$ rpki-client -vvf repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft File: 6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft (raw, json) Hash identifier: KfPKK2LGUZLn9EnXeTThmoHH2SC9L0qB8lZQCGWPC/Q= Subject key identifier: 60:98:9F:81:C7:FC:79:71:32:BA:6C:2D:2D:9D:14:48:2C:ED:B1:82 Authority key identifier: 6D:6B:AE:DB:FD:BB:AA:46:BF:3D:A2:18:55:70:77:16:27:BE:7B:19 Certificate issuer: /CN=6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19 Certificate serial: 28E8FAA5882C6B204445D505731AE55F69BA5192 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.cer Subject info access: rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft Manifest number: 042E Signing time: Fri 17 May 2024 16:50:35 +0000 Manifest this update: Fri 17 May 2024 16:45:35 +0000 Manifest next update: Mon 20 May 2024 21:35:35 +0000 Files and hashes: 1: 3130332e3132372e3134342e302f32342d3234203d3e203633383732.roa (hash: qHJoSFcwWIicEL1jBd2OeLAZTilENbCC7wrXnZlj//s=) 2: 3130332e35322e3137302e302f32332d3233203d3e203633383732.roa (hash: IItHYU8m8kJIB+aCdi43dIrmAn7Yf1bKtCDMlPIJJ4s=) 3: 323030313a6466333a6330303a3a2f34382d3438203d3e203633383732.roa (hash: sJM1tk0bgY60YrBlTqbx4HpKcfkHSDctJiMtwl8QaNY=) 4: 3130332e35322e3137302e302f32342d3234203d3e203633383732.roa (hash: 2rc5yHScrsGXt49l9WGSkOsRwc5HBfIrfbId/MVBY1Q=) 5: 3130332e3132372e3134352e302f32342d3234203d3e203633383732.roa (hash: VltRaVYmXEp5RxNunzVAYYL2iPUzGbcd26PZmi7QfWc=) 6: 3130332e3132372e3134342e302f32332d3233203d3e203633383732.roa (hash: ErKkW0Op+NCVig/xvd2sNQM/Nt80klee5k4EKLTP2dA=) 7: 3130332e35322e3137312e302f32342d3234203d3e203633383732.roa (hash: xnJYQdFC1/vH1AegsM4MgkXEa7urffCYTGCNg/x/pj4=) 8: 6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.crl (hash: C4JV5TDPVAcfwgLsDhn9mxYKqoehi4vRLgumIk8UqRU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.crl rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 May 2024 21:35:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:e8:fa:a5:88:2c:6b:20:44:45:d5:05:73:1a:e5:5f:69:ba:51:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19 Validity Not Before: May 17 16:45:35 2024 GMT Not After : May 20 21:35:35 2024 GMT Subject: CN=60989F81C7FC797132BA6C2D2D9D14482CEDB182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e1:cf:50:2c:dd:f1:c4:e4:72:ab:bd:f6:f0: 03:79:9a:60:86:81:dd:a5:62:81:7a:be:69:73:c1: 07:f5:f5:93:8c:d6:3c:c8:fe:e2:6e:80:d6:70:c5: d8:cb:d0:7e:85:60:af:42:f3:eb:3d:44:59:ce:d6: de:86:c6:92:4b:c8:1a:5f:19:d5:65:8d:96:82:59: aa:f9:1e:4f:d7:1f:58:3a:39:bc:7d:c8:75:14:a7: bb:d1:94:cd:04:2d:0e:75:77:2a:9d:db:58:ce:c9: 1b:bc:7e:da:d9:61:ed:11:e3:af:0c:13:f8:34:2f: ba:f2:15:a5:24:70:90:8e:92:7c:06:b9:f7:80:da: b7:32:b1:19:4f:58:dc:74:80:82:70:73:bc:36:4e: da:2d:41:8a:c3:c0:f5:d4:f5:3b:56:07:ef:7b:4c: e9:e3:a3:0e:1d:1e:7f:81:c4:60:e8:c7:4b:dd:dd: 06:80:3d:ce:dc:cf:a8:8a:b2:00:2e:82:d6:fe:dd: 3c:de:11:47:05:f3:bb:cb:a0:3f:69:2e:d5:44:83: d7:65:c5:3e:36:06:4e:e4:21:87:1b:da:01:02:e7: 0c:42:e7:26:5b:66:51:5f:1f:6c:e3:c5:0f:b8:7b: 91:e0:03:f9:65:f2:95:53:97:38:1c:f8:44:de:1f: 57:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:98:9F:81:C7:FC:79:71:32:BA:6C:2D:2D:9D:14:48:2C:ED:B1:82 X509v3 Authority Key Identifier: keyid:6D:6B:AE:DB:FD:BB:AA:46:BF:3D:A2:18:55:70:77:16:27:BE:7B:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:c4:7b:9d:f7:fa:84:52:45:7b:68:b2:30:e7:0a:29:39:c7: 3d:54:99:1f:21:eb:ba:53:68:bc:3f:ba:1f:5e:07:c9:e0:30: 54:0c:5e:a7:db:9d:7b:d5:a5:39:23:85:de:c9:18:70:5c:a7: 1b:c7:23:99:24:19:d5:13:76:1a:56:f4:6a:e6:2a:53:3a:ff: ad:1b:a7:52:2d:29:54:f5:49:3d:ee:2e:38:bc:12:de:00:d3: 34:dc:fc:a9:55:32:37:58:8d:cb:3f:5f:65:3d:a8:99:ee:be: d7:f4:2b:e3:0b:8e:fb:66:cc:34:c0:ce:52:eb:56:40:e4:0d: 9b:ab:16:d6:aa:7a:51:87:df:b1:fe:cf:d4:d0:94:bb:39:34: c1:3e:78:db:f7:4c:d9:b6:78:d2:9a:04:38:99:28:3e:de:81: e1:d0:11:e7:4d:5b:85:e9:8f:74:0a:7f:87:e0:dd:76:d8:98: 8a:bc:8a:95:5a:64:ef:24:17:ba:7f:62:fd:2b:9e:f2:9a:71: d2:5e:b2:c6:70:44:85:a7:00:f8:3e:00:67:77:6b:2c:42:21: ab:a5:a7:83:89:4e:72:53:66:5c:e3:19:68:e2:3d:e8:3b:25: 6a:b8:73:37:e8:03:46:b1:54:1e:cb:08:ce:0d:f2:15:78:c8: 93:70:5c:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKOj6pYgsayBERdUFcxrlX2m6UZIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQ2QkFFREJGREJCQUE0NkJGM0RBMjE4NTU3MDc3MTYy N0JFN0IxOTAeFw0yNDA1MTcxNjQ1MzVaFw0yNDA1MjAyMTM1MzVaMDMxMTAvBgNV BAMTKDYwOTg5RjgxQzdGQzc5NzEzMkJBNkMyRDJEOUQxNDQ4MkNFREIxODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD4c9QLN3xxORyq7328AN5mmCG gd2lYoF6vmlzwQf19ZOM1jzI/uJugNZwxdjL0H6FYK9C8+s9RFnO1t6GxpJLyBpf GdVljZaCWar5Hk/XH1g6Obx9yHUUp7vRlM0ELQ51dyqd21jOyRu8ftrZYe0R468M E/g0L7ryFaUkcJCOknwGufeA2rcysRlPWNx0gIJwc7w2TtotQYrDwPXU9TtWB+97 TOnjow4dHn+BxGDox0vd3QaAPc7cz6iKsgAugtb+3TzeEUcF87vLoD9pLtVEg9dl xT42Bk7kIYcb2gEC5wxC5yZbZlFfH2zjxQ+4e5HgA/ll8pVTlzgc+ETeH1cZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYJifgcf8eXEyumwtLZ0USCztsYIwHwYDVR0j BBgwFoAUbWuu2/27qka/PaIYVXB3Fie+exkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NmJiMzMzYy05ODJiLTRmY2UtYWM4MS1iYzA2OTIyOWUyNDMvMC82RDZCQUVEQkZE QkJBQTQ2QkYzREEyMTg1NTcwNzcxNjI3QkU3QjE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkQ2QkFFREJGREJCQUE0NkJGM0RBMjE4NTU3MDc3MTYyN0JF N0IxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTZiYjMzM2MtOTgyYi00ZmNlLWFj ODEtYmMwNjkyMjllMjQzLzAvNkQ2QkFFREJGREJCQUE0NkJGM0RBMjE4NTU3MDc3 MTYyN0JFN0IxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGrEe533+oRSRXtosjDnCik5xz1UmR8h67pT aLw/uh9eB8ngMFQMXqfbnXvVpTkjhd7JGHBcpxvHI5kkGdUTdhpW9GrmKlM6/60b p1ItKVT1ST3uLji8Et4A0zTc/KlVMjdYjcs/X2U9qJnuvtf0K+MLjvtmzDTAzlLr VkDkDZurFtaqelGH37H+z9TQlLs5NME+eNv3TNm2eNKaBDiZKD7egeHQEedNW4Xp j3QKf4fg3XbYmIq8ipVaZO8kF7p/Yv0rnvKacdJessZwRIWnAPg+AGd3ayxCIaul p4OJTnJTZlzjGWjiPeg7JWq4czfoA0axVB7LCM4N8hV4yJNwXLQ= -----END CERTIFICATE-----Generated at Fri May 17 17:47:03 2024 by rpki-client on console-ams.rpki-client.org