$ rpki-client -vvf repo-rpki.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.mft File: D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.mft (raw, json) Hash identifier: MVh7Mx9lzCI7Y5ZHJAR3gzJ+zVIRazPShHHkLDAMpFg= Subject key identifier: 44:5D:C1:21:8E:0B:18:44:51:B5:F2:CB:75:CB:EC:6E:00:8D:41:6F Authority key identifier: D2:24:8A:04:D9:94:A2:56:9A:8F:F6:45:D4:B0:25:A9:F7:CB:2F:E7 Certificate issuer: /CN=D2248A04D994A2569A8FF645D4B025A9F7CB2FE7 Certificate serial: 129F7ABC203D084393D2E1AE3BAD4C79E9A352E9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.mft Manifest number: 0173 Signing time: Tue 28 May 2024 23:31:13 +0000 Manifest this update: Tue 28 May 2024 23:26:13 +0000 Manifest next update: Sat 01 Jun 2024 10:34:13 +0000 Files and hashes: 1: 3130332e3136392e312e302f32342d3234203d3e20313432333235.roa (hash: G3ls2wG1XnXU+MDz1l+FjTCqJCeIEqwQsrcmDFPbZjU=) 2: D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.crl (hash: gTnT/BwFqTA8qYATFcpdPclv0/n8A1eWIHqVghSgJP0=) 3: 3130332e3136392e302e302f32342d3234203d3e20313432333235.roa (hash: DiKDQ4xO37uEz3LGqkudZWyBLFvDLb2BHiHtCcaC/ns=) 4: 3130332e3136392e302e302f32332d3234203d3e20313432333235.roa (hash: v7fj0n/qZqAv0WjTR8mAQzKp8e8T2QjW/FrewvXOCCY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.crl rsync://repo-rpki.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 04:52:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:9f:7a:bc:20:3d:08:43:93:d2:e1:ae:3b:ad:4c:79:e9:a3:52:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2248A04D994A2569A8FF645D4B025A9F7CB2FE7 Validity Not Before: May 28 23:26:13 2024 GMT Not After : Jun 1 10:34:13 2024 GMT Subject: CN=445DC1218E0B184451B5F2CB75CBEC6E008D416F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:af:01:c1:a3:6c:fb:43:ca:63:07:4c:13:e0: 40:21:b1:20:62:3c:2b:0e:a3:a5:9d:77:ff:61:25: 32:63:9c:c2:16:1a:9e:72:9b:a7:ef:d8:9a:fb:10: d9:76:b4:71:20:26:1b:5c:2c:38:47:16:2c:28:f7: af:cb:97:0e:d7:5f:db:35:04:29:08:12:7b:82:e2: b3:84:cf:90:82:30:14:30:95:a7:c1:79:66:59:6f: d9:94:e9:a0:d0:c1:f1:2a:28:73:aa:0d:7c:a1:c1: 3c:75:56:ca:d7:c5:40:cd:04:b5:35:88:e6:d5:c1: ac:2b:41:ec:ea:40:34:ac:78:24:9b:20:61:d4:78: 5a:6c:43:cd:8f:6d:21:11:b1:d3:6a:1c:cc:6e:c7: e8:a0:5e:7a:b9:71:1b:f8:77:01:7b:7d:a8:02:00: e2:80:a9:86:2a:1a:73:07:ac:ec:7f:0c:fa:3d:6c: 47:5e:dc:17:83:07:d3:ff:33:13:d3:9c:18:f1:17: 79:07:9a:48:bd:3c:8d:42:d0:a5:da:76:d1:c9:4b: 90:27:54:ab:83:7d:e9:ff:93:da:9c:c1:35:38:93: 00:be:11:29:75:56:4d:ef:a3:52:5f:04:d8:2a:4f: b1:ba:f8:6e:83:c6:20:f5:39:ce:c7:c2:8b:af:e8: e3:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:5D:C1:21:8E:0B:18:44:51:B5:F2:CB:75:CB:EC:6E:00:8D:41:6F X509v3 Authority Key Identifier: keyid:D2:24:8A:04:D9:94:A2:56:9A:8F:F6:45:D4:B0:25:A9:F7:CB:2F:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:02:85:b9:39:c2:2b:c8:59:15:78:24:12:a2:3b:ff:4e:2c: 4d:c6:61:86:cf:4b:cd:bb:2e:19:2e:c4:c4:16:a8:f3:39:48: 9a:d0:ba:68:a2:0c:06:1a:a1:c2:39:e7:aa:24:94:d3:67:79: 59:e2:b6:f9:d0:d6:5b:98:4b:96:45:84:b7:b3:43:c7:99:61: ea:23:fc:6f:95:85:61:4e:1f:26:f5:bd:d3:9a:ef:51:06:58: dd:bc:98:d4:6e:f3:6e:fa:c0:1c:d6:6c:82:39:bd:5f:11:1c: 82:53:a9:b6:70:63:fd:13:8e:c3:fd:88:c3:73:d6:6f:b1:2d: 67:bd:ec:8d:2f:e9:b6:55:b3:66:27:a8:f6:e8:a0:e1:31:7d: 71:fb:9b:04:4b:0d:83:a5:01:84:b7:ba:47:02:f4:75:52:fe: f6:91:e8:0f:bb:79:b0:94:ec:92:37:3d:ab:e7:68:26:f2:b3: 3b:72:df:79:54:17:d2:98:79:8f:c5:f6:5b:88:4e:b2:63:fa: 8a:3b:e3:7f:b0:a5:49:22:e6:fb:a8:70:c1:68:b6:d5:d5:8c: 83:6f:65:a0:61:24:c9:67:42:a3:2e:15:36:c7:96:7b:b6:74: ae:93:0f:a3:67:e0:08:e8:47:a6:a7:f1:64:59:75:a8:fb:93: 5a:8c:9d:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEp96vCA9CEOT0uGuO61MeemjUukwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDIyNDhBMDREOTk0QTI1NjlBOEZGNjQ1RDRCMDI1QTlG N0NCMkZFNzAeFw0yNDA1MjgyMzI2MTNaFw0yNDA2MDExMDM0MTNaMDMxMTAvBgNV BAMTKDQ0NURDMTIxOEUwQjE4NDQ1MUI1RjJDQjc1Q0JFQzZFMDA4RDQxNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCurwHBo2z7Q8pjB0wT4EAhsSBi PCsOo6Wdd/9hJTJjnMIWGp5ym6fv2Jr7ENl2tHEgJhtcLDhHFiwo96/Llw7XX9s1 BCkIEnuC4rOEz5CCMBQwlafBeWZZb9mU6aDQwfEqKHOqDXyhwTx1VsrXxUDNBLU1 iObVwawrQezqQDSseCSbIGHUeFpsQ82PbSERsdNqHMxux+igXnq5cRv4dwF7fagC AOKAqYYqGnMHrOx/DPo9bEde3BeDB9P/MxPTnBjxF3kHmki9PI1C0KXadtHJS5An VKuDfen/k9qcwTU4kwC+ESl1Vk3vo1JfBNgqT7G6+G6DxiD1Oc7Hwouv6OMNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURF3BIY4LGERRtfLLdcvsbgCNQW8wHwYDVR0j BBgwFoAU0iSKBNmUolaaj/ZF1LAlqffLL+cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YTNjYzJjMS0xNDZjLTQ4YTktYjAwMy03YmQ4MzgyMjA4NGQvMC9EMjI0OEEwNEQ5 OTRBMjU2OUE4RkY2NDVENEIwMjVBOUY3Q0IyRkU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDIyNDhBMDREOTk0QTI1NjlBOEZGNjQ1RDRCMDI1QTlGN0NC MkZFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWEzY2MyYzEtMTQ2Yy00OGE5LWIw MDMtN2JkODM4MjIwODRkLzAvRDIyNDhBMDREOTk0QTI1NjlBOEZGNjQ1RDRCMDI1 QTlGN0NCMkZFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA0Chbk5wivIWRV4JBKiO/9OLE3GYYbPS827 LhkuxMQWqPM5SJrQumiiDAYaocI556oklNNneVnitvnQ1luYS5ZFhLezQ8eZYeoj /G+VhWFOHyb1vdOa71EGWN28mNRu8276wBzWbII5vV8RHIJTqbZwY/0TjsP9iMNz 1m+xLWe97I0v6bZVs2YnqPbooOExfXH7mwRLDYOlAYS3ukcC9HVS/vaR6A+7ebCU 7JI3PavnaCbyszty33lUF9KYeY/F9luITrJj+oo743+wpUki5vuocMFottXVjINv ZaBhJMlnQqMuFTbHlnu2dK6TD6Nn4AjoR6an8WRZdaj7k1qMnQc= -----END CERTIFICATE-----Generated at Wed May 29 00:27:41 2024 by rpki-client on console-fra.rpki-client.org