$ rpki-client -vvf repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.mft File: D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.mft (raw, json) Hash identifier: nHqdRTjXJclgh8DHl8lluOI4tERdOfLMGsJRFq+uLTE= Subject key identifier: D0:BE:77:A3:27:57:F9:37:08:95:95:E2:9C:6E:5C:4B:99:2F:55:F1 Authority key identifier: D2:5A:04:A0:E4:E5:2F:F4:22:D9:D8:FB:85:7D:23:DC:61:42:E5:FD Certificate issuer: /CN=D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD Certificate serial: 4A875414A4F5D8924D8A1B8619939AAC1358E530 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.mft Manifest number: 0432 Signing time: Sun 19 May 2024 00:50:38 +0000 Manifest this update: Sun 19 May 2024 00:45:38 +0000 Manifest next update: Wed 22 May 2024 01:31:38 +0000 Files and hashes: 1: 34332e3235322e3130342e302f32342d3234203d3e20313432333237.roa (hash: /2oKm5GJ55qpDTs1GFqIU+Nb8Ghj047mpY1YHMqcmyU=) 2: 3230322e35362e3136342e302f32322d3234203d3e203435333035.roa (hash: aM0H3X52Yq0/0wjwfdZn2gxiuSuBLwK4B/d9Usjuwlc=) 3: 34332e3235322e3130342e302f32322d3234203d3e203435333035.roa (hash: QR5ZQmBV+5KGUKP53prZx/dQr3OORlfxaMtbjKZxFP0=) 4: 3130332e32382e3131322e302f32322d3234203d3e203435333035.roa (hash: 7fPB9r+cZC0i/jamblAgwowDKz9CUVqBHZsiydCp8bc=) 5: 3132342e34302e3234382e302f32342d3234203d3e20313432333237.roa (hash: w+RYC3vYcE6YamNLwccznz3T3mrZWYac1wgLPKfCn/Q=) 6: D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.crl (hash: AoEHwh7MIvCx76ZqwPo0ZaWkka4ef3FtQm552eoy0mk=) 7: 323030313a6466303a61333a3a2f34382d3438203d3e203435333035.roa (hash: z4Q4dl7t48OgN1G7b0dK+Cv4WmJTCPGpbITX/HLogDw=) 8: 3132342e34302e3235332e302f32342d3234203d3e20313432333237.roa (hash: fW0OzyvvA/qkuIlT1CSGoksdR7jtA7ctb7JXVUDbs5E=) 9: 3132342e34302e3234382e302f32312d3234203d3e203435333035.roa (hash: 9PzdStxfSCkEVmmg8zM7CxhcOBS2/xYaf5HX1uw2aW4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.crl rsync://repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 23:11:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:87:54:14:a4:f5:d8:92:4d:8a:1b:86:19:93:9a:ac:13:58:e5:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD Validity Not Before: May 19 00:45:38 2024 GMT Not After : May 22 01:31:38 2024 GMT Subject: CN=D0BE77A32757F937089595E29C6E5C4B992F55F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:60:0d:da:e2:c2:96:01:75:9b:7d:83:77:16: a4:a3:41:b6:02:f8:7c:5b:63:1e:b6:18:f3:8a:8d: eb:52:7c:3d:bb:61:69:a5:b7:46:8b:73:af:cd:65: 11:11:50:07:26:01:af:8b:b4:c1:77:f5:77:fb:1e: e0:9e:23:28:76:f0:c2:b8:79:5b:e7:08:e4:4c:ba: ef:53:76:0d:00:ad:14:13:fd:f4:8a:12:fb:9c:5f: f1:e9:51:b0:b2:01:b5:b9:48:00:61:12:0c:96:29: 8b:af:b2:b9:31:2f:f2:1e:40:8a:03:58:f6:28:82: b0:1a:90:19:8c:fe:2d:26:37:32:2f:fe:38:04:9c: 6a:e8:51:b0:62:fd:5f:46:23:ff:56:c1:64:9e:fb: 85:49:bc:c6:c3:6d:16:c7:37:b2:1b:5d:00:8d:cb: f4:e4:89:38:ec:e2:60:48:ed:38:f6:ee:1d:cb:3a: 64:61:83:90:c8:67:b5:41:88:6b:06:b4:e0:81:cf: 4e:ab:3c:2b:2c:1f:2f:5b:49:b1:5f:b6:a8:1d:51: 40:9e:0f:05:87:c9:8b:90:d5:b7:f4:4f:ef:4d:f7: 59:0b:63:40:2a:b5:b7:de:b5:d3:4d:70:e9:92:89: c0:9d:3e:76:33:f3:71:5a:f1:72:ff:4d:8f:08:77: ff:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:BE:77:A3:27:57:F9:37:08:95:95:E2:9C:6E:5C:4B:99:2F:55:F1 X509v3 Authority Key Identifier: keyid:D2:5A:04:A0:E4:E5:2F:F4:22:D9:D8:FB:85:7D:23:DC:61:42:E5:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:04:ad:09:0c:96:9e:d8:e7:2a:db:40:08:65:0c:ec:f8:59: 6c:16:22:42:ee:e1:b4:f6:df:60:ac:5d:82:c3:b3:5f:b6:0a: 1f:2d:66:86:cd:52:6b:5d:d6:38:b0:9b:3a:dc:88:03:c4:09: 27:94:22:c0:90:7e:4e:59:b0:2c:72:b3:5b:52:8c:69:a3:b4: 83:98:3d:0a:fa:1a:7c:4d:ff:3b:56:1b:f8:71:e8:e6:d3:68: ff:24:d7:73:a0:5c:a9:43:5f:ef:fa:ab:79:64:76:09:5f:ca: 2c:6d:c2:36:c9:f5:64:a6:f9:ac:f5:e4:ab:8c:4d:57:e7:13: 3d:92:32:c7:44:33:11:00:0d:57:f8:08:5f:a1:0c:bb:09:04: a5:7e:1f:4a:fc:84:f0:23:b4:4a:b7:f2:9b:c0:4c:dc:af:a1: 57:9c:34:e5:2c:48:81:b1:7f:bc:d2:22:99:dd:f4:61:75:0d: c2:aa:6b:5d:c5:c1:28:c8:5e:88:9c:e1:7c:7d:c8:c2:b1:58: b4:6b:b4:89:62:5b:51:4c:a3:b3:fa:99:fd:c3:9f:11:33:47: 66:6b:5f:91:4f:f0:30:6a:d6:93:3f:30:3e:20:74:db:7d:5c: 9d:a2:22:e2:2f:a4:7d:32:87:ac:a7:1e:11:cb:08:68:4e:21: 41:b9:ab:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSodUFKT12JJNihuGGZOarBNY5TAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI1QTA0QTBFNEU1MkZGNDIyRDlEOEZCODU3RDIzREM2 MTQyRTVGRDAeFw0yNDA1MTkwMDQ1MzhaFw0yNDA1MjIwMTMxMzhaMDMxMTAvBgNV BAMTKEQwQkU3N0EzMjc1N0Y5MzcwODk1OTVFMjlDNkU1QzRCOTkyRjU1RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzYA3a4sKWAXWbfYN3FqSjQbYC +HxbYx62GPOKjetSfD27YWmlt0aLc6/NZRERUAcmAa+LtMF39Xf7HuCeIyh28MK4 eVvnCORMuu9Tdg0ArRQT/fSKEvucX/HpUbCyAbW5SABhEgyWKYuvsrkxL/IeQIoD WPYogrAakBmM/i0mNzIv/jgEnGroUbBi/V9GI/9WwWSe+4VJvMbDbRbHN7IbXQCN y/TkiTjs4mBI7Tj27h3LOmRhg5DIZ7VBiGsGtOCBz06rPCssHy9bSbFftqgdUUCe DwWHyYuQ1bf0T+9N91kLY0AqtbfetdNNcOmSicCdPnYz83Fa8XL/TY8Id//RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0L53oydX+TcIlZXinG5cS5kvVfEwHwYDVR0j BBgwFoAU0loEoOTlL/Qi2dj7hX0j3GFC5f0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDk1YzE5Yy0zMjYyLTQ4YzctYWYwMi0zN2E4MzVkMGE3NzkvMC9EMjVBMDRBMEU0 RTUyRkY0MjJEOUQ4RkI4NTdEMjNEQzYxNDJFNUZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDI1QTA0QTBFNEU1MkZGNDIyRDlEOEZCODU3RDIzREM2MTQy RTVGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQ5NWMxOWMtMzI2Mi00OGM3LWFm MDItMzdhODM1ZDBhNzc5LzAvRDI1QTA0QTBFNEU1MkZGNDIyRDlEOEZCODU3RDIz REM2MTQyRTVGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAUErQkMlp7Y5yrbQAhlDOz4WWwWIkLu4bT2 32CsXYLDs1+2Ch8tZobNUmtd1jiwmzrciAPECSeUIsCQfk5ZsCxys1tSjGmjtIOY PQr6GnxN/ztWG/hx6ObTaP8k13OgXKlDX+/6q3lkdglfyixtwjbJ9WSm+az15KuM TVfnEz2SMsdEMxEADVf4CF+hDLsJBKV+H0r8hPAjtEq38pvATNyvoVecNOUsSIGx f7zSIpnd9GF1DcKqa13FwSjIXoic4Xx9yMKxWLRrtIliW1FMo7P6mf3DnxEzR2Zr X5FP8DBq1pM/MD4gdNt9XJ2iIuIvpH0yh6ynHhHLCGhOIUG5qyw= -----END CERTIFICATE-----Generated at Sun May 19 01:44:54 2024 by rpki-client on console-ams.rpki-client.org