$ rpki-client -vvf repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft File: 25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft (raw, json) Hash identifier: FdgWqKyvpmniL0amEVIz0rQAW48hnveKNRSStZU8pJQ= Subject key identifier: AD:7A:2B:7D:A0:BA:FA:CC:56:12:9B:B4:6D:40:A8:B1:87:D2:9B:23 Authority key identifier: 25:F4:64:02:0D:9C:BB:8D:18:BC:7C:47:16:9F:97:8D:24:F4:F1:BE Certificate issuer: /CN=25F464020D9CBB8D18BC7C47169F978D24F4F1BE Certificate serial: 0A696C066CDF080934267B5C4914672F0223E236 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft Manifest number: 01FE Signing time: Wed 29 May 2024 04:22:04 +0000 Manifest this update: Wed 29 May 2024 04:17:04 +0000 Manifest next update: Sat 01 Jun 2024 05:43:04 +0000 Files and hashes: 1: 3130332e3137362e3138302e302f32342d3234203d3e20313437313333.roa (hash: RhYHpxsovCTcwfjrzg41hpMRBHxH+eexhb8eztFJlHA=) 2: 3130332e3137362e3138312e302f32342d3234203d3e20313437313333.roa (hash: 3cI2USRoAF5mya23UhZSTWv0iQNT2wDJ+fnKNdYEdWg=) 3: 25F464020D9CBB8D18BC7C47169F978D24F4F1BE.crl (hash: 731+hjjjNTX6PGrxXDneg2DpoQvHmeJM2PEvwf6nu/w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.crl rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 04:52:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:69:6c:06:6c:df:08:09:34:26:7b:5c:49:14:67:2f:02:23:e2:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25F464020D9CBB8D18BC7C47169F978D24F4F1BE Validity Not Before: May 29 04:17:04 2024 GMT Not After : Jun 1 05:43:04 2024 GMT Subject: CN=AD7A2B7DA0BAFACC56129BB46D40A8B187D29B23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c7:ad:cd:d7:5e:80:6d:63:f5:29:62:20:53: e3:20:ca:96:8c:51:ac:40:3f:3d:ef:98:db:3a:77: 1b:02:a7:bb:c6:23:10:ce:da:56:3a:64:15:bb:d1: 39:b2:d7:44:5e:8d:41:15:fb:b9:fb:f6:98:f5:05: af:4a:9e:2c:91:4d:71:9b:b2:a3:10:0e:11:ff:0f: a8:83:00:8e:d9:35:e1:03:2a:39:73:a5:47:3b:e8: 9e:22:a0:a9:2c:9e:81:6d:59:6f:f7:04:6f:63:bf: 41:94:ff:a1:d1:81:ba:34:7d:45:83:61:6e:ae:0c: 49:ab:af:c4:81:ac:5d:2f:6f:41:2d:09:fc:e3:2f: b8:dc:ab:d6:88:0d:74:89:3d:56:c8:fd:1c:b9:77: d5:ba:02:d0:c3:f7:7a:48:f6:db:4a:5b:d2:fe:31: 58:1a:d8:95:b4:da:65:27:99:d3:dd:fb:59:95:c8: f9:8d:e8:71:e5:4c:10:27:6f:0e:ce:99:68:dd:e2: 23:fe:d2:95:d1:ae:4e:0a:5f:9d:e6:a3:9b:0a:43: b8:68:17:8f:5c:be:38:9c:8e:4b:82:67:06:37:67: e1:de:cd:f8:70:b3:b5:7c:9b:d6:1f:d9:0a:13:1e: 36:fd:da:d7:e8:ac:62:c3:86:fe:bc:90:76:2c:c1: 67:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:7A:2B:7D:A0:BA:FA:CC:56:12:9B:B4:6D:40:A8:B1:87:D2:9B:23 X509v3 Authority Key Identifier: keyid:25:F4:64:02:0D:9C:BB:8D:18:BC:7C:47:16:9F:97:8D:24:F4:F1:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:e6:4d:96:1e:1c:df:2d:58:77:9a:77:11:df:de:3b:cd:06: 94:12:0c:23:01:64:3c:25:2d:d2:cf:1e:55:3b:96:23:5e:3a: d1:66:6c:7f:ff:27:02:a4:f7:68:a0:e3:d8:a9:e2:b2:8e:83: d5:60:96:fa:83:58:83:07:48:5a:a5:ec:f6:97:ab:e4:2f:d9: 00:be:c2:1f:5a:54:4b:0b:af:84:fe:14:d0:6b:41:81:93:ca: 1d:97:bb:84:97:f7:3c:66:ec:27:be:31:38:a4:9b:e9:11:89: d1:c8:0f:68:80:11:74:37:80:37:74:bc:55:93:98:96:52:17: ce:34:04:e1:ca:78:9b:6e:05:b6:2e:a7:7a:cb:f7:d5:0f:df: ea:24:c2:27:63:8d:58:0a:ac:1b:16:31:00:b4:e6:79:bd:be: 64:42:ea:b2:63:85:01:18:4e:db:49:11:55:98:be:f3:c6:50: cd:cc:55:55:0a:c4:bb:a5:2a:6e:70:96:24:5d:ae:b6:48:a7: eb:85:35:9c:38:08:11:16:79:c5:94:1d:ff:bc:56:d2:3e:23: 40:ed:f9:dd:bc:cb:d4:68:c3:e3:0b:7f:0f:58:68:d8:df:5e: eb:27:01:74:11:eb:ef:52:3f:a3:c6:54:7a:67:93:65:67:5f: 3a:aa:3b:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCmlsBmzfCAk0JntcSRRnLwIj4jYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVGNDY0MDIwRDlDQkI4RDE4QkM3QzQ3MTY5Rjk3OEQy NEY0RjFCRTAeFw0yNDA1MjkwNDE3MDRaFw0yNDA2MDEwNTQzMDRaMDMxMTAvBgNV BAMTKEFEN0EyQjdEQTBCQUZBQ0M1NjEyOUJCNDZENDBBOEIxODdEMjlCMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0x63N116AbWP1KWIgU+MgypaM UaxAPz3vmNs6dxsCp7vGIxDO2lY6ZBW70Tmy10RejUEV+7n79pj1Ba9KniyRTXGb sqMQDhH/D6iDAI7ZNeEDKjlzpUc76J4ioKksnoFtWW/3BG9jv0GU/6HRgbo0fUWD YW6uDEmrr8SBrF0vb0EtCfzjL7jcq9aIDXSJPVbI/Ry5d9W6AtDD93pI9ttKW9L+ MVga2JW02mUnmdPd+1mVyPmN6HHlTBAnbw7OmWjd4iP+0pXRrk4KX53mo5sKQ7ho F49cvjicjkuCZwY3Z+Hezfhws7V8m9Yf2QoTHjb92tforGLDhv68kHYswWd3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrXorfaC6+sxWEpu0bUCosYfSmyMwHwYDVR0j BBgwFoAUJfRkAg2cu40YvHxHFp+XjST08b4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MjhkZTg2Yi1hMjZlLTRiMGYtYTgzYy0wNWZhYjRhMzBjNzcvMC8yNUY0NjQwMjBE OUNCQjhEMThCQzdDNDcxNjlGOTc4RDI0RjRGMUJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjVGNDY0MDIwRDlDQkI4RDE4QkM3QzQ3MTY5Rjk3OEQyNEY0 RjFCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjI4ZGU4NmItYTI2ZS00YjBmLWE4 M2MtMDVmYWI0YTMwYzc3LzAvMjVGNDY0MDIwRDlDQkI4RDE4QkM3QzQ3MTY5Rjk3 OEQyNEY0RjFCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA/mTZYeHN8tWHeadxHf3jvNBpQSDCMBZDwl LdLPHlU7liNeOtFmbH//JwKk92ig49ip4rKOg9VglvqDWIMHSFql7PaXq+Qv2QC+ wh9aVEsLr4T+FNBrQYGTyh2Xu4SX9zxm7Ce+MTikm+kRidHID2iAEXQ3gDd0vFWT mJZSF840BOHKeJtuBbYup3rL99UP3+okwidjjVgKrBsWMQC05nm9vmRC6rJjhQEY TttJEVWYvvPGUM3MVVUKxLulKm5wliRdrrZIp+uFNZw4CBEWecWUHf+8VtI+I0Dt +d28y9Row+MLfw9YaNjfXusnAXQR6+9SP6PGVHpnk2VnXzqqO+0= -----END CERTIFICATE-----Generated at Wed May 29 04:43:04 2024 by rpki-client on console-fra.rpki-client.org