$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft File: 935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft (raw, json) Hash identifier: Alfa2E3wCiUQAUEAXIw/d+58y7WpdRLJRc7Rqs2ocIA= Subject key identifier: E9:45:1A:F9:BA:40:AD:D7:FB:8D:BE:C9:78:F9:85:60:F5:2A:8B:B4 Authority key identifier: 93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3 Certificate issuer: /CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3 Certificate serial: 125A691D0336D45B62FD7635DBBB06616BFE0A1D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft Manifest number: 0438 Signing time: Fri 17 May 2024 11:50:58 +0000 Manifest this update: Fri 17 May 2024 11:45:58 +0000 Manifest next update: Mon 20 May 2024 22:44:58 +0000 Files and hashes: 1: 323430323a3630303a3a2f33322d3438203d3e203338353135.roa (hash: 0tsJ0gvs6p2EjHX3e8qVlvCpLcmyxL/AeQ50gc88gQQ=) 2: 3131372e37342e3132302e302f32312d3231203d3e203338353135.roa (hash: hp0XS2oh3Zf6zNRgAAFYrT4TDX5xxtWi+LRc5gm0zio=) 3: 3130332e3130372e3234382e302f32342d3234203d3e203338353135.roa (hash: iBjmpWGIXFh6kYWN6QO7QtnTF2mAxEWav28nW8qj2yk=) 4: 3130332e3130372e3234382e302f32322d3232203d3e203338353135.roa (hash: SKuUD71J65U3SNJR8+JO95fdIKwSuYHnOZVZ8xtzkrg=) 5: 3131372e37342e3132312e302f32342d3234203d3e203338353135.roa (hash: /XhHIwHo8WnEV+sB4ldQhjTnjYB+oajEU2P1xcI+hO0=) 6: 3131372e37342e3132362e302f32342d3234203d3e203338353135.roa (hash: 9Secy0QhISURW/5oYUmGkC7Wzd+9pt/zLpzZuevGUfU=) 7: 3130332e3130372e3235302e302f32342d3234203d3e203338353135.roa (hash: iy2Xg2UsRpU71CfEuN81sW81ammqWRnXsTdpnqcLJjU=) 8: 3131372e37342e3132322e302f32342d3234203d3e203338353135.roa (hash: HxtYgWvcJ4FsLmv+kOwdTLFdl4GrY2+Ti5Vre+O+B7s=) 9: 3130332e3130372e3235312e302f32342d3234203d3e203338353135.roa (hash: gft8aFdt0HSO4kFk6qss/Y4tglOtC1S04pXqVAU9T4I=) 10: 3131372e37342e3132302e302f32322d3232203d3e203338353135.roa (hash: FtSqsPHiWT0hcDRQ1EphXOa/xfreIU95nkSjcp9KYSA=) 11: 3131372e37342e3132342e302f32322d3232203d3e203338353135.roa (hash: YeBZInwJ+QY68kYCZwl8DyRCzGbYUa3m9Me/pRquo/s=) 12: 3130332e3130372e3234392e302f32342d3234203d3e203338353135.roa (hash: gug1S91VTtjSaW3x38WHfAQBPCCiv+mmOIK3xbAKsyA=) 13: 3131372e37342e3132342e302f32342d3234203d3e203338353135.roa (hash: L1xeLg/ku+8cFoNMikWEj/6qETxQQ1Z5rQXV4Xp0Rrw=) 14: 3131372e37342e3132302e302f32342d3234203d3e203338353135.roa (hash: USbSfkTZaoXZDhsDue78e13Cc40VJr/rOhNUKD3xPXk=) 15: 3131372e37342e3132372e302f32342d3234203d3e203338353135.roa (hash: 44mQnudp+URZWssjEVYQtzaZvgwN4521TKT9tJE9Uv8=) 16: 3131372e37342e3132332e302f32342d3234203d3e203338353135.roa (hash: tifSco9r/bPqUnnloaBwHg3Dsj2epbM//EQ/UzURegg=) 17: 935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl (hash: f23LDYp50gdSpYUpOMiNqkhMBA0YYAMwjrOVUwNN0oY=) 18: 3131372e37342e3132352e302f32342d3234203d3e203338353135.roa (hash: 410KxPR/23v8JouEECNIPHNKE6uth7iAvPCOCWI18k0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 May 2024 22:44:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:5a:69:1d:03:36:d4:5b:62:fd:76:35:db:bb:06:61:6b:fe:0a:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3 Validity Not Before: May 17 11:45:58 2024 GMT Not After : May 20 22:44:58 2024 GMT Subject: CN=E9451AF9BA40ADD7FB8DBEC978F98560F52A8BB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:27:d1:be:5c:7a:56:2d:02:17:20:9f:e0:a4: ed:c7:bb:df:63:69:17:a7:67:70:00:4d:4c:35:ea: 47:0c:d0:11:87:da:43:ef:8a:58:3f:6c:4e:c4:65: 92:6b:16:55:f6:31:ea:8d:fd:e8:0c:ee:15:8c:ad: cc:1c:de:c3:f1:52:77:09:b0:cb:28:22:f7:1d:c4: 07:53:80:0d:5f:70:33:bd:2e:68:c4:b0:09:18:92: be:e1:96:dc:cc:82:0e:f6:93:f4:7d:85:8a:01:2b: 78:ae:52:cc:a8:1b:fb:4b:8f:6b:d0:38:19:08:a5: b6:a8:fb:98:6a:1f:4f:1d:b9:18:5d:34:28:bb:6b: e0:84:1d:da:9d:69:6a:ed:88:61:67:2b:60:19:0e: f3:f6:11:e8:f1:be:0f:8e:ff:07:33:d1:97:21:4a: ed:7e:45:e4:ea:2d:32:3f:3c:1b:60:d2:17:df:9e: e4:34:28:34:17:b9:9a:a4:db:ae:d9:8c:da:42:bd: 48:bf:6b:b8:0a:69:cd:35:69:57:30:00:77:10:94: ad:1a:fa:26:9d:08:67:74:7d:bd:d7:81:89:91:09: 2a:37:e5:ba:e7:61:df:7c:61:a7:2c:42:45:91:f2: 9d:3c:dd:c5:e5:25:08:11:1a:82:4b:55:98:bf:42: 47:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:45:1A:F9:BA:40:AD:D7:FB:8D:BE:C9:78:F9:85:60:F5:2A:8B:B4 X509v3 Authority Key Identifier: keyid:93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:f6:20:64:f6:1d:45:ff:cf:1f:80:43:19:e3:2e:64:7a:39: 1f:94:8d:88:a7:5f:ec:6a:63:62:ab:9d:99:89:95:9b:a3:31: 48:86:8a:c2:88:0e:41:83:b7:5b:fb:db:6b:c2:35:74:af:d7: 9a:fb:fe:ca:68:1c:9b:0f:63:db:c0:71:60:fa:3d:59:75:ec: 90:16:12:7e:b0:2f:66:ea:18:b4:02:1c:6f:22:cc:e7:a4:19: 0e:0d:b2:cb:6f:7d:2e:e8:b3:b6:28:78:21:9a:ae:6a:62:fe: eb:77:15:de:a3:78:71:b1:93:06:5f:59:c1:0c:e5:ca:93:17: 51:95:1d:eb:45:9a:b0:4c:13:3a:ed:6b:ae:d5:2f:ca:33:b1: 08:33:43:4a:e7:f9:51:83:d4:33:bf:3e:82:c8:eb:bb:75:d5: 24:43:66:80:68:77:cd:3f:fc:ae:2b:ea:83:e3:71:1f:48:09: df:a1:eb:f3:59:2c:bd:58:79:cb:b9:f4:c5:9c:29:ae:c8:b8: 57:0a:03:e9:7e:fa:06:7c:23:83:e2:c4:20:f6:d0:3a:ef:c0: 51:21:88:86:2c:15:04:a2:64:a5:69:8d:89:50:6b:1f:e6:f6: 20:4b:5e:23:e5:99:69:8a:c6:22:2a:43:a0:a9:fd:5a:01:42: f0:f9:45:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUElppHQM21Fti/XY127sGYWv+Ch0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTM1REIyRDQ0ODhGQUUyQzExRTFCRjNCREYyMEQ4MkEy RERGRDhGMzAeFw0yNDA1MTcxMTQ1NThaFw0yNDA1MjAyMjQ0NThaMDMxMTAvBgNV BAMTKEU5NDUxQUY5QkE0MEFERDdGQjhEQkVDOTc4Rjk4NTYwRjUyQThCQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcJ9G+XHpWLQIXIJ/gpO3Hu99j aRenZ3AATUw16kcM0BGH2kPvilg/bE7EZZJrFlX2MeqN/egM7hWMrcwc3sPxUncJ sMsoIvcdxAdTgA1fcDO9LmjEsAkYkr7hltzMgg72k/R9hYoBK3iuUsyoG/tLj2vQ OBkIpbao+5hqH08duRhdNCi7a+CEHdqdaWrtiGFnK2AZDvP2Eejxvg+O/wcz0Zch Su1+ReTqLTI/PBtg0hffnuQ0KDQXuZqk267ZjNpCvUi/a7gKac01aVcwAHcQlK0a +iadCGd0fb3XgYmRCSo35brnYd98YacsQkWR8p083cXlJQgRGoJLVZi/Qke1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6UUa+bpArdf7jb7JePmFYPUqi7QwHwYDVR0j BBgwFoAUk12y1EiPriwR4b873yDYKi3f2PMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YzRjNjRhOS0zNTM3LTRiYzctODYxMy04ZTk4MTYyOWU0Y2EvMC85MzVEQjJENDQ4 OEZBRTJDMTFFMUJGM0JERjIwRDgyQTJEREZEOEYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTM1REIyRDQ0ODhGQUUyQzExRTFCRjNCREYyMEQ4MkEyRERG RDhGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmM0YzY0YTktMzUzNy00YmM3LTg2 MTMtOGU5ODE2MjllNGNhLzAvOTM1REIyRDQ0ODhGQUUyQzExRTFCRjNCREYyMEQ4 MkEyRERGRDhGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACb2IGT2HUX/zx+AQxnjLmR6OR+UjYinX+xq Y2KrnZmJlZujMUiGisKIDkGDt1v722vCNXSv15r7/spoHJsPY9vAcWD6PVl17JAW En6wL2bqGLQCHG8izOekGQ4NsstvfS7os7YoeCGarmpi/ut3Fd6jeHGxkwZfWcEM 5cqTF1GVHetFmrBMEzrta67VL8ozsQgzQ0rn+VGD1DO/PoLI67t11SRDZoBod80/ /K4r6oPjcR9ICd+h6/NZLL1Yecu59MWcKa7IuFcKA+l++gZ8I4PixCD20DrvwFEh iIYsFQSiZKVpjYlQax/m9iBLXiPlmWmKxiIqQ6Cp/VoBQvD5RVU= -----END CERTIFICATE-----Generated at Fri May 17 14:07:01 2024 by rpki-client on console-fra.rpki-client.org