$ rpki-client -vvf repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.mft File: D9DFDED2F525C1E82251BA90ED838157F0B6FB19.mft (raw, json) Hash identifier: r25wL1YqLFArqPFFH1grwynr7bEmKHBo9MxiCoDnT7M= Subject key identifier: 5E:75:3C:D7:E2:36:EF:ED:90:5E:7E:22:69:2D:00:95:B6:7C:17:21 Authority key identifier: D9:DF:DE:D2:F5:25:C1:E8:22:51:BA:90:ED:83:81:57:F0:B6:FB:19 Certificate issuer: /CN=D9DFDED2F525C1E82251BA90ED838157F0B6FB19 Certificate serial: 26F0B5C752813DCCAF16C80D18CEE489B3211A31 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.cer Subject info access: rsync://repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.mft Manifest number: 0A Signing time: Tue 25 Jun 2024 17:41:20 +0000 Manifest this update: Tue 25 Jun 2024 17:36:20 +0000 Manifest next update: Sat 29 Jun 2024 00:24:20 +0000 Files and hashes: 1: D9DFDED2F525C1E82251BA90ED838157F0B6FB19.crl (hash: F2YPQXCmr8x3sofnbxR2cYpvs9dFVRFzhRSFGXt51es=) 2: 3130332e39382e3132302e302f32342d3234203d3e20313336383238.roa (hash: yxChVSnUcBAshSi2tdYxCJl1ssWL26R5uijV6Q3HksQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.crl rsync://repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 28 Jun 2024 22:35:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:f0:b5:c7:52:81:3d:cc:af:16:c8:0d:18:ce:e4:89:b3:21:1a:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9DFDED2F525C1E82251BA90ED838157F0B6FB19 Validity Not Before: Jun 25 17:36:20 2024 GMT Not After : Jun 29 00:24:20 2024 GMT Subject: CN=5E753CD7E236EFED905E7E22692D0095B67C1721 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:2d:93:9a:46:0b:db:7d:9e:5e:3d:de:94:ae: fa:a9:83:5a:51:6e:cc:9e:bd:87:60:0e:30:c8:7c: 2a:09:e3:b7:c3:81:e2:99:8d:22:89:2f:69:82:8a: 98:87:06:5a:b7:f6:bc:d5:9e:fa:6b:c5:d3:c5:27: 9a:9f:2c:44:00:0d:e0:de:5b:9a:9b:3c:67:9d:a0: db:eb:85:14:f3:7a:b9:61:c5:28:59:dc:ed:c4:16: 3a:3a:4a:a2:cf:7b:88:06:87:28:25:96:8b:27:9c: b6:27:00:80:05:ef:fb:c3:53:54:32:61:23:3f:6d: 84:aa:44:aa:66:a9:85:02:44:e6:1c:f3:d4:5d:22: d7:9c:5e:ff:32:6d:03:18:c9:f1:b7:cf:8b:5a:6f: 84:61:15:02:1a:aa:26:c6:e5:04:00:25:c6:0b:78: 11:37:c7:3c:36:a9:36:9e:03:b5:ed:49:97:33:90: 3f:0e:75:f3:b7:38:e0:86:3f:b4:d1:43:82:4f:bf: 8b:34:05:01:e6:aa:08:02:10:58:da:92:81:5b:02: 20:39:e0:16:02:12:e0:4e:24:08:07:a0:47:b4:9d: 0c:c2:b3:e2:c5:ab:04:ab:c8:cb:61:45:97:a3:d6: 90:e6:25:c0:ec:e6:61:1d:6c:05:66:f3:b1:b6:8a: 9d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:75:3C:D7:E2:36:EF:ED:90:5E:7E:22:69:2D:00:95:B6:7C:17:21 X509v3 Authority Key Identifier: keyid:D9:DF:DE:D2:F5:25:C1:E8:22:51:BA:90:ED:83:81:57:F0:B6:FB:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:90:ac:4c:2d:71:15:21:2d:63:fe:dc:cd:b3:92:0a:e8:bc: 21:52:80:b0:a6:22:c1:d1:93:ee:ba:d1:72:8c:69:6d:25:d7: 34:db:32:33:b9:e1:3c:d7:ee:63:17:74:a3:75:26:97:7d:dc: 78:47:ad:66:8d:93:31:57:88:4e:7d:7d:a8:ed:63:6a:75:d3: 68:1d:12:16:36:54:78:ff:ea:05:bc:04:e6:0d:75:39:8e:05: 7e:a6:a2:1d:ad:cd:fe:a1:33:5c:cc:7f:d5:8a:87:89:87:c3: c0:2b:8a:b6:e3:c8:7a:78:90:2f:b3:69:ef:db:59:44:c6:91: b7:a6:3a:23:b7:09:28:09:1b:0a:67:a3:a6:7a:26:32:7a:a7: 26:0f:6a:88:42:e5:43:65:a7:0b:0e:ed:af:a9:02:78:55:b9: 5b:a5:ac:85:33:d3:12:9e:ef:e8:d3:84:18:a6:92:dd:c8:97: 70:05:46:5d:61:ec:26:c1:9d:22:67:4a:6f:c2:13:de:27:9a: 1c:b1:c8:d1:e1:f6:1c:ec:9b:de:8e:b2:b4:c6:70:d0:eb:fc: b0:29:7a:28:01:34:d0:f0:25:f2:b8:ad:2d:b8:7b:08:c7:c1: f0:a7:64:3b:81:ad:ad:88:a4:52:84:99:86:39:bf:8d:94:0d: a3:eb:90:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJvC1x1KBPcyvFsgNGM7kibMhGjEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDlERkRFRDJGNTI1QzFFODIyNTFCQTkwRUQ4MzgxNTdG MEI2RkIxOTAeFw0yNDA2MjUxNzM2MjBaFw0yNDA2MjkwMDI0MjBaMDMxMTAvBgNV BAMTKDVFNzUzQ0Q3RTIzNkVGRUQ5MDVFN0UyMjY5MkQwMDk1QjY3QzE3MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgLZOaRgvbfZ5ePd6Urvqpg1pR bsyevYdgDjDIfCoJ47fDgeKZjSKJL2mCipiHBlq39rzVnvprxdPFJ5qfLEQADeDe W5qbPGedoNvrhRTzerlhxShZ3O3EFjo6SqLPe4gGhygllosnnLYnAIAF7/vDU1Qy YSM/bYSqRKpmqYUCROYc89RdItecXv8ybQMYyfG3z4tab4RhFQIaqibG5QQAJcYL eBE3xzw2qTaeA7XtSZczkD8OdfO3OOCGP7TRQ4JPv4s0BQHmqggCEFjakoFbAiA5 4BYCEuBOJAgHoEe0nQzCs+LFqwSryMthRZej1pDmJcDs5mEdbAVm87G2ip0lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXnU81+I27+2QXn4iaS0AlbZ8FyEwHwYDVR0j BBgwFoAU2d/e0vUlwegiUbqQ7YOBV/C2+xkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTBiZTM1My00YWI4LTRiNzctOTg4ZC03MzlmODJiOWY2NDEvMC9EOURGREVEMkY1 MjVDMUU4MjI1MUJBOTBFRDgzODE1N0YwQjZGQjE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDlERkRFRDJGNTI1QzFFODIyNTFCQTkwRUQ4MzgxNTdGMEI2 RkIxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTEwYmUzNTMtNGFiOC00Yjc3LTk4 OGQtNzM5ZjgyYjlmNjQxLzAvRDlERkRFRDJGNTI1QzFFODIyNTFCQTkwRUQ4Mzgx NTdGMEI2RkIxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHCQrEwtcRUhLWP+3M2zkgrovCFSgLCmIsHR k+660XKMaW0l1zTbMjO54TzX7mMXdKN1Jpd93HhHrWaNkzFXiE59fajtY2p102gd EhY2VHj/6gW8BOYNdTmOBX6moh2tzf6hM1zMf9WKh4mHw8ArirbjyHp4kC+zae/b WUTGkbemOiO3CSgJGwpno6Z6JjJ6pyYPaohC5UNlpwsO7a+pAnhVuVulrIUz0xKe 7+jThBimkt3Il3AFRl1h7CbBnSJnSm/CE94nmhyxyNHh9hzsm96OsrTGcNDr/LAp eigBNNDwJfK4rS24ewjHwfCnZDuBra2IpFKEmYY5v42UDaPrkEE= -----END CERTIFICATE-----Generated at Tue Jun 25 22:05:28 2024 by rpki-client on console-ams.rpki-client.org