$ rpki-client -vvf repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft File: 14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft (raw, json) Hash identifier: rXp+Y2u00JUYBnSZvpsV7Hlvgmy+O/nKSiQYcioU2sI= Subject key identifier: 07:7B:8B:1E:FE:69:B3:07:5A:25:18:0E:62:B2:B3:7F:88:9B:08:98 Authority key identifier: 14:CB:3B:6C:E8:B4:3B:B7:43:9A:AE:A8:6D:73:DF:3A:F1:59:4D:9E Certificate issuer: /CN=14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E Certificate serial: 1BC28127E8D714B6E137AB7C948B7BD949BE4B0D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft Manifest number: 0168 Signing time: Sun 19 May 2024 16:21:35 +0000 Manifest this update: Sun 19 May 2024 16:16:35 +0000 Manifest next update: Thu 23 May 2024 03:36:35 +0000 Files and hashes: 1: 323030313a6466303a376234303a3a2f34382d3438203d3e20313439333938.roa (hash: dDhQdytlKqYbTTUVy/rjp/zokS1dF5NxLzW/D+lpcBo=) 2: 3130332e3138322e37362e302f32342d3234203d3e20313439333938.roa (hash: SY9rsi+WHwdJcrc45v42l3GJwnfj/HK90FdXbcCPans=) 3: 3130332e3138322e37372e302f32342d3234203d3e20313439333938.roa (hash: gI6yyYe+R0iYaO+VRdgyaARAAd7j7R9SEBVlR+7kx5k=) 4: 14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.crl (hash: ixDle8MkE9LJEHjubGuZoA+SpxjLrXY+jOV3kUN0fSs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.crl rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 19:53:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:c2:81:27:e8:d7:14:b6:e1:37:ab:7c:94:8b:7b:d9:49:be:4b:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E Validity Not Before: May 19 16:16:35 2024 GMT Not After : May 23 03:36:35 2024 GMT Subject: CN=077B8B1EFE69B3075A25180E62B2B37F889B0898 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f1:51:ac:15:58:66:19:6e:c0:9e:d3:d8:61: 00:2d:64:fa:05:bb:6a:8f:4c:a3:e9:58:72:78:ca: f9:0e:c7:6f:11:5b:f2:de:b5:d9:44:7b:5f:94:28: 54:68:e7:4b:36:5f:72:22:dc:8a:f9:7d:67:2e:71: a8:40:b2:2d:71:ac:38:22:ec:54:a3:95:ef:51:a2: 51:05:de:50:4d:08:80:3a:64:0a:82:b3:f9:78:d7: 19:83:f9:50:d0:e4:10:58:f8:f6:81:4e:06:e0:cd: a5:a0:9d:1a:b4:bd:b4:58:d5:3d:09:28:46:5f:5e: 71:78:70:2c:db:15:96:5c:e7:de:bc:55:61:d1:7b: d3:de:00:eb:25:48:4f:8e:d4:91:39:85:5f:b6:78: 1e:54:63:59:f1:5f:fe:45:78:98:f5:57:13:21:ea: ac:e5:87:2b:5e:b3:9b:3f:f8:43:df:c4:54:41:23: 28:7d:d0:cc:1f:66:31:fc:8c:2e:64:31:10:ed:5b: 13:f5:c5:ef:cb:cf:2f:55:f1:30:3a:5b:1c:cd:60: 3e:c1:ed:af:10:45:33:66:52:17:61:d2:bd:c8:0b: f0:19:09:ae:df:66:81:d7:1b:5f:ec:02:50:4e:2c: 59:5a:14:82:a4:9c:57:85:c1:da:94:ea:80:ec:31: a3:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:7B:8B:1E:FE:69:B3:07:5A:25:18:0E:62:B2:B3:7F:88:9B:08:98 X509v3 Authority Key Identifier: keyid:14:CB:3B:6C:E8:B4:3B:B7:43:9A:AE:A8:6D:73:DF:3A:F1:59:4D:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:f8:41:79:a1:97:fd:1b:da:69:98:a0:97:60:83:07:c0:d7: 80:04:12:72:d3:cc:b9:d8:f8:c4:d2:d9:8e:25:71:e3:25:5e: 2f:40:ae:00:eb:9e:7e:ec:ed:6a:14:1a:d2:f3:a7:60:ec:3e: c0:b3:31:be:55:fe:ab:57:33:9d:ec:76:9c:10:44:cc:de:9d: 1e:0a:5c:c8:5c:8e:f4:e2:e8:06:7d:f3:50:b6:d4:fe:7a:ef: bc:65:c8:41:d5:cd:d5:bc:c7:72:21:40:5a:2b:9d:5a:da:24: e3:d9:69:88:62:b8:e4:6f:f1:ed:9b:19:b4:a3:30:ae:e2:de: 0a:a4:e4:4b:e7:92:1a:5a:99:0e:bc:23:c2:03:cb:67:0a:39: 25:ce:16:dc:dc:da:b7:88:ed:57:81:f2:9f:a8:4f:11:ad:51: ed:2c:cb:80:c5:b3:8e:0a:6f:8f:74:48:bb:8f:aa:d0:18:16: f6:3a:43:f3:34:0e:c6:b0:23:64:6e:9f:d5:c8:aa:f6:9f:ff: 7a:3d:70:f8:00:3a:45:53:09:40:50:d5:38:fb:85:00:41:1f: 7c:5b:da:10:85:75:a6:5d:e7:a5:2a:df:4c:1c:bf:ef:65:3e: de:d4:dc:33:03:b5:00:2e:58:c6:42:4a:a0:7c:52:55:9d:61: c7:00:be:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG8KBJ+jXFLbhN6t8lIt72Um+Sw0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRDQjNCNkNFOEI0M0JCNzQzOUFBRUE4NkQ3M0RGM0FG MTU5NEQ5RTAeFw0yNDA1MTkxNjE2MzVaFw0yNDA1MjMwMzM2MzVaMDMxMTAvBgNV BAMTKDA3N0I4QjFFRkU2OUIzMDc1QTI1MTgwRTYyQjJCMzdGODg5QjA4OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ8VGsFVhmGW7AntPYYQAtZPoF u2qPTKPpWHJ4yvkOx28RW/LetdlEe1+UKFRo50s2X3Ii3Ir5fWcucahAsi1xrDgi 7FSjle9RolEF3lBNCIA6ZAqCs/l41xmD+VDQ5BBY+PaBTgbgzaWgnRq0vbRY1T0J KEZfXnF4cCzbFZZc5968VWHRe9PeAOslSE+O1JE5hV+2eB5UY1nxX/5FeJj1VxMh 6qzlhytes5s/+EPfxFRBIyh90MwfZjH8jC5kMRDtWxP1xe/Lzy9V8TA6WxzNYD7B 7a8QRTNmUhdh0r3IC/AZCa7fZoHXG1/sAlBOLFlaFIKknFeFwdqU6oDsMaPBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB3uLHv5pswdaJRgOYrKzf4ibCJgwHwYDVR0j BBgwFoAUFMs7bOi0O7dDmq6obXPfOvFZTZ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZDRkY2RlMy03NTdmLTQzZDQtYWRlMi1mZjA4ODdjYzI0ODcvMC8xNENCM0I2Q0U4 QjQzQkI3NDM5QUFFQTg2RDczREYzQUYxNTk0RDlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTRDQjNCNkNFOEI0M0JCNzQzOUFBRUE4NkQ3M0RGM0FGMTU5 NEQ5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGQ0ZGNkZTMtNzU3Zi00M2Q0LWFk ZTItZmYwODg3Y2MyNDg3LzAvMTRDQjNCNkNFOEI0M0JCNzQzOUFBRUE4NkQ3M0RG M0FGMTU5NEQ5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH/4QXmhl/0b2mmYoJdggwfA14AEEnLTzLnY +MTS2Y4lceMlXi9ArgDrnn7s7WoUGtLzp2DsPsCzMb5V/qtXM53sdpwQRMzenR4K XMhcjvTi6AZ981C21P5677xlyEHVzdW8x3IhQFornVraJOPZaYhiuORv8e2bGbSj MK7i3gqk5EvnkhpamQ68I8IDy2cKOSXOFtzc2reI7VeB8p+oTxGtUe0sy4DFs44K b490SLuPqtAYFvY6Q/M0DsawI2Run9XIqvaf/3o9cPgAOkVTCUBQ1Tj7hQBBH3xb 2hCFdaZd56Uq30wcv+9lPt7U3DMDtQAuWMZCSqB8UlWdYccAvu4= -----END CERTIFICATE-----Generated at Sun May 19 17:04:58 2024 by rpki-client on console-ams.rpki-client.org