$ rpki-client -vvf repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.mft File: D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.mft (raw, json) Hash identifier: BEqd11nLbzfBi8Y3vM3I/Q+ocgZaAJ8BnE2WQnUFG4c= Subject key identifier: B6:1D:62:36:42:38:2B:6F:47:37:8D:8E:FC:86:21:7F:6A:78:02:CC Authority key identifier: D9:CD:40:47:4B:DD:0C:07:07:76:6C:ED:BA:F0:B6:A1:86:CF:58:2F Certificate issuer: /CN=D9CD40474BDD0C0707766CEDBAF0B6A186CF582F Certificate serial: 124B24EC6298EBC85BB8665773E1CB9CF8E24FDD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.mft Manifest number: 0443 Signing time: Sun 26 May 2024 23:41:11 +0000 Manifest this update: Sun 26 May 2024 23:36:11 +0000 Manifest next update: Thu 30 May 2024 11:35:11 +0000 Files and hashes: 1: 3130332e3231392e3234382e302f32322d3234203d3e20313335343434.roa (hash: l7rnKXVaRI7XL/MyIUaoq4Nwc606uWRW5ElayjKfcBE=) 2: D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.crl (hash: MrYAy8yayvl8S9SxQZ3mtQWrWcq74f5oggNKecuLuAI=) 3: 3130332e3233352e37342e302f32342d3234203d3e20313431313230.roa (hash: rPr5z+FLHw5K05AtTYvasv5Kj2s12fni5q+BH3ebdhc=) 4: 323030313a6466323a356130303a3a2f34382d3438203d3e20313335343434.roa (hash: I3K37Dvgti+tYpF1d4PwtnTejf+QHcQgg636CfXgGbo=) 5: 3130332e3233352e37352e302f32342d3234203d3e20313335343434.roa (hash: ngQAnXClgSB5QjJcQgS8jYjCfldqavE1VdARG5KiIeU=) 6: 3130332e3233352e37322e302f32342d3234203d3e20313335343434.roa (hash: 5PHXxkNOBzAUrSVCdEsqnvcRVTWOc5OwbXElHb2k9BU=) 7: 3130332e3233352e37332e302f32342d3234203d3e20313335333630.roa (hash: 30qxcBNGXbPKjPzSGFvg4MhstUTk+wFXbUeAZJ6OvH8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.crl rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 May 2024 22:29:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:4b:24:ec:62:98:eb:c8:5b:b8:66:57:73:e1:cb:9c:f8:e2:4f:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9CD40474BDD0C0707766CEDBAF0B6A186CF582F Validity Not Before: May 26 23:36:11 2024 GMT Not After : May 30 11:35:11 2024 GMT Subject: CN=B61D623642382B6F47378D8EFC86217F6A7802CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f3:d3:ed:68:ac:4b:7a:15:a4:73:35:db:19: f5:6a:87:c5:18:66:74:a8:19:7b:c2:3d:7c:41:0c: e5:49:35:26:59:83:82:ad:42:5f:c1:d7:b6:18:35: de:f8:5b:1d:e0:0b:c2:66:50:4c:90:4a:ea:ef:ee: 97:ad:ce:ae:f3:9c:c9:fc:70:d1:b7:53:7b:0e:1c: 9d:a4:a0:37:a2:2e:91:1f:71:26:df:1a:9d:90:f4: 8f:70:05:31:fc:74:d7:58:79:1f:d8:e2:c4:5c:d8: ba:41:8d:dc:6c:84:75:fa:0a:8b:b1:ce:86:ce:37: 75:fe:fd:d4:c4:b1:56:87:cf:d4:e3:93:e4:91:e5: 06:ec:ae:f7:2c:de:0b:78:2c:fe:57:76:a0:8e:1f: 4d:db:61:3a:99:08:af:9e:2e:eb:8a:34:c1:c5:a5: 04:07:bb:25:fe:1a:68:1e:21:4a:20:ca:b8:73:e7: 11:f3:20:97:c3:bb:99:bb:8a:76:a0:23:eb:d4:03: 4a:8e:11:e6:6b:c1:9d:f5:a5:4a:58:b1:98:f6:f2: 3c:f4:85:54:98:f8:ee:0a:0a:9e:ed:b9:47:45:23: e1:87:8d:62:71:d4:a3:ff:e8:f1:d0:9c:6c:12:10: db:6f:f5:7a:d5:29:95:8f:15:53:d3:c3:e2:21:89: 98:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:1D:62:36:42:38:2B:6F:47:37:8D:8E:FC:86:21:7F:6A:78:02:CC X509v3 Authority Key Identifier: keyid:D9:CD:40:47:4B:DD:0C:07:07:76:6C:ED:BA:F0:B6:A1:86:CF:58:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:a8:6e:af:63:1d:9a:48:b2:b4:52:d1:dc:95:57:37:81:12: 47:40:2a:96:44:17:bb:eb:ca:59:61:c5:49:b6:bc:64:e2:16: 30:a1:e6:a0:5a:ae:65:0f:39:48:4f:36:4b:c8:25:30:d6:78: d4:95:1c:8a:50:a9:b1:d8:b5:e1:9a:5f:09:ec:2f:01:18:24: 92:15:26:88:6e:cb:c1:40:33:21:43:06:6a:8b:96:64:af:da: e4:e7:4d:5d:fa:c5:29:5c:e1:fb:0b:29:60:b4:de:32:bd:56: 46:aa:3a:4f:e8:1a:33:80:33:4c:5f:4d:16:bc:2e:db:59:5e: e2:9b:59:c5:d3:22:67:2b:6c:ca:8c:4f:be:f6:34:62:20:84: d6:21:aa:44:40:56:6a:83:fd:64:d4:1a:44:0d:9c:a4:cd:99: d1:9e:39:3a:94:13:b5:d8:31:c2:23:97:d6:8f:28:2f:15:ac: 1d:93:7b:08:17:ac:53:21:8b:81:21:53:29:76:2f:9f:48:51: a7:a6:60:02:68:e6:df:d6:0c:de:55:72:03:11:c7:35:19:c4: 60:2a:f6:4e:e1:fd:59:e9:c5:6a:48:15:f0:f0:7b:03:b6:17: 38:29:65:aa:05:e4:a2:37:7a:d2:17:14:b3:16:e7:25:f0:d3: 01:c3:e6:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEksk7GKY68hbuGZXc+HLnPjiT90wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDlDRDQwNDc0QkREMEMwNzA3NzY2Q0VEQkFGMEI2QTE4 NkNGNTgyRjAeFw0yNDA1MjYyMzM2MTFaFw0yNDA1MzAxMTM1MTFaMDMxMTAvBgNV BAMTKEI2MUQ2MjM2NDIzODJCNkY0NzM3OEQ4RUZDODYyMTdGNkE3ODAyQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE89PtaKxLehWkczXbGfVqh8UY ZnSoGXvCPXxBDOVJNSZZg4KtQl/B17YYNd74Wx3gC8JmUEyQSurv7petzq7znMn8 cNG3U3sOHJ2koDeiLpEfcSbfGp2Q9I9wBTH8dNdYeR/Y4sRc2LpBjdxshHX6Coux zobON3X+/dTEsVaHz9Tjk+SR5Qbsrvcs3gt4LP5XdqCOH03bYTqZCK+eLuuKNMHF pQQHuyX+GmgeIUogyrhz5xHzIJfDu5m7inagI+vUA0qOEeZrwZ31pUpYsZj28jz0 hVSY+O4KCp7tuUdFI+GHjWJx1KP/6PHQnGwSENtv9XrVKZWPFVPTw+IhiZhNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUth1iNkI4K29HN42O/IYhf2p4AswwHwYDVR0j BBgwFoAU2c1AR0vdDAcHdmztuvC2oYbPWC8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MWE3N2FkZC1hNDlhLTRjOGYtYTczNS1lZjk2YzMzYWIyOWYvMC9EOUNENDA0NzRC REQwQzA3MDc3NjZDRURCQUYwQjZBMTg2Q0Y1ODJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDlDRDQwNDc0QkREMEMwNzA3NzY2Q0VEQkFGMEI2QTE4NkNG NTgyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjFhNzdhZGQtYTQ5YS00YzhmLWE3 MzUtZWY5NmMzM2FiMjlmLzAvRDlDRDQwNDc0QkREMEMwNzA3NzY2Q0VEQkFGMEI2 QTE4NkNGNTgyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJOobq9jHZpIsrRS0dyVVzeBEkdAKpZEF7vr yllhxUm2vGTiFjCh5qBarmUPOUhPNkvIJTDWeNSVHIpQqbHYteGaXwnsLwEYJJIV Johuy8FAMyFDBmqLlmSv2uTnTV36xSlc4fsLKWC03jK9VkaqOk/oGjOAM0xfTRa8 LttZXuKbWcXTImcrbMqMT772NGIghNYhqkRAVmqD/WTUGkQNnKTNmdGeOTqUE7XY McIjl9aPKC8VrB2TewgXrFMhi4EhUyl2L59IUaemYAJo5t/WDN5VcgMRxzUZxGAq 9k7h/VnpxWpIFfDwewO2FzgpZaoF5KI3etIXFLMW5yXw0wHD5nE= -----END CERTIFICATE-----Generated at Mon May 27 00:32:35 2024 by rpki-client on console-fra.rpki-client.org