$ rpki-client -vvf repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.mft File: 6DA2B28F4391C01434B7229FD4D68E661BF13061.mft (raw, json) Hash identifier: 1+t8In99Yf/g1o2emxXMOEzk+Viv+LT0HeF68MBkpko= Subject key identifier: C8:C7:E2:0B:69:33:06:07:AF:A5:CB:D8:DB:D0:94:6B:20:10:86:55 Authority key identifier: 6D:A2:B2:8F:43:91:C0:14:34:B7:22:9F:D4:D6:8E:66:1B:F1:30:61 Certificate issuer: /CN=6DA2B28F4391C01434B7229FD4D68E661BF13061 Certificate serial: 5D0EF70D2E30E87CA42DE57EFF3CFB0A47D7F1F2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DA2B28F4391C01434B7229FD4D68E661BF13061.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.mft Manifest number: 01A0 Signing time: Sat 18 May 2024 16:41:14 +0000 Manifest this update: Sat 18 May 2024 16:36:14 +0000 Manifest next update: Tue 21 May 2024 18:24:14 +0000 Files and hashes: 1: 34392e3233362e3231372e302f32342d3234203d3e203535363638.roa (hash: H4NcwKMHZWp/1t+VaORtVjcYwchaFn3uLMivXIQw5rM=) 2: 6DA2B28F4391C01434B7229FD4D68E661BF13061.crl (hash: egtJzp4u27gffqBhkQWbO8CQYuzbBNV2tcPzqob4bPo=) 3: 34392e3233362e3231362e302f32342d3234203d3e203535363638.roa (hash: FJvHeCD6s4IxzptA5cCaw6ThG9r9hL+CuZH/CUiFfBY=) 4: 34392e3233362e3232302e302f32342d3234203d3e203535363638.roa (hash: V/FSSDfwOsJrY8pKyZMjsHwiM1yhEXsEeAVmFt490ws=) 5: 34392e3233362e3232312e302f32342d3234203d3e203535363638.roa (hash: aCAvdYjJx+KkgOJKOSGkLVzKNWuwNdyKuSnwpKUM3k0=) 6: 34392e3233362e3231392e302f32342d3234203d3e203535363638.roa (hash: PTOEhLLwBNBwqQYUwyrBQmg20A61FzomOTRoi7IAwlg=) 7: 34392e3233362e3232332e302f32342d3234203d3e203535363638.roa (hash: pDyhKy8yP2IUi/Ybfw8w4Yvis1OtFP3QQw5zyF9au28=) 8: 34392e3233362e3232322e302f32342d3234203d3e203535363638.roa (hash: KzlTyJZTxvZfEM8NNzBArTKDbw2Jw6okmjZUpKLdaTA=) 9: 34392e3233362e3231382e302f32342d3234203d3e203535363638.roa (hash: Cbovm5h0sUJld1qGSoi9KOausIHJpX6jiLcpoN+zHbo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.crl rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DA2B28F4391C01434B7229FD4D68E661BF13061.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 18:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:0e:f7:0d:2e:30:e8:7c:a4:2d:e5:7e:ff:3c:fb:0a:47:d7:f1:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DA2B28F4391C01434B7229FD4D68E661BF13061 Validity Not Before: May 18 16:36:14 2024 GMT Not After : May 21 18:24:14 2024 GMT Subject: CN=C8C7E20B69330607AFA5CBD8DBD0946B20108655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e0:5b:19:06:44:27:c8:89:e5:4a:e5:96:7a: ab:14:21:a9:e6:ac:88:98:c4:ac:f5:fd:f3:06:fa: 23:57:14:d6:9f:5b:78:40:c7:21:7f:75:4c:7f:6c: 67:6a:95:02:57:5b:52:82:3c:d7:0f:8a:10:9e:ef: 37:6d:4d:46:7e:03:25:0d:35:23:84:5f:e7:5e:ae: df:d4:3b:6a:ce:52:f9:48:c4:b8:ef:73:76:3b:a4: 98:d9:a7:32:ce:f1:f1:bf:5d:22:db:f1:63:26:f8: b0:d2:d4:77:63:19:5f:a8:1f:23:f8:38:f8:15:19: 05:0b:63:2e:28:71:1c:e5:65:81:c8:f0:ae:ac:57: c5:33:b5:6c:28:c6:08:b3:d3:d7:37:37:22:39:98: 58:26:4e:7b:cc:c4:fe:d5:7f:26:02:3c:d6:d8:60: 04:61:07:61:b8:58:b3:07:75:75:7b:cf:2a:ff:66: 64:c7:e3:6a:cd:81:78:ec:4a:f0:d5:14:24:9b:51: c2:65:30:5b:fe:ec:dc:c8:3c:b4:f9:64:4e:2a:88: 0f:5e:39:7c:b3:43:38:d5:e4:a9:6e:1b:8f:99:d7: 66:a8:5b:a7:9e:37:2e:92:97:5e:6c:51:5c:2b:94: aa:69:be:66:29:ba:4c:8c:99:92:06:3e:f3:bb:91: 36:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:C7:E2:0B:69:33:06:07:AF:A5:CB:D8:DB:D0:94:6B:20:10:86:55 X509v3 Authority Key Identifier: keyid:6D:A2:B2:8F:43:91:C0:14:34:B7:22:9F:D4:D6:8E:66:1B:F1:30:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DA2B28F4391C01434B7229FD4D68E661BF13061.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d0f99c3-e567-41ae-aa00-26cb9781fbe9/0/6DA2B28F4391C01434B7229FD4D68E661BF13061.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:d5:d5:8e:de:02:0a:9f:61:2d:3a:a7:3d:7f:8c:7c:82:46: dc:a5:53:1b:3f:94:e8:5c:8f:7b:4f:df:f7:7c:df:f2:34:03: bf:a2:77:8c:85:b0:c6:31:30:6e:d3:a3:a6:99:78:fc:8e:88: 91:6d:dc:35:0d:9f:9f:e5:8f:63:bd:e0:73:95:22:30:38:75: d1:8f:56:89:dc:2e:28:20:e4:fa:05:a7:a9:7e:09:36:84:94: 80:20:51:78:19:f7:9b:1d:b9:2b:1b:a6:7c:8a:60:2f:c2:31: c6:63:cc:a0:8f:80:fe:e3:7e:d8:21:8b:64:39:fe:7e:8e:ef: cb:2a:30:20:11:11:c3:2a:7a:93:3c:87:f2:03:1e:31:a4:8b: 15:ee:89:b0:0b:c4:38:53:d7:a6:37:d3:d6:76:11:de:4c:27: cd:b5:44:89:65:cb:a6:31:fc:40:16:07:c0:c0:58:27:b2:c7: b2:d4:06:d4:6e:6b:4d:10:fd:bd:91:b3:3c:60:b9:5a:7e:2c: 0b:c1:f9:29:6c:b2:54:c2:d0:04:53:3b:73:0e:7b:00:c5:9d: 10:70:cb:d8:32:4b:fb:36:26:39:06:d4:4e:ef:77:21:99:81: 2c:79:22:5b:58:8a:f1:b6:ad:35:3e:2e:db:40:07:cd:2f:8d: 01:6e:46:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXQ73DS4w6HykLeV+/zz7CkfX8fIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRBMkIyOEY0MzkxQzAxNDM0QjcyMjlGRDRENjhFNjYx QkYxMzA2MTAeFw0yNDA1MTgxNjM2MTRaFw0yNDA1MjExODI0MTRaMDMxMTAvBgNV BAMTKEM4QzdFMjBCNjkzMzA2MDdBRkE1Q0JEOERCRDA5NDZCMjAxMDg2NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF4FsZBkQnyInlSuWWeqsUIanm rIiYxKz1/fMG+iNXFNafW3hAxyF/dUx/bGdqlQJXW1KCPNcPihCe7zdtTUZ+AyUN NSOEX+dert/UO2rOUvlIxLjvc3Y7pJjZpzLO8fG/XSLb8WMm+LDS1HdjGV+oHyP4 OPgVGQULYy4ocRzlZYHI8K6sV8UztWwoxgiz09c3NyI5mFgmTnvMxP7VfyYCPNbY YARhB2G4WLMHdXV7zyr/ZmTH42rNgXjsSvDVFCSbUcJlMFv+7NzIPLT5ZE4qiA9e OXyzQzjV5KluG4+Z12aoW6eeNy6Sl15sUVwrlKppvmYpukyMmZIGPvO7kTatAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyMfiC2kzBgevpcvY29CUayAQhlUwHwYDVR0j BBgwFoAUbaKyj0ORwBQ0tyKf1NaOZhvxMGEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDBmOTljMy1lNTY3LTQxYWUtYWEwMC0yNmNiOTc4MWZiZTkvMC82REEyQjI4RjQz OTFDMDE0MzRCNzIyOUZENEQ2OEU2NjFCRjEzMDYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkRBMkIyOEY0MzkxQzAxNDM0QjcyMjlGRDRENjhFNjYxQkYx MzA2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2QwZjk5YzMtZTU2Ny00MWFlLWFh MDAtMjZjYjk3ODFmYmU5LzAvNkRBMkIyOEY0MzkxQzAxNDM0QjcyMjlGRDRENjhF NjYxQkYxMzA2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJrV1Y7eAgqfYS06pz1/jHyCRtylUxs/lOhc j3tP3/d83/I0A7+id4yFsMYxMG7To6aZePyOiJFt3DUNn5/lj2O94HOVIjA4ddGP VoncLigg5PoFp6l+CTaElIAgUXgZ95sduSsbpnyKYC/CMcZjzKCPgP7jftghi2Q5 /n6O78sqMCAREcMqepM8h/IDHjGkixXuibALxDhT16Y309Z2Ed5MJ821RIlly6Yx /EAWB8DAWCeyx7LUBtRua00Q/b2RszxguVp+LAvB+SlsslTC0ARTO3MOewDFnRBw y9gyS/s2JjkG1E7vdyGZgSx5IltYivG2rTU+LttAB80vjQFuRv0= -----END CERTIFICATE-----Generated at Sat May 18 17:37:10 2024 by rpki-client on console-fra.rpki-client.org