$ rpki-client -vvf repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft File: D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft (raw, json) Hash identifier: yGD3vK5R9mvX131V4Ms2koxP+oSVCUpU4abpXK7WBIo= Subject key identifier: D6:89:36:85:04:02:B3:22:DA:1D:2B:DB:86:4C:97:80:F0:75:70:48 Authority key identifier: D4:69:93:7B:D0:30:57:5A:63:89:B1:FF:4C:DB:18:5E:FB:C4:B1:FA Certificate issuer: /CN=D469937BD030575A6389B1FF4CDB185EFBC4B1FA Certificate serial: 3AE3272D8AA362D9D5B39F0519223A21CE3302A1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft Manifest number: 0102 Signing time: Tue 28 May 2024 12:43:37 +0000 Manifest this update: Tue 28 May 2024 12:38:37 +0000 Manifest next update: Fri 31 May 2024 19:30:37 +0000 Files and hashes: 1: 3130332e34312e3234382e302f32332d3233203d3e20313530313835.roa (hash: KJdEuoo31fuJK7LNtHuBm/zk4b/1TzrVu3BCcIx1sq8=) 2: 3130332e34312e3234382e302f32342d3234203d3e20313530313835.roa (hash: G9sI2ty54UV4MzN1RlCsvOufDa+xMZq4Rui0FDu5iM4=) 3: D469937BD030575A6389B1FF4CDB185EFBC4B1FA.crl (hash: dClag0ljkmb4rYUnShTdBxNy/En5btmVRInd1BAfeCU=) 4: 3130332e34312e3234392e302f32342d3234203d3e20313530313835.roa (hash: UtQYA8VjBRWz98/nzz/MiC/WxccUqZ7MHexqIk6MkaY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.crl rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 May 2024 17:07:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:e3:27:2d:8a:a3:62:d9:d5:b3:9f:05:19:22:3a:21:ce:33:02:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D469937BD030575A6389B1FF4CDB185EFBC4B1FA Validity Not Before: May 28 12:38:37 2024 GMT Not After : May 31 19:30:37 2024 GMT Subject: CN=D68936850402B322DA1D2BDB864C9780F0757048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:22:e3:20:35:32:81:14:3b:8c:69:f8:3b:41: 28:54:9b:be:80:5a:9e:46:42:c5:cc:49:25:5a:8c: 27:55:62:39:95:91:10:ab:80:31:54:7f:c1:a8:c7: e5:59:d1:c2:b0:a7:f6:27:31:e0:19:8d:0a:a2:35: 1b:82:3d:72:25:fe:d9:44:15:cd:0d:b5:8d:fc:2f: c1:43:2c:66:be:d1:fd:d4:7c:a4:44:8c:62:a4:b7: c3:b5:a2:4c:3f:a8:9b:c6:ad:4c:fe:ec:d2:ab:ce: 85:70:f1:ee:18:11:f9:97:6d:b0:d0:5c:36:14:9f: 1b:ea:63:2a:10:01:ec:ce:bf:4d:69:36:e1:e1:a6: ef:dd:91:a7:92:6b:26:a1:c7:25:73:7f:d5:2a:36: 88:df:f6:7a:5d:96:8f:cd:d7:75:a2:a2:49:b0:3c: 02:91:3f:e2:d4:8b:2f:4e:a9:22:8c:dc:3c:36:94: f1:66:f8:bb:dd:85:39:85:b0:1f:38:90:d4:72:19: e5:7c:96:cc:c5:a6:ee:e7:7a:8d:88:f4:fa:5a:ab: 20:1c:b5:15:6b:5c:96:22:c8:07:ee:5a:3d:fe:28: c5:ec:bb:b2:3a:4a:ec:c3:57:a7:15:c1:bc:36:4e: da:eb:a8:c2:25:57:fd:85:c6:99:5e:ab:65:03:2a: 2c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:89:36:85:04:02:B3:22:DA:1D:2B:DB:86:4C:97:80:F0:75:70:48 X509v3 Authority Key Identifier: keyid:D4:69:93:7B:D0:30:57:5A:63:89:B1:FF:4C:DB:18:5E:FB:C4:B1:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:14:1e:ff:87:f0:bd:24:d2:60:a2:bb:68:fe:6d:9a:32:29: 98:7f:eb:a6:1c:5a:76:32:83:04:1b:fc:70:2c:fd:7b:95:2f: e2:ef:82:45:b2:07:ac:e8:73:05:39:03:9a:45:73:17:54:69: 94:c3:51:4f:9c:91:3a:76:94:05:46:8c:0b:a9:50:fb:ff:98: 00:17:21:77:57:1b:a9:15:c5:f0:c8:87:9b:79:3a:19:b7:bb: b8:2e:04:cb:45:34:61:e2:4e:88:ab:cd:3c:40:17:19:84:29: ea:a4:25:55:bd:41:89:17:58:57:9b:32:8b:c6:e7:aa:c8:30: 5d:d5:13:7e:e9:37:38:20:4e:6c:da:9b:10:e2:3d:6e:17:0c: 5c:cc:f0:23:69:12:45:ae:de:85:f8:87:67:f6:c1:7c:4d:d1: c8:b1:e9:18:69:de:fa:aa:d9:96:86:d5:f7:ab:d2:84:c8:cd: a0:f3:3f:76:ce:fd:2f:d2:e5:47:75:18:76:3a:8a:4f:6c:11: 09:d6:05:24:c6:b2:93:35:61:78:a1:ee:75:3d:09:be:ae:9c: 84:be:f7:43:06:a2:0f:1f:39:67:5b:b0:66:27:c7:b4:54:10: f9:ee:35:11:08:9f:e6:f5:92:4f:3a:f5:19:39:bf:6b:9c:e4: 79:e0:45:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOuMnLYqjYtnVs58FGSI6Ic4zAqEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ2OTkzN0JEMDMwNTc1QTYzODlCMUZGNENEQjE4NUVG QkM0QjFGQTAeFw0yNDA1MjgxMjM4MzdaFw0yNDA1MzExOTMwMzdaMDMxMTAvBgNV BAMTKEQ2ODkzNjg1MDQwMkIzMjJEQTFEMkJEQjg2NEM5NzgwRjA3NTcwNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQIuMgNTKBFDuMafg7QShUm76A Wp5GQsXMSSVajCdVYjmVkRCrgDFUf8Gox+VZ0cKwp/YnMeAZjQqiNRuCPXIl/tlE Fc0NtY38L8FDLGa+0f3UfKREjGKkt8O1okw/qJvGrUz+7NKrzoVw8e4YEfmXbbDQ XDYUnxvqYyoQAezOv01pNuHhpu/dkaeSayahxyVzf9UqNojf9npdlo/N13Wiokmw PAKRP+LUiy9OqSKM3Dw2lPFm+LvdhTmFsB84kNRyGeV8lszFpu7neo2I9PpaqyAc tRVrXJYiyAfuWj3+KMXsu7I6SuzDV6cVwbw2TtrrqMIlV/2Fxpleq2UDKiwXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1ok2hQQCsyLaHSvbhkyXgPB1cEgwHwYDVR0j BBgwFoAU1GmTe9AwV1pjibH/TNsYXvvEsfowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NzUyNzdlOC03ZDBmLTQxODQtOWMyOC1hNjYzNWVmZWYyOWMvMC9ENDY5OTM3QkQw MzA1NzVBNjM4OUIxRkY0Q0RCMTg1RUZCQzRCMUZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDQ2OTkzN0JEMDMwNTc1QTYzODlCMUZGNENEQjE4NUVGQkM0 QjFGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzc1Mjc3ZTgtN2QwZi00MTg0LTlj MjgtYTY2MzVlZmVmMjljLzAvRDQ2OTkzN0JEMDMwNTc1QTYzODlCMUZGNENEQjE4 NUVGQkM0QjFGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGQUHv+H8L0k0mCiu2j+bZoyKZh/66YcWnYy gwQb/HAs/XuVL+LvgkWyB6zocwU5A5pFcxdUaZTDUU+ckTp2lAVGjAupUPv/mAAX IXdXG6kVxfDIh5t5Ohm3u7guBMtFNGHiToirzTxAFxmEKeqkJVW9QYkXWFebMovG 56rIMF3VE37pNzggTmzamxDiPW4XDFzM8CNpEkWu3oX4h2f2wXxN0cix6Rhp3vqq 2ZaG1fer0oTIzaDzP3bO/S/S5Ud1GHY6ik9sEQnWBSTGspM1YXih7nU9Cb6unIS+ 90MGog8fOWdbsGYnx7RUEPnuNREIn+b1kk869Rk5v2uc5HngRd0= -----END CERTIFICATE-----Generated at Tue May 28 15:18:19 2024 by rpki-client on console-ams.rpki-client.org