$ rpki-client -vvf repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft File: DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft (raw, json) Hash identifier: CJ7NdI29f6enwGIElbf1YcmiDAymfxiWRFZzKMOY/98= Subject key identifier: 52:40:14:E0:EC:3C:8B:0B:7B:BA:F2:4B:E2:D2:4E:B6:A2:E9:62:23 Authority key identifier: DB:1B:D7:85:1F:D1:A4:87:B0:12:83:F6:AE:4B:46:E0:E4:93:5A:3C Certificate issuer: /CN=DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C Certificate serial: 10A683495BFB9E1E678B8516F4E16D526824F0BA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft Manifest number: 0100 Signing time: Tue 28 May 2024 20:41:25 +0000 Manifest this update: Tue 28 May 2024 20:36:25 +0000 Manifest next update: Sat 01 Jun 2024 02:04:25 +0000 Files and hashes: 1: 3130332e36362e33382e302f32342d3234203d3e20313530323431.roa (hash: 1HoiFmEcyRKS2aEnVkxZxsKTwflosSqrVKTEA5YTJiA=) 2: DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.crl (hash: fwRlU7FZFBGX81Xq8OdCnegC7L88xV6G3bDmI9GhF00=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.crl rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 02:04:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:a6:83:49:5b:fb:9e:1e:67:8b:85:16:f4:e1:6d:52:68:24:f0:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C Validity Not Before: May 28 20:36:25 2024 GMT Not After : Jun 1 02:04:25 2024 GMT Subject: CN=524014E0EC3C8B0B7BBAF24BE2D24EB6A2E96223 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ef:c8:d0:15:0c:df:58:95:e2:6f:8a:60:87: 4c:34:c7:b9:55:fa:94:59:00:d6:21:3a:11:19:bb: d1:59:f7:d1:90:71:3e:17:ea:60:9b:12:d7:b6:a4: 46:71:9d:e3:63:3b:dc:35:5e:f6:68:b1:fe:f4:7a: 07:42:05:37:00:a1:39:88:41:c4:c3:d9:75:e6:a2: 47:34:ff:8f:21:4a:fa:fe:71:3a:1d:ee:7b:d4:4c: ec:6c:b8:81:34:ff:e8:35:a6:c3:a0:01:0f:f5:ce: 55:3f:d1:c7:54:b9:70:4e:48:d5:8f:d0:ce:6e:18: c7:ec:28:58:c4:a3:e2:83:f9:b3:af:71:10:85:ad: d3:d5:ea:75:fb:08:73:6e:aa:5d:39:80:0c:7d:86: 04:44:57:78:bb:48:c8:c6:5c:f2:da:dd:01:e4:83: 6a:64:90:95:43:24:ed:c6:3b:d7:88:11:a9:0d:67: f2:3b:b0:3a:20:7e:90:be:08:0b:ba:3f:3a:18:5d: a6:53:b0:32:3b:b9:e1:39:56:b3:24:c9:6a:f9:11: 62:2c:3d:68:8a:8d:2f:cb:24:3e:a1:ea:1d:c5:bc: 76:f9:10:bb:31:dc:0f:60:4d:7d:dd:b1:7f:61:74: 45:fb:38:de:f3:2f:6a:ef:26:66:34:63:89:5a:15: 6b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:40:14:E0:EC:3C:8B:0B:7B:BA:F2:4B:E2:D2:4E:B6:A2:E9:62:23 X509v3 Authority Key Identifier: keyid:DB:1B:D7:85:1F:D1:A4:87:B0:12:83:F6:AE:4B:46:E0:E4:93:5A:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:29:d6:c6:57:09:ca:52:77:c4:94:ab:33:2f:02:2d:69:55: bf:91:2d:20:57:a8:bb:03:54:77:68:e6:c5:b9:e6:b6:e8:5a: d3:0a:84:44:a1:fd:9e:7c:e9:c4:e6:a6:bd:8c:a2:1d:17:04: 40:9c:5d:ba:48:d3:a5:d1:f8:f5:20:d9:4f:77:b4:55:54:f6: 67:26:1e:1f:6b:4d:10:b8:09:5c:03:68:97:af:ba:11:56:5e: 4d:a5:7d:21:64:05:06:6b:fc:2d:00:85:f2:dd:06:ca:74:91: 37:ae:58:ef:db:aa:20:04:6a:b3:0a:05:02:af:3e:92:29:50: 8a:6d:05:a9:84:51:ce:e7:10:da:5f:e9:d6:5a:6d:c2:c4:2b: 31:77:8b:d5:6c:b7:5b:ca:78:55:49:ce:b5:6b:9b:f1:18:4b: 16:38:ab:cf:37:eb:9c:9d:c9:77:de:f0:26:a9:23:06:85:21: db:eb:fc:54:10:9e:20:23:aa:6b:95:e8:6a:11:04:3f:4f:36: 27:66:d5:58:8a:f3:80:04:ef:f0:9a:98:2a:83:96:00:2d:6f: c5:a8:fe:34:a9:cb:6e:42:86:70:29:ec:e1:6d:71:a5:f7:09: 66:55:7c:15:19:71:12:86:b1:34:fa:f1:07:a2:6b:15:5e:fc: 10:e2:eb:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEKaDSVv7nh5ni4UW9OFtUmgk8LowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREIxQkQ3ODUxRkQxQTQ4N0IwMTI4M0Y2QUU0QjQ2RTBF NDkzNUEzQzAeFw0yNDA1MjgyMDM2MjVaFw0yNDA2MDEwMjA0MjVaMDMxMTAvBgNV BAMTKDUyNDAxNEUwRUMzQzhCMEI3QkJBRjI0QkUyRDI0RUI2QTJFOTYyMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB78jQFQzfWJXib4pgh0w0x7lV +pRZANYhOhEZu9FZ99GQcT4X6mCbEte2pEZxneNjO9w1XvZosf70egdCBTcAoTmI QcTD2XXmokc0/48hSvr+cTod7nvUTOxsuIE0/+g1psOgAQ/1zlU/0cdUuXBOSNWP 0M5uGMfsKFjEo+KD+bOvcRCFrdPV6nX7CHNuql05gAx9hgREV3i7SMjGXPLa3QHk g2pkkJVDJO3GO9eIEakNZ/I7sDogfpC+CAu6PzoYXaZTsDI7ueE5VrMkyWr5EWIs PWiKjS/LJD6h6h3FvHb5ELsx3A9gTX3dsX9hdEX7ON7zL2rvJmY0Y4laFWs3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUkAU4Ow8iwt7uvJL4tJOtqLpYiMwHwYDVR0j BBgwFoAU2xvXhR/RpIewEoP2rktG4OSTWjwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z M2IyZWU3NC04YzNjLTRiYzMtYjZmYi1mMzViMjAwYTIwZWIvMC9EQjFCRDc4NTFG RDFBNDg3QjAxMjgzRjZBRTRCNDZFMEU0OTM1QTNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREIxQkQ3ODUxRkQxQTQ4N0IwMTI4M0Y2QUU0QjQ2RTBFNDkz NUEzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzNiMmVlNzQtOGMzYy00YmMzLWI2 ZmItZjM1YjIwMGEyMGViLzAvREIxQkQ3ODUxRkQxQTQ4N0IwMTI4M0Y2QUU0QjQ2 RTBFNDkzNUEzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE0p1sZXCcpSd8SUqzMvAi1pVb+RLSBXqLsD VHdo5sW55rboWtMKhESh/Z586cTmpr2Moh0XBECcXbpI06XR+PUg2U93tFVU9mcm Hh9rTRC4CVwDaJevuhFWXk2lfSFkBQZr/C0AhfLdBsp0kTeuWO/bqiAEarMKBQKv PpIpUIptBamEUc7nENpf6dZabcLEKzF3i9Vst1vKeFVJzrVrm/EYSxY4q88365yd yXfe8CapIwaFIdvr/FQQniAjqmuV6GoRBD9PNidm1ViK84AE7/CamCqDlgAtb8Wo /jSpy25ChnAp7OFtcaX3CWZVfBUZcRKGsTT68QeiaxVe/BDi69Y= -----END CERTIFICATE-----Generated at Tue May 28 22:49:00 2024 by rpki-client on console-ams.rpki-client.org