$ rpki-client -vvf repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft File: D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft (raw, json) Hash identifier: 7F2JK8EGYoj1GDxCtQv4KGpHda1xdGRhyeuroWLfACw= Subject key identifier: BA:BA:DD:4B:8E:C2:B7:87:48:5A:14:E7:EE:6D:83:28:E8:35:C9:34 Authority key identifier: D1:CE:4E:F9:10:CA:B7:84:EF:29:3D:26:D9:83:A9:2F:CB:3A:34:28 Certificate issuer: /CN=D1CE4EF910CAB784EF293D26D983A92FCB3A3428 Certificate serial: 38ED54BA5C943FF658807677090FECCEAA2B5757 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer Subject info access: rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft Manifest number: 0271 Signing time: Tue 28 May 2024 21:40:52 +0000 Manifest this update: Tue 28 May 2024 21:35:52 +0000 Manifest next update: Fri 31 May 2024 23:32:52 +0000 Files and hashes: 1: 3130332e38322e3138302e302f32342d3234203d3e20313336303631.roa (hash: h/fbUa0TeJsE4mRfykp3QWqc/nJKgpaGaMTSJKMaYw0=) 2: D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl (hash: euK2NqTkpL2aPoZu597dMtia96y/r2nV+BoAMPtEv8M=) 3: 3130332e38322e3138302e302f32332d3233203d3e20313336303631.roa (hash: 4Py0vND4egJKwld0tUhEMVxJMyyf+rQZBFTUphHOelY=) 4: 3130332e38322e3138312e302f32342d3234203d3e20313336303631.roa (hash: pC5YZgXHGWG4jDVrSYWdl8W4OgITMlAiXfBYcKy82gU=) 5: 3130332e38322e3138302e302f32332d3233203d3e203535303032.roa (hash: BVxLNaMr4nMl3AjpDUd9ng+gxpcXV78HWbygJoURUYA=) 6: 3130332e38322e3138322e302f32342d3234203d3e20313336303631.roa (hash: stMbUJCF2DLOJpyFDM8xq05hs1LBwGsxQlxWZ9y9Rx8=) 7: 3130332e38322e3138322e302f32342d3234203d3e203535303032.roa (hash: eM/aadIpGHslQnQYAcVFd3eTeKpPaKWI6MrIopvzYRo=) 8: 3130332e38322e3138332e302f32342d3234203d3e203535303032.roa (hash: GLJOdFQ5Os91QVhz33vHoAsckHnYmrtRJOU4tFEbf2U=) 9: 3130332e38322e3138332e302f32342d3234203d3e20313336303631.roa (hash: jsBEyDd89LEY1y4et7lZVy1hsiuqWzTtGWEoQKCQkOU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 May 2024 23:32:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:ed:54:ba:5c:94:3f:f6:58:80:76:77:09:0f:ec:ce:aa:2b:57:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1CE4EF910CAB784EF293D26D983A92FCB3A3428 Validity Not Before: May 28 21:35:52 2024 GMT Not After : May 31 23:32:52 2024 GMT Subject: CN=BABADD4B8EC2B787485A14E7EE6D8328E835C934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d1:cb:33:ea:51:42:13:b5:c3:75:c6:f2:5e: fa:9e:7c:1c:57:6e:44:80:f9:b4:a5:74:67:19:c7: 24:86:a8:fa:24:15:83:1b:6f:69:19:6d:9b:58:35: 03:b7:ad:38:f4:83:81:0e:32:2b:5f:f2:91:f5:b7: ee:9a:5c:a4:f4:4d:15:a8:f4:e1:29:27:33:dc:71: c5:48:88:5a:c9:12:97:fd:24:6b:00:10:9d:ee:78: 4c:9b:8f:90:a8:1d:f0:92:85:39:0c:23:4c:5a:34: d8:47:f1:3c:04:80:cd:af:7a:0b:62:bf:6c:87:26: a5:ef:2c:4d:e5:fe:28:e3:ae:bc:7d:b8:81:8b:b6: f3:ef:db:ab:24:20:59:b1:78:36:ea:c3:57:61:1c: f8:f3:19:f5:eb:60:30:e4:3d:95:cc:48:af:06:fe: 31:89:52:e8:7b:26:2c:7e:04:23:16:80:22:88:af: 0b:d0:a2:cd:bd:ab:3d:44:fc:37:5d:b0:7b:a8:3b: 15:92:23:76:9c:84:1f:d4:60:47:a2:df:2c:64:ff: 31:18:b3:1c:ef:b8:93:0e:30:99:08:d0:85:7b:aa: 49:7a:f1:17:98:9e:48:3b:4c:f0:49:88:2f:1d:d9: 64:0a:52:57:43:ba:1d:33:18:22:21:36:3c:e0:c0: f1:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:BA:DD:4B:8E:C2:B7:87:48:5A:14:E7:EE:6D:83:28:E8:35:C9:34 X509v3 Authority Key Identifier: keyid:D1:CE:4E:F9:10:CA:B7:84:EF:29:3D:26:D9:83:A9:2F:CB:3A:34:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:e1:50:87:06:e9:25:ae:ff:75:46:86:f5:79:f8:af:29:95: b0:d6:2d:b5:36:57:58:a7:dc:f2:15:75:8d:6e:35:71:68:87: ea:f5:e8:3b:10:f5:a2:fe:a3:d1:62:a3:a7:b0:f9:3c:b5:77: fa:9b:47:7f:93:86:22:d2:a2:b5:6d:63:85:be:bb:8f:b6:2d: 89:ff:ab:98:32:97:3b:0c:ce:92:86:2a:3e:21:3f:df:80:94: 53:df:38:45:ff:ca:ae:61:32:16:ad:f8:4e:dc:c6:00:61:5b: 89:a8:00:bc:fa:aa:e3:7d:5e:fe:74:63:a4:ac:01:41:b4:7f: db:d9:4d:70:3b:9d:f6:72:46:be:b1:6d:2d:98:ea:f5:8c:52: 85:03:05:89:fa:10:72:7c:cf:f4:51:e7:9d:15:97:d2:0d:27: 07:c3:fd:22:95:2d:19:78:14:0c:ac:97:3a:ce:9e:85:82:9b: 48:40:e8:2e:20:c7:a2:98:b5:af:48:d4:e5:e4:67:80:96:b4: 90:38:1e:5b:25:66:26:8c:0d:e9:0f:b9:4e:20:40:a3:aa:ca: 89:d3:d3:3f:35:42:41:90:c8:9e:e4:91:33:35:3e:f3:ef:a8: 48:82:1e:9d:f4:4f:cf:66:26:ca:66:70:ba:00:63:f6:55:ed: b7:ec:ff:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOO1UulyUP/ZYgHZ3CQ/szqorV1cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFDRTRFRjkxMENBQjc4NEVGMjkzRDI2RDk4M0E5MkZD QjNBMzQyODAeFw0yNDA1MjgyMTM1NTJaFw0yNDA1MzEyMzMyNTJaMDMxMTAvBgNV BAMTKEJBQkFERDRCOEVDMkI3ODc0ODVBMTRFN0VFNkQ4MzI4RTgzNUM5MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK0csz6lFCE7XDdcbyXvqefBxX bkSA+bSldGcZxySGqPokFYMbb2kZbZtYNQO3rTj0g4EOMitf8pH1t+6aXKT0TRWo 9OEpJzPcccVIiFrJEpf9JGsAEJ3ueEybj5CoHfCShTkMI0xaNNhH8TwEgM2vegti v2yHJqXvLE3l/ijjrrx9uIGLtvPv26skIFmxeDbqw1dhHPjzGfXrYDDkPZXMSK8G /jGJUuh7Jix+BCMWgCKIrwvQos29qz1E/DddsHuoOxWSI3achB/UYEei3yxk/zEY sxzvuJMOMJkI0IV7qkl68ReYnkg7TPBJiC8d2WQKUldDuh0zGCIhNjzgwPHlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUurrdS47Ct4dIWhTn7m2DKOg1yTQwHwYDVR0j BBgwFoAU0c5O+RDKt4TvKT0m2YOpL8s6NCgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MDc1OGYxNS01ZGU4LTQ4N2QtOTk0NS1jM2VhMjA3ZTQ0YWQvMC9EMUNFNEVGOTEw Q0FCNzg0RUYyOTNEMjZEOTgzQTkyRkNCM0EzNDI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDFDRTRFRjkxMENBQjc4NEVGMjkzRDI2RDk4M0E5MkZDQjNB MzQyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODA3NThmMTUtNWRlOC00ODdkLTk5 NDUtYzNlYTIwN2U0NGFkLzAvRDFDRTRFRjkxMENBQjc4NEVGMjkzRDI2RDk4M0E5 MkZDQjNBMzQyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIHhUIcG6SWu/3VGhvV5+K8plbDWLbU2V1in 3PIVdY1uNXFoh+r16DsQ9aL+o9Fio6ew+Ty1d/qbR3+ThiLSorVtY4W+u4+2LYn/ q5gylzsMzpKGKj4hP9+AlFPfOEX/yq5hMhat+E7cxgBhW4moALz6quN9Xv50Y6Ss AUG0f9vZTXA7nfZyRr6xbS2Y6vWMUoUDBYn6EHJ8z/RR550Vl9INJwfD/SKVLRl4 FAyslzrOnoWCm0hA6C4gx6KYta9I1OXkZ4CWtJA4HlslZiaMDekPuU4gQKOqyonT 0z81QkGQyJ7kkTM1PvPvqEiCHp30T89mJspmcLoAY/ZV7bfs/7g= -----END CERTIFICATE-----Generated at Tue May 28 22:32:19 2024 by rpki-client on console-fra.rpki-client.org