$ rpki-client -vvf repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.mft File: 2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.mft (raw, json) Hash identifier: RzZHHTp5U0gs5WbBqAIVbqKtvoXT9qXJQemGQ6Oqi6I= Subject key identifier: BA:82:9E:03:E3:8C:3D:2D:25:0E:39:28:DE:CF:28:D7:EA:19:6C:CF Authority key identifier: 2D:9D:91:37:D4:42:7A:9D:34:E1:B1:5F:16:C5:C6:89:A8:C5:49:D9 Certificate issuer: /CN=2D9D9137D4427A9D34E1B15F16C5C689A8C549D9 Certificate serial: 1D306F9A5591642D9645607B47E96B6BCB14190E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.mft Manifest number: 0431 Signing time: Thu 16 May 2024 19:11:12 +0000 Manifest this update: Thu 16 May 2024 19:06:12 +0000 Manifest next update: Sun 19 May 2024 23:03:12 +0000 Files and hashes: 1: 3130332e3134342e3130322e302f32342d3234203d3e20313339343231.roa (hash: 3Ls2p0rKHrPNxIiadvIk+pUyp1gPzCOPFPqoplRe3SY=) 2: 3130332e3134342e3130322e302f32332d3234203d3e20313339343231.roa (hash: XdZFfHv73MmMxr67KWTebXMbK3einYwjrX0Bd9m8ZRU=) 3: 2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.crl (hash: 1q6YrbUhX6c2S7RB1HK3m+OKaYW3SN0BS8AZE5nnyJM=) 4: 3130332e3134342e3130332e302f32342d3234203d3e20313339343231.roa (hash: EFYCBr9//5i3XPEonEOz7+19YXInh6wuuTXbjE9oijo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.crl rsync://repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 May 2024 20:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:30:6f:9a:55:91:64:2d:96:45:60:7b:47:e9:6b:6b:cb:14:19:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D9D9137D4427A9D34E1B15F16C5C689A8C549D9 Validity Not Before: May 16 19:06:12 2024 GMT Not After : May 19 23:03:12 2024 GMT Subject: CN=BA829E03E38C3D2D250E3928DECF28D7EA196CCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:77:2d:5e:f0:95:61:c1:24:d4:61:ed:df:ad: a7:0f:9e:47:9b:3c:1e:f5:bb:2f:7b:da:e8:e3:e5: 41:9d:df:c7:41:2a:33:c0:ea:2c:fb:87:6c:83:81: d3:a5:0c:47:04:96:9e:b4:b7:59:f3:49:6e:2f:71: 28:1a:a8:5e:e6:a8:05:16:7b:21:02:bb:26:2a:86: 02:5f:ba:15:ba:4d:e2:3e:df:99:3b:89:b7:7a:79: 96:38:82:b7:17:63:ca:5b:ea:b2:aa:0b:73:f7:d6: 3d:be:73:e0:26:2a:21:9a:db:1c:a0:ac:8f:7e:5c: 6a:8f:7a:63:c9:d1:96:15:d7:84:23:4f:05:61:dd: 32:55:85:da:99:0c:da:c8:1f:f4:a1:5b:60:e6:69: 37:b5:28:5a:cf:5e:28:44:17:38:15:2c:33:b6:a5: 51:0b:26:70:2c:44:f3:11:e9:5e:ff:0b:9c:d8:8c: e9:2b:5b:63:00:69:54:43:e6:88:c5:9c:c0:69:5f: d2:50:92:3f:a7:8f:ae:0a:f8:75:f8:bd:7f:e4:2a: 40:8c:1a:f5:7b:c6:15:30:80:b7:82:9b:0d:c9:88: 16:9b:4f:ae:8f:82:f3:ec:a7:fd:30:86:a2:0a:16: ca:02:57:ca:67:bf:46:f3:c9:88:f0:fd:ea:23:ac: 3c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:82:9E:03:E3:8C:3D:2D:25:0E:39:28:DE:CF:28:D7:EA:19:6C:CF X509v3 Authority Key Identifier: keyid:2D:9D:91:37:D4:42:7A:9D:34:E1:B1:5F:16:C5:C6:89:A8:C5:49:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:b7:de:ff:6a:89:c4:3d:a1:f7:15:60:b0:69:4a:84:61:05: 06:a3:01:68:65:8f:cb:74:22:09:45:71:fa:95:4e:0c:92:70: c5:41:72:b7:a2:8c:b0:9f:69:fc:fc:c8:e1:17:9c:d2:c5:10: 1f:ec:6c:7e:ad:f2:48:58:fb:34:a6:e0:4f:6c:b5:af:db:63: 83:95:68:5d:26:b0:1f:64:2b:cd:32:75:85:72:24:de:a6:1d: a9:bb:57:6a:f3:1e:83:21:77:0e:8b:30:c5:0e:bd:3f:80:75: 5f:1f:a2:29:ca:65:69:33:c7:bf:33:9b:74:bf:36:34:93:ff: 3f:9a:3e:3b:8a:32:5a:be:a8:57:69:f9:13:c4:a4:72:72:80: b3:ce:36:eb:de:6f:44:a2:f8:de:7d:50:7a:34:df:75:8f:6e: 11:9f:cc:bd:62:12:8d:84:92:fd:92:66:ba:fa:3e:2c:6d:ad: a8:9e:38:16:ce:15:8b:13:4d:4b:d6:95:2a:54:4c:27:4d:a4: f0:e7:70:cd:6d:b2:9d:d7:e7:3f:ec:c9:ac:b8:3d:5d:2e:90: cd:4a:0a:2e:7c:67:80:68:84:3f:03:9d:50:c2:cf:2f:7b:f0: d7:01:b9:f8:ec:13:ef:3b:6a:e9:1f:36:80:c1:7e:54:10:52: 5a:93:97:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHTBvmlWRZC2WRWB7R+lra8sUGQ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ5RDkxMzdENDQyN0E5RDM0RTFCMTVGMTZDNUM2ODlB OEM1NDlEOTAeFw0yNDA1MTYxOTA2MTJaFw0yNDA1MTkyMzAzMTJaMDMxMTAvBgNV BAMTKEJBODI5RTAzRTM4QzNEMkQyNTBFMzkyOERFQ0YyOEQ3RUExOTZDQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCndy1e8JVhwSTUYe3fracPnkeb PB71uy972ujj5UGd38dBKjPA6iz7h2yDgdOlDEcElp60t1nzSW4vcSgaqF7mqAUW eyECuyYqhgJfuhW6TeI+35k7ibd6eZY4grcXY8pb6rKqC3P31j2+c+AmKiGa2xyg rI9+XGqPemPJ0ZYV14QjTwVh3TJVhdqZDNrIH/ShW2DmaTe1KFrPXihEFzgVLDO2 pVELJnAsRPMR6V7/C5zYjOkrW2MAaVRD5ojFnMBpX9JQkj+nj64K+HX4vX/kKkCM GvV7xhUwgLeCmw3JiBabT66PgvPsp/0whqIKFsoCV8pnv0bzyYjw/eojrDz3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuoKeA+OMPS0lDjko3s8o1+oZbM8wHwYDVR0j BBgwFoAULZ2RN9RCep004bFfFsXGiajFSdkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTUzNDFlOC0yMmQ4LTQ0OWMtYTc1My1lNDdiYmZjNDg1MzgvMC8yRDlEOTEzN0Q0 NDI3QTlEMzRFMUIxNUYxNkM1QzY4OUE4QzU0OUQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQ5RDkxMzdENDQyN0E5RDM0RTFCMTVGMTZDNUM2ODlBOEM1 NDlEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE1MzQxZTgtMjJkOC00NDljLWE3 NTMtZTQ3YmJmYzQ4NTM4LzAvMkQ5RDkxMzdENDQyN0E5RDM0RTFCMTVGMTZDNUM2 ODlBOEM1NDlEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFO33v9qicQ9ofcVYLBpSoRhBQajAWhlj8t0 IglFcfqVTgyScMVBcreijLCfafz8yOEXnNLFEB/sbH6t8khY+zSm4E9sta/bY4OV aF0msB9kK80ydYVyJN6mHam7V2rzHoMhdw6LMMUOvT+AdV8foinKZWkzx78zm3S/ NjST/z+aPjuKMlq+qFdp+RPEpHJygLPONuveb0Si+N59UHo033WPbhGfzL1iEo2E kv2SZrr6PixtraieOBbOFYsTTUvWlSpUTCdNpPDncM1tsp3X5z/syay4PV0ukM1K Ci58Z4BohD8DnVDCzy978NcBufjsE+87aukfNoDBflQQUlqTl8s= -----END CERTIFICATE-----Generated at Thu May 16 19:49:13 2024 by rpki-client on console-fra.rpki-client.org