$ rpki-client -vvf repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft File: DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft (raw, json) Hash identifier: Nv0nXNJ6Zx5VIggNshx8GJu8YcBHHhAXEbMQCfOjkhg= Subject key identifier: 16:4A:C9:F3:48:40:E2:A7:5B:15:4C:34:AD:83:22:D0:79:72:8C:62 Authority key identifier: DC:34:C8:B5:F4:38:B8:D4:CB:13:F2:45:1A:D1:F0:95:5E:5F:7F:BB Certificate issuer: /CN=DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB Certificate serial: 70ABA4E173514230F652B65CED190098E7625E52 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft Manifest number: 03B4 Signing time: Sat 18 May 2024 10:01:24 +0000 Manifest this update: Sat 18 May 2024 09:56:24 +0000 Manifest next update: Tue 21 May 2024 14:23:24 +0000 Files and hashes: 1: DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.crl (hash: V/2Icrfts2tcAbkMLU/lI5rmvPmYhmCs+VNTc+PwGh8=) 2: 3130332e33312e3232342e302f32322d3234203d3e20313331373535.roa (hash: uLShdDz31wKsxyvOiW52gFBOVdF3+UV9dVHHCc2BVjM=) 3: 34332e3234352e3138342e302f32322d3234203d3e20313331373535.roa (hash: FdRQJx61o8zwGIJ9zIY3DVlQhVXsMm2+z140aBaLXEI=) 4: 323030313a6466363a313830303a3a2f34382d3438203d3e20313331373535.roa (hash: Skxlr62Ryw9sa+TLrHI+ISbrFb9KuQKTHXm2jTIYEhY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.crl rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 14:23:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:ab:a4:e1:73:51:42:30:f6:52:b6:5c:ed:19:00:98:e7:62:5e:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB Validity Not Before: May 18 09:56:24 2024 GMT Not After : May 21 14:23:24 2024 GMT Subject: CN=164AC9F34840E2A75B154C34AD8322D079728C62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7f:2e:0e:ee:e1:2a:1b:88:be:40:66:1b:ac: bf:d8:b0:2d:3e:fb:82:d1:8e:15:4f:00:d2:a0:9f: 35:51:5c:d2:95:cc:29:c1:44:93:43:8d:16:b5:0a: c4:c0:f8:c3:4a:0b:46:54:74:43:fd:c6:1a:3f:fd: 90:66:5b:1b:59:f2:6c:fd:d9:d6:3d:e8:e3:22:73: 90:9f:98:55:e8:a8:77:df:f6:28:d1:26:8e:57:ee: 68:28:c9:56:e1:9d:b0:0a:fe:a8:6d:f2:54:f9:c3: f0:43:6d:f5:00:8d:5c:4c:64:76:29:89:da:97:98: 41:ba:fa:18:a8:94:b3:9e:e7:19:97:f4:33:40:35: 1b:f3:de:08:2c:e4:0d:25:89:7b:72:7b:80:f1:11: fa:a4:be:e4:fb:26:37:8e:af:b7:e7:05:9d:e3:90: 23:e3:dd:d1:61:8f:8b:04:fb:fc:3c:ae:6c:4d:5b: 31:04:cd:ae:ce:46:bb:b7:c1:1e:99:25:9a:3d:01: a7:d0:78:f3:83:79:7f:6c:6e:79:ce:ff:e8:8b:83: c0:74:16:55:38:f3:e8:d7:35:3a:fa:99:09:ee:d1: 4b:4d:64:5c:eb:25:e5:ee:b2:6d:09:47:1a:59:be: 4b:80:13:89:77:f5:2a:7b:3f:9e:8e:6d:e8:9b:71: 92:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:4A:C9:F3:48:40:E2:A7:5B:15:4C:34:AD:83:22:D0:79:72:8C:62 X509v3 Authority Key Identifier: keyid:DC:34:C8:B5:F4:38:B8:D4:CB:13:F2:45:1A:D1:F0:95:5E:5F:7F:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:bd:aa:95:b2:2a:97:5a:a5:bc:f0:f0:ce:80:01:33:bc:40: 52:dc:ab:96:ec:02:bb:23:0d:b0:ea:27:20:19:a6:62:ba:24: e2:b4:0a:ac:e3:3d:ea:66:92:40:b2:e7:27:5f:c0:10:0b:e5: 76:34:34:19:dd:23:9e:50:79:0c:25:7c:37:71:36:cb:1f:56: ae:d9:18:c2:ff:9b:6e:95:b8:cc:1c:94:4a:68:2b:a0:eb:28: 6e:b5:06:1c:bc:eb:96:74:5f:db:08:3f:1f:79:ce:ba:d2:67: d6:ff:7d:10:b6:39:ac:05:32:4a:fa:70:de:37:86:30:e3:a3: 43:23:12:86:fa:3e:a8:14:c1:d4:08:c1:fc:00:35:1d:9f:df: 22:9c:d1:7f:d9:5e:dd:1a:14:82:ce:f3:c1:07:ea:6c:23:7e: 9b:b3:bb:20:38:5f:f9:b7:d9:42:32:2e:0b:fd:f2:35:a3:42: ef:e9:0a:6c:c6:59:0d:f5:63:69:e0:4c:cc:ce:ec:e1:63:78: d6:fe:b7:ef:27:96:14:db:a7:9b:d2:42:cd:59:d1:74:4e:60: 52:bd:7b:ce:54:19:fd:11:0a:e1:ac:e1:28:b0:e0:1e:f4:a6: 39:99:24:2e:6d:78:bd:f8:36:f2:ea:07:fc:84:43:af:9e:3f: 6f:ce:15:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcKuk4XNRQjD2UrZc7RkAmOdiXlIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMzNEM4QjVGNDM4QjhENENCMTNGMjQ1MUFEMUYwOTU1 RTVGN0ZCQjAeFw0yNDA1MTgwOTU2MjRaFw0yNDA1MjExNDIzMjRaMDMxMTAvBgNV BAMTKDE2NEFDOUYzNDg0MEUyQTc1QjE1NEMzNEFEODMyMkQwNzk3MjhDNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJfy4O7uEqG4i+QGYbrL/YsC0+ +4LRjhVPANKgnzVRXNKVzCnBRJNDjRa1CsTA+MNKC0ZUdEP9xho//ZBmWxtZ8mz9 2dY96OMic5CfmFXoqHff9ijRJo5X7mgoyVbhnbAK/qht8lT5w/BDbfUAjVxMZHYp idqXmEG6+hiolLOe5xmX9DNANRvz3ggs5A0liXtye4DxEfqkvuT7JjeOr7fnBZ3j kCPj3dFhj4sE+/w8rmxNWzEEza7ORru3wR6ZJZo9AafQePODeX9sbnnO/+iLg8B0 FlU48+jXNTr6mQnu0UtNZFzrJeXusm0JRxpZvkuAE4l39Sp7P56ObeibcZLJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFkrJ80hA4qdbFUw0rYMi0HlyjGIwHwYDVR0j BBgwFoAU3DTItfQ4uNTLE/JFGtHwlV5ff7swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YThmMDQzNS00ZDM4LTQ3ZWYtODUwZi01MWJhNDYxN2ZiM2QvMC9EQzM0QzhCNUY0 MzhCOEQ0Q0IxM0YyNDUxQUQxRjA5NTVFNUY3RkJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREMzNEM4QjVGNDM4QjhENENCMTNGMjQ1MUFEMUYwOTU1RTVG N0ZCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE4ZjA0MzUtNGQzOC00N2VmLTg1 MGYtNTFiYTQ2MTdmYjNkLzAvREMzNEM4QjVGNDM4QjhENENCMTNGMjQ1MUFEMUYw OTU1RTVGN0ZCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ29qpWyKpdapbzw8M6AATO8QFLcq5bsArsj DbDqJyAZpmK6JOK0CqzjPepmkkCy5ydfwBAL5XY0NBndI55QeQwlfDdxNssfVq7Z GML/m26VuMwclEpoK6DrKG61Bhy865Z0X9sIPx95zrrSZ9b/fRC2OawFMkr6cN43 hjDjo0MjEob6PqgUwdQIwfwANR2f3yKc0X/ZXt0aFILO88EH6mwjfpuzuyA4X/m3 2UIyLgv98jWjQu/pCmzGWQ31Y2ngTMzO7OFjeNb+t+8nlhTbp5vSQs1Z0XROYFK9 e85UGf0RCuGs4Siw4B70pjmZJC5teL34NvLqB/yEQ6+eP2/OFcs= -----END CERTIFICATE-----Generated at Sat May 18 10:34:19 2024 by rpki-client on console-fra.rpki-client.org