$ rpki-client -vvf repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/22825A0BEE926683AC41A0486AEF55AF8C1C228F.mft File: 22825A0BEE926683AC41A0486AEF55AF8C1C228F.mft (raw, json) Hash identifier: 6wxL+X+4U28QImxHncbMiUwh0vDN2QO1c6ZNLDK6Bnk= Subject key identifier: FC:ED:B5:ED:81:BB:01:DA:7B:7B:22:1E:A2:D1:B4:6D:48:D4:A1:72 Authority key identifier: 22:82:5A:0B:EE:92:66:83:AC:41:A0:48:6A:EF:55:AF:8C:1C:22:8F Certificate issuer: /CN=22825A0BEE926683AC41A0486AEF55AF8C1C228F Certificate serial: 593C21516DDD0CC516EFF981DE38A084547C11B7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22825A0BEE926683AC41A0486AEF55AF8C1C228F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/22825A0BEE926683AC41A0486AEF55AF8C1C228F.mft Manifest number: D2 Signing time: Sat 18 May 2024 18:50:38 +0000 Manifest this update: Sat 18 May 2024 18:45:38 +0000 Manifest next update: Tue 21 May 2024 19:07:38 +0000 Files and hashes: 1: 3130332e3133392e3137352e302f32342d3234203d3e20313331373435.roa (hash: 6RwsHpVuEBgiayot6DjxhqJmSM+51wxV4ZO9EM2lzF8=) 2: 22825A0BEE926683AC41A0486AEF55AF8C1C228F.crl (hash: pGgKRiatjsVqIbm/ErdznDfcrxjyCw05j6zIVKPr07k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/22825A0BEE926683AC41A0486AEF55AF8C1C228F.crl rsync://repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/22825A0BEE926683AC41A0486AEF55AF8C1C228F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22825A0BEE926683AC41A0486AEF55AF8C1C228F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 19:07:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:3c:21:51:6d:dd:0c:c5:16:ef:f9:81:de:38:a0:84:54:7c:11:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22825A0BEE926683AC41A0486AEF55AF8C1C228F Validity Not Before: May 18 18:45:38 2024 GMT Not After : May 21 19:07:38 2024 GMT Subject: CN=FCEDB5ED81BB01DA7B7B221EA2D1B46D48D4A172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:25:04:1e:db:f0:ba:94:c1:2f:eb:e4:aa:ab: bc:ad:f7:1e:a8:17:23:da:72:93:0e:be:2d:8b:e8: 1d:eb:69:be:2f:a9:21:99:46:45:b7:94:ac:f2:fb: 04:e7:59:aa:d5:a0:e9:dc:a9:4e:e4:86:57:8b:ee: dc:0b:76:37:f6:75:6d:95:df:8f:93:48:38:29:ff: 46:fb:96:dd:7a:67:21:54:92:1b:20:54:d0:80:e2: 46:8c:9d:12:51:b5:f1:37:a1:10:ff:d1:da:a9:60: 9e:4a:ba:eb:6d:68:0b:49:6c:ae:34:ba:53:ef:9b: c8:05:42:e0:ae:a5:b8:48:6e:bb:22:5b:4f:e4:ab: bb:76:22:77:f7:77:f6:9f:82:08:33:9a:82:23:71: ae:8d:6c:1d:71:86:b6:b0:4f:8b:76:e9:67:72:cf: 83:c8:84:3c:d5:c2:2a:1c:2e:16:2c:9b:3a:22:36: 5e:ba:2c:12:b5:cb:41:aa:9e:80:4f:80:67:5f:59: 53:b1:87:51:d9:98:b8:0b:57:b7:6e:ef:16:e1:8b: c8:cd:6b:a2:e4:60:5d:e9:c2:65:7a:29:b6:93:6b: 5a:22:bf:90:21:e0:90:2e:31:7f:e8:45:f7:71:12: 65:89:68:b6:98:4c:76:06:67:e0:8e:fe:0b:87:f4: 84:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:ED:B5:ED:81:BB:01:DA:7B:7B:22:1E:A2:D1:B4:6D:48:D4:A1:72 X509v3 Authority Key Identifier: keyid:22:82:5A:0B:EE:92:66:83:AC:41:A0:48:6A:EF:55:AF:8C:1C:22:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/22825A0BEE926683AC41A0486AEF55AF8C1C228F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22825A0BEE926683AC41A0486AEF55AF8C1C228F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/22825A0BEE926683AC41A0486AEF55AF8C1C228F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:03:26:f1:67:bd:b3:fb:e5:74:ff:ca:01:36:ad:5c:2c:79: fc:96:36:ed:d1:59:0b:41:32:e3:1b:c4:87:1b:d0:1b:55:a1: a0:86:1f:94:51:bd:90:00:2f:2e:e6:9e:b2:f9:e4:ce:f9:01: 13:ba:3e:a3:6b:49:6c:e6:7d:bc:9a:00:aa:e0:cb:ce:8e:a2: 9f:76:38:8c:50:52:b2:d9:af:ff:f2:3a:7c:b5:07:45:0f:95: 77:f9:ac:e8:9d:4d:70:f4:46:a3:d9:5a:a7:23:07:61:7b:a2: 52:78:88:fd:50:14:ce:fb:1a:bf:56:4e:44:9b:00:30:6a:a5: 61:d4:9f:71:83:e5:62:bf:e4:5c:6d:d3:24:cb:7f:44:58:0f: 27:76:5b:41:de:b0:b0:a3:b2:3e:00:5c:e3:43:04:d0:53:f8: 3c:9d:3e:a7:46:55:44:3d:49:d4:1c:ca:e2:eb:30:15:48:4a: 12:91:1b:de:35:76:13:c0:24:ec:6c:fe:26:4b:dd:13:52:6e: 51:6f:75:ba:d6:0d:a5:c0:a7:e8:47:4a:38:e8:70:dd:3b:91: 41:fb:78:1a:74:2e:3a:cd:db:8c:99:3d:56:0f:f0:fa:8d:bb: 83:ba:70:e7:c0:b2:70:ff:8e:83:33:63:5d:92:a4:56:04:1d: e3:bf:34:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWTwhUW3dDMUW7/mB3jighFR8EbcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI4MjVBMEJFRTkyNjY4M0FDNDFBMDQ4NkFFRjU1QUY4 QzFDMjI4RjAeFw0yNDA1MTgxODQ1MzhaFw0yNDA1MjExOTA3MzhaMDMxMTAvBgNV BAMTKEZDRURCNUVEODFCQjAxREE3QjdCMjIxRUEyRDFCNDZENDhENEExNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRJQQe2/C6lMEv6+Sqq7yt9x6o FyPacpMOvi2L6B3rab4vqSGZRkW3lKzy+wTnWarVoOncqU7khleL7twLdjf2dW2V 34+TSDgp/0b7lt16ZyFUkhsgVNCA4kaMnRJRtfE3oRD/0dqpYJ5KuuttaAtJbK40 ulPvm8gFQuCupbhIbrsiW0/kq7t2Inf3d/afgggzmoIjca6NbB1xhrawT4t26Wdy z4PIhDzVwiocLhYsmzoiNl66LBK1y0GqnoBPgGdfWVOxh1HZmLgLV7du7xbhi8jN a6LkYF3pwmV6KbaTa1oiv5Ah4JAuMX/oRfdxEmWJaLaYTHYGZ+CO/guH9IQ/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/O217YG7Adp7eyIeotG0bUjUoXIwHwYDVR0j BBgwFoAUIoJaC+6SZoOsQaBIau9Vr4wcIo8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OTAwMjA4Yi0zMmFjLTRhMjYtOWQ5Mi02MDlhZDc2MTgzYzEvMC8yMjgyNUEwQkVF OTI2NjgzQUM0MUEwNDg2QUVGNTVBRjhDMUMyMjhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI4MjVBMEJFRTkyNjY4M0FDNDFBMDQ4NkFFRjU1QUY4QzFD MjI4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzkwMDIwOGItMzJhYy00YTI2LTlk OTItNjA5YWQ3NjE4M2MxLzAvMjI4MjVBMEJFRTkyNjY4M0FDNDFBMDQ4NkFFRjU1 QUY4QzFDMjI4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGMDJvFnvbP75XT/ygE2rVwsefyWNu3RWQtB MuMbxIcb0BtVoaCGH5RRvZAALy7mnrL55M75ARO6PqNrSWzmfbyaAKrgy86Oop92 OIxQUrLZr//yOny1B0UPlXf5rOidTXD0RqPZWqcjB2F7olJ4iP1QFM77Gr9WTkSb ADBqpWHUn3GD5WK/5Fxt0yTLf0RYDyd2W0HesLCjsj4AXONDBNBT+DydPqdGVUQ9 SdQcyuLrMBVIShKRG941dhPAJOxs/iZL3RNSblFvdbrWDaXAp+hHSjjocN07kUH7 eBp0LjrN24yZPVYP8PqNu4O6cOfAsnD/joMzY12SpFYEHeO/NJM= -----END CERTIFICATE-----Generated at Sat May 18 19:20:39 2024 by rpki-client on console-fra.rpki-client.org