$ rpki-client -vvf repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.mft File: 9D25181C9096851A77EB95DA55649E08E3B7941B.mft (raw, json) Hash identifier: Er7qCVS4ud1iZrU0c+j5k1GzyX3dqM7VGcRoPB5bTDU= Subject key identifier: 9E:EB:15:07:5F:52:C5:22:62:18:D0:A5:09:F0:FD:F5:7B:7F:62:47 Authority key identifier: 9D:25:18:1C:90:96:85:1A:77:EB:95:DA:55:64:9E:08:E3:B7:94:1B Certificate issuer: /CN=9D25181C9096851A77EB95DA55649E08E3B7941B Certificate serial: 4DED4E049D966401B19076D1AB57892F9465C6FB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D25181C9096851A77EB95DA55649E08E3B7941B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.mft Manifest number: 0149 Signing time: Tue 28 May 2024 12:00:02 +0000 Manifest this update: Tue 28 May 2024 11:55:02 +0000 Manifest next update: Fri 31 May 2024 22:01:02 +0000 Files and hashes: 1: 3130332e3132342e3234362e302f32342d3234203d3e20313338303930.roa (hash: tL7JMGabfzkzoTYNe8QZJWOm8ymW7Iqvkst3xH7ajDk=) 2: 3130332e3132342e3234352e302f32342d3234203d3e20313338303930.roa (hash: STe7OT88PHJHnz531m1I5MVHYJjriMNPu+KdDXd+zTA=) 3: 3130332e3132342e3234342e302f32342d3234203d3e20313338303930.roa (hash: S3Qa9EJxyJzhZS1oSHp+mOsRP2jv6ZBSWKdo+10AYC8=) 4: 323430333a653863303a3a2f33322d3332203d3e20313338303930.roa (hash: vmyKIztdnxXkA8bQoPgMfCnrmb98Jp8ZLmRo+Qp2gpg=) 5: 9D25181C9096851A77EB95DA55649E08E3B7941B.crl (hash: hw1OLIDUv6191lIo2OsURqGE/MvNFPiVkxCSDkpdHnE=) 6: 3130332e3132342e3234372e302f32342d3234203d3e20313338303930.roa (hash: xuZSWeThAuPloz+88joprzv6CT1t8AV9sDbU615UOe0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.crl rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D25181C9096851A77EB95DA55649E08E3B7941B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 May 2024 17:07:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:ed:4e:04:9d:96:64:01:b1:90:76:d1:ab:57:89:2f:94:65:c6:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D25181C9096851A77EB95DA55649E08E3B7941B Validity Not Before: May 28 11:55:02 2024 GMT Not After : May 31 22:01:02 2024 GMT Subject: CN=9EEB15075F52C5226218D0A509F0FDF57B7F6247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:33:7a:02:d6:b6:a0:80:43:32:6e:a7:5b:01: a9:bc:b7:9e:10:25:da:fe:b3:dc:bb:42:a9:ef:c1: 31:b6:2a:d4:4e:27:c2:70:13:bb:25:83:bc:20:11: 11:45:61:79:0c:e6:81:d2:83:fb:3c:42:79:41:ce: 1c:ed:a2:0d:cc:44:ad:74:2a:d6:b9:e0:da:e8:66: 8b:0c:18:82:02:e5:4a:05:cc:e5:ae:c0:ea:4e:26: a5:55:69:36:c0:c9:5e:7e:e4:82:83:1e:13:5c:08: 51:30:75:d1:f1:80:af:da:fe:55:d6:59:eb:bb:55: eb:89:d9:7e:74:c4:3c:32:6d:5e:bc:e3:12:6c:2a: 7e:48:41:65:ee:84:b1:4d:bc:d5:ae:34:4a:b0:72: c4:d3:01:57:2f:e1:3d:cd:4c:1a:e2:56:d3:30:15: 8b:5a:dc:ae:db:ad:c4:69:6a:c6:f9:84:0c:36:71: f0:04:51:53:a1:38:4b:de:86:42:4b:df:ee:55:e4: 75:bf:a3:db:75:1f:70:7f:ed:08:bb:72:a7:2a:86: ff:d4:c7:c2:be:2d:d8:f4:f2:e6:71:2d:41:cd:40: 64:d6:11:0f:45:47:07:57:6a:fe:a9:f1:80:80:48: 75:15:af:cd:6a:f6:c8:35:dd:f2:6c:9a:26:cb:07: c2:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:EB:15:07:5F:52:C5:22:62:18:D0:A5:09:F0:FD:F5:7B:7F:62:47 X509v3 Authority Key Identifier: keyid:9D:25:18:1C:90:96:85:1A:77:EB:95:DA:55:64:9E:08:E3:B7:94:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D25181C9096851A77EB95DA55649E08E3B7941B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:33:32:9a:c4:66:25:57:90:ab:30:60:b2:2b:ac:c3:95:c7: d9:62:80:a3:11:bf:30:3f:f6:03:4c:20:8c:e4:1d:1a:1e:1a: 1d:5b:a0:71:09:8a:57:3e:2d:1a:70:78:d2:68:5f:24:2f:63: 20:c2:79:5a:71:08:c2:13:3b:af:3c:f3:db:22:84:d8:ea:ea: b1:67:73:70:fc:9f:04:a5:34:fa:5f:53:e9:8f:2d:f2:62:52: b2:18:4d:77:7b:d3:22:3d:09:da:76:03:7b:3f:34:4a:7a:2f: 41:9e:a2:45:4a:17:14:50:89:87:f0:db:1a:52:11:90:ce:48: 00:92:b4:58:99:30:36:67:b4:b5:fc:93:cf:25:18:40:4f:a0: 42:2a:7f:53:b7:87:96:5a:b8:9b:61:a4:42:c1:56:60:82:f5: 98:9a:8a:4c:31:99:2c:93:7b:5d:7f:de:39:01:8f:b3:2a:9b: c5:20:6c:61:5c:a8:28:6a:55:bb:32:72:e2:c8:92:4b:3a:8e: 16:07:31:53:5d:be:61:3f:a8:fa:67:14:e8:93:e6:d1:9d:9b: 2f:8c:15:2a:2d:7e:d5:96:c8:38:58:30:b2:c9:85:97:f0:43: f8:c8:6e:4b:87:d3:44:c6:f1:82:74:3c:ae:70:e4:76:fc:e2: df:51:cb:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTe1OBJ2WZAGxkHbRq1eJL5RlxvswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQyNTE4MUM5MDk2ODUxQTc3RUI5NURBNTU2NDlFMDhF M0I3OTQxQjAeFw0yNDA1MjgxMTU1MDJaFw0yNDA1MzEyMjAxMDJaMDMxMTAvBgNV BAMTKDlFRUIxNTA3NUY1MkM1MjI2MjE4RDBBNTA5RjBGREY1N0I3RjYyNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbM3oC1raggEMybqdbAam8t54Q Jdr+s9y7QqnvwTG2KtROJ8JwE7slg7wgERFFYXkM5oHSg/s8QnlBzhztog3MRK10 Kta54NroZosMGIIC5UoFzOWuwOpOJqVVaTbAyV5+5IKDHhNcCFEwddHxgK/a/lXW Weu7VeuJ2X50xDwybV684xJsKn5IQWXuhLFNvNWuNEqwcsTTAVcv4T3NTBriVtMw FYta3K7brcRpasb5hAw2cfAEUVOhOEvehkJL3+5V5HW/o9t1H3B/7Qi7cqcqhv/U x8K+Ldj08uZxLUHNQGTWEQ9FRwdXav6p8YCASHUVr81q9sg13fJsmibLB8JbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnusVB19SxSJiGNClCfD99Xt/YkcwHwYDVR0j BBgwFoAUnSUYHJCWhRp365XaVWSeCOO3lBswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTJjOTI4NS1jMDlhLTQ1MDYtYTMyMC1mZGExYTA3ZmQ5ZWMvMC85RDI1MTgxQzkw OTY4NTFBNzdFQjk1REE1NTY0OUUwOEUzQjc5NDFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUQyNTE4MUM5MDk2ODUxQTc3RUI5NURBNTU2NDlFMDhFM0I3 OTQxQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmUyYzkyODUtYzA5YS00NTA2LWEz MjAtZmRhMWEwN2ZkOWVjLzAvOUQyNTE4MUM5MDk2ODUxQTc3RUI5NURBNTU2NDlF MDhFM0I3OTQxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAUzMprEZiVXkKswYLIrrMOVx9ligKMRvzA/ 9gNMIIzkHRoeGh1boHEJilc+LRpweNJoXyQvYyDCeVpxCMITO68889sihNjq6rFn c3D8nwSlNPpfU+mPLfJiUrIYTXd70yI9Cdp2A3s/NEp6L0GeokVKFxRQiYfw2xpS EZDOSACStFiZMDZntLX8k88lGEBPoEIqf1O3h5ZauJthpELBVmCC9ZiaikwxmSyT e11/3jkBj7Mqm8UgbGFcqChqVbsycuLIkks6jhYHMVNdvmE/qPpnFOiT5tGdmy+M FSotftWWyDhYMLLJhZfwQ/jIbkuH00TG8YJ0PK5w5Hb84t9Ry2c= -----END CERTIFICATE-----Generated at Tue May 28 13:23:26 2024 by rpki-client on console-fra.rpki-client.org