$ rpki-client -vvf repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft File: DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft (raw, json) Hash identifier: H5tFKqB4ks2KlR+uTnJ01In/zblTEr8y3oipBlG/a4Q= Subject key identifier: AD:62:00:9C:76:4B:23:74:10:1D:5C:01:3D:66:FC:F7:1F:9D:13:F4 Authority key identifier: DC:1F:CA:69:CA:5B:7A:3A:3E:48:25:B3:CA:FC:C3:BD:1B:C0:6E:B7 Certificate issuer: /CN=DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7 Certificate serial: 561014D4DBAFC0B30B5F0F9C2B9F53BF7AC0B0F1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft Manifest number: 042F Signing time: Fri 17 May 2024 20:20:34 +0000 Manifest this update: Fri 17 May 2024 20:15:34 +0000 Manifest next update: Tue 21 May 2024 04:07:34 +0000 Files and hashes: 1: 323430363a323430303a3a2f33322d3438203d3e203435323837.roa (hash: Ds4sooWsPPhN9QBsUnzPXSJ13sDorHxDSx5pSjqvAr4=) 2: 3135302e3132392e35362e302f32322d3234203d3e203435323837.roa (hash: 2IYoXtuqmRblUc6YqV57RYGXJRezJZnujnFsc4kUWn0=) 3: 3230322e35362e3136302e302f32322d3234203d3e203435323837.roa (hash: Lif6BHoucrE/Y7Tf/dY+Tgj2gjuc5W4Kc3zC1rLXT1Y=) 4: 3230332e39392e3133302e302f32332d3234203d3e203435323837.roa (hash: oi3i0T/DGnsrkj9V/nmlXKbyA+8x0nN3xH+cnRDEqqw=) 5: 3130332e32332e3230302e302f32322d3234203d3e203435323837.roa (hash: ++6lR6EMd9bjV8+OQftsrSAlwRcx9wQmBIjQ2TifJiM=) 6: DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.crl (hash: PC26ZP/8NEEmC2FZSCPglU+RpGa2YXz9SS6CFqg4YNc=) 7: 3131312e36382e3131322e302f32302d3234203d3e203435323837.roa (hash: XewTdRzAzPOGQthv9JUKY2qr57QbO/Zlqh2Frx9mXsw=) 8: 3130332e33312e3131302e302f32332d3234203d3e203435323837.roa (hash: kui4ZivxNZ9Q3imWjNih9ERmYVIHPMxv7b6absdtP8c=) 9: 3137352e3137362e3136302e302f32312d3234203d3e203435323837.roa (hash: j3wp/CH+fF/TV6bSFjOGMC3Y+s3y8mNW3QfOPMhtK6U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.crl rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 04:07:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:10:14:d4:db:af:c0:b3:0b:5f:0f:9c:2b:9f:53:bf:7a:c0:b0:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7 Validity Not Before: May 17 20:15:34 2024 GMT Not After : May 21 04:07:34 2024 GMT Subject: CN=AD62009C764B2374101D5C013D66FCF71F9D13F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a0:73:69:52:e0:26:1e:a9:b8:a4:8e:cc:ad: 1f:0e:62:cb:47:f7:b3:ce:13:da:bc:2c:cd:cb:7d: 0e:1d:b4:64:e9:7a:db:19:ac:9b:86:49:cb:e1:c7: 18:30:d6:b4:e5:bb:6f:6d:fd:c4:f9:b2:a4:58:d9: 69:9a:f3:f3:3a:ca:8f:6d:79:20:2d:55:15:52:4c: 8d:28:ac:43:28:02:97:c0:6b:5f:de:47:c3:7c:08: ab:79:38:75:e4:c3:14:de:59:36:d9:b4:f4:87:e4: 7e:b0:e2:ea:72:10:13:46:07:8e:25:32:01:6c:13: e2:82:23:24:56:3d:3b:5c:82:24:8f:3c:25:2c:13: 7a:4d:84:64:72:eb:79:6e:db:1e:cc:9e:81:2b:7c: 0f:12:a4:e5:37:56:05:8e:58:de:f6:f7:3b:77:06: cf:d0:d9:89:72:3f:ac:1c:5a:0f:b5:54:f4:cc:da: 2c:67:b4:09:6f:10:81:b6:f0:e8:b5:9d:f4:48:ed: dd:9b:de:31:bc:31:90:4a:45:16:54:be:50:12:8d: d8:44:b9:96:4d:c0:ac:f8:0b:04:14:85:e1:63:60: 31:40:6e:ed:9a:67:7c:c3:20:0f:36:2b:d1:2d:97: 1b:36:8f:c1:d2:10:6c:00:63:c6:b1:e7:c0:d4:44: b8:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:62:00:9C:76:4B:23:74:10:1D:5C:01:3D:66:FC:F7:1F:9D:13:F4 X509v3 Authority Key Identifier: keyid:DC:1F:CA:69:CA:5B:7A:3A:3E:48:25:B3:CA:FC:C3:BD:1B:C0:6E:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:01:e2:a4:fd:12:3e:f0:8d:fb:ef:92:5c:da:b0:c1:3c:8e: 58:21:c8:03:40:04:0a:b0:c3:b6:7d:c4:d5:91:0c:3e:0b:e2: 11:0a:ef:73:75:6c:d3:b1:3b:8d:3b:4c:56:9c:bf:f2:31:ea: 92:79:a9:3b:6a:f2:3c:cb:4e:2a:e1:fc:dd:df:2e:19:98:95: 41:16:8e:29:d4:02:94:c4:64:01:ed:cd:90:59:d8:d5:d7:84: 79:24:a1:6d:17:47:86:39:ae:ac:44:f6:ed:e5:d8:3f:64:52: 24:06:f3:ab:27:73:22:81:dd:65:b4:d6:34:10:fd:35:60:47: 4a:63:f1:35:2a:ee:ff:eb:9c:15:90:f7:1c:46:4d:6a:85:f3: a5:a9:34:b7:2e:30:c7:69:97:46:86:11:ab:64:f5:27:ec:f4: 0f:b1:fb:43:f7:ba:ea:9a:fa:a1:c5:f5:f1:a7:25:77:ee:55: e4:d0:c4:0a:72:04:27:41:74:7f:d8:e0:7c:2b:57:47:a3:57: 80:b8:80:ec:c3:bf:84:46:81:f5:72:de:d5:77:4d:2b:be:6a: 89:f9:f4:f4:d4:43:58:48:74:53:26:15:1c:e4:01:30:a4:eb: 2f:6c:48:ab:3d:7a:9e:4d:dc:39:8f:67:4d:48:fa:50:3a:33: b0:b4:80:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVhAU1NuvwLMLXw+cK59Tv3rAsPEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMxRkNBNjlDQTVCN0EzQTNFNDgyNUIzQ0FGQ0MzQkQx QkMwNkVCNzAeFw0yNDA1MTcyMDE1MzRaFw0yNDA1MjEwNDA3MzRaMDMxMTAvBgNV BAMTKEFENjIwMDlDNzY0QjIzNzQxMDFENUMwMTNENjZGQ0Y3MUY5RDEzRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNoHNpUuAmHqm4pI7MrR8OYstH 97POE9q8LM3LfQ4dtGTpetsZrJuGScvhxxgw1rTlu29t/cT5sqRY2Wma8/M6yo9t eSAtVRVSTI0orEMoApfAa1/eR8N8CKt5OHXkwxTeWTbZtPSH5H6w4upyEBNGB44l MgFsE+KCIyRWPTtcgiSPPCUsE3pNhGRy63lu2x7MnoErfA8SpOU3VgWOWN729zt3 Bs/Q2YlyP6wcWg+1VPTM2ixntAlvEIG28Oi1nfRI7d2b3jG8MZBKRRZUvlASjdhE uZZNwKz4CwQUheFjYDFAbu2aZ3zDIA82K9Etlxs2j8HSEGwAY8ax58DURLi3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrWIAnHZLI3QQHVwBPWb89x+dE/QwHwYDVR0j BBgwFoAU3B/Kacpbejo+SCWzyvzDvRvAbrcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ODI0OWZjMy02Yzg0LTRlOTEtYjA2Ny1hMGM2YTg0MGEzYTkvMC9EQzFGQ0E2OUNB NUI3QTNBM0U0ODI1QjNDQUZDQzNCRDFCQzA2RUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREMxRkNBNjlDQTVCN0EzQTNFNDgyNUIzQ0FGQ0MzQkQxQkMw NkVCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTgyNDlmYzMtNmM4NC00ZTkxLWIw NjctYTBjNmE4NDBhM2E5LzAvREMxRkNBNjlDQTVCN0EzQTNFNDgyNUIzQ0FGQ0Mz QkQxQkMwNkVCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGsB4qT9Ej7wjfvvklzasME8jlghyANABAqw w7Z9xNWRDD4L4hEK73N1bNOxO407TFacv/Ix6pJ5qTtq8jzLTirh/N3fLhmYlUEW jinUApTEZAHtzZBZ2NXXhHkkoW0XR4Y5rqxE9u3l2D9kUiQG86sncyKB3WW01jQQ /TVgR0pj8TUq7v/rnBWQ9xxGTWqF86WpNLcuMMdpl0aGEatk9Sfs9A+x+0P3uuqa +qHF9fGnJXfuVeTQxApyBCdBdH/Y4HwrV0ejV4C4gOzDv4RGgfVy3tV3TSu+aon5 9PTUQ1hIdFMmFRzkATCk6y9sSKs9ep5N3DmPZ01I+lA6M7C0gJg= -----END CERTIFICATE-----Generated at Fri May 17 21:06:47 2024 by rpki-client on console-ams.rpki-client.org