$ rpki-client -vvf repo-rpki.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.mft File: 6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.mft (raw, json) Hash identifier: woutfmThPSUHComngDypZnvzsZBclpweV0rkYMf8ev4= Subject key identifier: A1:DD:EA:39:0C:A4:0D:9E:FD:DC:2E:30:AD:5F:CF:6E:AC:BD:69:62 Authority key identifier: 6D:DA:5C:1E:72:FD:CA:12:9B:06:9E:D9:C4:4B:8A:AE:08:BA:E6:40 Certificate issuer: /CN=6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640 Certificate serial: 3FC71950C7ABE1F7B3498C2CBAD9BED732259872 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.cer Subject info access: rsync://repo-rpki.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.mft Manifest number: 042E Signing time: Sat 18 May 2024 09:10:58 +0000 Manifest this update: Sat 18 May 2024 09:05:58 +0000 Manifest next update: Tue 21 May 2024 18:45:58 +0000 Files and hashes: 1: 3130332e3233332e3130302e302f32342d3234203d3e20313333333537.roa (hash: 0ug9HWfDxykVQYV8vcKhELjtHbUZ3CSnQ9TbFxZhWhs=) 2: 6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.crl (hash: BoReYkxVZgbuB3ZyLXHP4LNW6eDreE2frb/9a5LDxH0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.crl rsync://repo-rpki.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 14:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:c7:19:50:c7:ab:e1:f7:b3:49:8c:2c:ba:d9:be:d7:32:25:98:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640 Validity Not Before: May 18 09:05:58 2024 GMT Not After : May 21 18:45:58 2024 GMT Subject: CN=A1DDEA390CA40D9EFDDC2E30AD5FCF6EACBD6962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:67:e7:9e:22:fc:50:b4:16:dd:f5:7d:26:e9: c3:b4:49:bf:96:d5:c7:fa:22:93:41:4a:35:d3:a7: 68:fd:0e:27:de:82:be:8f:a4:88:b0:e1:a6:49:1a: 39:48:6a:ed:e0:60:b5:27:42:d8:18:2c:ea:ee:d0: 38:ec:a8:b7:a2:b7:8a:56:40:4f:18:c3:28:ee:e9: e5:a7:c7:70:ae:6f:ba:e3:74:0a:ee:06:87:ec:1b: ff:73:07:00:f0:4d:2e:5a:1f:8b:58:05:0a:4a:a3: c7:7c:c9:ab:14:bd:89:97:19:dd:7a:87:80:2e:d8: 00:f4:87:3b:cd:fb:fe:a6:6b:46:31:20:96:65:01: 90:a7:26:18:28:00:3b:8b:e2:ea:4e:90:ef:be:44: 9e:5c:ec:74:76:81:03:04:82:4b:51:9e:60:5c:3b: c5:dd:14:dc:3a:a5:c4:6b:2a:a3:23:eb:c8:c3:86: ef:01:fb:37:1f:b7:a9:3f:3f:a6:8a:9d:aa:16:35: a6:bb:87:5e:8c:28:ac:64:ab:6b:42:8f:66:bb:b7: 0d:3d:80:bf:f6:8f:47:38:8f:76:e0:c8:d9:e3:5a: 50:71:fe:8b:2e:3f:32:91:d3:c0:9c:59:31:1a:4a: 5c:8f:f1:51:cd:45:d0:8f:34:f0:93:aa:03:e1:8f: 7a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:DD:EA:39:0C:A4:0D:9E:FD:DC:2E:30:AD:5F:CF:6E:AC:BD:69:62 X509v3 Authority Key Identifier: keyid:6D:DA:5C:1E:72:FD:CA:12:9B:06:9E:D9:C4:4B:8A:AE:08:BA:E6:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:5a:11:a1:e5:82:df:c3:b0:a4:47:f5:dc:09:f0:f1:d1:e5: 97:2c:db:55:ce:bc:21:c7:af:34:74:7d:b2:c6:2a:07:8b:f9: e9:a6:b9:71:4d:f4:ab:ae:77:5d:d9:38:11:d2:9e:e6:ee:10: 58:82:7d:4d:a3:ca:36:4d:d1:7d:19:00:7d:18:1e:6a:1f:4f: 16:ca:68:44:09:bf:22:10:9a:98:50:8e:c8:c3:f9:b8:57:43: 47:50:9a:0e:48:8a:9b:00:0f:60:b8:e4:ce:84:e5:e9:6a:17: e6:a2:50:eb:f9:6e:20:30:91:07:2d:f5:2e:84:5c:a6:44:07: 83:d7:13:00:65:8a:7a:09:60:0f:df:c6:20:42:dd:de:1b:ae: c7:76:5f:b2:78:74:e6:07:63:fd:65:9d:77:1d:ce:6c:a5:b2: b1:13:94:60:d6:b7:87:68:9c:f1:fe:c4:1d:3b:aa:58:43:3e: 66:e6:35:1e:aa:6e:02:c5:9f:87:65:bc:f8:93:7c:b6:81:2b: 18:07:d6:ab:f7:7e:3c:db:b4:f2:82:fb:38:f2:94:cd:f5:6b: 59:79:83:0c:bc:82:4b:a2:19:a8:3e:4f:e8:58:0f:81:0a:0f: 45:19:a0:97:93:77:80:a2:21:28:24:8d:73:6e:5b:e5:8f:4f: 16:07:47:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP8cZUMer4fezSYwsutm+1zIlmHIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkREQTVDMUU3MkZEQ0ExMjlCMDY5RUQ5QzQ0QjhBQUUw OEJBRTY0MDAeFw0yNDA1MTgwOTA1NThaFw0yNDA1MjExODQ1NThaMDMxMTAvBgNV BAMTKEExRERFQTM5MENBNDBEOUVGRERDMkUzMEFENUZDRjZFQUNCRDY5NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfZ+eeIvxQtBbd9X0m6cO0Sb+W 1cf6IpNBSjXTp2j9Difegr6PpIiw4aZJGjlIau3gYLUnQtgYLOru0DjsqLeit4pW QE8Ywyju6eWnx3Cub7rjdAruBofsG/9zBwDwTS5aH4tYBQpKo8d8yasUvYmXGd16 h4Au2AD0hzvN+/6ma0YxIJZlAZCnJhgoADuL4upOkO++RJ5c7HR2gQMEgktRnmBc O8XdFNw6pcRrKqMj68jDhu8B+zcft6k/P6aKnaoWNaa7h16MKKxkq2tCj2a7tw09 gL/2j0c4j3bgyNnjWlBx/osuPzKR08CcWTEaSlyP8VHNRdCPNPCTqgPhj3p3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUod3qOQykDZ793C4wrV/Pbqy9aWIwHwYDVR0j BBgwFoAUbdpcHnL9yhKbBp7ZxEuKrgi65kAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTdjOGMwMS00YWY3LTQxYjAtODVhMy05ZDFmYTRlYjlmYmEvMC82RERBNUMxRTcy RkRDQTEyOUIwNjlFRDlDNDRCOEFBRTA4QkFFNjQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkREQTVDMUU3MkZEQ0ExMjlCMDY5RUQ5QzQ0QjhBQUUwOEJB RTY0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTE3YzhjMDEtNGFmNy00MWIwLTg1 YTMtOWQxZmE0ZWI5ZmJhLzAvNkREQTVDMUU3MkZEQ0ExMjlCMDY5RUQ5QzQ0QjhB QUUwOEJBRTY0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAVaEaHlgt/DsKRH9dwJ8PHR5Zcs21XOvCHH rzR0fbLGKgeL+emmuXFN9Kuud13ZOBHSnubuEFiCfU2jyjZN0X0ZAH0YHmofTxbK aEQJvyIQmphQjsjD+bhXQ0dQmg5IipsAD2C45M6E5elqF+aiUOv5biAwkQct9S6E XKZEB4PXEwBlinoJYA/fxiBC3d4brsd2X7J4dOYHY/1lnXcdzmylsrETlGDWt4do nPH+xB07qlhDPmbmNR6qbgLFn4dlvPiTfLaBKxgH1qv3fjzbtPKC+zjylM31a1l5 gwy8gkuiGag+T+hYD4EKD0UZoJeTd4CiISgkjXNuW+WPTxYHR8I= -----END CERTIFICATE-----Generated at Sat May 18 09:57:32 2024 by rpki-client on console-fra.rpki-client.org