$ rpki-client -vvf repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft File: C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft (raw, json) Hash identifier: Yo63dMnP0EtvrCy/7a+oLhnaB8VUmkIqIX/koAaW9Cw= Subject key identifier: 75:D0:2E:0E:46:4C:69:95:78:02:BA:2C:50:E8:AD:81:7D:CF:28:22 Authority key identifier: C8:88:64:DD:3C:1E:6D:0D:5F:A9:14:67:F0:3B:26:6D:F5:F7:92:55 Certificate issuer: /CN=C88864DD3C1E6D0D5FA91467F03B266DF5F79255 Certificate serial: 324DB1DC5A07D3BCA5408C49836749033330711E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.cer Subject info access: rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft Manifest number: 4C Signing time: Sat 22 Jun 2024 04:21:33 +0000 Manifest this update: Sat 22 Jun 2024 04:16:33 +0000 Manifest next update: Tue 25 Jun 2024 12:17:33 +0000 Files and hashes: 1: 3135372e31302e38382e302f32332d3233203d3e20313532303832.roa (hash: Fy4YPsCVni6C/TRLoUtitVXhhu5KkW1pCaPz4zYyFfQ=) 2: 3135372e31302e38392e302f32342d3234203d3e20313532303832.roa (hash: UfkQEqwAgNpW/E09xB4i7O7yIEdbBcf8T28prhE7hL4=) 3: C88864DD3C1E6D0D5FA91467F03B266DF5F79255.crl (hash: rjIO9sUtWwR098L8wvQyEG/wjmr9u30hy/4p4tD5KOQ=) 4: 3135372e31302e38382e302f32342d3234203d3e20313532303832.roa (hash: WVdEr6CDf0Azzks/9vne22lzkX84SEOJOkbMFp6g2Ok=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.crl rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Jun 2024 03:51:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:4d:b1:dc:5a:07:d3:bc:a5:40:8c:49:83:67:49:03:33:30:71:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C88864DD3C1E6D0D5FA91467F03B266DF5F79255 Validity Not Before: Jun 22 04:16:33 2024 GMT Not After : Jun 25 12:17:33 2024 GMT Subject: CN=75D02E0E464C69957802BA2C50E8AD817DCF2822 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:d8:00:4c:4a:5d:db:95:5a:bb:aa:6b:51:75: 48:6b:ff:1c:80:2e:b1:97:47:7e:b5:b5:a7:94:a2: a3:c1:b9:77:5d:3a:9a:27:64:41:44:f4:20:d7:a5: 8e:42:1c:99:b5:5d:a2:b7:b6:8a:cf:f1:70:18:88: 66:73:95:67:2a:be:5c:d6:01:34:8c:63:ae:55:e3: 09:27:ca:f2:7f:b6:83:26:a7:c1:fe:ee:59:94:f9: 5b:9f:dc:e4:56:79:ff:38:58:d9:81:95:ee:ab:93: 39:90:ec:6a:79:6b:79:a6:ac:1a:e9:8a:fb:28:9f: ed:11:4e:a3:9c:e2:0a:d3:b6:e3:d6:6d:08:5d:1f: 4a:28:ee:3f:0c:f0:23:10:e9:8e:37:6d:f9:a6:69: 4e:b4:ac:39:f1:c7:53:f3:97:ad:c0:e6:e1:eb:75: 76:a2:22:2a:c8:a1:4a:3b:bc:50:82:f1:6a:87:35: af:c6:14:b5:eb:d5:dd:0d:20:bf:49:95:62:96:e9: 9e:07:12:5a:64:65:8c:d0:b7:09:44:79:a4:5f:c1: c4:0e:d1:e5:67:96:d9:fb:96:60:19:48:73:f6:f5: aa:44:a7:53:05:1f:d3:29:29:22:ce:98:7d:b3:3b: 4e:16:3c:57:3c:5a:34:8d:da:5a:68:bc:04:72:0e: b6:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:D0:2E:0E:46:4C:69:95:78:02:BA:2C:50:E8:AD:81:7D:CF:28:22 X509v3 Authority Key Identifier: keyid:C8:88:64:DD:3C:1E:6D:0D:5F:A9:14:67:F0:3B:26:6D:F5:F7:92:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:c7:c6:f4:9a:d7:df:e1:9a:62:85:52:9d:2c:c0:13:47:d8: 4b:a3:a3:c5:78:5b:d1:ce:88:ed:77:59:34:c3:c5:d6:83:4e: f0:17:9f:25:4c:a4:3e:ff:05:ff:71:84:4b:6a:a1:e2:de:0c: 19:cf:39:9e:96:bf:90:fa:14:73:47:b4:e9:e9:b7:63:e0:41: 5e:54:13:5a:0b:97:71:be:58:f1:02:16:72:76:e4:27:ee:34: 05:85:cd:2c:ed:8d:49:ee:c0:59:9c:1e:d9:f7:92:c4:ea:7e: e4:e0:d5:2d:d6:b2:13:29:16:14:e9:62:17:5f:6d:70:29:8e: 6f:50:cc:5f:5f:c7:a2:e9:b8:67:e5:57:7a:6d:48:55:fa:9d: 7d:20:2e:bc:6a:a3:fd:31:8a:ec:18:e0:b7:80:79:53:62:22: e8:84:51:48:20:54:d6:4a:46:bf:2b:a9:54:32:8b:b9:a5:ee: a5:65:47:88:f2:84:3c:e9:5f:6f:f6:5c:06:6a:e5:51:2b:36: aa:2e:d9:dd:10:8c:c3:83:67:4f:16:22:b6:d5:7c:b1:6e:cc: 2e:e4:ec:8a:1d:69:1a:4d:1b:54:7d:9d:a9:64:52:95:bf:f5: ba:bc:17:40:64:8a:fd:ec:5b:35:ac:9a:85:1b:fd:01:e1:4e: eb:81:0e:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMk2x3FoH07ylQIxJg2dJAzMwcR4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg4ODY0REQzQzFFNkQwRDVGQTkxNDY3RjAzQjI2NkRG NUY3OTI1NTAeFw0yNDA2MjIwNDE2MzNaFw0yNDA2MjUxMjE3MzNaMDMxMTAvBgNV BAMTKDc1RDAyRTBFNDY0QzY5OTU3ODAyQkEyQzUwRThBRDgxN0RDRjI4MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe2ABMSl3blVq7qmtRdUhr/xyA LrGXR361taeUoqPBuXddOponZEFE9CDXpY5CHJm1XaK3torP8XAYiGZzlWcqvlzW ATSMY65V4wknyvJ/toMmp8H+7lmU+Vuf3ORWef84WNmBle6rkzmQ7Gp5a3mmrBrp ivson+0RTqOc4grTtuPWbQhdH0oo7j8M8CMQ6Y43bfmmaU60rDnxx1Pzl63A5uHr dXaiIirIoUo7vFCC8WqHNa/GFLXr1d0NIL9JlWKW6Z4HElpkZYzQtwlEeaRfwcQO 0eVnltn7lmAZSHP29apEp1MFH9MpKSLOmH2zO04WPFc8WjSN2lpovARyDrbdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUddAuDkZMaZV4ArosUOitgX3PKCIwHwYDVR0j BBgwFoAUyIhk3TwebQ1fqRRn8DsmbfX3klUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MzJlNGY4Ni00OGU3LTQ4YzctYmE5MS1lMjU5NjgzNzhlOTUvMC9DODg4NjRERDND MUU2RDBENUZBOTE0NjdGMDNCMjY2REY1Rjc5MjU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzg4ODY0REQzQzFFNkQwRDVGQTkxNDY3RjAzQjI2NkRGNUY3 OTI1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzMyZTRmODYtNDhlNy00OGM3LWJh OTEtZTI1OTY4Mzc4ZTk1LzAvQzg4ODY0REQzQzFFNkQwRDVGQTkxNDY3RjAzQjI2 NkRGNUY3OTI1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAvHxvSa19/hmmKFUp0swBNH2Eujo8V4W9HO iO13WTTDxdaDTvAXnyVMpD7/Bf9xhEtqoeLeDBnPOZ6Wv5D6FHNHtOnpt2PgQV5U E1oLl3G+WPECFnJ25CfuNAWFzSztjUnuwFmcHtn3ksTqfuTg1S3WshMpFhTpYhdf bXApjm9QzF9fx6LpuGflV3ptSFX6nX0gLrxqo/0xiuwY4LeAeVNiIuiEUUggVNZK Rr8rqVQyi7ml7qVlR4jyhDzpX2/2XAZq5VErNqou2d0QjMODZ08WIrbVfLFuzC7k 7IodaRpNG1R9nalkUpW/9bq8F0Bkiv3sWzWsmoUb/QHhTuuBDq4= -----END CERTIFICATE-----Generated at Sat Jun 22 05:13:17 2024 by rpki-client on console-fra.rpki-client.org