$ rpki-client -vvf repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft File: DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft (raw, json) Hash identifier: iaTKn6McgfXByFbyYfMhEJIO5Cloric8N6jrS6lF7Z4= Subject key identifier: 17:F7:21:9F:AD:FB:71:E6:DF:A3:23:C7:DF:EA:20:22:8D:53:5D:B8 Authority key identifier: DB:1E:31:B6:A9:85:67:91:C3:1B:99:A7:3C:0F:39:01:18:E5:4E:B8 Certificate issuer: /CN=DB1E31B6A9856791C31B99A73C0F390118E54EB8 Certificate serial: 5AC9D762542D9584B20162AD55E0FF888D9BBFDE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1E31B6A9856791C31B99A73C0F390118E54EB8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft Manifest number: 95 Signing time: Sat 18 May 2024 23:10:31 +0000 Manifest this update: Sat 18 May 2024 23:05:31 +0000 Manifest next update: Wed 22 May 2024 00:24:31 +0000 Files and hashes: 1: 3130332e3136342e38332e302f32342d3234203d3e20313431393036.roa (hash: fsLVU3DZbGGDenVHUeiOW7AEMfGZ6hGfAul07Se2now=) 2: DB1E31B6A9856791C31B99A73C0F390118E54EB8.crl (hash: 7wO1hxwm0ZjApqOvYqYebF5bZgw+1CnzOnJGRxEmhfg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.crl rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1E31B6A9856791C31B99A73C0F390118E54EB8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 23:11:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:c9:d7:62:54:2d:95:84:b2:01:62:ad:55:e0:ff:88:8d:9b:bf:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB1E31B6A9856791C31B99A73C0F390118E54EB8 Validity Not Before: May 18 23:05:31 2024 GMT Not After : May 22 00:24:31 2024 GMT Subject: CN=17F7219FADFB71E6DFA323C7DFEA20228D535DB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:fe:d2:39:d2:16:ee:65:bc:d3:e4:24:e0:9d: 61:8d:e8:c1:66:10:6b:e0:bc:d1:7e:04:14:69:23: b5:ef:3d:e6:9b:6d:ef:73:50:ce:e4:f2:2e:d4:f9: d5:cd:a4:a9:0d:b3:28:e1:8f:6f:0f:5c:1d:83:4d: 5a:9c:91:7f:c2:9d:8b:fe:1b:67:12:db:2e:66:d6: 22:79:80:02:4d:63:4d:6a:d6:0a:72:17:cb:b5:4d: 44:f7:d8:24:4f:54:af:c1:eb:54:f8:7d:61:19:3e: ce:29:e2:eb:01:33:49:26:d5:22:12:eb:7d:23:bb: 7d:62:44:3d:dd:84:dd:3b:3a:e4:89:72:5d:e4:bf: c6:ac:32:b9:2f:86:2a:3f:c5:32:b9:14:80:08:04: e0:61:41:dc:f9:dc:e1:a3:30:63:5e:8c:28:c7:2b: 54:f3:4b:e7:3d:25:5a:0e:3e:b1:95:9d:05:eb:ef: 82:1d:41:f6:21:34:80:e9:f1:b7:a4:26:23:b3:1f: 09:d2:56:c8:c4:61:49:aa:bd:6a:42:8e:a8:e7:83: 72:c3:f2:95:5e:26:51:9d:5a:4a:43:6a:93:32:56: f4:71:b0:7c:10:b0:b1:0e:40:7b:88:5f:77:a7:29: c2:7b:6f:f4:0b:1a:d7:7c:40:f4:f4:7b:fd:27:40: f5:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:F7:21:9F:AD:FB:71:E6:DF:A3:23:C7:DF:EA:20:22:8D:53:5D:B8 X509v3 Authority Key Identifier: keyid:DB:1E:31:B6:A9:85:67:91:C3:1B:99:A7:3C:0F:39:01:18:E5:4E:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1E31B6A9856791C31B99A73C0F390118E54EB8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:e4:db:ed:20:51:56:b4:cf:8a:88:3f:67:fa:dd:fe:ea:45: af:c3:fc:68:17:82:2e:c7:93:b1:de:3b:96:ad:e6:7f:ae:c2: ff:b0:1d:54:e2:a6:4f:1d:cb:54:01:65:02:4c:c6:72:62:7e: e9:24:1c:98:93:47:eb:0c:7d:04:6d:04:07:20:47:7b:3d:b0: ff:de:cd:22:b1:59:c3:86:97:fc:82:9f:2c:6b:93:20:f9:b7: 55:cd:ab:a6:ea:b8:7c:77:d9:fe:5b:b9:84:6d:f9:b2:e3:a5: b1:7a:92:9a:fc:0e:5e:df:27:47:43:1d:a7:00:56:9a:a7:36: a9:02:c5:2d:44:f0:16:59:dc:59:7a:c9:70:b6:22:9e:bc:83: 52:be:fe:50:30:c4:51:60:f8:57:d3:fc:ad:c6:80:51:a0:80: 69:23:1f:f1:ce:a4:cc:e1:bd:88:96:f3:66:03:8a:41:16:d4: 35:c4:56:b8:b9:7e:b6:8b:57:23:28:ae:bf:d0:d8:35:c6:ce: 4f:1f:42:90:8c:f1:d8:6e:ec:40:81:17:ce:10:be:01:10:b0: 2c:74:5b:c3:97:fc:8c:d1:80:69:21:48:2c:30:b1:42:05:dc: 30:93:19:40:36:e6:d0:cc:6b:a6:d2:48:ad:47:d2:5c:e8:5a: 2a:32:ee:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWsnXYlQtlYSyAWKtVeD/iI2bv94wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREIxRTMxQjZBOTg1Njc5MUMzMUI5OUE3M0MwRjM5MDEx OEU1NEVCODAeFw0yNDA1MTgyMzA1MzFaFw0yNDA1MjIwMDI0MzFaMDMxMTAvBgNV BAMTKDE3RjcyMTlGQURGQjcxRTZERkEzMjNDN0RGRUEyMDIyOEQ1MzVEQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH/tI50hbuZbzT5CTgnWGN6MFm EGvgvNF+BBRpI7XvPeabbe9zUM7k8i7U+dXNpKkNsyjhj28PXB2DTVqckX/CnYv+ G2cS2y5m1iJ5gAJNY01q1gpyF8u1TUT32CRPVK/B61T4fWEZPs4p4usBM0km1SIS 630ju31iRD3dhN07OuSJcl3kv8asMrkvhio/xTK5FIAIBOBhQdz53OGjMGNejCjH K1TzS+c9JVoOPrGVnQXr74IdQfYhNIDp8bekJiOzHwnSVsjEYUmqvWpCjqjng3LD 8pVeJlGdWkpDapMyVvRxsHwQsLEOQHuIX3enKcJ7b/QLGtd8QPT0e/0nQPULAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF/chn637cebfoyPH3+ogIo1TXbgwHwYDVR0j BBgwFoAU2x4xtqmFZ5HDG5mnPA85ARjlTrgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTE4ZjhhMC05M2FlLTQzNTktOGE1ZC0xY2E2NzhiZTU2NjgvMC9EQjFFMzFCNkE5 ODU2NzkxQzMxQjk5QTczQzBGMzkwMTE4RTU0RUI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREIxRTMxQjZBOTg1Njc5MUMzMUI5OUE3M0MwRjM5MDExOEU1 NEVCOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmExOGY4YTAtOTNhZS00MzU5LThh NWQtMWNhNjc4YmU1NjY4LzAvREIxRTMxQjZBOTg1Njc5MUMzMUI5OUE3M0MwRjM5 MDExOEU1NEVCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHzk2+0gUVa0z4qIP2f63f7qRa/D/GgXgi7H k7HeO5at5n+uwv+wHVTipk8dy1QBZQJMxnJifukkHJiTR+sMfQRtBAcgR3s9sP/e zSKxWcOGl/yCnyxrkyD5t1XNq6bquHx32f5buYRt+bLjpbF6kpr8Dl7fJ0dDHacA VpqnNqkCxS1E8BZZ3Fl6yXC2Ip68g1K+/lAwxFFg+FfT/K3GgFGggGkjH/HOpMzh vYiW82YDikEW1DXEVri5fraLVyMorr/Q2DXGzk8fQpCM8dhu7ECBF84QvgEQsCx0 W8OX/IzRgGkhSCwwsUIF3DCTGUA25tDMa6bSSK1H0lzoWioy7iQ= -----END CERTIFICATE-----Generated at Sun May 19 00:15:20 2024 by rpki-client on console-fra.rpki-client.org