$ rpki-client -vvf repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft File: DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft (raw, json) Hash identifier: h6Y0Ub7yabdvzlcBD8mN4r/IpevhzgxLSMAq8H25h2o= Subject key identifier: 6F:12:DF:62:1E:63:D4:FF:D1:F5:FF:CE:7C:98:9B:F2:E2:3E:30:05 Authority key identifier: DB:6B:AB:95:61:4F:69:81:1F:2A:E9:B4:83:73:E7:9D:2D:C2:D7:F3 Certificate issuer: /CN=DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3 Certificate serial: 2FC434594AD4F574AE25B380B0DAA6B65CDC4105 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft Manifest number: 0433 Signing time: Sat 18 May 2024 10:51:25 +0000 Manifest this update: Sat 18 May 2024 10:46:25 +0000 Manifest next update: Tue 21 May 2024 21:00:25 +0000 Files and hashes: 1: 3130332e3131362e3231392e302f32342d3234203d3e20313337333637.roa (hash: YDMHpbVw204f1aVSru0Y2vHYM1ZTPvYLEYPBAdRraF8=) 2: 3130332e3131362e3231382e302f32342d3234203d3e20313337333636.roa (hash: VqU44DIfdTmXaq+8tZOcrZQnn/B7ZccOFZa7JwVFdwY=) 3: DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.crl (hash: k/4YduDI/Miqbw3bGkTImhBpgIQtsJHomjrdESh1OHI=) 4: 3130332e3131362e3231372e302f32342d3234203d3e20313337333636.roa (hash: vjkRybTZyEq0act5WTkvvx3z10jCHDylNRjQJ9+NkHc=) 5: 3130332e3131362e3231362e302f32342d3234203d3e20313337333636.roa (hash: TodR+xvqeDeBW/M7X2TI4X2NJNQXcUj3U2bXbOOj+L4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.crl rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 14:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:c4:34:59:4a:d4:f5:74:ae:25:b3:80:b0:da:a6:b6:5c:dc:41:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3 Validity Not Before: May 18 10:46:25 2024 GMT Not After : May 21 21:00:25 2024 GMT Subject: CN=6F12DF621E63D4FFD1F5FFCE7C989BF2E23E3005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0b:6a:46:13:92:56:e1:d2:29:e8:6d:d4:06: d2:4a:5a:b0:3b:23:dd:4e:38:46:78:3d:e5:19:fa: c2:f1:21:39:d2:8a:48:c7:3a:30:fc:85:65:8f:4b: b0:b9:5d:3e:4d:25:5f:73:b7:61:f6:e8:c0:22:dc: cb:19:26:02:ba:62:58:75:49:e7:74:3c:f6:f2:a2: 67:3f:67:0d:6b:9f:79:01:9a:03:1b:8a:ee:df:06: 14:77:f4:fe:b0:7b:a9:87:23:fb:59:69:3d:80:f8: a3:09:57:e6:70:71:d4:ea:57:44:6a:77:90:4e:0b: f6:c0:30:eb:14:8c:30:93:64:f5:30:b1:24:b9:05: 34:b6:29:bc:91:fb:4f:6c:5a:ee:13:7e:bc:bc:7a: 39:93:77:77:9a:63:e6:4b:b0:d7:0a:b1:72:e5:36: 00:2c:43:47:f3:05:2c:ff:f8:cc:52:15:ce:cb:9c: c9:af:10:d2:dc:90:62:35:ee:e5:f6:e9:84:c1:db: e7:ac:ac:ae:af:93:6b:c0:f0:1e:8f:0e:a7:81:f8: e8:fc:1e:3a:4c:c6:20:3c:da:25:67:c1:06:0a:ed: 39:aa:e3:ce:a4:ca:fe:eb:8f:ce:d3:ca:8d:f4:5e: 58:2b:79:77:ab:ba:7f:2e:f2:18:f3:1a:83:32:47: 7b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:12:DF:62:1E:63:D4:FF:D1:F5:FF:CE:7C:98:9B:F2:E2:3E:30:05 X509v3 Authority Key Identifier: keyid:DB:6B:AB:95:61:4F:69:81:1F:2A:E9:B4:83:73:E7:9D:2D:C2:D7:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:7d:e1:cf:f8:51:ae:b7:69:4e:84:1a:90:5b:0d:5e:f3:69: 90:4b:74:e2:af:cc:a0:77:0f:e0:45:b1:1e:a9:8f:24:78:e4: 42:a3:bd:b8:84:22:84:7a:d7:c2:db:24:14:1f:2f:aa:e6:3b: bf:c0:ea:7e:66:bb:e4:80:1e:84:eb:d5:86:2d:3b:9e:38:2d: a5:6f:e3:eb:29:15:0c:f4:85:ea:bd:dc:15:52:b0:76:39:45: ec:d3:19:d2:32:62:71:3a:9e:cd:e1:7f:e3:64:be:22:33:be: 84:fa:bc:31:91:2c:eb:91:d7:4f:6c:fc:1d:90:83:2c:30:87: 92:1f:94:71:ef:46:9a:79:d9:e2:46:d0:7c:07:4c:bb:0f:c5: c9:12:8b:4a:3c:fe:48:f4:11:8a:da:0c:32:4b:a4:52:ff:46: 76:8e:b8:2a:0c:6a:58:5c:3b:e0:d1:9f:b5:ec:40:15:4e:fc: 7c:93:8d:2b:3d:4a:01:c7:f1:bc:f4:aa:68:5b:34:80:be:8f: 13:e7:68:68:6b:ba:8d:62:e0:7e:8e:05:79:6a:57:ce:c2:3e: 8e:2b:c4:c3:b8:86:6c:07:c2:de:2d:b4:03:51:2f:40:84:ca: 51:b7:d9:90:5c:0e:d7:d8:42:61:a6:f2:52:ac:43:5f:5c:3a: 57:08:b6:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL8Q0WUrU9XSuJbOAsNqmtlzcQQUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI2QkFCOTU2MTRGNjk4MTFGMkFFOUI0ODM3M0U3OUQy REMyRDdGMzAeFw0yNDA1MTgxMDQ2MjVaFw0yNDA1MjEyMTAwMjVaMDMxMTAvBgNV BAMTKDZGMTJERjYyMUU2M0Q0RkZEMUY1RkZDRTdDOTg5QkYyRTIzRTMwMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsC2pGE5JW4dIp6G3UBtJKWrA7 I91OOEZ4PeUZ+sLxITnSikjHOjD8hWWPS7C5XT5NJV9zt2H26MAi3MsZJgK6Ylh1 Sed0PPbyomc/Zw1rn3kBmgMbiu7fBhR39P6we6mHI/tZaT2A+KMJV+ZwcdTqV0Rq d5BOC/bAMOsUjDCTZPUwsSS5BTS2KbyR+09sWu4Tfry8ejmTd3eaY+ZLsNcKsXLl NgAsQ0fzBSz/+MxSFc7LnMmvENLckGI17uX26YTB2+esrK6vk2vA8B6PDqeB+Oj8 HjpMxiA82iVnwQYK7Tmq486kyv7rj87Tyo30XlgreXerun8u8hjzGoMyR3uNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbxLfYh5j1P/R9f/OfJib8uI+MAUwHwYDVR0j BBgwFoAU22urlWFPaYEfKum0g3PnnS3C1/MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NmQ3MjBkNS1iN2Q0LTQzOTUtYTA2Yi0xOTkwNGE2M2Y5NDgvMC9EQjZCQUI5NTYx NEY2OTgxMUYyQUU5QjQ4MzczRTc5RDJEQzJEN0YzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREI2QkFCOTU2MTRGNjk4MTFGMkFFOUI0ODM3M0U3OUQyREMy RDdGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODZkNzIwZDUtYjdkNC00Mzk1LWEw NmItMTk5MDRhNjNmOTQ4LzAvREI2QkFCOTU2MTRGNjk4MTFGMkFFOUI0ODM3M0U3 OUQyREMyRDdGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEl94c/4Ua63aU6EGpBbDV7zaZBLdOKvzKB3 D+BFsR6pjyR45EKjvbiEIoR618LbJBQfL6rmO7/A6n5mu+SAHoTr1YYtO544LaVv 4+spFQz0heq93BVSsHY5RezTGdIyYnE6ns3hf+NkviIzvoT6vDGRLOuR109s/B2Q gywwh5IflHHvRpp52eJG0HwHTLsPxckSi0o8/kj0EYraDDJLpFL/RnaOuCoMalhc O+DRn7XsQBVO/HyTjSs9SgHH8bz0qmhbNIC+jxPnaGhruo1i4H6OBXlqV87CPo4r xMO4hmwHwt4ttANRL0CEylG32ZBcDtfYQmGm8lKsQ19cOlcIthg= -----END CERTIFICATE-----Generated at Sat May 18 11:39:18 2024 by rpki-client on console-fra.rpki-client.org