$ rpki-client -vvf repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.mft File: 23F26F571E3865A06A13936555D8DAA27B433933.mft (raw, json) Hash identifier: QLw/EdDRMyumv9OjK1mmAQHPPvF5WSYIz9VYCiCdbik= Subject key identifier: 36:A6:E7:50:53:44:AC:37:1B:77:AB:F5:0D:3C:1D:EC:FA:EC:6A:D2 Authority key identifier: 23:F2:6F:57:1E:38:65:A0:6A:13:93:65:55:D8:DA:A2:7B:43:39:33 Certificate issuer: /CN=23F26F571E3865A06A13936555D8DAA27B433933 Certificate serial: 4BB7DF2B237E61CC07A50BC52D9F17B51473DC3A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23F26F571E3865A06A13936555D8DAA27B433933.cer Subject info access: rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.mft Manifest number: 0117 Signing time: Tue 28 May 2024 10:21:36 +0000 Manifest this update: Tue 28 May 2024 10:16:36 +0000 Manifest next update: Fri 31 May 2024 15:45:36 +0000 Files and hashes: 1: 3130332e3137332e3133382e302f32332d3233203d3e20313437303738.roa (hash: UT7L4z4Q1RRcCT+Y0oaRvsJq3p38FVv6AnuofgSGeqE=) 2: 23F26F571E3865A06A13936555D8DAA27B433933.crl (hash: x8hI4/9emFkFTowj7vGIUonNfBWbzHZMdHF7bFFh/BU=) 3: 3130332e3137332e3133382e302f32342d3234203d3e20313437303738.roa (hash: XC1WbuwdxYz+Uq/lcVMGW7r2MU/zJFMzgJyTpnB8mIE=) 4: 3130332e3137332e3133392e302f32342d3234203d3e20313437303738.roa (hash: VKmwg8p+44vlERKgNcn58szRpM31cnzJHnSOyMeUAS0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.crl rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23F26F571E3865A06A13936555D8DAA27B433933.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 May 2024 15:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:b7:df:2b:23:7e:61:cc:07:a5:0b:c5:2d:9f:17:b5:14:73:dc:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23F26F571E3865A06A13936555D8DAA27B433933 Validity Not Before: May 28 10:16:36 2024 GMT Not After : May 31 15:45:36 2024 GMT Subject: CN=36A6E7505344AC371B77ABF50D3C1DECFAEC6AD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:70:9f:43:8d:27:87:2e:7e:89:30:40:09:6b: 2c:3e:b5:4b:0d:b6:d8:d9:98:5e:23:4a:a0:d5:b6: 3e:d9:5c:cf:83:79:62:d6:93:6a:10:cd:77:ce:03: c2:24:38:eb:44:f0:cd:3c:75:ce:db:4e:78:55:15: 64:86:38:b2:d5:d8:55:9a:5a:53:80:a4:65:41:f9: af:32:ad:74:7e:98:a0:fe:9a:d4:10:82:48:df:6d: 6e:73:41:c5:56:60:fd:43:02:e3:ef:1a:42:95:4f: bc:00:de:d9:18:81:2a:eb:56:cd:5a:10:8f:4f:ba: 33:37:8d:57:81:be:59:5f:e4:f0:b3:71:71:b3:04: b7:fd:1e:ce:eb:65:c8:9a:eb:eb:3f:e8:d2:7f:88: 5f:04:75:8e:71:db:c0:45:b4:b7:39:0e:b5:7f:fb: a8:6a:45:f3:a0:5e:99:b9:b8:bf:41:98:c5:8d:bd: c7:2d:21:0a:67:08:1f:45:fb:68:02:e8:95:2c:d0: 8c:ac:67:56:b2:c0:1f:06:d8:5c:3b:67:57:72:4a: 32:bf:ba:15:78:cf:81:07:99:06:2e:03:9e:26:33: ed:21:8d:42:aa:95:ad:cf:c9:10:f4:b1:cd:ba:c3: ac:40:7b:8a:20:47:21:a3:e8:74:ae:3a:08:11:d8: c9:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:A6:E7:50:53:44:AC:37:1B:77:AB:F5:0D:3C:1D:EC:FA:EC:6A:D2 X509v3 Authority Key Identifier: keyid:23:F2:6F:57:1E:38:65:A0:6A:13:93:65:55:D8:DA:A2:7B:43:39:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23F26F571E3865A06A13936555D8DAA27B433933.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:be:a0:81:07:43:29:64:c8:98:f3:a2:66:58:35:99:ec:23: 94:05:b0:e1:a3:2d:df:94:a5:ae:65:5d:a8:4e:1b:b8:6a:c1: 62:42:f1:c7:1e:0f:34:48:b6:3d:bb:cc:0d:dd:8f:7b:41:55: 06:0d:1e:64:52:a0:69:92:36:90:e6:35:43:69:99:0d:ba:84: 76:dc:27:7d:57:f0:04:3f:7a:d2:58:78:ad:c7:3c:c4:51:ce: 57:a2:2b:1c:40:13:10:9e:1d:1f:2a:3e:bb:9b:25:2d:4b:c8: 18:1f:ed:e5:16:9c:d3:07:64:30:7b:39:21:61:ac:f4:d9:87: 5c:11:55:a9:05:9b:4a:46:02:09:68:81:76:82:9f:34:8f:33: 54:de:56:7d:45:f9:3f:9f:02:71:87:4e:95:cf:6c:05:1b:8f: 24:70:aa:61:df:22:a0:8a:03:a3:15:01:c3:89:17:ae:52:c1: 93:23:df:4e:ba:9f:34:88:2a:77:1e:a0:30:ca:d8:da:c1:2a: e9:ab:9a:4a:2e:b3:5a:0c:37:0f:ee:2c:3c:b3:02:f9:9c:96: 7e:bf:22:3f:c1:02:37:a5:e0:9f:c9:51:8e:9e:ee:d9:a9:9b: 8a:d8:ee:0a:b4:b2:0b:e1:2f:8e:af:b0:24:c6:d0:20:2b:3e: a7:dd:17:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS7ffKyN+YcwHpQvFLZ8XtRRz3DowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNGMjZGNTcxRTM4NjVBMDZBMTM5MzY1NTVEOERBQTI3 QjQzMzkzMzAeFw0yNDA1MjgxMDE2MzZaFw0yNDA1MzExNTQ1MzZaMDMxMTAvBgNV BAMTKDM2QTZFNzUwNTM0NEFDMzcxQjc3QUJGNTBEM0MxREVDRkFFQzZBRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqcJ9DjSeHLn6JMEAJayw+tUsN ttjZmF4jSqDVtj7ZXM+DeWLWk2oQzXfOA8IkOOtE8M08dc7bTnhVFWSGOLLV2FWa WlOApGVB+a8yrXR+mKD+mtQQgkjfbW5zQcVWYP1DAuPvGkKVT7wA3tkYgSrrVs1a EI9PujM3jVeBvllf5PCzcXGzBLf9Hs7rZcia6+s/6NJ/iF8EdY5x28BFtLc5DrV/ +6hqRfOgXpm5uL9BmMWNvcctIQpnCB9F+2gC6JUs0IysZ1aywB8G2Fw7Z1dySjK/ uhV4z4EHmQYuA54mM+0hjUKqla3PyRD0sc26w6xAe4ogRyGj6HSuOggR2MkvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNqbnUFNErDcbd6v1DTwd7PrsatIwHwYDVR0j BBgwFoAUI/JvVx44ZaBqE5NlVdjaontDOTMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NWVmY2JmMC02NmVjLTQ4ZDMtYjIyMS0wZjA5Njg2ZDU4MTgvMC8yM0YyNkY1NzFF Mzg2NUEwNkExMzkzNjU1NUQ4REFBMjdCNDMzOTMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjNGMjZGNTcxRTM4NjVBMDZBMTM5MzY1NTVEOERBQTI3QjQz MzkzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDVlZmNiZjAtNjZlYy00OGQzLWIy MjEtMGYwOTY4NmQ1ODE4LzAvMjNGMjZGNTcxRTM4NjVBMDZBMTM5MzY1NTVEOERB QTI3QjQzMzkzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJa+oIEHQylkyJjzomZYNZnsI5QFsOGjLd+U pa5lXahOG7hqwWJC8cceDzRItj27zA3dj3tBVQYNHmRSoGmSNpDmNUNpmQ26hHbc J31X8AQ/etJYeK3HPMRRzleiKxxAExCeHR8qPrubJS1LyBgf7eUWnNMHZDB7OSFh rPTZh1wRVakFm0pGAglogXaCnzSPM1TeVn1F+T+fAnGHTpXPbAUbjyRwqmHfIqCK A6MVAcOJF65SwZMj3066nzSIKnceoDDK2NrBKumrmkous1oMNw/uLDyzAvmcln6/ Ij/BAjel4J/JUY6e7tmpm4rY7gq0sgvhL46vsCTG0CArPqfdF4U= -----END CERTIFICATE-----Generated at Tue May 28 11:04:36 2024 by rpki-client on console-fra.rpki-client.org