$ rpki-client -vvf repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.mft File: D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.mft (raw, json) Hash identifier: ls+TUrdbqSWo2VWsfaGyRupwHgU4okuOSYHx/7JFOWA= Subject key identifier: 19:D6:6B:CD:24:1F:33:01:17:A4:02:62:DE:34:FB:4C:C6:FB:76:EF Authority key identifier: D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F Certificate issuer: /CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F Certificate serial: 59814D9E3471EE5202CCF1CEDEFECD5E529A65A8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.mft Manifest number: 0434 Signing time: Thu 30 May 2024 22:40:50 +0000 Manifest this update: Thu 30 May 2024 22:35:50 +0000 Manifest next update: Mon 03 Jun 2024 00:00:50 +0000 Files and hashes: 1: 3130332e38372e3233312e302f32342d3234203d3e20313336303838.roa (hash: +mJefirNVXI6XsMgfalNCJOE9NMEhcTErJJNZPBMNcQ=) 2: D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.crl (hash: 58lc1O8JzZ9rR5lPz066sffkhyb9FN8RVkyZH5CxuI0=) 3: 323430303a643934303a38303a3a2f34382d3438203d3e20313336303838.roa (hash: h9Ebheahc7r304UdGTGN/Fftf1E0g6Al8u9X5c1wBbs=) 4: 3130332e38372e3232382e302f32342d3234203d3e20313336303838.roa (hash: tUBQwmNfTtd1ZRc1pL2Njk/ECLWut6S4/vSZi1KRM38=) 5: 323430303a643934303a3430303a3a2f34382d3438203d3e20313336303838.roa (hash: vkFRAWHA6zDzqaRlOlgmbyjWVceLMdZQtv0jAk3Ycmg=) 6: 323430303a643934303a37303a3a2f34382d3438203d3e20313336303838.roa (hash: EsPa8hxjv7Ky/fPKqpL6Zzz+eJ9NF7DJZxNe2aFsid0=) 7: 323430303a643934303a3230303a3a2f34382d3438203d3e20313336303838.roa (hash: 4Ty2vpIt889S6H4qW9mr7XDARxD9ahCYWHY74BSfHxA=) 8: 323430303a643934303a36303a3a2f34382d3438203d3e20313336303838.roa (hash: Di4ceC00swYAY2ajmt6nL1ON1wrElmI+FqxcAs1Tl0I=) 9: 323430303a643934303a3830303a3a2f34382d3438203d3e20313336303838.roa (hash: XajAdh0NP0wtiEj6pNSRIBGXFhMt44jIjkllcbDnrZQ=) 10: 323430303a643934303a39303a3a2f34382d3438203d3e20313336303838.roa (hash: ugrZ/azzNQrkUJzCNcQ4p1EmUsnyGels89IkeC/5AHg=) 11: 3130332e38372e3232392e302f32342d3234203d3e20313336303838.roa (hash: v2YeJBPUOT4XSBZslIL593suBiT27b8zEfKoCux8KaI=) 12: 323430303a643934303a633030303a3a2f34382d3438203d3e20313336303838.roa (hash: F29ZRqV9/P8f9Bb0GV42/JZhJkU+3iLBwCesxvn03To=) 13: 323430303a643934303a3330303a3a2f34382d3438203d3e20313336303838.roa (hash: 3qRmPlR/FnWGuKcwPRRezRITCmfZ+nD7X+NLKnwnpu4=) 14: 323430303a643934303a35303a3a2f34382d3438203d3e20313336303838.roa (hash: lfQk188MA7Fg4901KKGuu0eq4gU1IsurmKrl78X8x1I=) 15: 323430303a643934303a31303a3a2f34382d3438203d3e20313336303838.roa (hash: 2mbyFw3hZ4hey50/0nJhDFHQzsaL/VpiRr8DSTKGjnE=) 16: 323430303a643934303a32303a3a2f34382d3438203d3e20313336303838.roa (hash: E3gXB5X+MONP8MChkALZDllTFPGZ3v+31eQcA8VOcvE=) 17: 323430303a643934303a3730303a3a2f34382d3438203d3e20313336303838.roa (hash: bEAB+CErGsTUCNuZ5dph2YraaUfmMaM9ov2sSa/1/4M=) 18: 323430303a643934303a3530303a3a2f34382d3438203d3e20313336303838.roa (hash: 0XKgv2rdZk74yjyQRGVUzMuceMYlUpbj5+T34egz0mk=) 19: 323430303a643934303a33303a3a2f34382d3438203d3e20313336303838.roa (hash: HAikvyoZYFbSWqOQlZGFhknKh+zJh+n4L5U9bwOzPgA=) 20: 3130332e38372e3233302e302f32342d3234203d3e20313336303838.roa (hash: Bby0xkG9xWa7b0mZmHZcgRfs5Ah4kVGh+6tmlg4qiTQ=) 21: 323430303a643934303a34303a3a2f34382d3438203d3e20313336303838.roa (hash: 37Y51NqG6RIW9Ye9YqLAn0T63iw6/opDZzTqQ3Ft3Pk=) 22: 323430303a643934303a3930303a3a2f34382d3438203d3e20313336303838.roa (hash: UqJzaGDMj/9QRl/If/AmwnrU4C8Nroi8tU3YpQHjbvc=) 23: 323430303a643934303a3630303a3a2f34382d3438203d3e20313336303838.roa (hash: tkFf04XzSbiZzFzCj42IrMkvhq77zUkWMcu5ihzrlh8=) 24: 323430303a643934303a3130303a3a2f34382d3438203d3e20313336303838.roa (hash: pqa046/kDgWridI0eeVsLbVA7W9TBemm+G5uW07nV7A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.crl rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 00:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:81:4d:9e:34:71:ee:52:02:cc:f1:ce:de:fe:cd:5e:52:9a:65:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F Validity Not Before: May 30 22:35:50 2024 GMT Not After : Jun 3 00:00:50 2024 GMT Subject: CN=19D66BCD241F330117A40262DE34FB4CC6FB76EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:eb:9b:b8:8c:24:ca:f4:ad:d6:89:2c:27:ad: 26:12:97:59:94:48:c5:e3:b8:e1:49:e3:be:92:00: 27:29:e6:7a:18:f5:d9:35:c0:30:58:c1:b7:18:9e: 0d:5d:c6:f6:7d:12:7e:28:4c:51:03:fb:7b:bf:7c: 85:94:c4:91:38:b1:9d:32:64:b7:ce:6c:e4:4f:a5: af:2c:8d:26:bc:2b:e1:4b:40:77:b9:18:06:ca:fd: e5:6f:9d:31:96:0c:c5:02:f7:f6:5e:28:9d:9b:ad: 7e:e3:1c:52:05:7c:e6:21:68:e3:a4:6e:67:ae:be: 9f:ee:ac:41:f5:a2:a5:27:ec:b1:ab:79:e9:5a:ba: d1:06:c8:18:71:00:eb:99:6f:8e:3b:09:f8:16:e6: 70:d7:8f:ce:0e:70:27:e1:7e:93:75:56:4b:00:7e: 12:4d:c4:70:50:a3:68:82:b3:f8:87:47:33:8e:16: 10:6c:7f:db:51:cc:0c:06:96:63:b4:ee:0a:a2:35: b1:39:63:2a:e6:61:19:34:17:1a:db:5a:29:41:3c: 2e:47:72:40:9c:cc:2c:6b:f5:94:29:cd:9f:6d:4a: 71:51:e8:36:d0:1c:8a:24:8a:34:62:7d:62:41:fe: 0e:5a:6a:c1:da:88:91:3c:32:42:24:32:85:e5:34: 81:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:D6:6B:CD:24:1F:33:01:17:A4:02:62:DE:34:FB:4C:C6:FB:76:EF X509v3 Authority Key Identifier: keyid:D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:e5:a8:79:c9:b3:a1:5b:c6:6a:48:a1:1e:b8:71:a5:80:9e: 15:b2:b1:5f:e7:2a:d6:4c:41:c1:b8:7e:4e:e5:4f:5a:8e:b7: a3:cb:40:7f:97:cb:34:fa:9a:d3:bc:48:a5:9f:bb:63:37:41: 70:a8:38:55:6f:55:38:f1:64:a7:97:59:ce:8f:9a:a0:72:8a: 57:e2:e6:fa:6f:7f:48:0f:81:6b:1f:85:37:78:c1:af:82:a6: f8:67:dd:bc:02:97:0b:06:31:49:e2:51:bb:15:48:8c:35:72: ef:e6:0c:f8:42:20:7b:a9:ef:4c:1f:09:08:09:ad:10:f8:6a: 77:d2:0d:4b:d5:cf:11:b9:f3:aa:2a:a9:7a:3a:9c:0a:48:fc: 9c:5c:78:15:8c:f7:b3:c9:5c:16:2d:a7:6d:76:de:41:4b:93: 46:ac:26:07:91:5e:a0:58:b2:bc:32:4b:4d:ea:98:64:cc:42: 30:ee:f3:4e:5f:32:f4:ba:29:b9:b8:a7:0a:2d:e6:bd:ef:01: 38:c2:26:5f:af:59:3b:c5:68:2c:02:bb:9c:42:8a:6f:63:3c: f9:94:78:31:57:5f:64:27:1e:b4:9c:85:ce:7a:21:1a:28:ff: 16:3a:6c:68:9f:1e:92:24:82:19:31:ab:2c:d0:fd:57:d5:89: 10:fb:b6:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWYFNnjRx7lICzPHO3v7NXlKaZagwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNGQjYxRDc0NkE0NDc2N0Q0NTE4RDZFOUZEMUZCRDhE MEJFOTIzRjAeFw0yNDA1MzAyMjM1NTBaFw0yNDA2MDMwMDAwNTBaMDMxMTAvBgNV BAMTKDE5RDY2QkNEMjQxRjMzMDExN0E0MDI2MkRFMzRGQjRDQzZGQjc2RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ65u4jCTK9K3WiSwnrSYSl1mU SMXjuOFJ476SACcp5noY9dk1wDBYwbcYng1dxvZ9En4oTFED+3u/fIWUxJE4sZ0y ZLfObORPpa8sjSa8K+FLQHe5GAbK/eVvnTGWDMUC9/ZeKJ2brX7jHFIFfOYhaOOk bmeuvp/urEH1oqUn7LGreelautEGyBhxAOuZb447CfgW5nDXj84OcCfhfpN1VksA fhJNxHBQo2iCs/iHRzOOFhBsf9tRzAwGlmO07gqiNbE5YyrmYRk0FxrbWilBPC5H ckCczCxr9ZQpzZ9tSnFR6DbQHIokijRifWJB/g5aasHaiJE8MkIkMoXlNIE1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGdZrzSQfMwEXpAJi3jT7TMb7du8wHwYDVR0j BBgwFoAU0/th10akR2fUUY1un9H72NC+kj8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 M2Y0ZWMxYy05NTM1LTRjYmYtOWM3YS1mZDMyYzgzMGVkYmEvMC9EM0ZCNjFENzQ2 QTQ0NzY3RDQ1MThENkU5RkQxRkJEOEQwQkU5MjNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDNGQjYxRDc0NkE0NDc2N0Q0NTE4RDZFOUZEMUZCRDhEMEJF OTIzRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzNmNGVjMWMtOTUzNS00Y2JmLTlj N2EtZmQzMmM4MzBlZGJhLzAvRDNGQjYxRDc0NkE0NDc2N0Q0NTE4RDZFOUZEMUZC RDhEMEJFOTIzRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJrlqHnJs6FbxmpIoR64caWAnhWysV/nKtZM QcG4fk7lT1qOt6PLQH+XyzT6mtO8SKWfu2M3QXCoOFVvVTjxZKeXWc6PmqByilfi 5vpvf0gPgWsfhTd4wa+Cpvhn3bwClwsGMUniUbsVSIw1cu/mDPhCIHup70wfCQgJ rRD4anfSDUvVzxG586oqqXo6nApI/JxceBWM97PJXBYtp2123kFLk0asJgeRXqBY srwyS03qmGTMQjDu805fMvS6Kbm4pwot5r3vATjCJl+vWTvFaCwCu5xCim9jPPmU eDFXX2QnHrSchc56IRoo/xY6bGifHpIkghkxqyzQ/VfViRD7thY= -----END CERTIFICATE-----Generated at Thu May 30 23:02:05 2024 by rpki-client on console-fra.rpki-client.org