$ rpki-client -vvf repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.mft File: 29692979765B670997413579D7BF5663C05BBD1A.mft (raw, json) Hash identifier: dmmsnu/xTOdtfyxo4x6n9P0706joz9XvoQNRyG1u1pU= Subject key identifier: 1A:77:1B:34:0B:28:58:6B:90:73:BA:F2:35:0E:8F:4F:C9:1F:A6:7F Authority key identifier: 29:69:29:79:76:5B:67:09:97:41:35:79:D7:BF:56:63:C0:5B:BD:1A Certificate issuer: /CN=29692979765B670997413579D7BF5663C05BBD1A Certificate serial: 23CB38811CA5631F7147E457AB10A1125290FFE0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29692979765B670997413579D7BF5663C05BBD1A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.mft Manifest number: 0166 Signing time: Sun 19 May 2024 02:10:54 +0000 Manifest this update: Sun 19 May 2024 02:05:54 +0000 Manifest next update: Wed 22 May 2024 09:37:54 +0000 Files and hashes: 1: 34352e3235312e37322e302f32322d3234203d3e20313331373131.roa (hash: AswLOGQkvGN5dFwlMFSQ1khWfss0RZTQjiVrURzVALM=) 2: 3130332e392e3132342e302f32322d3234203d3e20313331373131.roa (hash: LYH3r0E2gYzxoUloe5Kp0fr6er9Boo4R62ftBRBTL1I=) 3: 29692979765B670997413579D7BF5663C05BBD1A.crl (hash: O11z+vysFMctcepdyyx7xOlcZClXtMX/c+XN7nTNNe0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.crl rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29692979765B670997413579D7BF5663C05BBD1A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 23:11:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:cb:38:81:1c:a5:63:1f:71:47:e4:57:ab:10:a1:12:52:90:ff:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29692979765B670997413579D7BF5663C05BBD1A Validity Not Before: May 19 02:05:54 2024 GMT Not After : May 22 09:37:54 2024 GMT Subject: CN=1A771B340B28586B9073BAF2350E8F4FC91FA67F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9f:b3:6c:9d:73:0a:7a:84:2b:e2:5b:2e:d3: f1:d5:b0:6f:8b:ad:7c:87:36:a0:bf:b0:cc:88:b8: 83:8e:fc:0d:43:50:bb:11:77:04:5c:0a:a4:ad:f2: cd:e9:7b:3a:3b:1d:58:c4:0b:99:6b:66:65:ca:e7: 59:ad:58:b3:cb:77:df:f3:93:c4:02:94:e4:7a:6b: 0a:82:f0:10:dd:f0:55:b5:22:e9:66:ee:89:e9:9f: 03:51:51:b5:37:b2:d8:f9:2b:10:fe:4f:b5:10:bf: 4e:9c:ff:52:f2:f1:bd:82:db:87:9e:87:fe:61:66: 83:60:4a:1e:6c:76:4a:6c:e1:fa:7b:ef:1c:34:d4: 0a:d3:17:fe:6c:4e:dc:83:34:ef:34:e2:b9:78:4a: 38:bc:ec:71:5f:a9:42:35:6b:10:72:7f:fd:b2:07: 99:21:99:8a:03:69:14:bc:eb:64:80:4e:4f:93:ab: 27:5d:bb:86:f1:7e:03:47:01:ce:69:d9:91:cd:46: 4b:69:2a:22:f3:b9:9f:71:9a:99:e2:68:cb:05:bd: fe:0d:c3:47:1b:bf:95:85:99:62:35:c0:b0:f7:3f: 86:43:3e:7b:09:4e:9d:64:3d:01:b6:bc:bd:ef:a9: eb:cf:f1:5d:38:70:a0:e4:03:21:ca:af:02:1b:27: 73:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:77:1B:34:0B:28:58:6B:90:73:BA:F2:35:0E:8F:4F:C9:1F:A6:7F X509v3 Authority Key Identifier: keyid:29:69:29:79:76:5B:67:09:97:41:35:79:D7:BF:56:63:C0:5B:BD:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29692979765B670997413579D7BF5663C05BBD1A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:34:95:a1:1a:be:bf:b6:6d:48:2a:97:9f:4b:88:73:20:06: 75:30:20:af:05:7c:38:5f:35:4b:95:51:60:15:8b:a3:d6:7e: ab:03:a7:13:fa:3a:80:22:50:98:47:08:41:13:78:1a:2b:b5: dc:e5:ca:ab:37:83:f8:3b:66:56:19:37:f5:93:97:e8:ae:ab: 36:6d:94:7d:0e:3c:81:fb:1b:c4:94:5c:27:45:e2:8b:c9:51: 37:b5:90:e1:cc:f6:f9:47:a4:2f:97:96:4d:98:22:b9:ec:92: 56:be:55:f2:b9:16:4a:03:a9:83:73:5d:34:8f:70:fe:a5:89: c0:fe:4e:9b:d3:46:53:4c:c8:03:84:f5:e2:03:3b:fe:a3:51: a3:22:9e:da:90:c7:04:50:ee:2c:36:fb:e3:b7:a3:b1:ff:e3: 16:0f:3b:df:93:33:0e:f8:1b:5c:9d:76:65:11:05:ec:ed:b0: a7:35:82:e5:1b:c9:1b:4a:1b:e9:45:da:1e:d6:13:04:5b:2a: 3c:ba:26:db:e8:bd:0b:2c:20:5a:4e:f8:82:28:46:26:11:ab: 5e:e5:69:a3:76:29:c8:c4:d1:32:a8:3d:f0:46:48:31:d9:9c: c8:41:1f:b9:43:dd:53:2a:df:b2:e5:e7:bf:57:05:ee:7f:95: 63:80:33:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI8s4gRylYx9xR+RXqxChElKQ/+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk2OTI5Nzk3NjVCNjcwOTk3NDEzNTc5RDdCRjU2NjND MDVCQkQxQTAeFw0yNDA1MTkwMjA1NTRaFw0yNDA1MjIwOTM3NTRaMDMxMTAvBgNV BAMTKDFBNzcxQjM0MEIyODU4NkI5MDczQkFGMjM1MEU4RjRGQzkxRkE2N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnn7NsnXMKeoQr4lsu0/HVsG+L rXyHNqC/sMyIuIOO/A1DULsRdwRcCqSt8s3pezo7HVjEC5lrZmXK51mtWLPLd9/z k8QClOR6awqC8BDd8FW1Iulm7onpnwNRUbU3stj5KxD+T7UQv06c/1Ly8b2C24ee h/5hZoNgSh5sdkps4fp77xw01ArTF/5sTtyDNO804rl4Sji87HFfqUI1axByf/2y B5khmYoDaRS862SATk+Tqyddu4bxfgNHAc5p2ZHNRktpKiLzuZ9xmpniaMsFvf4N w0cbv5WFmWI1wLD3P4ZDPnsJTp1kPQG2vL3vqevP8V04cKDkAyHKrwIbJ3PlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGncbNAsoWGuQc7ryNQ6PT8kfpn8wHwYDVR0j BBgwFoAUKWkpeXZbZwmXQTV5179WY8BbvRowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YjBhMTFiNS05NDQxLTRjYzktYTY3Mi1iZTk3OTliNjU1MjAvMC8yOTY5Mjk3OTc2 NUI2NzA5OTc0MTM1NzlEN0JGNTY2M0MwNUJCRDFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjk2OTI5Nzk3NjVCNjcwOTk3NDEzNTc5RDdCRjU2NjNDMDVC QkQxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2IwYTExYjUtOTQ0MS00Y2M5LWE2 NzItYmU5Nzk5YjY1NTIwLzAvMjk2OTI5Nzk3NjVCNjcwOTk3NDEzNTc5RDdCRjU2 NjNDMDVCQkQxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGA0laEavr+2bUgql59LiHMgBnUwIK8FfDhf NUuVUWAVi6PWfqsDpxP6OoAiUJhHCEETeBortdzlyqs3g/g7ZlYZN/WTl+iuqzZt lH0OPIH7G8SUXCdF4ovJUTe1kOHM9vlHpC+Xlk2YIrnskla+VfK5FkoDqYNzXTSP cP6licD+TpvTRlNMyAOE9eIDO/6jUaMintqQxwRQ7iw2++O3o7H/4xYPO9+TMw74 G1yddmURBeztsKc1guUbyRtKG+lF2h7WEwRbKjy6JtvovQssIFpO+IIoRiYRq17l aaN2KcjE0TKoPfBGSDHZnMhBH7lD3VMq37Ll579XBe5/lWOAM38= -----END CERTIFICATE-----Generated at Sun May 19 02:39:07 2024 by rpki-client on console-fra.rpki-client.org