$ rpki-client -vvf repo-rpki.idnic.net/repo/5ae2b8b3-dec8-41cf-a16d-e1171561d725/0/D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.mft File: D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.mft (raw, json) Hash identifier: pFQrDvPKLnuTlg3p7bYpdy15IH9D5sSxTsxdrkYM8S0= Subject key identifier: D1:60:CA:AB:24:A3:82:BC:92:AD:50:CE:08:40:6A:F0:F2:E0:5C:9C Authority key identifier: D9:D0:73:0D:B5:12:95:FE:C5:BD:48:0C:DD:42:B5:E8:51:7C:8F:DB Certificate issuer: /CN=D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB Certificate serial: 551506791C25E458BC6877ACEE4975FB1492F128 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ae2b8b3-dec8-41cf-a16d-e1171561d725/0/D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.mft Manifest number: 0160 Signing time: Sun 19 May 2024 23:31:43 +0000 Manifest this update: Sun 19 May 2024 23:26:43 +0000 Manifest next update: Thu 23 May 2024 04:43:43 +0000 Files and hashes: 1: 3130332e3138332e3235302e302f32332d3234203d3e2034383030.roa (hash: o4MSjMa5d9GDiKlBXKifxX/bwpEutGiuQB9fWy7LmpE=) 2: D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.crl (hash: uUf8OBmmPgCKT/8t/NEK6mOSkIAnwshRyP06XUNt2h4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ae2b8b3-dec8-41cf-a16d-e1171561d725/0/D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.crl rsync://repo-rpki.idnic.net/repo/5ae2b8b3-dec8-41cf-a16d-e1171561d725/0/D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 19:53:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:15:06:79:1c:25:e4:58:bc:68:77:ac:ee:49:75:fb:14:92:f1:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB Validity Not Before: May 19 23:26:43 2024 GMT Not After : May 23 04:43:43 2024 GMT Subject: CN=D160CAAB24A382BC92AD50CE08406AF0F2E05C9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b7:29:ab:a6:c4:23:f8:9c:0d:0f:e9:6e:3a: cf:ed:ee:38:bc:a7:c3:9a:7e:8e:ac:81:16:52:ec: ea:0d:a0:dc:ba:1c:fd:c1:44:01:e6:06:67:e1:c8: 34:53:88:15:00:72:0b:6f:c6:7d:60:ec:3d:7e:92: 4d:5c:87:e5:d4:86:44:95:72:71:08:bf:9a:93:66: 58:d0:a5:99:24:a5:56:d6:c4:b0:ff:cd:e8:47:24: d0:d2:c2:2e:ff:92:a1:16:59:b9:ab:a9:c8:96:9f: f3:25:f9:37:4e:d7:9e:e7:6f:df:c2:a8:7c:a1:ba: 4a:c9:f9:91:e6:3e:b8:00:2b:d7:33:7d:14:05:69: 1a:1b:65:5f:25:1a:15:f5:39:79:1a:13:bc:2a:f7: f2:ad:70:c3:97:fe:85:35:5e:84:96:a7:fd:fd:32: 64:9a:0d:de:49:59:24:87:08:67:87:c7:24:35:e5: 5a:57:d6:52:f1:06:ec:6d:eb:ad:09:92:e0:5f:3e: e9:8b:08:a5:f6:99:e0:f9:46:47:6a:6a:05:97:be: 39:bc:a7:46:39:87:93:75:9a:ed:8c:22:81:66:a0: 37:a9:c2:16:0c:74:17:af:d8:42:b2:1e:2f:97:26: 7b:65:94:83:5e:43:31:74:e6:cf:22:7a:fe:53:8c: c7:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:60:CA:AB:24:A3:82:BC:92:AD:50:CE:08:40:6A:F0:F2:E0:5C:9C X509v3 Authority Key Identifier: keyid:D9:D0:73:0D:B5:12:95:FE:C5:BD:48:0C:DD:42:B5:E8:51:7C:8F:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ae2b8b3-dec8-41cf-a16d-e1171561d725/0/D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ae2b8b3-dec8-41cf-a16d-e1171561d725/0/D9D0730DB51295FEC5BD480CDD42B5E8517C8FDB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:9f:6c:84:49:f2:0b:e3:46:77:39:cd:32:33:ea:40:fb:23: 3c:7d:8a:f9:ca:3a:95:2d:31:da:fb:55:7f:8d:43:d8:00:cc: 29:48:e8:15:19:2b:45:20:67:c4:f8:0d:e3:57:e3:58:2a:ec: b2:ac:47:4b:af:1c:41:c6:df:d5:7a:e1:85:41:52:cb:4e:5e: 5b:fa:f7:d8:2c:9c:3b:7a:1b:01:71:30:b8:51:ad:59:9a:07: 25:75:e0:21:ed:cd:8b:e6:43:50:5b:a6:71:97:b1:72:33:56: c8:6b:3e:7f:44:9c:86:b7:75:40:d9:77:f2:b0:76:51:b0:08: ca:c9:b1:ec:79:63:b8:a5:f2:fa:22:36:85:39:ab:91:8c:70: d7:ce:7a:dd:01:b9:e6:c6:ba:c5:67:25:ed:ef:75:d8:2f:c5: 26:23:3c:f6:23:bf:92:dd:bf:ae:17:99:ef:75:20:7d:f8:26: 34:4e:ec:05:9d:65:de:f2:b1:7a:a3:c2:4f:1f:fd:c1:4d:30: 4f:84:56:16:ae:2f:3c:5a:c7:46:e6:7f:fb:f5:c8:12:5d:1b: 78:5e:a6:2a:d8:e5:7f:bd:ff:30:4f:d2:21:d3:8d:3d:ff:02: c9:67:dc:62:d4:ef:eb:eb:a5:36:83:7d:3c:83:8a:27:98:de: bf:cd:55:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVRUGeRwl5Fi8aHes7kl1+xSS8SgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDlEMDczMERCNTEyOTVGRUM1QkQ0ODBDREQ0MkI1RTg1 MTdDOEZEQjAeFw0yNDA1MTkyMzI2NDNaFw0yNDA1MjMwNDQzNDNaMDMxMTAvBgNV BAMTKEQxNjBDQUFCMjRBMzgyQkM5MkFENTBDRTA4NDA2QUYwRjJFMDVDOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCotymrpsQj+JwND+luOs/t7ji8 p8Oafo6sgRZS7OoNoNy6HP3BRAHmBmfhyDRTiBUAcgtvxn1g7D1+kk1ch+XUhkSV cnEIv5qTZljQpZkkpVbWxLD/zehHJNDSwi7/kqEWWbmrqciWn/Ml+TdO157nb9/C qHyhukrJ+ZHmPrgAK9czfRQFaRobZV8lGhX1OXkaE7wq9/KtcMOX/oU1XoSWp/39 MmSaDd5JWSSHCGeHxyQ15VpX1lLxBuxt660JkuBfPumLCKX2meD5RkdqagWXvjm8 p0Y5h5N1mu2MIoFmoDepwhYMdBev2EKyHi+XJntllINeQzF05s8iev5TjMfhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0WDKqySjgrySrVDOCEBq8PLgXJwwHwYDVR0j BBgwFoAU2dBzDbUSlf7FvUgM3UK16FF8j9swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YWUyYjhiMy1kZWM4LTQxY2YtYTE2ZC1lMTE3MTU2MWQ3MjUvMC9EOUQwNzMwREI1 MTI5NUZFQzVCRDQ4MENERDQyQjVFODUxN0M4RkRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDlEMDczMERCNTEyOTVGRUM1QkQ0ODBDREQ0MkI1RTg1MTdD OEZEQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWFlMmI4YjMtZGVjOC00MWNmLWEx NmQtZTExNzE1NjFkNzI1LzAvRDlEMDczMERCNTEyOTVGRUM1QkQ0ODBDREQ0MkI1 RTg1MTdDOEZEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEKfbIRJ8gvjRnc5zTIz6kD7Izx9ivnKOpUt Mdr7VX+NQ9gAzClI6BUZK0UgZ8T4DeNX41gq7LKsR0uvHEHG39V64YVBUstOXlv6 99gsnDt6GwFxMLhRrVmaByV14CHtzYvmQ1BbpnGXsXIzVshrPn9EnIa3dUDZd/Kw dlGwCMrJsex5Y7il8voiNoU5q5GMcNfOet0BuebGusVnJe3vddgvxSYjPPYjv5Ld v64Xme91IH34JjRO7AWdZd7ysXqjwk8f/cFNME+EVhauLzxax0bmf/v1yBJdG3he pirY5X+9/zBP0iHTjT3/Asln3GLU7+vrpTaDfTyDiieY3r/NVWI= -----END CERTIFICATE-----Generated at Mon May 20 00:16:37 2024 by rpki-client on console-fra.rpki-client.org