$ rpki-client -vvf repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft File: 923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft (raw, json) Hash identifier: Ik5/GG5jB6bs4zqAKVgOLKlxCkN+mrVMeoOse7E2prk= Subject key identifier: 82:F1:26:ED:C9:12:2C:34:55:AB:1C:6A:6A:E6:1E:1C:8E:0A:55:3D Authority key identifier: 92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 Certificate issuer: /CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Certificate serial: 13AD7ACA8252E0D5A9C5DD1143AA80AC9CF9479B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft Manifest number: 0424 Signing time: Tue 07 May 2024 18:31:59 +0000 Manifest this update: Tue 07 May 2024 18:26:59 +0000 Manifest next update: Sat 11 May 2024 00:05:59 +0000 Files and hashes: 1: 3130332e3131322e3133372e302f32342d3234203d3e20313337333330.roa (hash: xKoS+BqCrf1wxQvQ20MUZ+HeajL1hL7jeTBBd1K3YKw=) 2: 323430323a616134303a31303a3a2f34382d3438203d3e20313337333330.roa (hash: DCR66vI75qSxpXSUAv0ctP6uL5yW0qeQzOcdgksu9RM=) 3: 323430323a616134303a333a3a2f34382d3438203d3e20313337333330.roa (hash: ajihe5wSxJ3sfR9A5rNCNS9xQzbiekAQa7lYwKWuATs=) 4: 323430323a616134303a31333a3a2f34382d3438203d3e20313337333330.roa (hash: 2m4lzs3qhT9jGm3G3aIPecCVOcHvoZ3DqFRHoCDvYs4=) 5: 323430323a616134303a393a3a2f34382d3438203d3e20313337333330.roa (hash: QBAnIydev0ENyOc1NnijGKdXahjloWlnQC2bxpcGdnw=) 6: 323430323a616134303a31343a3a2f34382d3438203d3e20313337333330.roa (hash: KFLl6rRyp+Cyjz+qxWKqbZh73oKUTkFTES4pJL+RI1w=) 7: 3130332e3131322e3133362e302f32332d3233203d3e20313337333330.roa (hash: 8w8gBqe6ecmXkeblgSG9aHIvV5UhKiJ08r3AJRsuQGA=) 8: 323430323a616134303a31353a3a2f34382d3438203d3e20313337333330.roa (hash: OCpGXZywCo1EgGLYShv2/t+AfDN39fJQ0K7EsfCQkeY=) 9: 323430323a616134303a31323a3a2f34382d3438203d3e20313337333330.roa (hash: 4KPh+jgGOUiyLZQmV19GI+Y5p+0PDlJoxa+sG4b18fw=) 10: 323430323a616134303a323a3a2f34382d3438203d3e20313337333330.roa (hash: oG3hRw02A/VJcpALaVX+ijnVAyl7RIdoxeeKuQlUGcs=) 11: 3130332e3131322e3133382e302f32342d3234203d3e20313431383932.roa (hash: SaWqlMEUqao7e4oNzOtlLbyOzu7kZSZlO5/rYQs5MNQ=) 12: 323430323a616134303a313a3a2f34382d3438203d3e20313337333330.roa (hash: sUugteFQuROhQywHTs9GGVW8goJIgTtPNGgF0eLjdLw=) 13: 323430323a616134303a383a3a2f34382d3438203d3e20313337333330.roa (hash: oY069+/KIIHcgZ4RYbvnReDRYhmMVqzVZRWA0sgsKmk=) 14: 323430323a616134303a343a3a2f34382d3438203d3e20313337333330.roa (hash: v/LVExkOdHJSs39Ln60dSD2Ymb7RaEdl9PQca5+c1lg=) 15: 3130332e3131322e3133362e302f32342d3234203d3e20313337333330.roa (hash: zRDRKsGfDSPGZeBFpKw8m8jzkQXpByktJd+PrEoLpz8=) 16: 323430323a616134303a373a3a2f34382d3438203d3e20313337333330.roa (hash: dSvA2Olz55Wfs2rUJPKAYYt2qKJtrcWnV9LKKsKQM6o=) 17: 923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl (hash: rDqfD3xPIwCvvy1KEXQOlhHKCdJZ0tzN9+KldQm3Hb8=) 18: 323430323a616134303a31313a3a2f34382d3438203d3e20313337333330.roa (hash: X46c6s/VqkVyXx/DiAu3Nsh1QhNTHenU0Oc7ZG3SMG4=) 19: 323430323a616134303a3a2f33322d3332203d3e20313337333330.roa (hash: 7L+OrXZb/IHxC/saCv0h1AKy5mIpFkE+yfJW6mTf1N0=) 20: 3130332e3131322e3133392e302f32342d3234203d3e203535373031.roa (hash: O8zWM7ESi9hMNBemGnyRTFqIERd3v8FrjHKZaF4s2lE=) 21: 323430323a616134303a363a3a2f34382d3438203d3e20313337333330.roa (hash: R4g9MX8FF3IMRP2nwwbAMSL2rQePrVI6Rob2I4HZpL0=) 22: 323430323a616134303a353a3a2f34382d3438203d3e20313337333330.roa (hash: 40K8IeLvjQG80pBtw8ttEhnua9euWfXtKXUX1SXt0dk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 16:39:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:ad:7a:ca:82:52:e0:d5:a9:c5:dd:11:43:aa:80:ac:9c:f9:47:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Validity Not Before: May 7 18:26:59 2024 GMT Not After : May 11 00:05:59 2024 GMT Subject: CN=82F126EDC9122C3455AB1C6A6AE61E1C8E0A553D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6e:7b:35:d1:bf:ba:7e:3a:ae:db:16:7e:ec: f3:9b:a6:9b:ca:9d:86:8f:1b:61:3b:0a:52:57:83: 41:8c:71:54:7c:cd:b4:d9:d8:f3:19:86:c3:e2:d9: ba:ae:b2:6a:24:f0:18:99:69:f6:54:8a:cf:38:09: 0a:3c:bb:44:2e:ab:02:a5:ab:c3:a4:10:74:fa:b7: e8:90:e3:43:b3:c4:06:a5:8b:87:13:cb:b8:4d:fa: 8f:84:70:87:20:67:5d:30:67:1a:26:a9:7d:4b:6b: db:f1:5e:39:7f:ce:fb:41:ae:61:44:ff:ee:b4:4e: 35:a1:a5:73:42:5c:30:ff:e3:c1:12:a0:78:ef:b6: 96:aa:3c:8e:c2:b0:b5:aa:32:df:ef:50:ae:fc:3d: e5:2a:b9:bf:af:c8:51:38:cb:05:81:bd:e6:3e:1a: 8d:98:93:dd:3c:d3:92:bb:bb:77:58:2e:ac:51:fd: a0:14:93:5f:ca:05:c3:8b:c6:4e:d5:11:55:e1:8e: 9d:d1:8e:e1:32:20:ec:c2:47:c8:73:89:51:7a:f7: 88:6f:b4:ef:b9:1f:75:3d:67:98:4a:c2:df:2a:05: 76:0c:b0:ed:bc:00:9f:a7:38:01:62:69:39:e1:d8: ab:15:85:5b:96:f2:a4:d2:9f:f0:78:55:f2:6c:12: 6f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:F1:26:ED:C9:12:2C:34:55:AB:1C:6A:6A:E6:1E:1C:8E:0A:55:3D X509v3 Authority Key Identifier: keyid:92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:c4:4c:d0:99:67:5b:e5:a8:82:08:ab:78:ca:bd:84:8d:08: 30:19:e3:cf:03:2b:b1:a7:c2:50:a8:1f:c6:99:fb:a0:0a:80: 3f:6f:58:1e:b8:9d:04:7b:85:79:e7:cb:4e:56:3c:14:08:79: 3c:05:68:23:66:a4:66:04:c0:8d:c2:39:b6:61:e0:a7:4f:9c: 2e:cd:7c:f2:0d:7c:be:3c:34:53:cf:67:49:f0:31:bd:fe:e3: 06:ae:a1:8a:ae:55:58:aa:76:63:a9:64:7e:b4:1a:3b:c8:48: 52:19:57:88:51:85:02:88:9c:76:9f:0f:59:d1:44:74:72:85: ae:cb:3a:9b:a7:32:99:f7:c1:41:67:38:6f:62:ac:8a:93:36: 1c:5b:dd:26:0d:d3:03:a2:f4:cc:fa:f0:49:f1:c7:4c:f9:d9: bc:b8:35:ce:12:c3:15:47:74:14:4a:b2:88:81:72:c5:b1:d4: 27:ac:1e:1c:48:51:7d:90:ad:1a:ba:ca:8e:8b:56:35:3d:d3: 7a:13:b6:c2:ca:01:3e:eb:f8:e1:ca:46:a9:24:7d:f3:92:6b: e5:e0:5c:04:67:68:9e:b6:26:4a:4b:bf:e2:73:60:dd:93:fd: c6:b9:2e:43:05:ec:18:72:82:f4:7f:2c:8b:c3:0e:ea:c1:f5: aa:c0:47:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE616yoJS4NWpxd0RQ6qArJz5R5swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZF NEMxRDAwMzAeFw0yNDA1MDcxODI2NTlaFw0yNDA1MTEwMDA1NTlaMDMxMTAvBgNV BAMTKDgyRjEyNkVEQzkxMjJDMzQ1NUFCMUM2QTZBRTYxRTFDOEUwQTU1M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvbns10b+6fjqu2xZ+7PObppvK nYaPG2E7ClJXg0GMcVR8zbTZ2PMZhsPi2bqusmok8BiZafZUis84CQo8u0QuqwKl q8OkEHT6t+iQ40OzxAali4cTy7hN+o+EcIcgZ10wZxomqX1La9vxXjl/zvtBrmFE /+60TjWhpXNCXDD/48ESoHjvtpaqPI7CsLWqMt/vUK78PeUqub+vyFE4ywWBveY+ Go2Yk90805K7u3dYLqxR/aAUk1/KBcOLxk7VEVXhjp3RjuEyIOzCR8hziVF694hv tO+5H3U9Z5hKwt8qBXYMsO28AJ+nOAFiaTnh2KsVhVuW8qTSn/B4VfJsEm+xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgvEm7ckSLDRVqxxqauYeHI4KVT0wHwYDVR0j BBgwFoAUkj1KEOHbv2knGDvzQZ9RL+TB0AMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YzM0ZmYwOC1kMjFmLTQyMGItODdkZi01MzEwM2I2ZGMyNTMvMC85MjNENEExMEUx REJCRjY5MjcxODNCRjM0MTlGNTEyRkU0QzFEMDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZFNEMx RDAwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGMzNGZmMDgtZDIxZi00MjBiLTg3 ZGYtNTMxMDNiNmRjMjUzLzAvOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUx MkZFNEMxRDAwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHnETNCZZ1vlqIIIq3jKvYSNCDAZ488DK7Gn wlCoH8aZ+6AKgD9vWB64nQR7hXnny05WPBQIeTwFaCNmpGYEwI3CObZh4KdPnC7N fPINfL48NFPPZ0nwMb3+4wauoYquVViqdmOpZH60GjvISFIZV4hRhQKInHafD1nR RHRyha7LOpunMpn3wUFnOG9irIqTNhxb3SYN0wOi9Mz68Enxx0z52by4Nc4SwxVH dBRKsoiBcsWx1CesHhxIUX2QrRq6yo6LVjU903oTtsLKAT7r+OHKRqkkffOSa+Xg XARnaJ62JkpLv+JzYN2T/ca5LkMF7BhygvR/LIvDDurB9arAR3g= -----END CERTIFICATE-----Generated at Tue May 7 20:46:16 2024 by rpki-client on console-fra.rpki-client.org