$ rpki-client -vvf repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.mft File: D68CA7C6F514D7168C00790717FB869AF68B125E.mft (raw, json) Hash identifier: ygQeZjN+f+M6SyrF1XqRXxESvX9c5I+E4yYD75cn3R8= Subject key identifier: 5D:84:85:F9:44:8D:27:65:05:FA:98:EA:FB:1C:47:A1:4C:61:9D:CB Authority key identifier: D6:8C:A7:C6:F5:14:D7:16:8C:00:79:07:17:FB:86:9A:F6:8B:12:5E Certificate issuer: /CN=D68CA7C6F514D7168C00790717FB869AF68B125E Certificate serial: 5B90344D62A8DAFF8CF435464143C8D061FA587A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D68CA7C6F514D7168C00790717FB869AF68B125E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.mft Manifest number: 0170 Signing time: Sun 19 May 2024 04:50:44 +0000 Manifest this update: Sun 19 May 2024 04:45:44 +0000 Manifest next update: Wed 22 May 2024 11:30:44 +0000 Files and hashes: 1: 3130332e3134322e3235352e302f32342d3234203d3e20313339333831.roa (hash: SFN01p/9ZsWk4aNZvVGnIXIt3PoBEWJ8SqFMPs90JFY=) 2: 3130332e3134322e3235342e302f32332d3234203d3e20313339333831.roa (hash: OCyWEnnjuQ3iPqh2bLH2DmF9URTCbXHm/Ln0lfFXJy4=) 3: 3130332e3134322e3235342e302f32342d3234203d3e20313339333831.roa (hash: HLhCLmegYMD00R8dJcyPeSTlfHR5M7/AW99kR8R5VtU=) 4: 3130332e3134322e3235342e302f32342d3234203d3e203435333035.roa (hash: +NvwQ/pDlIAZKuJAQcUAbNlfQsSY9FVArKr24amvTpc=) 5: 3130332e3134322e3235352e302f32342d3234203d3e203435333035.roa (hash: FwuvRMF2mhMBx6mtI8pdFq+CTnUn1XasLGYAyImEFKw=) 6: D68CA7C6F514D7168C00790717FB869AF68B125E.crl (hash: GWiJGkW5gntowvSvY3NCJM1zdgJZW2G1SXL1zWKGFt8=) 7: 323030313a6466313a363338303a3a2f34382d3438203d3e203435333035.roa (hash: CLr3vuwVP92C1BB5OthwDnIdOPSu+BzZF25/X7S2Da8=) 8: 3130332e3134322e3235342e302f32332d3234203d3e203435333035.roa (hash: guRaUcJ/tvQBc6boNe1EsunjHsyrZHMND7Jbe432W7Y=) 9: 323030313a6466313a363338303a3a2f34382d3438203d3e20313339333831.roa (hash: AX6JQh8HhJTRt4MYul4/2e0D+TsQ7Dqb9NP3hR6lC9I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.crl rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D68CA7C6F514D7168C00790717FB869AF68B125E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 03:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:90:34:4d:62:a8:da:ff:8c:f4:35:46:41:43:c8:d0:61:fa:58:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D68CA7C6F514D7168C00790717FB869AF68B125E Validity Not Before: May 19 04:45:44 2024 GMT Not After : May 22 11:30:44 2024 GMT Subject: CN=5D8485F9448D276505FA98EAFB1C47A14C619DCB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b4:3f:18:a5:a5:82:80:d2:11:ec:f7:34:3d: 8f:d2:3a:d8:ee:d1:b3:0e:76:01:be:ac:e4:e0:6d: a0:32:55:d2:64:06:1f:ce:c5:ba:09:92:b2:95:4b: d8:15:39:f0:42:04:5c:15:66:cb:8e:63:19:f1:07: 9a:ad:34:7f:d0:e5:ea:0b:ba:ef:16:6f:d3:6a:ac: b1:03:1d:8e:4c:2e:e7:72:79:11:1b:b4:ab:50:8c: f6:23:f7:8b:00:28:0f:7d:d8:ad:6c:ee:c2:d2:3f: ac:ad:0c:86:93:2a:cb:a6:6c:42:a3:3d:a9:21:27: 39:9a:72:3a:ef:ee:a2:9d:9d:10:10:2e:dd:88:a2: c9:05:f5:78:4a:cb:0b:49:fb:49:ba:94:ba:1a:c3: 20:24:48:72:e2:1c:13:ef:0e:08:42:5e:e2:62:b3: 19:39:12:90:18:b1:f2:95:a9:44:51:11:43:54:6f: fa:9c:ae:37:7d:ee:3b:03:06:97:33:9d:47:6d:82: 20:e3:5d:e8:ce:dd:48:04:83:01:75:e1:9c:93:1a: 73:9e:93:df:ab:f4:e3:4b:9e:ba:fb:da:3a:5c:be: 0e:30:f2:07:9e:5f:be:13:7d:07:18:c2:e9:c7:5e: b6:d6:15:2b:52:47:5c:96:04:b8:f0:40:e7:7b:0c: 5e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:84:85:F9:44:8D:27:65:05:FA:98:EA:FB:1C:47:A1:4C:61:9D:CB X509v3 Authority Key Identifier: keyid:D6:8C:A7:C6:F5:14:D7:16:8C:00:79:07:17:FB:86:9A:F6:8B:12:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D68CA7C6F514D7168C00790717FB869AF68B125E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:28:20:49:98:05:8d:9f:66:ec:35:f9:37:33:95:92:56:ca: 85:bc:b3:e9:b9:0c:cb:82:b5:6f:a6:b7:3b:f7:57:ba:49:de: 59:e7:e5:de:ca:25:33:f7:50:15:48:f0:45:e1:bd:9d:5d:eb: d8:f7:cb:e5:db:26:1e:84:4b:2d:2d:99:dd:f4:1d:36:71:09: 38:23:b6:d4:c3:2b:a0:8d:c9:ff:8b:ac:ca:10:c9:11:22:f0: a6:d9:06:3b:12:fb:46:3c:08:bf:a6:fc:50:cc:09:95:d9:a6: 8e:c0:c7:7e:af:20:14:4c:73:0e:b9:3f:93:1b:7a:da:8b:25: ba:b6:13:c7:db:a7:1b:d3:62:d4:ce:c9:0f:bb:d4:56:71:b9: dc:67:25:c8:c6:a7:c2:a6:26:c5:d6:42:f4:d4:25:17:22:d5: f3:ca:d3:df:d5:1b:d6:d0:23:ec:3a:60:0c:5c:ff:c0:91:60: 36:4a:b3:2b:78:c2:07:20:50:c5:28:98:7f:15:a8:46:c2:a9: 61:a5:91:11:16:ce:df:68:c1:a8:ff:56:ef:69:fc:16:f8:7f: 1c:69:f8:b7:be:b7:5c:e8:69:1a:f2:82:97:02:4a:21:e8:e9: ee:07:77:d9:4c:1c:82:0c:71:ce:50:04:01:07:ac:27:54:1e: 61:c4:7d:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW5A0TWKo2v+M9DVGQUPI0GH6WHowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY4Q0E3QzZGNTE0RDcxNjhDMDA3OTA3MTdGQjg2OUFG NjhCMTI1RTAeFw0yNDA1MTkwNDQ1NDRaFw0yNDA1MjIxMTMwNDRaMDMxMTAvBgNV BAMTKDVEODQ4NUY5NDQ4RDI3NjUwNUZBOThFQUZCMUM0N0ExNEM2MTlEQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxtD8YpaWCgNIR7Pc0PY/SOtju 0bMOdgG+rOTgbaAyVdJkBh/OxboJkrKVS9gVOfBCBFwVZsuOYxnxB5qtNH/Q5eoL uu8Wb9NqrLEDHY5MLudyeREbtKtQjPYj94sAKA992K1s7sLSP6ytDIaTKsumbEKj PakhJzmacjrv7qKdnRAQLt2IoskF9XhKywtJ+0m6lLoawyAkSHLiHBPvDghCXuJi sxk5EpAYsfKVqURREUNUb/qcrjd97jsDBpcznUdtgiDjXejO3UgEgwF14ZyTGnOe k9+r9ONLnrr72jpcvg4w8geeX74TfQcYwunHXrbWFStSR1yWBLjwQOd7DF6vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXYSF+USNJ2UF+pjq+xxHoUxhncswHwYDVR0j BBgwFoAU1oynxvUU1xaMAHkHF/uGmvaLEl4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGRjMWRkOC02ZDI1LTQ3YzctYWFhNC1iZGRmMWI5ZDY3N2UvMC9ENjhDQTdDNkY1 MTRENzE2OEMwMDc5MDcxN0ZCODY5QUY2OEIxMjVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDY4Q0E3QzZGNTE0RDcxNjhDMDA3OTA3MTdGQjg2OUFGNjhC MTI1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWRkYzFkZDgtNmQyNS00N2M3LWFh YTQtYmRkZjFiOWQ2NzdlLzAvRDY4Q0E3QzZGNTE0RDcxNjhDMDA3OTA3MTdGQjg2 OUFGNjhCMTI1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACkoIEmYBY2fZuw1+TczlZJWyoW8s+m5DMuC tW+mtzv3V7pJ3lnn5d7KJTP3UBVI8EXhvZ1d69j3y+XbJh6ESy0tmd30HTZxCTgj ttTDK6CNyf+LrMoQyREi8KbZBjsS+0Y8CL+m/FDMCZXZpo7Ax36vIBRMcw65P5Mb etqLJbq2E8fbpxvTYtTOyQ+71FZxudxnJcjGp8KmJsXWQvTUJRci1fPK09/VG9bQ I+w6YAxc/8CRYDZKsyt4wgcgUMUomH8VqEbCqWGlkREWzt9owaj/Vu9p/Bb4fxxp +Le+t1zoaRrygpcCSiHo6e4Hd9lMHIIMcc5QBAEHrCdUHmHEfck= -----END CERTIFICATE-----Generated at Sun May 19 05:48:28 2024 by rpki-client on console-fra.rpki-client.org