$ rpki-client -vvf repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft File: DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft (raw, json) Hash identifier: e9q+IlhFvn746XHhVS9aiuI7+JN4n0S3q7TJK9Tjcyw= Subject key identifier: BA:B5:2F:A4:87:0F:12:E2:D3:B8:3F:C0:43:83:1D:7C:C3:4E:7D:85 Authority key identifier: DF:68:55:96:DA:F9:D3:65:4A:2E:2F:21:CE:11:AA:0B:B8:0E:45:D1 Certificate issuer: /CN=DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1 Certificate serial: 75408C8CEB104F0F6E741C4DA77D9208EAFE937E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft Manifest number: 027B Signing time: Sun 19 May 2024 04:20:30 +0000 Manifest this update: Sun 19 May 2024 04:15:30 +0000 Manifest next update: Wed 22 May 2024 13:47:30 +0000 Files and hashes: 1: 3130332e3136392e3235342e302f32342d3234203d3e20313432333730.roa (hash: QXPRLXAhPZF+DDp7OLKEUCuEqMH0/WoPvCJv0pukloQ=) 2: DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.crl (hash: jOe+vocS3UP4oBc60JMiqwWQxIEvcGohnDgph2H4EE8=) 3: 3130332e3136392e3235352e302f32342d3234203d3e20313432333730.roa (hash: iBGCziaosydQaVlAP1C0AeiePVIXGE79LHS0cCYHR3g=) 4: 3130332e3136392e3235342e302f32332d3233203d3e20313432333730.roa (hash: yomNOdQHRwjdEv7OsKqoQCROge0cEDSUtwjM/LSAr8Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.crl rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 03:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:40:8c:8c:eb:10:4f:0f:6e:74:1c:4d:a7:7d:92:08:ea:fe:93:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1 Validity Not Before: May 19 04:15:30 2024 GMT Not After : May 22 13:47:30 2024 GMT Subject: CN=BAB52FA4870F12E2D3B83FC043831D7CC34E7D85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:2a:73:a2:08:19:fb:1c:84:f7:f9:d2:ff:43: da:12:27:0d:17:bc:74:4c:ca:a8:c5:3c:4a:fa:91: 8b:d3:49:9e:10:15:5d:e0:59:c6:12:4d:ac:d7:fc: 02:53:42:96:62:87:66:b6:1b:e5:77:a1:d8:c8:35: b6:67:1e:ab:dd:6c:2f:c4:f5:f1:c3:71:f9:f3:03: 1a:32:e9:9f:5a:49:e8:97:2d:84:cf:a4:ba:f5:b0: dd:b0:99:3d:96:bd:3d:bd:44:7c:7b:d1:cd:2f:0d: 71:fb:06:52:24:5f:50:23:f7:11:f6:b9:b0:8f:93: 27:05:c8:f3:82:4f:96:f6:42:ee:5e:fe:91:db:a4: e9:69:05:d0:9f:bc:81:64:1b:cd:a5:e8:72:2f:d9: 59:a5:71:f5:4e:31:65:e9:6c:84:bf:76:3e:7d:ce: 12:5b:9d:7a:60:ab:a5:b0:8b:bc:9e:5a:a7:d3:0c: b7:f8:48:b4:26:ee:7e:8a:ee:62:b2:3b:e5:69:c7: 48:75:a7:97:d0:61:c9:f1:87:d2:9d:cc:2a:10:d7: b7:c4:07:bc:76:0e:0f:69:c4:4a:8f:1d:0a:55:2a: fa:19:bf:4a:61:93:20:4c:3a:f6:fa:16:b5:d5:f4: 14:87:89:37:82:36:9e:e9:21:e1:86:3f:0b:59:f1: 39:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:B5:2F:A4:87:0F:12:E2:D3:B8:3F:C0:43:83:1D:7C:C3:4E:7D:85 X509v3 Authority Key Identifier: keyid:DF:68:55:96:DA:F9:D3:65:4A:2E:2F:21:CE:11:AA:0B:B8:0E:45:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:f4:94:cd:e3:d8:4d:10:81:de:29:10:d9:27:7b:6b:2d:87: f4:b3:c8:07:d1:66:ba:0d:1d:f1:be:07:8a:7c:76:0c:7e:b1: 79:10:97:e8:e3:81:f3:d6:d1:8c:c3:32:cc:b5:05:78:d3:82: 29:12:32:f1:e4:cb:29:10:1a:5a:d2:ce:ac:b1:ae:c1:3c:f3: 2b:47:7b:f2:59:8f:61:c9:72:54:8c:c2:d7:8a:f6:36:df:f7: f3:4f:80:c5:89:d8:47:a6:5c:d2:3b:68:07:1f:e5:48:d8:a9: 9c:a1:38:d2:a6:13:14:7e:bd:86:fc:fa:33:e5:d4:c1:da:d4: 85:1f:4d:40:8a:40:71:0e:a8:7f:30:1c:31:8b:1b:f3:fe:55: 56:4a:25:3b:6f:3c:fe:70:2a:dd:8a:6b:b5:00:7a:19:16:95: 02:84:5d:2b:64:87:b1:f3:f9:e9:5c:28:56:1e:f9:8c:f3:3a: b2:57:03:d0:67:9a:87:8f:0d:4e:36:2a:29:5b:f7:bd:73:b8: f8:c6:c2:4b:a9:00:0e:4d:43:74:9b:d0:2b:ef:c0:ec:2b:43: cc:54:9d:0c:0b:85:b8:46:e6:e6:43:4d:fa:28:df:8f:ba:05: 89:b7:b8:ff:d4:4c:a1:cf:a4:f5:a2:28:9a:32:00:37:9f:3e: d7:c7:a0:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdUCMjOsQTw9udBxNp32SCOr+k34wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY2ODU1OTZEQUY5RDM2NTRBMkUyRjIxQ0UxMUFBMEJC ODBFNDVEMTAeFw0yNDA1MTkwNDE1MzBaFw0yNDA1MjIxMzQ3MzBaMDMxMTAvBgNV BAMTKEJBQjUyRkE0ODcwRjEyRTJEM0I4M0ZDMDQzODMxRDdDQzM0RTdEODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjKnOiCBn7HIT3+dL/Q9oSJw0X vHRMyqjFPEr6kYvTSZ4QFV3gWcYSTazX/AJTQpZih2a2G+V3odjINbZnHqvdbC/E 9fHDcfnzAxoy6Z9aSeiXLYTPpLr1sN2wmT2WvT29RHx70c0vDXH7BlIkX1Aj9xH2 ubCPkycFyPOCT5b2Qu5e/pHbpOlpBdCfvIFkG82l6HIv2VmlcfVOMWXpbIS/dj59 zhJbnXpgq6Wwi7yeWqfTDLf4SLQm7n6K7mKyO+Vpx0h1p5fQYcnxh9KdzCoQ17fE B7x2Dg9pxEqPHQpVKvoZv0phkyBMOvb6FrXV9BSHiTeCNp7pIeGGPwtZ8TkpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUurUvpIcPEuLTuD/AQ4MdfMNOfYUwHwYDVR0j BBgwFoAU32hVltr502VKLi8hzhGqC7gORdEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NzUyYjNjMi0zZjMwLTQwNDAtOGIwNS04MzgyMTc3NzA0OGYvMC9ERjY4NTU5NkRB RjlEMzY1NEEyRTJGMjFDRTExQUEwQkI4MEU0NUQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREY2ODU1OTZEQUY5RDM2NTRBMkUyRjIxQ0UxMUFBMEJCODBF NDVEMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjc1MmIzYzItM2YzMC00MDQwLThi MDUtODM4MjE3NzcwNDhmLzAvREY2ODU1OTZEQUY5RDM2NTRBMkUyRjIxQ0UxMUFB MEJCODBFNDVEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADH0lM3j2E0Qgd4pENkne2sth/SzyAfRZroN HfG+B4p8dgx+sXkQl+jjgfPW0YzDMsy1BXjTgikSMvHkyykQGlrSzqyxrsE88ytH e/JZj2HJclSMwteK9jbf9/NPgMWJ2EemXNI7aAcf5UjYqZyhONKmExR+vYb8+jPl 1MHa1IUfTUCKQHEOqH8wHDGLG/P+VVZKJTtvPP5wKt2Ka7UAehkWlQKEXStkh7Hz +elcKFYe+YzzOrJXA9BnmoePDU42Kilb971zuPjGwkupAA5NQ3Sb0CvvwOwrQ8xU nQwLhbhG5uZDTfoo34+6BYm3uP/UTKHPpPWiKJoyADefPtfHoLc= -----END CERTIFICATE-----Generated at Sun May 19 04:56:34 2024 by rpki-client on console-fra.rpki-client.org