$ rpki-client -vvf repo-rpki.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/253E2BB4DE467AF08F191AF7632EE3BD058DA101.mft File: 253E2BB4DE467AF08F191AF7632EE3BD058DA101.mft (raw, json) Hash identifier: qr509E29GiecScfogG2Rebx7I4vNZPTnJEbCZTL5eAA= Subject key identifier: 17:F1:9C:6F:63:D9:C1:F4:47:FD:80:EB:3E:03:F0:AD:03:F0:1F:EE Authority key identifier: 25:3E:2B:B4:DE:46:7A:F0:8F:19:1A:F7:63:2E:E3:BD:05:8D:A1:01 Certificate issuer: /CN=253E2BB4DE467AF08F191AF7632EE3BD058DA101 Certificate serial: 41CA380E1867AE7E8F7B4BED15AF04F50DED0AA1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/253E2BB4DE467AF08F191AF7632EE3BD058DA101.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/253E2BB4DE467AF08F191AF7632EE3BD058DA101.mft Manifest number: 0433 Signing time: Sat 18 May 2024 11:21:19 +0000 Manifest this update: Sat 18 May 2024 11:16:19 +0000 Manifest next update: Tue 21 May 2024 20:04:19 +0000 Files and hashes: 1: 3230322e35312e3232342e302f32302d3234203d3e203338313434.roa (hash: ftWHEPt8khlPW77XWF580trh/VMiM4pzaRRRyvL9hO8=) 2: 36302e3235332e39362e302f31392d3234203d3e203338313434.roa (hash: 2GyoDj7oB/SMb7EN8B4mx7FODKsMb0/YAYXt+yjU4c8=) 3: 253E2BB4DE467AF08F191AF7632EE3BD058DA101.crl (hash: CvUSBKcy+ve7UU4Pod6nfS5c89cUJUNfTWz3OYpJMfk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/253E2BB4DE467AF08F191AF7632EE3BD058DA101.crl rsync://repo-rpki.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/253E2BB4DE467AF08F191AF7632EE3BD058DA101.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/253E2BB4DE467AF08F191AF7632EE3BD058DA101.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 14:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:ca:38:0e:18:67:ae:7e:8f:7b:4b:ed:15:af:04:f5:0d:ed:0a:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=253E2BB4DE467AF08F191AF7632EE3BD058DA101 Validity Not Before: May 18 11:16:19 2024 GMT Not After : May 21 20:04:19 2024 GMT Subject: CN=17F19C6F63D9C1F447FD80EB3E03F0AD03F01FEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f1:64:b0:81:27:91:92:f8:b0:c9:5e:9c:d9: 7b:7b:95:23:d9:1f:89:ae:cf:3f:09:bd:55:d3:0c: 84:04:e4:4e:af:e4:b6:6a:ef:8f:48:3d:f1:85:cb: 01:3c:36:f5:59:46:49:ca:39:3d:d0:00:4f:50:0c: 99:4f:ad:d7:9b:54:44:f5:da:92:f0:2c:b9:66:35: ce:19:3e:69:81:8d:f3:b6:0f:e3:70:ae:6f:25:92: ac:89:8e:ba:ee:dc:b7:96:0d:ae:82:d5:bc:50:70: ce:40:10:13:e3:c7:dc:df:99:98:97:8b:f2:c2:63: dc:14:23:ae:6e:a8:2a:6a:a3:62:e7:9c:85:a4:1f: c3:ee:77:bc:5e:1c:f1:7e:d5:0b:5c:52:95:44:0b: 2e:8f:0a:4c:46:6e:d8:2b:b1:81:7d:0a:4c:7b:02: 08:eb:f6:a6:1d:54:47:1f:84:20:ae:3e:51:52:73: 64:d4:78:84:10:a3:09:3e:fa:f9:fa:c8:0d:97:6d: 66:49:bb:64:8a:ba:03:54:e2:56:ab:3d:7e:75:e3: 42:95:fc:32:60:40:4f:8a:7d:5e:c6:89:32:8b:a0: 33:03:bc:e4:bf:3a:57:4e:03:09:72:7c:26:88:c9: 4c:b5:27:13:14:5b:cf:4d:8a:f1:0a:47:1b:01:7c: cb:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:F1:9C:6F:63:D9:C1:F4:47:FD:80:EB:3E:03:F0:AD:03:F0:1F:EE X509v3 Authority Key Identifier: keyid:25:3E:2B:B4:DE:46:7A:F0:8F:19:1A:F7:63:2E:E3:BD:05:8D:A1:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/253E2BB4DE467AF08F191AF7632EE3BD058DA101.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/253E2BB4DE467AF08F191AF7632EE3BD058DA101.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/253E2BB4DE467AF08F191AF7632EE3BD058DA101.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:77:38:97:d0:a6:9e:32:21:18:d1:8e:a9:5e:fc:29:ed:54: 18:d5:86:44:d3:fb:c9:dd:f5:a7:62:27:c8:3a:a0:e8:23:fd: 07:25:df:02:0e:e3:fb:cb:6f:83:c4:01:29:49:0d:0e:0b:74: 92:07:37:d5:d6:27:ad:f0:d4:aa:d0:3a:5f:07:fa:aa:af:41: 89:24:56:f2:c9:57:0b:e9:ac:c3:82:b8:43:f2:d8:3f:8f:99: f7:45:06:ff:28:8c:d2:b7:71:52:1f:76:2f:3c:a3:36:e5:5f: 54:9e:ce:b7:7f:9b:e1:07:60:f0:73:0e:2b:4f:61:20:37:17: e0:85:50:8d:91:c1:33:32:6b:54:a5:b9:c9:b2:c4:8e:f7:73: a0:94:0d:5a:b9:4d:ff:15:88:23:df:94:3f:ae:61:d5:2e:ac: 7e:dd:a5:2f:33:d8:12:d3:d5:41:c9:85:d4:6d:f6:01:a8:a9: f9:2e:f4:76:49:32:a7:6e:9b:0a:82:3f:11:a0:8b:a0:bf:e6: 82:1e:eb:31:e3:b1:00:bf:a6:8e:2c:1a:a2:b3:2b:f9:1a:ff: 2d:22:68:91:5c:db:0d:5e:42:4a:d9:a2:e4:dc:7e:32:59:fb: 5b:d4:64:2a:6a:cd:89:a5:d2:b6:59:5e:e3:66:c9:dc:83:08: dd:33:63:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQco4Dhhnrn6Pe0vtFa8E9Q3tCqEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjUzRTJCQjRERTQ2N0FGMDhGMTkxQUY3NjMyRUUzQkQw NThEQTEwMTAeFw0yNDA1MTgxMTE2MTlaFw0yNDA1MjEyMDA0MTlaMDMxMTAvBgNV BAMTKDE3RjE5QzZGNjNEOUMxRjQ0N0ZEODBFQjNFMDNGMEFEMDNGMDFGRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR8WSwgSeRkviwyV6c2Xt7lSPZ H4muzz8JvVXTDIQE5E6v5LZq749IPfGFywE8NvVZRknKOT3QAE9QDJlPrdebVET1 2pLwLLlmNc4ZPmmBjfO2D+Nwrm8lkqyJjrru3LeWDa6C1bxQcM5AEBPjx9zfmZiX i/LCY9wUI65uqCpqo2LnnIWkH8Pud7xeHPF+1QtcUpVECy6PCkxGbtgrsYF9Ckx7 Agjr9qYdVEcfhCCuPlFSc2TUeIQQowk++vn6yA2XbWZJu2SKugNU4larPX5140KV /DJgQE+KfV7GiTKLoDMDvOS/OldOAwlyfCaIyUy1JxMUW89NivEKRxsBfMvVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF/Gcb2PZwfRH/YDrPgPwrQPwH+4wHwYDVR0j BBgwFoAUJT4rtN5GevCPGRr3Yy7jvQWNoQEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y Y2Q3NTM2ZC05ZTEwLTRkNDktYjZjYS0wNDFjYzlhNTkxNGUvMC8yNTNFMkJCNERF NDY3QUYwOEYxOTFBRjc2MzJFRTNCRDA1OERBMTAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjUzRTJCQjRERTQ2N0FGMDhGMTkxQUY3NjMyRUUzQkQwNThE QTEwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmNkNzUzNmQtOWUxMC00ZDQ5LWI2 Y2EtMDQxY2M5YTU5MTRlLzAvMjUzRTJCQjRERTQ2N0FGMDhGMTkxQUY3NjMyRUUz QkQwNThEQTEwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACl3OJfQpp4yIRjRjqle/CntVBjVhkTT+8nd 9adiJ8g6oOgj/Qcl3wIO4/vLb4PEASlJDQ4LdJIHN9XWJ63w1KrQOl8H+qqvQYkk VvLJVwvprMOCuEPy2D+PmfdFBv8ojNK3cVIfdi88ozblX1Sezrd/m+EHYPBzDitP YSA3F+CFUI2RwTMya1SlucmyxI73c6CUDVq5Tf8ViCPflD+uYdUurH7dpS8z2BLT 1UHJhdRt9gGoqfku9HZJMqdumwqCPxGgi6C/5oIe6zHjsQC/po4sGqKzK/ka/y0i aJFc2w1eQkrZouTcfjJZ+1vUZCpqzYml0rZZXuNmydyDCN0zY0Y= -----END CERTIFICATE-----Generated at Sat May 18 12:14:47 2024 by rpki-client on console-fra.rpki-client.org