$ rpki-client -vvf repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.mft File: D6E54AF6C437868899B99F4312CD3DBB493B5D29.mft (raw, json) Hash identifier: Jptq5dAL2VRF/Qe0Ern6A43p65TF7jDeD8Tj5LOwhZY= Subject key identifier: BE:24:D2:F7:4A:5B:7A:16:8F:6C:2E:AE:55:3B:AF:EF:60:FD:7C:3B Authority key identifier: D6:E5:4A:F6:C4:37:86:88:99:B9:9F:43:12:CD:3D:BB:49:3B:5D:29 Certificate issuer: /CN=D6E54AF6C437868899B99F4312CD3DBB493B5D29 Certificate serial: 35E80F280765A94C3736189FDA9D15B6DAAC8264 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6E54AF6C437868899B99F4312CD3DBB493B5D29.cer Subject info access: rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.mft Manifest number: EC Signing time: Wed 29 May 2024 11:42:02 +0000 Manifest this update: Wed 29 May 2024 11:37:02 +0000 Manifest next update: Sat 01 Jun 2024 20:21:02 +0000 Files and hashes: 1: D6E54AF6C437868899B99F4312CD3DBB493B5D29.crl (hash: GLunkgL44FwuWyN/NX3j0EewiaAAIevdAvAI4IWMe10=) 2: 3130332e33392e37322e302f32332d3233203d3e20313530343838.roa (hash: Wy8k4tXh0TKHvIi28nZSc4mxXZ7J8Q0A2Y/9H0Lybbk=) 3: 3130332e33392e37322e302f32342d3234203d3e20313530343838.roa (hash: 9emHwPOIllgbseueBo1I9UsQNQL4jyQzxhjw/yqvxCw=) 4: 3130332e33392e37332e302f32342d3234203d3e20313530343838.roa (hash: n9tkVMu7WahPHYL5DdeFLQhvRMXFFIY3gEE+QEHV40s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.crl rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6E54AF6C437868899B99F4312CD3DBB493B5D29.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 14:27:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:e8:0f:28:07:65:a9:4c:37:36:18:9f:da:9d:15:b6:da:ac:82:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6E54AF6C437868899B99F4312CD3DBB493B5D29 Validity Not Before: May 29 11:37:02 2024 GMT Not After : Jun 1 20:21:02 2024 GMT Subject: CN=BE24D2F74A5B7A168F6C2EAE553BAFEF60FD7C3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8e:bf:46:64:4a:01:39:fb:a0:b9:4e:52:07: fe:60:d1:9c:5f:cf:76:b1:be:50:85:70:5a:5d:70: 32:03:6f:39:72:90:c5:e6:55:93:e9:93:82:ad:cd: a1:a0:eb:8a:28:02:e7:6f:95:e7:f9:07:c2:49:62: 83:05:f0:40:b8:3c:fa:e3:3d:2a:c3:b0:4c:ec:d7: 40:63:b3:69:88:24:61:73:06:00:d9:4d:66:33:f6: 31:16:43:27:20:12:18:2e:88:6e:2a:bc:9e:52:29: 8f:e4:96:71:4c:cc:6b:10:d7:65:2d:fb:12:11:43: c1:e4:87:f7:8c:39:71:3e:07:3c:aa:aa:64:de:e0: 6f:07:c5:e2:8a:c8:0f:98:3e:50:40:ad:5d:78:4a: 24:5e:5a:36:95:2b:2f:86:7b:4c:dd:87:65:7f:e8: b8:a5:c0:f3:61:32:0d:fe:20:40:c5:70:39:9c:a8: 59:8e:1c:e6:db:8a:97:ca:7b:28:4f:f9:60:49:21: 56:03:50:2a:2e:7f:c0:04:4b:17:f3:1b:ac:b3:e9: c4:71:71:e6:98:67:79:f1:bd:ba:e2:9d:20:88:23: 70:c5:12:07:78:e3:cd:bf:a3:62:82:ad:29:31:14: 05:ef:cd:c5:2f:20:86:73:0c:98:7e:64:d1:5e:62: 66:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:24:D2:F7:4A:5B:7A:16:8F:6C:2E:AE:55:3B:AF:EF:60:FD:7C:3B X509v3 Authority Key Identifier: keyid:D6:E5:4A:F6:C4:37:86:88:99:B9:9F:43:12:CD:3D:BB:49:3B:5D:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6E54AF6C437868899B99F4312CD3DBB493B5D29.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:9e:c1:ff:70:bc:4a:89:e4:5f:73:a7:37:1e:5d:b9:db:cd: dd:18:44:39:d4:46:2f:34:17:b7:3a:10:60:ab:0f:12:82:71: ca:a9:57:74:ca:f2:22:86:f8:75:5e:80:1b:01:97:69:72:9d: e7:57:5b:46:8b:0e:f5:45:1f:a2:64:56:de:1f:fc:f8:8b:b2: 18:f1:42:ba:72:73:ff:66:51:89:39:8f:21:e3:11:81:34:23: af:3b:cb:57:57:b5:41:b1:88:72:a5:d6:74:b4:6b:38:c5:9f: b0:71:18:b5:32:51:23:fe:3f:37:75:0e:d4:b2:15:d9:2f:5a: 6c:f8:a7:20:99:7a:55:80:0e:80:79:b6:a0:f4:a3:96:11:e4: 8f:cd:0e:76:1b:2d:f0:d3:a5:5e:f5:64:98:35:00:e5:54:71: a0:5b:57:d6:dc:b6:74:c4:e5:fb:c5:00:a3:ce:1b:e4:7b:1d: b2:79:3e:a5:df:df:b7:f2:99:f0:b8:8a:76:70:e0:68:b0:fd: 36:e3:1b:1e:6a:2e:8b:40:88:b4:34:2f:ee:a4:cf:1b:b4:5c: d5:7f:ee:e4:f4:1a:ff:05:50:b2:d1:d6:d7:c9:14:be:c1:56: 1a:e6:75:dc:94:1e:49:26:3d:a5:d1:09:f1:37:74:ac:93:50: 66:8b:52:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNegPKAdlqUw3Nhif2p0VttqsgmQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZFNTRBRjZDNDM3ODY4ODk5Qjk5RjQzMTJDRDNEQkI0 OTNCNUQyOTAeFw0yNDA1MjkxMTM3MDJaFw0yNDA2MDEyMDIxMDJaMDMxMTAvBgNV BAMTKEJFMjREMkY3NEE1QjdBMTY4RjZDMkVBRTU1M0JBRkVGNjBGRDdDM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGjr9GZEoBOfuguU5SB/5g0Zxf z3axvlCFcFpdcDIDbzlykMXmVZPpk4KtzaGg64ooAudvlef5B8JJYoMF8EC4PPrj PSrDsEzs10Bjs2mIJGFzBgDZTWYz9jEWQycgEhguiG4qvJ5SKY/klnFMzGsQ12Ut +xIRQ8Hkh/eMOXE+BzyqqmTe4G8HxeKKyA+YPlBArV14SiReWjaVKy+Ge0zdh2V/ 6LilwPNhMg3+IEDFcDmcqFmOHObbipfKeyhP+WBJIVYDUCouf8AESxfzG6yz6cRx ceaYZ3nxvbrinSCII3DFEgd4482/o2KCrSkxFAXvzcUvIIZzDJh+ZNFeYmaZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUviTS90pbehaPbC6uVTuv72D9fDswHwYDVR0j BBgwFoAU1uVK9sQ3hoiZuZ9DEs09u0k7XSkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MGM3M2FmNS1hMmMwLTQyNGQtODYyZS0xMTJjNThiNzI3MGUvMC9ENkU1NEFGNkM0 Mzc4Njg4OTlCOTlGNDMxMkNEM0RCQjQ5M0I1RDI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDZFNTRBRjZDNDM3ODY4ODk5Qjk5RjQzMTJDRDNEQkI0OTNC NUQyOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTBjNzNhZjUtYTJjMC00MjRkLTg2 MmUtMTEyYzU4YjcyNzBlLzAvRDZFNTRBRjZDNDM3ODY4ODk5Qjk5RjQzMTJDRDNE QkI0OTNCNUQyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALSewf9wvEqJ5F9zpzceXbnbzd0YRDnURi80 F7c6EGCrDxKCccqpV3TK8iKG+HVegBsBl2lynedXW0aLDvVFH6JkVt4f/PiLshjx Qrpyc/9mUYk5jyHjEYE0I687y1dXtUGxiHKl1nS0azjFn7BxGLUyUSP+Pzd1DtSy FdkvWmz4pyCZelWADoB5tqD0o5YR5I/NDnYbLfDTpV71ZJg1AOVUcaBbV9bctnTE 5fvFAKPOG+R7HbJ5PqXf37fymfC4inZw4Giw/TbjGx5qLotAiLQ0L+6kzxu0XNV/ 7uT0Gv8FULLR1tfJFL7BVhrmddyUHkkmPaXRCfE3dKyTUGaLUhY= -----END CERTIFICATE-----Generated at Wed May 29 13:49:11 2024 by rpki-client on console-ams.rpki-client.org