$ rpki-client -vvf repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft File: D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft (raw, json) Hash identifier: pQuIIdNOMRgoosEIQpC2IsqJmkUMs0HNMWjLYX2XN1E= Subject key identifier: 3A:BF:64:BD:82:4E:00:32:0B:88:BE:9F:AF:86:9F:45:5B:5B:48:C0 Authority key identifier: D0:D1:DD:92:25:32:1E:1D:4D:1D:2F:63:A7:E0:88:0B:35:F6:83:7E Certificate issuer: /CN=D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E Certificate serial: 37B78A5911D5CF495DCA569D584C91620DAFBB8A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft Manifest number: F2 Signing time: Sun 19 May 2024 02:51:26 +0000 Manifest this update: Sun 19 May 2024 02:46:26 +0000 Manifest next update: Wed 22 May 2024 07:00:26 +0000 Files and hashes: 1: 3130332e33352e3135342e302f32342d3234203d3e20313430343635.roa (hash: gFk9D/Y6Sbl7gHDm5mStl9T5qnAKSQbrq8RgevQbcGA=) 2: D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.crl (hash: LUrNoJUaMLqKL7vVfxFvIDOkTLoPyn8/lmd/mQH1iSA=) 3: 3130332e33352e3135352e302f32342d3234203d3e20313430343635.roa (hash: VQuB2Zzsl8Jikg5PywlKINW4F3N40zKDBmSMMVcRfmU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.crl rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 03:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:b7:8a:59:11:d5:cf:49:5d:ca:56:9d:58:4c:91:62:0d:af:bb:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E Validity Not Before: May 19 02:46:26 2024 GMT Not After : May 22 07:00:26 2024 GMT Subject: CN=3ABF64BD824E00320B88BE9FAF869F455B5B48C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b1:a2:e8:09:b4:f4:51:37:cc:ae:aa:74:94: 08:f6:20:96:e2:a7:c6:1f:3d:2a:ad:36:91:7e:59: 00:86:4d:f0:5d:c7:87:21:55:79:23:f7:f9:4a:96: ce:fc:1a:dd:66:45:e4:10:4d:9a:06:29:1c:98:5d: 14:20:d0:9e:a9:fd:4a:e7:f5:02:64:86:38:e2:74: 18:54:b4:4d:bc:31:b9:7b:1c:b1:68:3f:7d:19:f3: 9d:11:a6:d1:19:ab:12:61:fc:07:3c:dd:9a:16:2b: 06:eb:24:6b:a1:f0:4a:47:71:96:bf:8b:01:59:82: 9e:b2:02:1b:bf:4c:d0:3a:a2:9e:19:d6:58:9b:ef: 2f:07:db:5e:89:c0:bd:1d:1b:ee:ac:a0:21:ca:5a: c4:41:6b:e4:4d:42:ee:7e:ea:a9:d2:cc:b4:cd:d6: de:1b:47:e2:97:8f:91:7d:95:eb:0d:3e:88:1d:01: 96:cb:94:f7:c2:39:94:b7:5f:cc:6b:92:e7:34:5e: 65:0b:07:8d:09:74:4c:1b:1e:c8:64:83:cb:65:07: 05:d0:c5:98:e6:f6:4f:d8:e7:04:1f:af:12:c2:be: ae:c8:9c:d1:8c:be:c7:06:28:00:c5:39:6a:42:20: b4:9f:78:35:e2:15:59:26:95:56:f6:02:86:d1:aa: 2d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:BF:64:BD:82:4E:00:32:0B:88:BE:9F:AF:86:9F:45:5B:5B:48:C0 X509v3 Authority Key Identifier: keyid:D0:D1:DD:92:25:32:1E:1D:4D:1D:2F:63:A7:E0:88:0B:35:F6:83:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:f8:65:54:5c:e6:c7:24:56:9c:26:f1:de:e3:e3:c6:12:01: b9:e7:3b:c6:f6:bd:0b:1e:6f:91:4c:cb:9f:97:e7:6c:12:04: 03:9d:dd:5b:c1:08:fc:93:35:b6:61:05:74:5b:64:55:9c:32: 79:43:3d:c3:30:b8:01:db:c5:03:c0:67:87:38:5e:54:54:ff: 28:2c:5d:d5:6c:99:b2:fc:37:3d:d3:5b:39:4f:3a:c9:0d:c4: 0f:c3:42:21:ce:0c:d6:2c:68:a1:f0:78:c8:fe:0a:9b:19:21: 81:c7:dd:72:94:1b:c2:73:71:cc:cd:51:ed:6d:c9:9c:a1:0a: 18:b4:62:d4:72:7a:8d:e5:b7:52:89:6f:57:22:3b:20:6a:a3: c2:a6:0e:09:5e:06:8b:79:c5:aa:e3:9c:67:ea:96:17:87:dc: 34:89:bf:57:6d:6e:37:11:f5:23:96:1f:cc:b1:99:2f:08:af: 85:d7:a8:d8:e7:b6:42:6c:48:cd:62:9d:f6:8c:6d:e0:3c:66: 98:b9:55:1e:c4:b4:59:1a:de:98:e5:09:36:a0:d5:7e:61:30: 01:9a:53:a6:b3:2d:65:7b:97:9d:7d:33:f9:94:ac:60:2b:5b: e8:26:1a:f6:51:e9:c0:35:32:2e:47:b6:20:b7:7a:41:e7:00: 2a:20:ea:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN7eKWRHVz0ldyladWEyRYg2vu4owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBEMUREOTIyNTMyMUUxRDREMUQyRjYzQTdFMDg4MEIz NUY2ODM3RTAeFw0yNDA1MTkwMjQ2MjZaFw0yNDA1MjIwNzAwMjZaMDMxMTAvBgNV BAMTKDNBQkY2NEJEODI0RTAwMzIwQjg4QkU5RkFGODY5RjQ1NUI1QjQ4QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNsaLoCbT0UTfMrqp0lAj2IJbi p8YfPSqtNpF+WQCGTfBdx4chVXkj9/lKls78Gt1mReQQTZoGKRyYXRQg0J6p/Urn 9QJkhjjidBhUtE28Mbl7HLFoP30Z850RptEZqxJh/Ac83ZoWKwbrJGuh8EpHcZa/ iwFZgp6yAhu/TNA6op4Z1lib7y8H216JwL0dG+6soCHKWsRBa+RNQu5+6qnSzLTN 1t4bR+KXj5F9lesNPogdAZbLlPfCOZS3X8xrkuc0XmULB40JdEwbHshkg8tlBwXQ xZjm9k/Y5wQfrxLCvq7InNGMvscGKADFOWpCILSfeDXiFVkmlVb2AobRqi1tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOr9kvYJOADILiL6fr4afRVtbSMAwHwYDVR0j BBgwFoAU0NHdkiUyHh1NHS9jp+CICzX2g34wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MjkzMjljZi0zMTIzLTRjZTAtYTY4Ny0wYTAzY2Q3NTg3MzgvMC9EMEQxREQ5MjI1 MzIxRTFENEQxRDJGNjNBN0UwODgwQjM1RjY4MzdFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBEMUREOTIyNTMyMUUxRDREMUQyRjYzQTdFMDg4MEIzNUY2 ODM3RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjI5MzI5Y2YtMzEyMy00Y2UwLWE2 ODctMGEwM2NkNzU4NzM4LzAvRDBEMUREOTIyNTMyMUUxRDREMUQyRjYzQTdFMDg4 MEIzNUY2ODM3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAED4ZVRc5sckVpwm8d7j48YSAbnnO8b2vQse b5FMy5+X52wSBAOd3VvBCPyTNbZhBXRbZFWcMnlDPcMwuAHbxQPAZ4c4XlRU/ygs XdVsmbL8Nz3TWzlPOskNxA/DQiHODNYsaKHweMj+CpsZIYHH3XKUG8JzcczNUe1t yZyhChi0YtRyeo3lt1KJb1ciOyBqo8KmDgleBot5xarjnGfqlheH3DSJv1dtbjcR 9SOWH8yxmS8Ir4XXqNjntkJsSM1infaMbeA8Zpi5VR7EtFka3pjlCTag1X5hMAGa U6azLWV7l519M/mUrGArW+gmGvZR6cA1Mi5HtiC3ekHnACog6sA= -----END CERTIFICATE-----Generated at Sun May 19 03:48:18 2024 by rpki-client on console-fra.rpki-client.org