$ rpki-client -vvf repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft File: 68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft (raw, json) Hash identifier: k8PvBtta+lD9BlpliCCO+b8TBSdLf1wxezd0w5Ha+B8= Subject key identifier: 46:02:6D:A3:6F:AF:1B:CA:51:FA:DE:4E:28:C4:FA:12:B0:07:D1:B8 Authority key identifier: 68:D5:78:2F:BA:DB:91:4C:FD:74:AE:28:DA:59:78:4A:5A:AE:AA:F8 Certificate issuer: /CN=68D5782FBADB914CFD74AE28DA59784A5AAEAAF8 Certificate serial: 4F6F17F1CF051C008D2F2459AA8C75BBEAC58A87 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft Manifest number: 0393 Signing time: Sun 12 May 2024 07:50:51 +0000 Manifest this update: Sun 12 May 2024 07:45:51 +0000 Manifest next update: Wed 15 May 2024 14:23:51 +0000 Files and hashes: 1: 3130332e3136312e3131302e302f32342d3234203d3e20313431363135.roa (hash: wqT4YxfKrX82ErXv7NQpfUWWeGupbCLsTwFEQ7da63o=) 2: 3130332e3136312e3131312e302f32342d3234203d3e20313431363135.roa (hash: YoHGSDIPIgygMyXcj3zMqFTauxvWK6zCZBFW1pZGtAA=) 3: 68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.crl (hash: dICvJQII4wPYMGcR9bVx2T+In391+r5RvWvpjX9fJ7o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.crl rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 19:06:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:6f:17:f1:cf:05:1c:00:8d:2f:24:59:aa:8c:75:bb:ea:c5:8a:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68D5782FBADB914CFD74AE28DA59784A5AAEAAF8 Validity Not Before: May 12 07:45:51 2024 GMT Not After : May 15 14:23:51 2024 GMT Subject: CN=46026DA36FAF1BCA51FADE4E28C4FA12B007D1B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d7:4f:83:08:cf:82:dd:87:d7:38:0c:be:fc: d3:14:50:16:18:0e:61:f7:14:c8:3e:5e:a4:5d:d7: 41:e9:0d:4b:75:46:1b:0d:63:59:c3:b6:9d:0b:54: d9:bf:c1:42:c2:42:1b:21:78:3f:a9:87:e5:d6:cd: 45:a5:b0:cd:6f:37:fd:92:b1:43:f8:1b:02:76:8a: 8b:4e:57:ba:b3:d2:ec:36:19:9d:71:e2:f9:2e:a0: fa:19:d1:76:f1:7e:b0:34:63:bb:e3:07:f1:b9:58: 1a:f0:95:bd:bc:12:a3:f7:1c:14:d4:6e:02:f8:94: 7b:4f:85:99:5b:55:4c:44:ff:25:70:de:c0:41:23: 7f:30:33:ea:ca:1d:6a:7c:00:85:77:bc:c8:b9:50: 5f:cf:fc:e4:16:28:b7:01:be:a2:31:25:63:12:82: 40:c2:97:25:32:3d:93:d4:7c:ef:81:96:e1:af:2d: ae:3c:a1:f1:ce:39:1b:dc:0f:ec:0f:6b:20:91:71: 3c:3e:c3:e2:3a:ba:2d:38:2a:8e:39:b9:bb:95:43: fd:dd:a9:6e:bf:cc:61:bd:60:9c:bd:b3:8e:bd:1a: 96:f5:22:18:0a:79:49:e1:86:dc:1f:c8:11:c3:81: 1b:e2:37:c3:3d:45:44:5f:bc:76:32:5a:5a:26:57: 64:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:02:6D:A3:6F:AF:1B:CA:51:FA:DE:4E:28:C4:FA:12:B0:07:D1:B8 X509v3 Authority Key Identifier: keyid:68:D5:78:2F:BA:DB:91:4C:FD:74:AE:28:DA:59:78:4A:5A:AE:AA:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:99:5b:c1:4e:04:26:fe:8f:07:84:3e:5c:1c:b7:18:6b:9f: 63:86:09:7f:d1:ce:cb:a6:da:4b:84:c7:c2:d1:b4:82:90:7a: e5:2e:37:98:60:15:1f:2f:31:47:45:89:e3:84:eb:d8:f1:e2: d6:90:2b:ae:e8:09:44:49:20:8e:98:3a:44:a3:f1:e8:02:6c: 66:44:18:de:0c:c0:1b:aa:53:03:13:ab:00:15:dc:9f:23:50: e2:ba:bb:d0:cd:41:b0:77:a2:85:1b:18:c7:90:b8:09:bd:ea: 96:54:dc:97:f2:7e:c6:01:96:39:f5:88:95:92:1c:a7:88:0e: 26:75:6a:9f:8d:73:13:10:a3:e2:c7:77:36:7e:dd:b3:a5:bd: 70:ed:95:e4:fe:13:97:e7:ea:93:82:80:63:e4:16:bb:40:8a: 8c:86:24:30:0a:e3:ec:e1:33:7a:b2:d6:ab:e5:fa:e0:d7:bb: b4:2e:5d:4f:ff:ba:2a:76:49:b7:17:16:2c:28:b0:38:2d:4a: be:28:bc:29:7d:37:d2:dc:6a:e3:35:50:e4:b5:f5:0f:d4:a2: 00:e4:53:6e:4b:03:0d:d0:de:5b:54:dc:e8:cb:1c:5e:17:81: 41:64:92:43:2f:18:d6:11:e2:ce:df:03:e0:16:2e:26:dd:0f: f9:41:b3:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT28X8c8FHACNLyRZqox1u+rFiocwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhENTc4MkZCQURCOTE0Q0ZENzRBRTI4REE1OTc4NEE1 QUFFQUFGODAeFw0yNDA1MTIwNzQ1NTFaFw0yNDA1MTUxNDIzNTFaMDMxMTAvBgNV BAMTKDQ2MDI2REEzNkZBRjFCQ0E1MUZBREU0RTI4QzRGQTEyQjAwN0QxQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ10+DCM+C3YfXOAy+/NMUUBYY DmH3FMg+XqRd10HpDUt1RhsNY1nDtp0LVNm/wULCQhsheD+ph+XWzUWlsM1vN/2S sUP4GwJ2iotOV7qz0uw2GZ1x4vkuoPoZ0XbxfrA0Y7vjB/G5WBrwlb28EqP3HBTU bgL4lHtPhZlbVUxE/yVw3sBBI38wM+rKHWp8AIV3vMi5UF/P/OQWKLcBvqIxJWMS gkDClyUyPZPUfO+BluGvLa48ofHOORvcD+wPayCRcTw+w+I6ui04Ko45ubuVQ/3d qW6/zGG9YJy9s469Gpb1IhgKeUnhhtwfyBHDgRviN8M9RURfvHYyWlomV2SjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURgJto2+vG8pR+t5OKMT6ErAH0bgwHwYDVR0j BBgwFoAUaNV4L7rbkUz9dK4o2ll4SlquqvgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZjQwOGU0NC0zZTljLTQ1ZTUtYmNhNC01ZGZiZDRiMjcxMzAvMC82OEQ1NzgyRkJB REI5MTRDRkQ3NEFFMjhEQTU5Nzg0QTVBQUVBQUY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjhENTc4MkZCQURCOTE0Q0ZENzRBRTI4REE1OTc4NEE1QUFF QUFGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2Y0MDhlNDQtM2U5Yy00NWU1LWJj YTQtNWRmYmQ0YjI3MTMwLzAvNjhENTc4MkZCQURCOTE0Q0ZENzRBRTI4REE1OTc4 NEE1QUFFQUFGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABmZW8FOBCb+jweEPlwctxhrn2OGCX/Rzsum 2kuEx8LRtIKQeuUuN5hgFR8vMUdFieOE69jx4taQK67oCURJII6YOkSj8egCbGZE GN4MwBuqUwMTqwAV3J8jUOK6u9DNQbB3ooUbGMeQuAm96pZU3JfyfsYBljn1iJWS HKeIDiZ1ap+NcxMQo+LHdzZ+3bOlvXDtleT+E5fn6pOCgGPkFrtAioyGJDAK4+zh M3qy1qvl+uDXu7QuXU//uip2SbcXFiwosDgtSr4ovCl9N9LcauM1UOS19Q/UogDk U25LAw3Q3ltU3OjLHF4XgUFkkkMvGNYR4s7fA+AWLibdD/lBswM= -----END CERTIFICATE-----Generated at Sun May 12 08:28:11 2024 by rpki-client on console-fra.rpki-client.org