$ rpki-client -vvf repo-rpki.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/230A81B283314BA79BFA024FDF9FF4DA66B424BE.mft File: 230A81B283314BA79BFA024FDF9FF4DA66B424BE.mft (raw, json) Hash identifier: VBqDe7tZ8gp3/2fp/rLX/mnikrMToJGAvCUje0efims= Subject key identifier: 55:26:B1:D4:33:3F:5C:36:30:83:D0:13:1C:FE:AB:87:B0:31:56:59 Authority key identifier: 23:0A:81:B2:83:31:4B:A7:9B:FA:02:4F:DF:9F:F4:DA:66:B4:24:BE Certificate issuer: /CN=230A81B283314BA79BFA024FDF9FF4DA66B424BE Certificate serial: 1244380F9FFE051C944ACD14A3A61F213C3D1607 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/230A81B283314BA79BFA024FDF9FF4DA66B424BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/230A81B283314BA79BFA024FDF9FF4DA66B424BE.mft Manifest number: 0134 Signing time: Wed 29 May 2024 15:12:03 +0000 Manifest this update: Wed 29 May 2024 15:07:03 +0000 Manifest next update: Sun 02 Jun 2024 02:25:03 +0000 Files and hashes: 1: 323430363a333834303a3a2f33322d3438203d3e20313430343438.roa (hash: sSJDriEV04kLPcgKSZJRn6KviF2BqF5R/P/hH6YQpnI=) 2: 3130332e3135322e3233382e302f32332d3234203d3e20313430343438.roa (hash: qEK60VrPrh/oCvThlFiMHvSSHRxfboxCal8Q+5I9rMY=) 3: 230A81B283314BA79BFA024FDF9FF4DA66B424BE.crl (hash: PEBDs2BE3ez8L0LVYS9DRmBDP5I97x5nIiamTk4WkZE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/230A81B283314BA79BFA024FDF9FF4DA66B424BE.crl rsync://repo-rpki.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/230A81B283314BA79BFA024FDF9FF4DA66B424BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/230A81B283314BA79BFA024FDF9FF4DA66B424BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 23:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:44:38:0f:9f:fe:05:1c:94:4a:cd:14:a3:a6:1f:21:3c:3d:16:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=230A81B283314BA79BFA024FDF9FF4DA66B424BE Validity Not Before: May 29 15:07:03 2024 GMT Not After : Jun 2 02:25:03 2024 GMT Subject: CN=5526B1D4333F5C363083D0131CFEAB87B0315659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:cb:2c:b2:74:90:64:7b:2d:1a:81:12:82:a8: db:2b:e1:0d:5e:a5:f4:1b:aa:73:04:a0:49:d3:0e: 1a:cf:cc:51:0d:dd:3a:db:ae:e5:d3:08:3d:10:e3: a3:ee:9d:26:24:8a:9e:ba:1d:c7:e4:74:c8:42:08: 56:3f:51:45:37:6a:35:56:84:52:38:64:e6:1f:73: 42:ca:61:eb:51:15:65:7c:68:64:f1:87:6d:30:cd: 8a:96:2a:34:43:00:0e:4f:22:b4:8c:51:9a:19:3e: 77:b6:e3:98:af:47:78:8b:58:75:94:ae:e7:71:9f: a7:b7:8a:4f:3d:72:2c:34:b2:4e:2e:f7:ef:8c:a9: 4d:f0:4c:bb:d1:ba:20:40:43:50:5a:ca:6c:72:2c: ab:57:77:50:ba:7b:3b:20:0f:59:4a:aa:17:88:57: fe:0b:ec:60:19:6f:8d:ab:42:a5:6a:88:2b:0f:b8: 17:97:bf:cd:7d:95:fd:81:1f:58:ed:a4:1b:c8:72: 12:d5:dc:f8:11:66:b5:89:e3:22:e1:88:0c:ac:13: f9:75:3a:8b:59:73:e2:e3:47:14:26:23:10:f5:aa: bb:16:40:1e:7f:eb:30:a9:11:b2:90:35:fd:55:1f: 91:a8:1c:19:97:91:ec:87:43:32:57:7f:6a:2e:ba: 6d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:26:B1:D4:33:3F:5C:36:30:83:D0:13:1C:FE:AB:87:B0:31:56:59 X509v3 Authority Key Identifier: keyid:23:0A:81:B2:83:31:4B:A7:9B:FA:02:4F:DF:9F:F4:DA:66:B4:24:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/230A81B283314BA79BFA024FDF9FF4DA66B424BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/230A81B283314BA79BFA024FDF9FF4DA66B424BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/230A81B283314BA79BFA024FDF9FF4DA66B424BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:dd:0d:5f:a8:35:6e:8e:ff:fc:76:35:3c:d6:ae:a2:99:8c: 21:76:15:17:79:2f:26:0f:31:4f:b9:b7:22:5c:fa:7b:62:db: 0a:ff:83:94:2b:22:f8:0a:d8:84:4f:dc:5b:ae:e2:e9:fe:f9: 8b:99:3d:57:3b:a0:10:bb:98:86:51:0a:4b:66:af:7b:00:55: bc:fe:b7:a4:8f:b6:cc:42:67:df:e7:74:6a:99:1a:40:af:36: 05:ac:2f:f7:ae:fb:2d:36:d2:ad:49:7c:7c:d7:1d:65:f8:2b: 2d:de:ca:6a:70:9b:3f:7d:59:56:53:d9:86:e1:bd:e6:d4:70: 54:fe:87:e5:6a:59:95:07:bc:ba:f8:7c:bd:c3:87:4f:8b:df: 08:ff:c8:7f:3d:42:8d:b2:7f:2f:82:4b:25:8c:da:41:4b:84: 74:c0:97:5e:fb:84:b0:cf:b6:de:d3:f9:af:29:4c:53:5a:04: 1a:bc:1c:fa:4f:b4:bc:50:bc:5e:64:14:00:f6:69:c8:8d:27: 78:0e:d8:b7:4c:cf:d4:9e:20:cc:43:de:fa:04:a9:fd:93:7b: f6:54:dd:7e:58:9b:d2:6c:98:fe:7d:88:36:77:d4:03:fc:93: 40:e1:33:26:2c:ff:01:0c:49:7f:42:66:19:d4:23:77:8a:26: d7:a7:03:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEkQ4D5/+BRyUSs0Uo6YfITw9FgcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMwQTgxQjI4MzMxNEJBNzlCRkEwMjRGREY5RkY0REE2 NkI0MjRCRTAeFw0yNDA1MjkxNTA3MDNaFw0yNDA2MDIwMjI1MDNaMDMxMTAvBgNV BAMTKDU1MjZCMUQ0MzMzRjVDMzYzMDgzRDAxMzFDRkVBQjg3QjAzMTU2NTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDByyyydJBkey0agRKCqNsr4Q1e pfQbqnMEoEnTDhrPzFEN3TrbruXTCD0Q46PunSYkip66HcfkdMhCCFY/UUU3ajVW hFI4ZOYfc0LKYetRFWV8aGTxh20wzYqWKjRDAA5PIrSMUZoZPne245ivR3iLWHWU rudxn6e3ik89ciw0sk4u9++MqU3wTLvRuiBAQ1BaymxyLKtXd1C6ezsgD1lKqheI V/4L7GAZb42rQqVqiCsPuBeXv819lf2BH1jtpBvIchLV3PgRZrWJ4yLhiAysE/l1 OotZc+LjRxQmIxD1qrsWQB5/6zCpEbKQNf1VH5GoHBmXkeyHQzJXf2ouum3fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVSax1DM/XDYwg9ATHP6rh7AxVlkwHwYDVR0j BBgwFoAUIwqBsoMxS6eb+gJP35/02ma0JL4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w N2ExY2U0ZS01OWM4LTQxY2MtYjVlNi1iZDdiN2E3MDQzNTYvMC8yMzBBODFCMjgz MzE0QkE3OUJGQTAyNEZERjlGRjREQTY2QjQyNEJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjMwQTgxQjI4MzMxNEJBNzlCRkEwMjRGREY5RkY0REE2NkI0 MjRCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDdhMWNlNGUtNTljOC00MWNjLWI1 ZTYtYmQ3YjdhNzA0MzU2LzAvMjMwQTgxQjI4MzMxNEJBNzlCRkEwMjRGREY5RkY0 REE2NkI0MjRCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAndDV+oNW6O//x2NTzWrqKZjCF2FRd5LyYP MU+5tyJc+nti2wr/g5QrIvgK2IRP3Fuu4un++YuZPVc7oBC7mIZRCktmr3sAVbz+ t6SPtsxCZ9/ndGqZGkCvNgWsL/eu+y020q1JfHzXHWX4Ky3eympwmz99WVZT2Ybh vebUcFT+h+VqWZUHvLr4fL3Dh0+L3wj/yH89Qo2yfy+CSyWM2kFLhHTAl177hLDP tt7T+a8pTFNaBBq8HPpPtLxQvF5kFAD2aciNJ3gO2LdMz9SeIMxD3voEqf2Te/ZU 3X5Ym9JsmP59iDZ31AP8k0DhMyYs/wEMSX9CZhnUI3eKJtenAxg= -----END CERTIFICATE-----Generated at Wed May 29 16:03:31 2024 by rpki-client on console-fra.rpki-client.org