTKDJEMTg5QTY5NDVDRDk3MzFDRjRFNkY3RUEyRjBGNUVDNDQ3RTY0NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCii9JZJ25hKfg2L/5VE06Ifns3 vT8zlMT+84e/0F4eTqObRG87gRnwgmuYvCO2IhCoZ9UCCLJyf6immcpBpgDnmbmh l0izy/ldlY+H2LThtpquAE5kartvKQDkIuv4W/u4YXMKP9RpM5tVjOqkfBbCuKzx W78EPvqNz9bN+ENkqQUOXZ3bT43yjjvQYQtbqSYLWhKo5TftK1b9DwoXq3UbgHYE IiQUou68c8ljlHiVwYEqAArePS9/GoDsKvY4qpxj1R7BYeUlXWSsMjHUutvHK6N5 pKoM45DvnccuaG3dNYv+KAFg6S2HqpHXi4TzCTlzHoB/W8oCAFIDSj+LTJ6bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULRiaaUXNlzHPTm9+ovD17ER+ZFswHwYDVR0j BBgwFoAU14Uq8F37uXrNRqNzmfIN6hnC7ywwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTg5ZjFiNC1lZjYzLTQ1MzktODQ1NS05OGM2NzE5OTVjY2YvMC9ENzg1MkFGMDVE RkJCOTdBQ0Q0NkEzNzM5OUYyMERFQTE5QzJFRjJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDc4NTJBRjA1REZCQjk3QUNENDZBMzczOTlGMjBERUExOUMy RUYyQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWU4OWYxYjQtZWY2My00NTM5LTg0 NTUtOThjNjcxOTk1Y2NmLzAvRDc4NTJBRjA1REZCQjk3QUNENDZBMzczOTlGMjBE RUExOUMyRUYyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADMJeOD7yoazWZt4TjrIGN9udCBMvj1ThwBe T3QOL4Db8l3OtENWscBxh4c6P+4pYj6wCbw65Gv0LoGq0ysCqgUmuFjwK3VUH5B6 penXBTfBUkkMh1roUYuxTyuRU8uqc3xmDd1yjr9lBAepr0x1zYmNUYkrycv2QPFL 34/NhoSUBQiAIPcP7Q7L9z4ALAnT4GbSbVO0I9GJOLXYqpmQebpe2YrpJPY2owW4 SPAu0Ns9aMgNPYoKvdduB1cmGCzfHGrh3NehgmSj4V5Sbc489oCD3ZQ5aP+OmYtr N5Q/hqeDxdhDx+3gmjI54N63lyGsyV0txCcgpH1golCWjI+GO38= -----END CERTIFICATE-----Generated at Fri May 31 20:32:44 2024 by rpki-client on console-ams.rpki-client.org