$ rpki-client -vvf repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.mft File: 1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.mft (raw, json) Hash identifier: Hz3/Pqmu0I9s3etPNF2qj83vRUs/ea/ftbKn/M+cJXU= Subject key identifier: 7D:DB:F8:4A:45:1E:B2:BF:A1:58:03:C9:47:53:00:E0:31:28:7A:DF Authority key identifier: 1D:8D:9C:BC:52:93:4E:F0:2B:CD:1D:47:8A:EB:A6:A3:68:F8:04:19 Certificate issuer: /CN=1D8D9CBC52934EF02BCD1D478AEBA6A368F80419 Certificate serial: 586393DFC273E4F7BEF0EF3C5E42730DFEE8B73E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.mft Manifest number: 0403 Signing time: Thu 23 May 2024 18:01:38 +0000 Manifest this update: Thu 23 May 2024 17:56:38 +0000 Manifest next update: Mon 27 May 2024 04:12:38 +0000 Files and hashes: 1: 3130332e3135362e31342e302f32332d3234203d3e203538383231.roa (hash: 6KCjwhIMaBoSnWdYTAfbyiG4caN7x9gbB7jQ004mrGI=) 2: 323430363a376234303a3a2f33322d3438203d3e203538383231.roa (hash: H3BZfMLJ++968AkDGJzUVKNckBSAL3vvc3u9TVAEzVo=) 3: 1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.crl (hash: umsVDcQdvZ4wfZgnQ7SEIpkWGEmxON8aOQ3Sw6DjZmc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.crl rsync://repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 23:29:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:63:93:df:c2:73:e4:f7:be:f0:ef:3c:5e:42:73:0d:fe:e8:b7:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D8D9CBC52934EF02BCD1D478AEBA6A368F80419 Validity Not Before: May 23 17:56:38 2024 GMT Not After : May 27 04:12:38 2024 GMT Subject: CN=7DDBF84A451EB2BFA15803C9475300E031287ADF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:69:52:8f:62:70:c9:a0:9b:b4:d9:b4:19:cf: 54:10:78:2e:33:c6:21:73:c2:d0:6a:4d:48:12:5a: 1f:a2:b2:a9:6e:fd:42:a1:87:9e:ac:21:74:9f:37: d9:f1:ad:25:b9:97:5c:9b:46:14:d6:a7:61:13:69: db:79:16:6f:1d:d8:c3:09:f0:76:19:e3:be:6e:44: 93:13:c1:25:be:c8:a8:08:6e:76:cf:24:bf:c2:30: 22:a3:a3:81:09:31:d6:69:86:2b:2d:b2:1c:40:6e: 95:bd:90:3b:18:72:15:f2:fd:db:f1:1a:cd:5c:af: bb:c5:58:61:62:82:b2:b7:83:ad:62:da:99:77:78: 6b:9f:ad:18:33:9c:d0:e8:82:9d:03:45:65:79:39: 7c:e8:f6:b0:10:cd:2b:72:fa:f8:6e:2f:b7:bb:39: 80:8e:ae:72:d6:f1:22:7f:07:eb:de:f2:7f:2f:94: 6a:f4:87:5c:fd:ac:5f:e3:33:11:21:bc:c7:22:39: 25:aa:6e:da:1e:1f:16:0f:e0:8f:19:e0:53:8e:a0: c1:03:04:d2:97:e0:40:4d:7b:b7:60:35:56:80:b8: c4:07:a7:81:5b:07:31:a3:d8:df:bf:94:91:8f:8c: a7:a8:ac:ef:82:e8:af:5d:80:16:de:35:71:fc:5b: b3:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:DB:F8:4A:45:1E:B2:BF:A1:58:03:C9:47:53:00:E0:31:28:7A:DF X509v3 Authority Key Identifier: keyid:1D:8D:9C:BC:52:93:4E:F0:2B:CD:1D:47:8A:EB:A6:A3:68:F8:04:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:d1:e5:5c:c7:e4:5b:6f:7e:0d:9d:01:38:9b:ae:27:5d:f3: a8:17:4c:ab:15:c0:3b:e9:ee:6e:e1:a0:15:be:ce:0d:e8:e2: 0e:3d:76:66:e2:bb:18:9f:54:50:f4:ef:fe:00:c8:96:90:f6: fa:96:da:ce:1e:2c:33:30:21:1f:26:84:37:a8:58:61:5f:61: b4:27:2f:95:8d:c1:6d:49:56:8d:0f:c7:df:0d:84:bb:61:25: 50:7a:c5:2c:46:d9:18:a3:e3:55:c4:8c:a8:01:02:82:4b:39: 85:eb:7c:74:4e:b6:7b:b8:f1:9c:d1:7d:2b:e5:30:31:9b:1d: 2a:8c:28:21:2c:19:85:a7:63:ad:60:f9:f6:53:29:15:47:3d: 3a:e1:02:31:90:a9:3e:cd:29:1e:f1:1d:8b:35:75:34:aa:2d: 59:1e:40:f6:a4:d4:dc:0a:1c:90:0f:a6:af:b9:8d:c6:28:5a: 72:b2:2e:8a:77:6d:a2:a6:17:85:6b:26:8b:16:7f:63:62:bd: 1c:2d:28:47:1c:d6:bf:ec:37:60:66:9e:d7:56:34:d7:0b:99: ab:e5:5e:9e:04:c7:ca:a8:a5:c6:2d:64:58:f8:98:98:c2:96: 92:f1:d5:7b:4b:82:33:61:fd:22:71:3d:f1:ef:34:65:8e:db: c6:34:c1:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWGOT38Jz5Pe+8O88XkJzDf7otz4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ4RDlDQkM1MjkzNEVGMDJCQ0QxRDQ3OEFFQkE2QTM2 OEY4MDQxOTAeFw0yNDA1MjMxNzU2MzhaFw0yNDA1MjcwNDEyMzhaMDMxMTAvBgNV BAMTKDdEREJGODRBNDUxRUIyQkZBMTU4MDNDOTQ3NTMwMEUwMzEyODdBREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYaVKPYnDJoJu02bQZz1QQeC4z xiFzwtBqTUgSWh+isqlu/UKhh56sIXSfN9nxrSW5l1ybRhTWp2ETadt5Fm8d2MMJ 8HYZ475uRJMTwSW+yKgIbnbPJL/CMCKjo4EJMdZphistshxAbpW9kDsYchXy/dvx Gs1cr7vFWGFigrK3g61i2pl3eGufrRgznNDogp0DRWV5OXzo9rAQzSty+vhuL7e7 OYCOrnLW8SJ/B+ve8n8vlGr0h1z9rF/jMxEhvMciOSWqbtoeHxYP4I8Z4FOOoMED BNKX4EBNe7dgNVaAuMQHp4FbBzGj2N+/lJGPjKeorO+C6K9dgBbeNXH8W7PxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfdv4SkUesr+hWAPJR1MA4DEoet8wHwYDVR0j BBgwFoAUHY2cvFKTTvArzR1Hiuumo2j4BBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZTFlYTUxMy1hYzZlLTRhNWYtYjNlYi1kNTM1MmNhZjQ4NmIvMC8xRDhEOUNCQzUy OTM0RUYwMkJDRDFENDc4QUVCQTZBMzY4RjgwNDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQ4RDlDQkM1MjkzNEVGMDJCQ0QxRDQ3OEFFQkE2QTM2OEY4 MDQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2UxZWE1MTMtYWM2ZS00YTVmLWIz ZWItZDUzNTJjYWY0ODZiLzAvMUQ4RDlDQkM1MjkzNEVGMDJCQ0QxRDQ3OEFFQkE2 QTM2OEY4MDQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIDR5VzH5Ftvfg2dATibridd86gXTKsVwDvp 7m7hoBW+zg3o4g49dmbiuxifVFD07/4AyJaQ9vqW2s4eLDMwIR8mhDeoWGFfYbQn L5WNwW1JVo0Px98NhLthJVB6xSxG2Rij41XEjKgBAoJLOYXrfHROtnu48ZzRfSvl MDGbHSqMKCEsGYWnY61g+fZTKRVHPTrhAjGQqT7NKR7xHYs1dTSqLVkeQPak1NwK HJAPpq+5jcYoWnKyLop3baKmF4VrJosWf2NivRwtKEcc1r/sN2BmntdWNNcLmavl Xp4Ex8qopcYtZFj4mJjClpLx1XtLgjNh/SJxPfHvNGWO28Y0wYo= -----END CERTIFICATE-----Generated at Thu May 23 18:53:29 2024 by rpki-client on console-fra.rpki-client.org