$ rpki-client -vvf repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft File: CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft (raw, json) Hash identifier: fzgaJpl5MsEwSwbbogMMqo3XeNCh5r/tUoaq1/X33ik= Subject key identifier: DE:96:D5:AA:81:4F:56:2A:07:F7:23:73:D5:D6:4F:4E:8E:ED:BB:57 Authority key identifier: CD:32:81:FC:87:5A:8D:D9:67:E7:E8:3C:D4:0F:10:6A:D5:B2:3A:74 Certificate issuer: /CN=CD3281FC875A8DD967E7E83CD40F106AD5B23A74 Certificate serial: 2FE8E4F4302B8F88861208CE607180E6C7DC88A0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.cer Subject info access: rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft Manifest number: 0123 Signing time: Tue 28 May 2024 10:12:00 +0000 Manifest this update: Tue 28 May 2024 10:07:00 +0000 Manifest next update: Fri 31 May 2024 15:24:00 +0000 Files and hashes: 1: 3130332e3134372e3131342e302f32332d3234203d3e20313439393732.roa (hash: mfPFMn2AjOOztpxlyio5JkFZ5wskFoThgRTvxPxirlw=) 2: CD3281FC875A8DD967E7E83CD40F106AD5B23A74.crl (hash: hJieFAPOs6jmOsEpgoOyojqnY6GLMJ3sCz1Ix0eTCAE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.crl rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 May 2024 15:24:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:e8:e4:f4:30:2b:8f:88:86:12:08:ce:60:71:80:e6:c7:dc:88:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD3281FC875A8DD967E7E83CD40F106AD5B23A74 Validity Not Before: May 28 10:07:00 2024 GMT Not After : May 31 15:24:00 2024 GMT Subject: CN=DE96D5AA814F562A07F72373D5D64F4E8EEDBB57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:48:4c:59:96:06:0c:13:99:83:42:12:ca:43: 7e:3f:ba:07:8a:45:6e:97:4e:b6:79:be:cc:22:1a: 38:50:52:a3:c6:e6:ec:54:60:82:bc:21:0c:f2:06: 06:a4:71:29:3d:64:b4:1c:b0:02:da:0a:4f:9d:91: cc:0e:e8:5f:41:45:aa:3c:81:42:1d:95:59:c3:ff: 9a:01:20:45:f0:76:fa:ef:2c:1e:c6:f7:8c:0d:10: 52:46:a9:31:15:77:e3:d7:a9:3b:c1:9a:8c:5f:58: 0e:af:b2:47:f5:c7:e8:3d:da:00:9b:04:a8:76:47: 70:b4:e2:89:28:32:d0:12:0d:87:36:53:78:d1:fd: ad:86:21:1d:da:d1:03:42:f5:49:11:33:5d:69:61: 23:65:4d:ca:97:d6:ce:1c:7d:f3:df:9c:9e:db:0b: 44:96:a2:9e:8f:d6:4d:0d:31:1a:c8:fe:a6:86:0e: 9d:ec:1a:b6:f3:04:c1:cb:01:26:28:92:67:48:22: fd:db:e3:58:ee:75:30:27:8b:f8:af:5a:e8:1c:1e: d8:6c:34:27:23:c0:d6:3d:b4:17:38:28:da:30:18: 84:b6:33:0a:f4:fb:6a:b6:a4:ad:e8:24:65:e6:ac: a2:63:dc:2c:bb:3f:6e:fb:be:9d:7f:64:69:5a:f4: 59:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:96:D5:AA:81:4F:56:2A:07:F7:23:73:D5:D6:4F:4E:8E:ED:BB:57 X509v3 Authority Key Identifier: keyid:CD:32:81:FC:87:5A:8D:D9:67:E7:E8:3C:D4:0F:10:6A:D5:B2:3A:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:25:f4:17:76:d2:98:7f:bb:08:26:80:ec:a8:13:47:34:b8: 81:c0:89:22:44:af:dd:6c:72:db:fb:ec:21:0b:55:21:8b:37: 38:7c:21:d6:00:1e:ad:66:cb:a7:bf:26:66:5d:af:40:9d:b4: 61:e4:3f:1d:bf:0a:7b:54:4f:65:31:ad:bc:27:b5:c2:49:65: 17:60:18:2c:56:ad:0e:f9:88:b4:23:28:30:14:f1:2c:de:02: 89:a2:49:94:9d:10:29:91:ff:b0:e2:fc:70:3c:3c:53:09:d9: c4:96:cf:e4:a3:77:53:4f:aa:7a:a3:39:4f:c1:cb:af:03:15: 8f:c5:1f:70:6e:27:dd:58:95:e2:15:12:b2:3c:7f:3e:87:5b: e4:3b:07:b5:d1:4b:85:30:d0:c5:7e:e4:e0:3b:50:ac:75:0d: e5:e7:93:ed:b7:79:78:9f:6a:9f:41:f4:53:0a:d2:a9:b5:d0: 60:88:e1:69:d7:f1:3b:86:90:53:6a:4f:f6:5c:fb:b3:11:ce: 18:4e:2c:c1:d1:2d:e5:10:d6:85:e2:18:b2:7a:a8:e5:fd:0a: 53:89:f5:83:88:ac:2a:37:a9:29:70:ba:5b:aa:04:5a:81:8b: 81:ac:d8:88:f6:91:a5:19:0c:73:7c:4e:69:bb:2e:21:76:37: fa:03:e3:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL+jk9DArj4iGEgjOYHGA5sfciKAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0QzMjgxRkM4NzVBOEREOTY3RTdFODNDRDQwRjEwNkFE NUIyM0E3NDAeFw0yNDA1MjgxMDA3MDBaFw0yNDA1MzExNTI0MDBaMDMxMTAvBgNV BAMTKERFOTZENUFBODE0RjU2MkEwN0Y3MjM3M0Q1RDY0RjRFOEVFREJCNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCSExZlgYME5mDQhLKQ34/ugeK RW6XTrZ5vswiGjhQUqPG5uxUYIK8IQzyBgakcSk9ZLQcsALaCk+dkcwO6F9BRao8 gUIdlVnD/5oBIEXwdvrvLB7G94wNEFJGqTEVd+PXqTvBmoxfWA6vskf1x+g92gCb BKh2R3C04okoMtASDYc2U3jR/a2GIR3a0QNC9UkRM11pYSNlTcqX1s4cffPfnJ7b C0SWop6P1k0NMRrI/qaGDp3sGrbzBMHLASYokmdIIv3b41judTAni/ivWugcHths NCcjwNY9tBc4KNowGIS2Mwr0+2q2pK3oJGXmrKJj3Cy7P277vp1/ZGla9FlRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3pbVqoFPVioH9yNz1dZPTo7tu1cwHwYDVR0j BBgwFoAUzTKB/Idajdln5+g81A8QatWyOnQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjhjYzA1OS01ZTZjLTQ1MDEtYjg5NC0xNGE4MmQxOGQyMWUvMC9DRDMyODFGQzg3 NUE4REQ5NjdFN0U4M0NENDBGMTA2QUQ1QjIzQTc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0QzMjgxRkM4NzVBOEREOTY3RTdFODNDRDQwRjEwNkFENUIy M0E3NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTY4Y2MwNTktNWU2Yy00NTAxLWI4 OTQtMTRhODJkMThkMjFlLzAvQ0QzMjgxRkM4NzVBOEREOTY3RTdFODNDRDQwRjEw NkFENUIyM0E3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH8l9Bd20ph/uwgmgOyoE0c0uIHAiSJEr91s ctv77CELVSGLNzh8IdYAHq1my6e/JmZdr0CdtGHkPx2/CntUT2UxrbwntcJJZRdg GCxWrQ75iLQjKDAU8SzeAomiSZSdECmR/7Di/HA8PFMJ2cSWz+Sjd1NPqnqjOU/B y68DFY/FH3BuJ91YleIVErI8fz6HW+Q7B7XRS4Uw0MV+5OA7UKx1DeXnk+23eXif ap9B9FMK0qm10GCI4WnX8TuGkFNqT/Zc+7MRzhhOLMHRLeUQ1oXiGLJ6qOX9ClOJ 9YOIrCo3qSlwuluqBFqBi4Gs2Ij2kaUZDHN8Tmm7LiF2N/oD48M= -----END CERTIFICATE-----Generated at Tue May 28 11:45:40 2024 by rpki-client on console-ams.rpki-client.org