$ rpki-client -vvf repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft File: 688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft (raw, json) Hash identifier: 8jU0exvIp6VqmeXzMgihlh+VoKlkpatN/lCktqUoXG0= Subject key identifier: 22:1C:4B:6F:A3:C4:46:86:FC:57:64:08:35:CE:14:D8:37:84:12:CA Authority key identifier: 68:86:10:C7:31:A4:E7:A1:D3:5B:3E:26:4D:F9:A0:58:73:F1:E6:C1 Certificate issuer: /CN=688610C731A4E7A1D35B3E264DF9A05873F1E6C1 Certificate serial: 6F37E3A16C6B89DB72D6EB2341AFC60DFF996FEA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft Manifest number: 0292 Signing time: Sun 19 May 2024 02:10:03 +0000 Manifest this update: Sun 19 May 2024 02:05:03 +0000 Manifest next update: Wed 22 May 2024 12:26:03 +0000 Files and hashes: 1: 3130332e3136382e32382e302f32342d3234203d3e20313432333132.roa (hash: TxX16foFHY0P9rLHty/t34aBTRsPGLAmfWGkOzCDIEU=) 2: 688610C731A4E7A1D35B3E264DF9A05873F1E6C1.crl (hash: emLGSkFKA/alkExtuJwTfGCog9gDcmPFaJesPv6LXbA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.crl rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 23:11:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:37:e3:a1:6c:6b:89:db:72:d6:eb:23:41:af:c6:0d:ff:99:6f:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=688610C731A4E7A1D35B3E264DF9A05873F1E6C1 Validity Not Before: May 19 02:05:03 2024 GMT Not After : May 22 12:26:03 2024 GMT Subject: CN=221C4B6FA3C44686FC57640835CE14D8378412CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b5:39:92:03:26:52:fa:71:d3:1e:af:b2:59: 31:46:7e:a4:78:48:1d:7d:f0:c1:bb:70:9b:70:59: c3:fa:1e:80:41:9c:b7:23:4c:1a:b8:47:c1:5e:c7: 62:7d:5a:d0:88:fd:80:70:dd:6d:22:ef:63:93:1f: 6a:84:94:dd:6e:1b:0c:a4:d0:24:1b:ed:02:62:1c: 44:70:0f:f3:18:46:aa:50:26:20:68:6c:8a:02:b5: 33:d1:9d:a7:1a:5b:9d:0f:b5:46:9c:b1:77:f2:e6: 4c:1f:a2:1f:7b:a2:73:4a:7e:af:1d:66:cc:6e:1f: 0a:40:53:ce:72:70:9b:65:b8:d0:e7:e7:a8:e6:62: 81:fe:21:a8:61:a0:dd:21:30:53:39:42:86:09:f6: 8a:8d:6d:46:4b:2d:c8:08:5d:76:de:1e:ef:6a:a2: 69:fb:15:0a:ab:8d:b7:c3:a6:4f:83:f4:32:99:89: 1a:41:34:5e:e5:a8:11:50:ac:f1:b6:9e:ad:58:55: 9a:11:46:85:89:6f:25:a8:e5:39:5d:76:63:f5:00: 58:42:c8:62:30:e5:81:e3:29:df:7c:f7:7d:8a:55: 5c:39:54:85:c6:58:8e:d7:ca:cc:03:8c:16:0b:74: 09:7a:a4:fa:e2:d1:d9:d3:7a:0e:8c:85:b9:8e:59: 89:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:1C:4B:6F:A3:C4:46:86:FC:57:64:08:35:CE:14:D8:37:84:12:CA X509v3 Authority Key Identifier: keyid:68:86:10:C7:31:A4:E7:A1:D3:5B:3E:26:4D:F9:A0:58:73:F1:E6:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85ee40dc-51ba-4769-8619-2289cce9629e/0/688610C731A4E7A1D35B3E264DF9A05873F1E6C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:1a:75:89:fc:d2:6d:19:2b:e4:5e:56:cc:6c:9b:6e:b9:4a: ed:15:a3:18:7e:0b:72:22:13:13:61:67:e6:8f:73:14:49:3b: 5e:c8:60:de:81:dd:8e:74:57:a2:b6:33:66:8d:04:2f:91:28: 72:bf:ac:e7:4e:ad:ea:4d:82:ce:f4:a7:90:96:a5:df:e1:ef: 22:37:97:d7:be:7c:86:bc:9b:8d:de:00:2d:0e:19:b1:0d:66: bf:c7:38:7b:10:9d:4d:e2:5b:a7:08:52:f9:1b:d0:e2:03:56: e1:6c:31:52:93:bc:fc:cc:cb:71:a2:1b:5c:50:ef:4c:c4:ba: e9:38:71:d2:69:7d:a3:96:b6:5d:8d:78:87:4e:32:34:6d:0b: 0d:ff:0d:00:e2:0a:85:ab:38:e4:ad:6b:81:c0:fd:c4:7d:e3: f4:bf:de:0c:8d:53:da:09:ae:76:81:d0:7c:b3:72:28:6b:a0: 05:92:d4:23:c6:93:a6:fe:18:c1:21:12:96:28:52:a1:24:fb: df:33:39:c1:2d:c1:2c:54:8e:2a:51:37:9e:7a:30:a8:00:4d: 85:3b:d3:bf:e0:06:7d:21:9d:a7:a7:a4:3c:7d:1c:60:6b:33: d3:c6:7d:48:00:9f:91:c2:44:3e:c9:5f:89:92:54:6a:5d:26: 18:22:de:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbzfjoWxridty1usjQa/GDf+Zb+owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg4NjEwQzczMUE0RTdBMUQzNUIzRTI2NERGOUEwNTg3 M0YxRTZDMTAeFw0yNDA1MTkwMjA1MDNaFw0yNDA1MjIxMjI2MDNaMDMxMTAvBgNV BAMTKDIyMUM0QjZGQTNDNDQ2ODZGQzU3NjQwODM1Q0UxNEQ4Mzc4NDEyQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOtTmSAyZS+nHTHq+yWTFGfqR4 SB198MG7cJtwWcP6HoBBnLcjTBq4R8Fex2J9WtCI/YBw3W0i72OTH2qElN1uGwyk 0CQb7QJiHERwD/MYRqpQJiBobIoCtTPRnacaW50PtUacsXfy5kwfoh97onNKfq8d ZsxuHwpAU85ycJtluNDn56jmYoH+IahhoN0hMFM5QoYJ9oqNbUZLLcgIXXbeHu9q omn7FQqrjbfDpk+D9DKZiRpBNF7lqBFQrPG2nq1YVZoRRoWJbyWo5TlddmP1AFhC yGIw5YHjKd98932KVVw5VIXGWI7XyswDjBYLdAl6pPri0dnTeg6MhbmOWYkVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIhxLb6PERob8V2QINc4U2DeEEsowHwYDVR0j BBgwFoAUaIYQxzGk56HTWz4mTfmgWHPx5sEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWVlNDBkYy01MWJhLTQ3NjktODYxOS0yMjg5Y2NlOTYyOWUvMC82ODg2MTBDNzMx QTRFN0ExRDM1QjNFMjY0REY5QTA1ODczRjFFNkMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjg4NjEwQzczMUE0RTdBMUQzNUIzRTI2NERGOUEwNTg3M0Yx RTZDMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODVlZTQwZGMtNTFiYS00NzY5LTg2 MTktMjI4OWNjZTk2MjllLzAvNjg4NjEwQzczMUE0RTdBMUQzNUIzRTI2NERGOUEw NTg3M0YxRTZDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD0adYn80m0ZK+ReVsxsm265Su0Voxh+C3Ii ExNhZ+aPcxRJO17IYN6B3Y50V6K2M2aNBC+RKHK/rOdOrepNgs70p5CWpd/h7yI3 l9e+fIa8m43eAC0OGbENZr/HOHsQnU3iW6cIUvkb0OIDVuFsMVKTvPzMy3GiG1xQ 70zEuuk4cdJpfaOWtl2NeIdOMjRtCw3/DQDiCoWrOOSta4HA/cR94/S/3gyNU9oJ rnaB0HyzcihroAWS1CPGk6b+GMEhEpYoUqEk+98zOcEtwSxUjipRN556MKgATYU7 07/gBn0hnaenpDx9HGBrM9PGfUgAn5HCRD7JX4mSVGpdJhgi3kw= -----END CERTIFICATE-----Generated at Sun May 19 02:39:08 2024 by rpki-client on console-fra.rpki-client.org