$ rpki-client -vvf repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft File: 25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft (raw, json) Hash identifier: bO1h4f7xmvBrgC5Uw/SJZ5pUHq7uN1zNGJhO4h1kGts= Subject key identifier: B2:78:FE:21:43:63:22:8B:EC:F7:14:3F:6D:42:69:3D:3C:76:BB:EB Authority key identifier: 25:FB:03:D0:A2:C3:54:7C:3A:38:AC:AE:2A:75:2B:B1:5A:24:5E:15 Certificate issuer: /CN=25FB03D0A2C3547C3A38ACAE2A752BB15A245E15 Certificate serial: 421014BDC6E165E51136DDA4478B5E9CAEDE4A36 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.cer Subject info access: rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft Manifest number: 042F Signing time: Sun 19 May 2024 15:21:01 +0000 Manifest this update: Sun 19 May 2024 15:16:01 +0000 Manifest next update: Thu 23 May 2024 01:01:01 +0000 Files and hashes: 1: 3130332e3132362e382e302f32322d3234203d3e20313338313036.roa (hash: IRT5EBbtYuUJGEcl5xullorMGlIcXV9tdF8K9cnLq08=) 2: 25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.crl (hash: VF/zfgV6bmjI+IWZyhooOXPnjyiagN0Ocdh6R2Jqngs=) 3: 323430343a34303a3a2f33322d3438203d3e20313338313036.roa (hash: 0s9oFgprRVui0ZPE7ilDvcKWxjYdScksgtihSEHY5Ks=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.crl rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 19:53:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:10:14:bd:c6:e1:65:e5:11:36:dd:a4:47:8b:5e:9c:ae:de:4a:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25FB03D0A2C3547C3A38ACAE2A752BB15A245E15 Validity Not Before: May 19 15:16:01 2024 GMT Not After : May 23 01:01:01 2024 GMT Subject: CN=B278FE214363228BECF7143F6D42693D3C76BBEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:d7:e5:28:c5:e0:4f:b3:bf:1a:39:64:c9:29: d1:ba:e1:4c:3d:36:db:95:04:4a:85:d1:91:2a:a6: 86:c6:ff:fa:61:1d:8e:39:21:10:ea:eb:70:3f:06: fd:ed:14:f4:d4:0e:13:40:d6:b6:a6:7d:ec:dd:b5: 64:8a:a3:b1:1d:74:a6:21:32:e2:e5:38:ba:fa:6b: bf:d0:13:c8:10:fa:b8:f8:7c:d6:b4:96:52:c5:e2: 1b:61:fc:c8:ef:9c:90:f2:db:86:61:50:85:f4:d7: a8:15:9b:73:e8:4b:e0:b7:c5:6d:4d:3f:87:22:76: a5:57:46:b5:fd:a9:93:4f:84:6c:d1:e9:86:27:77: 43:2f:45:9d:00:81:8a:a2:b8:d4:22:5e:7a:96:ae: 99:b4:f6:50:b4:5b:9f:a9:48:bb:6a:e8:42:83:be: a5:0b:64:3c:ce:ff:70:ea:ef:c2:9c:1f:7f:0d:71: 40:b4:6d:b9:ad:2f:c9:56:11:ec:8f:f5:81:ad:84: 6e:ec:79:13:a6:d0:2a:3f:4d:72:e3:b1:17:d3:f9: 74:ed:93:cf:10:ae:6c:4d:7a:f3:01:39:96:ca:42: 8e:ce:c6:6c:23:9e:b6:c1:9a:49:04:2f:52:a5:e5: ab:e4:0f:29:e1:ae:44:c6:4c:16:43:97:e0:63:59: f4:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:78:FE:21:43:63:22:8B:EC:F7:14:3F:6D:42:69:3D:3C:76:BB:EB X509v3 Authority Key Identifier: keyid:25:FB:03:D0:A2:C3:54:7C:3A:38:AC:AE:2A:75:2B:B1:5A:24:5E:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:5b:1c:2f:27:81:c5:ec:7a:2b:cc:5f:db:ec:13:12:72:2f: 2d:9e:1f:ec:0a:e2:b4:3e:7d:53:ae:16:19:4d:93:ce:3e:4b: 13:62:50:20:56:ac:6e:d5:ad:a6:3e:53:08:4d:d8:28:93:92: c5:0e:40:a9:49:02:bd:ff:ad:21:da:48:57:0d:28:95:bb:a7: dd:1e:ac:7d:5f:78:72:bf:44:33:b3:61:b6:08:93:df:b3:9b: dd:1b:4e:70:44:90:2a:d9:52:e6:4a:78:43:e8:03:da:94:aa: 2c:53:01:f3:4f:63:05:dd:a1:29:f4:6e:24:04:1a:aa:b5:82: 7e:67:8c:1f:97:e4:ed:37:96:7e:32:12:ac:3c:df:3c:18:32: c2:f3:77:07:ee:fb:06:44:55:77:24:fa:93:8d:b0:58:70:ad: 8d:a0:10:80:bd:6e:64:50:3e:29:f9:14:e5:d3:7f:d0:08:74: ab:78:dd:2d:78:05:6a:ab:54:d1:3a:a3:ec:f2:73:05:dc:5b: 29:5d:76:0c:83:30:12:8c:11:a8:f7:35:00:87:4c:57:43:08: 79:55:bc:a2:d5:45:08:e7:ac:0e:a5:81:ed:1c:de:3a:54:60: 30:b8:b4:69:c1:18:17:3b:dc:c8:70:3b:42:2f:a7:50:de:c3: ab:e4:86:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQhAUvcbhZeURNt2kR4tenK7eSjYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVGQjAzRDBBMkMzNTQ3QzNBMzhBQ0FFMkE3NTJCQjE1 QTI0NUUxNTAeFw0yNDA1MTkxNTE2MDFaFw0yNDA1MjMwMTAxMDFaMDMxMTAvBgNV BAMTKEIyNzhGRTIxNDM2MzIyOEJFQ0Y3MTQzRjZENDI2OTNEM0M3NkJCRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDo1+UoxeBPs78aOWTJKdG64Uw9 NtuVBEqF0ZEqpobG//phHY45IRDq63A/Bv3tFPTUDhNA1ramfezdtWSKo7EddKYh MuLlOLr6a7/QE8gQ+rj4fNa0llLF4hth/MjvnJDy24ZhUIX016gVm3PoS+C3xW1N P4cidqVXRrX9qZNPhGzR6YYnd0MvRZ0AgYqiuNQiXnqWrpm09lC0W5+pSLtq6EKD vqULZDzO/3Dq78KcH38NcUC0bbmtL8lWEeyP9YGthG7seROm0Co/TXLjsRfT+XTt k88QrmxNevMBOZbKQo7OxmwjnrbBmkkEL1Kl5avkDynhrkTGTBZDl+BjWfSjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsnj+IUNjIovs9xQ/bUJpPTx2u+swHwYDVR0j BBgwFoAUJfsD0KLDVHw6OKyuKnUrsVokXhUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MThjNjgzMS04ZjQwLTRhMjAtODEzZS04Nzg1NThlODBjMjYvMC8yNUZCMDNEMEEy QzM1NDdDM0EzOEFDQUUyQTc1MkJCMTVBMjQ1RTE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjVGQjAzRDBBMkMzNTQ3QzNBMzhBQ0FFMkE3NTJCQjE1QTI0 NUUxNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE4YzY4MzEtOGY0MC00YTIwLTgx M2UtODc4NTU4ZTgwYzI2LzAvMjVGQjAzRDBBMkMzNTQ3QzNBMzhBQ0FFMkE3NTJC QjE1QTI0NUUxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMFbHC8ngcXseivMX9vsExJyLy2eH+wK4rQ+ fVOuFhlNk84+SxNiUCBWrG7VraY+UwhN2CiTksUOQKlJAr3/rSHaSFcNKJW7p90e rH1feHK/RDOzYbYIk9+zm90bTnBEkCrZUuZKeEPoA9qUqixTAfNPYwXdoSn0biQE Gqq1gn5njB+X5O03ln4yEqw83zwYMsLzdwfu+wZEVXck+pONsFhwrY2gEIC9bmRQ Pin5FOXTf9AIdKt43S14BWqrVNE6o+zycwXcWylddgyDMBKMEaj3NQCHTFdDCHlV vKLVRQjnrA6lge0c3jpUYDC4tGnBGBc73MhwO0Ivp1Dew6vkhlU= -----END CERTIFICATE-----Generated at Sun May 19 17:04:58 2024 by rpki-client on console-ams.rpki-client.org