$ rpki-client -vvf repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.mft File: DBE91560EBE58F31F01F543D751B03FC02EA7D9E.mft (raw, json) Hash identifier: Co/udek0Iqi8RNiw8Nte4sBBFGURq+imnHqkLEgU8WY= Subject key identifier: ED:7D:3A:5B:22:BB:DB:E1:4E:C9:B6:73:82:F2:C0:82:3E:0B:9F:35 Authority key identifier: DB:E9:15:60:EB:E5:8F:31:F0:1F:54:3D:75:1B:03:FC:02:EA:7D:9E Certificate issuer: /CN=DBE91560EBE58F31F01F543D751B03FC02EA7D9E Certificate serial: 7287ED1BC207C50B5A815FD98D81134E706F0A35 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.mft Manifest number: 042D Signing time: Sat 18 May 2024 04:31:13 +0000 Manifest this update: Sat 18 May 2024 04:26:13 +0000 Manifest next update: Tue 21 May 2024 15:44:13 +0000 Files and hashes: 1: 323030313a6466333a666438303a3a2f34382d3438203d3e20313430343432.roa (hash: glO/q6t/VHtKrQFv3BraQ+K89UP/iSQWMu5Yq34Jedw=) 2: 3130332e3135322e37322e302f32332d3234203d3e20313430343432.roa (hash: 0hrJvHl26ZrT+bw28/YaOCN1Wb7+2PbRVtspUcaP9Yg=) 3: DBE91560EBE58F31F01F543D751B03FC02EA7D9E.crl (hash: kswKbqf0pEgMawbvjz9bExSVdPyaxGZp6PKrHKgHM3w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.crl rsync://repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 14:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:87:ed:1b:c2:07:c5:0b:5a:81:5f:d9:8d:81:13:4e:70:6f:0a:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBE91560EBE58F31F01F543D751B03FC02EA7D9E Validity Not Before: May 18 04:26:13 2024 GMT Not After : May 21 15:44:13 2024 GMT Subject: CN=ED7D3A5B22BBDBE14EC9B67382F2C0823E0B9F35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:89:6b:e5:6a:67:44:a4:c3:ed:37:4c:15:3c: fd:25:13:a3:a3:68:26:ed:37:29:74:a9:f8:b2:78: 7c:d8:d6:b6:01:8c:db:0e:3a:82:eb:d3:a2:d3:bf: de:f6:31:e3:28:69:c5:90:a5:fe:33:e2:a0:b7:bf: cf:43:4e:f6:64:d0:a0:cc:b7:fe:2e:41:3e:82:57: 20:f8:61:10:39:01:ab:81:e2:35:c7:0c:37:5d:c8: 2c:3a:6e:a1:06:98:20:bd:bc:2a:57:3f:8a:a8:cc: 41:a7:25:64:7b:55:60:87:7c:41:1d:f6:2a:ca:5b: eb:0b:69:10:ce:ee:0f:3c:61:d6:3f:b7:f7:e6:49: f7:a9:72:be:72:f8:3d:8d:9b:50:f2:e5:58:26:7e: 5e:fc:3d:5a:6e:d9:d7:38:c9:e0:4f:f5:07:75:22: d3:57:f8:fc:7d:b3:62:2c:6b:ad:b8:4a:7a:e0:2a: 5e:48:b5:66:bf:ab:e5:2d:3e:ad:2b:f2:e0:12:8d: 6f:c3:61:3d:07:6e:c8:29:db:c6:7f:4e:2e:83:a2: 99:c9:0e:8c:50:ea:66:b9:94:0c:be:aa:e9:84:4c: ac:42:06:43:8d:6f:0b:fd:82:87:03:bc:82:cf:32: 9d:a5:e6:7b:1e:54:78:50:93:fa:f5:2e:d6:65:06: 47:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:7D:3A:5B:22:BB:DB:E1:4E:C9:B6:73:82:F2:C0:82:3E:0B:9F:35 X509v3 Authority Key Identifier: keyid:DB:E9:15:60:EB:E5:8F:31:F0:1F:54:3D:75:1B:03:FC:02:EA:7D:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:26:be:4f:2e:b4:73:b6:6d:c0:5f:b8:1f:16:54:7c:6c:07: 3c:f8:b6:52:26:2d:a8:1b:05:f0:06:c4:bc:0a:2e:b3:24:53: 8d:2a:29:83:b7:54:23:a3:42:01:ca:5f:a1:de:fe:57:51:24: 68:7b:e6:00:17:1b:e0:76:88:92:5d:41:f4:7b:69:f8:4d:e7: 7e:63:26:8d:74:43:eb:9b:7f:aa:7d:02:17:3e:66:46:1e:09: 22:ca:7c:11:df:dc:f4:d9:ea:11:05:18:b1:d2:b9:d5:ae:d3: 66:ff:0d:f5:f8:bf:9a:21:35:21:dc:21:2e:4e:d1:98:5e:31: a7:54:36:23:0f:b1:07:2a:88:c9:6f:96:fd:e9:77:bf:33:cf: 64:28:5b:74:f3:24:b4:97:64:ff:cd:43:10:47:83:c3:ab:a0: e3:07:68:c0:43:d7:b4:e8:8d:81:5b:05:d1:9a:cf:75:b7:ad: d3:09:ea:1f:98:a0:e2:d8:95:e3:96:5c:2e:68:90:c2:fe:77: 29:0d:e1:ae:91:d4:46:e6:f4:dd:a0:6d:e8:8d:4d:87:a5:93: e3:d8:79:8a:59:44:ac:4d:4b:14:6d:06:58:d9:04:21:2e:c3: dd:86:6d:f1:b4:06:f2:12:d3:73:2b:c1:95:14:b5:79:f3:17: 3d:fb:7e:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcoftG8IHxQtagV/ZjYETTnBvCjUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJFOTE1NjBFQkU1OEYzMUYwMUY1NDNENzUxQjAzRkMw MkVBN0Q5RTAeFw0yNDA1MTgwNDI2MTNaFw0yNDA1MjExNTQ0MTNaMDMxMTAvBgNV BAMTKEVEN0QzQTVCMjJCQkRCRTE0RUM5QjY3MzgyRjJDMDgyM0UwQjlGMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCciWvlamdEpMPtN0wVPP0lE6Oj aCbtNyl0qfiyeHzY1rYBjNsOOoLr06LTv972MeMoacWQpf4z4qC3v89DTvZk0KDM t/4uQT6CVyD4YRA5AauB4jXHDDddyCw6bqEGmCC9vCpXP4qozEGnJWR7VWCHfEEd 9irKW+sLaRDO7g88YdY/t/fmSfepcr5y+D2Nm1Dy5Vgmfl78PVpu2dc4yeBP9Qd1 ItNX+Px9s2Isa624SnrgKl5ItWa/q+UtPq0r8uASjW/DYT0Hbsgp28Z/Ti6DopnJ DoxQ6ma5lAy+qumETKxCBkONbwv9gocDvILPMp2l5nseVHhQk/r1LtZlBkdDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7X06WyK72+FOybZzgvLAgj4LnzUwHwYDVR0j BBgwFoAU2+kVYOvljzHwH1Q9dRsD/ALqfZ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NzI4Yzc3Yi0yMTAwLTRmMmEtOTBkOS0wOGM1M2U4NDFlMWIvMC9EQkU5MTU2MEVC RTU4RjMxRjAxRjU0M0Q3NTFCMDNGQzAyRUE3RDlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREJFOTE1NjBFQkU1OEYzMUYwMUY1NDNENzUxQjAzRkMwMkVB N0Q5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjcyOGM3N2ItMjEwMC00ZjJhLTkw ZDktMDhjNTNlODQxZTFiLzAvREJFOTE1NjBFQkU1OEYzMUYwMUY1NDNENzUxQjAz RkMwMkVBN0Q5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJYmvk8utHO2bcBfuB8WVHxsBzz4tlImLagb BfAGxLwKLrMkU40qKYO3VCOjQgHKX6He/ldRJGh75gAXG+B2iJJdQfR7afhN535j Jo10Q+ubf6p9Ahc+ZkYeCSLKfBHf3PTZ6hEFGLHSudWu02b/DfX4v5ohNSHcIS5O 0ZheMadUNiMPsQcqiMlvlv3pd78zz2QoW3TzJLSXZP/NQxBHg8OroOMHaMBD17To jYFbBdGaz3W3rdMJ6h+YoOLYleOWXC5okML+dykN4a6R1Ebm9N2gbeiNTYelk+PY eYpZRKxNSxRtBljZBCEuw92GbfG0BvIS03MrwZUUtXnzFz37fvI= -----END CERTIFICATE-----Generated at Sat May 18 05:19:28 2024 by rpki-client on console-fra.rpki-client.org