$ rpki-client -vvf repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft File: 0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft (raw, json) Hash identifier: LQ3nr9JW8GSXQ+ZuFT3i3S08WB9O2PnDlrRnGIm3d4k= Subject key identifier: 40:EC:AC:0A:EE:57:39:74:E9:17:9F:73:77:BD:25:47:B0:8C:B9:42 Authority key identifier: 0D:F8:1F:0E:E9:9B:2E:06:DB:6C:AE:E0:5C:C3:01:BE:3A:23:D1:37 Certificate issuer: /CN=0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137 Certificate serial: 7ABB802E833214D76253716F0BD2182380299654 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft Manifest number: 0432 Signing time: Sat 18 May 2024 17:31:38 +0000 Manifest this update: Sat 18 May 2024 17:26:38 +0000 Manifest next update: Wed 22 May 2024 03:24:38 +0000 Files and hashes: 1: 0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.crl (hash: mUKeIqe3UVkBZGf7nxihoaszkMcxqeoL4tNhLnm+daQ=) 2: 3130332e3132362e32382e302f32322d3234203d3e20313338313139.roa (hash: cFx4F318lmgqnqfVUsIIY+PXIESbpoeWbWeYkyG5ZuM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.crl rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:bb:80:2e:83:32:14:d7:62:53:71:6f:0b:d2:18:23:80:29:96:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137 Validity Not Before: May 18 17:26:38 2024 GMT Not After : May 22 03:24:38 2024 GMT Subject: CN=40ECAC0AEE573974E9179F7377BD2547B08CB942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c5:8d:c0:a8:e1:53:08:96:ba:85:70:5f:0c: 61:40:0b:60:cd:3c:94:8f:c6:a3:c4:1d:b3:73:ed: 99:a1:a3:ef:f7:70:b8:e5:1a:0e:50:09:e4:3a:3f: c3:34:a8:27:fe:34:2c:2c:3d:35:9a:98:1c:33:12: 52:72:f1:c6:dc:59:70:09:4e:dd:54:19:fb:fe:04: 83:31:20:53:49:9f:2a:6a:86:63:6c:7c:2f:1c:51: 11:33:c9:50:f3:29:bc:be:dd:cb:50:6f:7a:de:ce: 10:39:54:e7:fc:4b:9d:37:2f:4c:75:fe:ea:20:a8: f6:38:22:7d:7e:ef:f7:07:e6:3f:5f:1c:f0:f2:28: de:40:73:8d:5d:11:dd:96:2d:64:c3:5a:38:d6:bd: a0:f8:75:df:c3:26:6a:52:b5:08:c8:36:fd:cb:49: 22:b4:aa:d1:83:8f:83:17:3d:a5:5f:f9:db:62:49: 86:65:fe:3e:5d:ef:80:68:63:40:b2:13:48:3d:c7: 15:c8:45:88:89:fe:3a:59:b3:b5:8e:60:74:c7:51: ee:3d:8b:93:79:15:8c:39:c4:97:7e:22:7d:70:8a: 07:90:6c:dc:03:fd:46:61:7b:90:7d:94:58:05:35: f0:59:a9:8a:1e:e7:42:82:02:48:ca:d4:8d:f1:6c: 45:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:EC:AC:0A:EE:57:39:74:E9:17:9F:73:77:BD:25:47:B0:8C:B9:42 X509v3 Authority Key Identifier: keyid:0D:F8:1F:0E:E9:9B:2E:06:DB:6C:AE:E0:5C:C3:01:BE:3A:23:D1:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:87:aa:e6:58:2e:2e:a9:fd:8b:7f:30:6e:8a:01:a7:6c:43: 20:ac:ad:7e:f3:cd:01:3f:c8:fc:06:c2:42:5f:60:02:f6:4f: 9c:8b:95:65:85:0d:45:15:aa:ef:1c:43:07:6b:10:a7:2b:3e: 49:c3:1d:2d:64:46:a4:77:31:50:18:4f:8c:e8:0f:25:2a:07: 72:c6:d3:91:ad:29:06:c3:9d:a0:62:8c:9b:75:ed:5f:ed:a5: c8:d2:27:bd:3c:30:7b:02:82:1d:82:e6:3f:90:56:aa:81:e4: c1:bc:12:67:20:00:30:dc:6e:dd:73:8c:7a:67:43:b2:3c:af: c2:4b:c3:40:69:c7:80:60:39:2d:a1:b4:d6:f6:64:76:9e:0d: b0:86:c7:bf:7a:e6:b7:97:f6:60:6a:c8:05:c6:a6:74:e1:97: f7:2f:2d:1e:ae:53:2f:89:d9:55:ad:36:f0:8f:79:66:ea:2e: 79:82:cd:76:c3:af:cd:b9:68:b4:27:45:ab:c5:e1:7a:be:9d: 53:1b:96:32:d1:8a:9b:db:ee:48:64:e8:71:73:35:c3:b8:ab: df:ad:50:60:2f:d7:ac:8a:fa:77:af:32:2d:41:f9:c2:24:8e: c6:ce:d9:70:8f:62:2c:ab:a1:44:76:4b:cf:c0:9f:3d:6e:8a: 57:17:d7:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeruALoMyFNdiU3FvC9IYI4ApllQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMERGODFGMEVFOTlCMkUwNkRCNkNBRUUwNUNDMzAxQkUz QTIzRDEzNzAeFw0yNDA1MTgxNzI2MzhaFw0yNDA1MjIwMzI0MzhaMDMxMTAvBgNV BAMTKDQwRUNBQzBBRUU1NzM5NzRFOTE3OUY3Mzc3QkQyNTQ3QjA4Q0I5NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGxY3AqOFTCJa6hXBfDGFAC2DN PJSPxqPEHbNz7Zmho+/3cLjlGg5QCeQ6P8M0qCf+NCwsPTWamBwzElJy8cbcWXAJ Tt1UGfv+BIMxIFNJnypqhmNsfC8cUREzyVDzKby+3ctQb3rezhA5VOf8S503L0x1 /uogqPY4In1+7/cH5j9fHPDyKN5Ac41dEd2WLWTDWjjWvaD4dd/DJmpStQjINv3L SSK0qtGDj4MXPaVf+dtiSYZl/j5d74BoY0CyE0g9xxXIRYiJ/jpZs7WOYHTHUe49 i5N5FYw5xJd+In1wigeQbNwD/UZhe5B9lFgFNfBZqYoe50KCAkjK1I3xbEXRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQOysCu5XOXTpF59zd70lR7CMuUIwHwYDVR0j BBgwFoAUDfgfDumbLgbbbK7gXMMBvjoj0TcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZjZlYTIyMS03N2I3LTQ3OTEtYThhOC1iNTE2NGIwMGYxYzUvMC8wREY4MUYwRUU5 OUIyRTA2REI2Q0FFRTA1Q0MzMDFCRTNBMjNEMTM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMERGODFGMEVFOTlCMkUwNkRCNkNBRUUwNUNDMzAxQkUzQTIz RDEzNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2Y2ZWEyMjEtNzdiNy00NzkxLWE4 YTgtYjUxNjRiMDBmMWM1LzAvMERGODFGMEVFOTlCMkUwNkRCNkNBRUUwNUNDMzAx QkUzQTIzRDEzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMyHquZYLi6p/Yt/MG6KAadsQyCsrX7zzQE/ yPwGwkJfYAL2T5yLlWWFDUUVqu8cQwdrEKcrPknDHS1kRqR3MVAYT4zoDyUqB3LG 05GtKQbDnaBijJt17V/tpcjSJ708MHsCgh2C5j+QVqqB5MG8EmcgADDcbt1zjHpn Q7I8r8JLw0Bpx4BgOS2htNb2ZHaeDbCGx7965reX9mBqyAXGpnThl/cvLR6uUy+J 2VWtNvCPeWbqLnmCzXbDr825aLQnRavF4Xq+nVMbljLRipvb7khk6HFzNcO4q9+t UGAv16yK+nevMi1B+cIkjsbO2XCPYiyroUR2S8/Anz1uilcX1+c= -----END CERTIFICATE-----Generated at Sat May 18 18:21:12 2024 by rpki-client on console-ams.rpki-client.org