$ rpki-client -vvf repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.mft File: 69D341364BC344B4ED6B3A65031AACB403AB3222.mft (raw, json) Hash identifier: kSTZdTUPop3QvkSOeZ9YR4/ErlwI3yVYx2RFMJ9vL54= Subject key identifier: 60:B9:3F:B0:39:3F:EF:7D:83:3C:A9:F6:35:3C:59:C5:F0:7F:43:18 Authority key identifier: 69:D3:41:36:4B:C3:44:B4:ED:6B:3A:65:03:1A:AC:B4:03:AB:32:22 Certificate issuer: /CN=69D341364BC344B4ED6B3A65031AACB403AB3222 Certificate serial: 535DD6A2587B417E6F5044575D944B673C4088BB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69D341364BC344B4ED6B3A65031AACB403AB3222.cer Subject info access: rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.mft Manifest number: 0435 Signing time: Thu 23 May 2024 17:01:17 +0000 Manifest this update: Thu 23 May 2024 16:56:17 +0000 Manifest next update: Sun 26 May 2024 18:22:17 +0000 Files and hashes: 1: 323430323a326134303a3a2f33322d3438203d3e20313336383733.roa (hash: YW5mycHoMYt30I/MroADwhTM9WIv2HP4LkWL7TWNYnc=) 2: 3130332e3130352e35322e302f32322d3234203d3e20313336383733.roa (hash: U7R10SL2ksiYciPK6cnF09wrHd0fjIE9H3BgBXbOEWk=) 3: 69D341364BC344B4ED6B3A65031AACB403AB3222.crl (hash: r0GCiRCMXgGioT0zhdq/OAN3Ep0sqRE+iZB8yj5ihGU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.crl rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69D341364BC344B4ED6B3A65031AACB403AB3222.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 18:22:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:5d:d6:a2:58:7b:41:7e:6f:50:44:57:5d:94:4b:67:3c:40:88:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69D341364BC344B4ED6B3A65031AACB403AB3222 Validity Not Before: May 23 16:56:17 2024 GMT Not After : May 26 18:22:17 2024 GMT Subject: CN=60B93FB0393FEF7D833CA9F6353C59C5F07F4318 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:33:46:bd:00:4f:b9:bd:e0:32:01:1c:a8:8f: 32:34:c3:14:c8:fc:f8:24:36:8f:28:d1:ce:01:3e: c8:13:3e:44:74:51:18:00:80:e4:ca:8e:43:41:70: e5:a6:b8:9d:53:78:5c:7f:d1:de:09:73:7f:33:a0: 13:93:10:13:86:8d:c0:3a:cf:e9:1e:f5:3b:18:2a: 85:c1:c4:81:bf:f9:7e:fe:4f:c9:34:f6:e6:59:3c: ac:37:92:c8:17:68:56:a6:8f:06:b6:43:8b:66:40: 21:c5:60:b9:07:70:43:76:9c:72:6a:34:6f:d0:a9: 2c:48:31:10:36:85:9f:77:db:4f:5f:95:3b:b4:dd: 1b:a4:1d:d4:48:53:67:c5:f6:35:a5:7c:32:3d:b6: 33:3d:2d:32:1b:c2:1c:d4:b2:85:9d:b2:85:64:7c: 64:34:f8:0c:96:df:3f:3c:d5:07:c7:e5:9e:36:4f: cc:24:8c:e5:7b:be:ea:f1:54:6d:a3:b6:ba:70:ca: 82:22:29:30:74:47:0f:8f:64:2e:85:bf:46:37:ea: 25:d4:62:27:38:18:31:8b:8b:b1:51:98:bd:39:ed: 6d:f7:e5:a3:ce:99:98:f7:9d:bf:92:ca:c1:f8:58: 82:ed:37:db:f5:e3:6f:d4:b6:ed:a1:27:bc:89:e1: eb:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:B9:3F:B0:39:3F:EF:7D:83:3C:A9:F6:35:3C:59:C5:F0:7F:43:18 X509v3 Authority Key Identifier: keyid:69:D3:41:36:4B:C3:44:B4:ED:6B:3A:65:03:1A:AC:B4:03:AB:32:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69D341364BC344B4ED6B3A65031AACB403AB3222.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:29:62:3f:4c:34:6b:b2:b1:60:53:67:bb:78:47:47:31:b2: 7c:a1:52:9d:cd:88:b5:ed:1b:c3:ac:cb:89:88:57:13:73:48: 1d:10:7f:c6:86:35:0d:76:61:fa:7a:35:ba:31:0c:a9:82:26: 6b:2f:a8:33:c9:03:17:84:50:7d:9b:a6:49:38:d4:ee:cf:e0: d0:3d:51:96:0c:2f:e4:e2:08:c9:5f:c5:0d:1b:97:67:f3:45: 78:3a:25:39:67:0c:04:55:99:6c:3b:eb:a6:74:a8:42:82:40: 37:81:de:2b:8d:dd:09:58:3f:07:c8:80:a6:5d:c8:50:fa:d8: e2:cd:f3:23:01:a7:10:10:e6:9c:21:a1:9b:a3:a9:26:43:06: 29:3c:a0:0b:b4:7b:f1:70:f3:d3:1d:17:40:44:34:02:29:3f: 75:05:d2:29:0a:e4:8c:1a:52:ec:8f:65:2a:e2:0f:b1:77:d9: 68:2b:e8:b3:e0:43:f3:5e:c5:8f:6d:55:a1:66:93:8d:8a:df: 52:b3:6d:21:5a:d3:cd:99:b9:13:20:67:51:1a:54:43:90:a2: 8a:80:b5:36:5a:70:ad:37:95:60:c2:ae:da:6c:aa:c8:c6:b3: 0d:35:52:d1:57:33:49:ec:32:fb:85:73:59:b8:2d:2b:af:76: 53:4f:89:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU13Wolh7QX5vUERXXZRLZzxAiLswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjlEMzQxMzY0QkMzNDRCNEVENkIzQTY1MDMxQUFDQjQw M0FCMzIyMjAeFw0yNDA1MjMxNjU2MTdaFw0yNDA1MjYxODIyMTdaMDMxMTAvBgNV BAMTKDYwQjkzRkIwMzkzRkVGN0Q4MzNDQTlGNjM1M0M1OUM1RjA3RjQzMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClM0a9AE+5veAyARyojzI0wxTI /PgkNo8o0c4BPsgTPkR0URgAgOTKjkNBcOWmuJ1TeFx/0d4Jc38zoBOTEBOGjcA6 z+ke9TsYKoXBxIG/+X7+T8k09uZZPKw3ksgXaFamjwa2Q4tmQCHFYLkHcEN2nHJq NG/QqSxIMRA2hZ93209flTu03RukHdRIU2fF9jWlfDI9tjM9LTIbwhzUsoWdsoVk fGQ0+AyW3z881QfH5Z42T8wkjOV7vurxVG2jtrpwyoIiKTB0Rw+PZC6Fv0Y36iXU Yic4GDGLi7FRmL057W335aPOmZj3nb+SysH4WILtN9v142/Utu2hJ7yJ4ev/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYLk/sDk/732DPKn2NTxZxfB/QxgwHwYDVR0j BBgwFoAUadNBNkvDRLTtazplAxqstAOrMiIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NTdhNmJjYi05ZWI2LTQ5ZGUtYjk5OC0wYmVkM2M1YzEyNzgvMC82OUQzNDEzNjRC QzM0NEI0RUQ2QjNBNjUwMzFBQUNCNDAzQUIzMjIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjlEMzQxMzY0QkMzNDRCNEVENkIzQTY1MDMxQUFDQjQwM0FC MzIyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjU3YTZiY2ItOWViNi00OWRlLWI5 OTgtMGJlZDNjNWMxMjc4LzAvNjlEMzQxMzY0QkMzNDRCNEVENkIzQTY1MDMxQUFD QjQwM0FCMzIyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGUpYj9MNGuysWBTZ7t4R0cxsnyhUp3NiLXt G8Osy4mIVxNzSB0Qf8aGNQ12Yfp6NboxDKmCJmsvqDPJAxeEUH2bpkk41O7P4NA9 UZYML+TiCMlfxQ0bl2fzRXg6JTlnDARVmWw766Z0qEKCQDeB3iuN3QlYPwfIgKZd yFD62OLN8yMBpxAQ5pwhoZujqSZDBik8oAu0e/Fw89MdF0BENAIpP3UF0ikK5Iwa UuyPZSriD7F32Wgr6LPgQ/NexY9tVaFmk42K31KzbSFa082ZuRMgZ1EaVEOQooqA tTZacK03lWDCrtpsqsjGsw01UtFXM0nsMvuFc1m4LSuvdlNPib0= -----END CERTIFICATE-----Generated at Thu May 23 19:55:45 2024 by rpki-client on console-ams.rpki-client.org