$ rpki-client -vvf repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft File: DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft (raw, json) Hash identifier: p6zkh+lBPmqiVen/rxGIZOkcnwvtT4ApMKMniN76G5E= Subject key identifier: 6E:76:97:58:89:8F:D3:9D:EA:09:10:C5:C3:8D:9C:22:EB:CE:B7:25 Authority key identifier: DD:5A:CD:C0:B2:D0:91:54:5E:18:5E:B1:FA:80:C0:00:7C:9A:FA:16 Certificate issuer: /CN=DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16 Certificate serial: 0C9094D5D651B2BCA3A44577269FCC2E62098D89 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.cer Subject info access: rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft Manifest number: A9 Signing time: Sun 19 May 2024 17:41:45 +0000 Manifest this update: Sun 19 May 2024 17:36:45 +0000 Manifest next update: Wed 22 May 2024 21:16:45 +0000 Files and hashes: 1: 3130332e37302e3132322e302f32342d3234203d3e20313530393830.roa (hash: hS9W5zhiPMoA5xFQ7ZKaftiZbmY4HQaJ34cbk5T3AvA=) 2: 323030313a6466323a373463303a3a2f34382d3438203d3e20313530393830.roa (hash: VXHzGzWWOdUHSL0pFV0k3y50wM3LEutF4Pd4G82/XLo=) 3: 3130332e37302e3132332e302f32342d3234203d3e20313530393830.roa (hash: MK8sCC8N+jxIle5DouV0FAWtS3LVmt81dQuXnTzLQj0=) 4: DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.crl (hash: WTPFOc7qgrXYF6+lXeP3mjBxkUOHs5Avw2OilpJaNHQ=) 5: 3130332e37302e3132322e302f32332d3233203d3e20313530393830.roa (hash: D5TFqs/7+yZw/tAMFfTD12HRpkSXTSlEOrad5BOjHfA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.crl rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 19:53:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:90:94:d5:d6:51:b2:bc:a3:a4:45:77:26:9f:cc:2e:62:09:8d:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16 Validity Not Before: May 19 17:36:45 2024 GMT Not After : May 22 21:16:45 2024 GMT Subject: CN=6E769758898FD39DEA0910C5C38D9C22EBCEB725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b6:b4:67:38:34:3c:c2:f5:3c:a1:5b:30:7f: 71:1d:ba:92:38:58:33:ab:c1:f7:20:5b:18:35:7d: 43:aa:6b:3a:e2:90:ff:82:a0:15:ce:38:c5:42:cf: f3:25:ca:77:d2:d2:48:ca:86:54:3a:d0:ba:f6:bc: aa:3e:1b:5e:ef:c7:99:ad:1c:31:21:cb:f2:44:a4: d2:ca:e3:76:a1:5f:e5:79:e7:fa:75:f2:db:9d:8d: cb:a1:e0:9d:66:2e:a2:fb:e2:cd:2c:a1:e0:b6:65: 11:08:65:f3:d1:39:4a:63:10:b0:93:90:81:4b:e2: d0:48:31:01:77:66:ca:cc:47:4a:8c:ad:ac:27:e4: 15:2a:72:61:d8:a6:19:6f:f0:97:1c:e5:b8:b5:bf: 18:ab:a5:fa:62:14:fe:ed:14:0f:52:af:33:9e:c0: 6d:6e:67:83:fd:bb:0f:dd:48:9f:ae:7b:9b:e7:91: f1:f6:13:7c:37:fa:a4:a1:3e:27:bd:68:13:6c:af: ba:70:6f:f6:39:a0:b4:84:26:8a:37:6d:00:fb:85: 8e:95:f4:2c:e8:bb:9a:17:cc:c4:a9:9c:96:de:c0: 8e:c2:c3:0f:5e:85:44:98:f0:6f:39:38:31:99:fa: fd:4b:9b:bd:5d:7b:55:8c:59:4d:e9:1c:db:f0:a8: 4a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:76:97:58:89:8F:D3:9D:EA:09:10:C5:C3:8D:9C:22:EB:CE:B7:25 X509v3 Authority Key Identifier: keyid:DD:5A:CD:C0:B2:D0:91:54:5E:18:5E:B1:FA:80:C0:00:7C:9A:FA:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:55:91:e2:49:37:75:66:14:fe:00:6e:fa:f0:f5:cf:b6:f7: d9:0d:88:83:f9:d7:9d:f6:af:0f:17:74:10:f7:d7:5e:fb:89: 09:82:55:77:fa:2e:32:31:e6:50:ac:22:fe:43:ac:eb:5c:00: d7:38:26:ac:5d:17:bb:94:e9:0c:23:85:30:6c:a5:bf:55:0c: d8:3d:5a:2a:9e:97:c4:fc:59:f7:28:c3:a7:d7:41:1a:46:1a: e5:9c:a7:02:87:c8:d6:56:f0:ff:c6:10:e7:5b:f0:6c:02:d7: 84:17:13:58:7c:a7:2d:6f:71:57:21:46:52:80:d4:cb:a3:7c: 87:2c:dd:87:8b:21:9c:a8:fe:59:8d:e0:45:8e:35:18:ab:0a: 1f:29:fc:5d:2d:39:d5:ff:42:76:bd:ce:21:dc:9f:01:70:c9: 43:9d:98:b2:1b:88:38:9a:51:dd:21:02:02:cb:b1:d0:01:12: 9e:9d:ff:e1:55:56:c6:dd:6c:0a:ec:88:4d:cf:93:55:fc:64: 30:b0:d7:93:77:4f:e2:d2:dc:34:01:c9:81:92:ab:f4:3e:29: 02:dc:06:75:80:3c:74:96:06:af:11:3a:92:f1:8d:c6:af:99: 94:cf:cd:79:ae:ee:47:72:b6:0c:16:47:ca:5f:c3:52:34:06: ed:d4:22:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDJCU1dZRsryjpEV3Jp/MLmIJjYkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ1QUNEQzBCMkQwOTE1NDVFMTg1RUIxRkE4MEMwMDA3 QzlBRkExNjAeFw0yNDA1MTkxNzM2NDVaFw0yNDA1MjIyMTE2NDVaMDMxMTAvBgNV BAMTKDZFNzY5NzU4ODk4RkQzOURFQTA5MTBDNUMzOEQ5QzIyRUJDRUI3MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0trRnODQ8wvU8oVswf3EdupI4 WDOrwfcgWxg1fUOqazrikP+CoBXOOMVCz/MlynfS0kjKhlQ60Lr2vKo+G17vx5mt HDEhy/JEpNLK43ahX+V55/p18tudjcuh4J1mLqL74s0soeC2ZREIZfPROUpjELCT kIFL4tBIMQF3ZsrMR0qMrawn5BUqcmHYphlv8Jcc5bi1vxirpfpiFP7tFA9SrzOe wG1uZ4P9uw/dSJ+ue5vnkfH2E3w3+qShPie9aBNsr7pwb/Y5oLSEJoo3bQD7hY6V 9Czou5oXzMSpnJbewI7Cww9ehUSY8G85ODGZ+v1Lm71de1WMWU3pHNvwqEr5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbnaXWImP053qCRDFw42cIuvOtyUwHwYDVR0j BBgwFoAU3VrNwLLQkVReGF6x+oDAAHya+hYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MzI1MDY2Mi0zZWVmLTRhYTktOWVkZS01NjI5ZDViNmVhOTUvMC9ERDVBQ0RDMEIy RDA5MTU0NUUxODVFQjFGQTgwQzAwMDdDOUFGQTE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQ1QUNEQzBCMkQwOTE1NDVFMTg1RUIxRkE4MEMwMDA3QzlB RkExNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTMyNTA2NjItM2VlZi00YWE5LTll ZGUtNTYyOWQ1YjZlYTk1LzAvREQ1QUNEQzBCMkQwOTE1NDVFMTg1RUIxRkE4MEMw MDA3QzlBRkExNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAtVkeJJN3VmFP4Abvrw9c+299kNiIP51532 rw8XdBD31177iQmCVXf6LjIx5lCsIv5DrOtcANc4JqxdF7uU6QwjhTBspb9VDNg9 Wiqel8T8Wfcow6fXQRpGGuWcpwKHyNZW8P/GEOdb8GwC14QXE1h8py1vcVchRlKA 1MujfIcs3YeLIZyo/lmN4EWONRirCh8p/F0tOdX/Qna9ziHcnwFwyUOdmLIbiDia Ud0hAgLLsdABEp6d/+FVVsbdbArsiE3Pk1X8ZDCw15N3T+LS3DQByYGSq/Q+KQLc BnWAPHSWBq8ROpLxjcavmZTPzXmu7kdytgwWR8pfw1I0Bu3UIso= -----END CERTIFICATE-----Generated at Sun May 19 18:31:47 2024 by rpki-client on console-fra.rpki-client.org