$ rpki-client -vvf repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft File: 2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft (raw, json) Hash identifier: 9preOGp822JatEPFjhbYi5KOUps9qo8ULGFUCzJAm0E= Subject key identifier: D9:72:BB:B4:C0:18:C3:02:44:5C:F0:47:C8:14:F4:53:0E:3E:1E:5B Authority key identifier: 22:47:52:0F:12:08:C8:D9:AC:33:B3:03:50:16:DC:4E:C6:2C:DE:B1 Certificate issuer: /CN=2247520F1208C8D9AC33B3035016DC4EC62CDEB1 Certificate serial: 1D1F6377C7653FD26BB76FDD735548615A63ADC0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft Manifest number: 0433 Signing time: Sat 18 May 2024 14:40:34 +0000 Manifest this update: Sat 18 May 2024 14:35:34 +0000 Manifest next update: Tue 21 May 2024 20:33:34 +0000 Files and hashes: 1: 2247520F1208C8D9AC33B3035016DC4EC62CDEB1.crl (hash: Pjjf/zo1zWoD8cQyM1A8HS9Z+hDZQuXdKvTKjrdm5/0=) 2: 3130332e3130372e38342e302f32332d3233203d3e20313336383739.roa (hash: l9R7nWh7k6U3TswzX7iR5/XoX8Mv+HTirAiU9OXwzL4=) 3: 3130332e3130352e3231372e302f32342d3234203d3e20313336383739.roa (hash: TqA2uFJInM9542dyIqn2Y7m1wA10c0dFIGXRTT7zTng=) 4: 3130332e3130372e38352e302f32342d3234203d3e20313336383739.roa (hash: dvHp0abWwMWtH+B0sXAy7+BSTRbK7xfke7wSCseKxg0=) 5: 3130332e3130372e38342e302f32342d3234203d3e20313336383739.roa (hash: avtvqivrVN4h1ceUWVqic0U9Lt6LVeuCUF+M9/Vjsic=) 6: 3130332e3130372e37312e302f32342d3234203d3e20313336383739.roa (hash: nkL+/BJ66r9ycq46IbjHs6cSITmbbcl1sX/xlDvMmSg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.crl rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:33:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:1f:63:77:c7:65:3f:d2:6b:b7:6f:dd:73:55:48:61:5a:63:ad:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2247520F1208C8D9AC33B3035016DC4EC62CDEB1 Validity Not Before: May 18 14:35:34 2024 GMT Not After : May 21 20:33:34 2024 GMT Subject: CN=D972BBB4C018C302445CF047C814F4530E3E1E5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:06:fa:05:91:2c:f1:5b:43:31:b8:fb:36:fe: 45:99:dd:93:09:f8:76:93:54:b7:23:df:f6:2a:24: cd:68:44:fd:70:34:bc:2f:61:9b:45:7d:7e:1b:57: 4f:ce:7c:8b:1f:b1:01:eb:0f:44:ac:fe:67:16:ce: 00:cc:37:63:a8:ec:72:26:bf:f6:8a:db:86:c8:94: 98:94:91:6a:14:61:57:44:19:78:88:02:b2:9a:a8: 4e:61:a1:8f:dc:38:57:91:41:db:2d:fb:51:35:8d: 68:e3:d2:e2:f3:97:c2:32:d5:82:ba:1d:f1:b6:94: 42:b6:af:52:49:09:ee:4d:7b:d3:3e:58:5d:51:ba: 4c:e0:8c:f2:b9:b7:70:76:bc:f3:ac:79:08:2b:38: b4:bf:ab:2c:28:df:b2:8c:ec:d1:33:f6:6f:f0:79: df:00:02:5d:a3:de:e9:95:41:3b:89:b1:49:a6:e2: dd:9a:7e:19:ed:0f:99:39:13:5d:13:29:34:91:58: 62:06:9e:ed:c5:89:48:07:75:67:76:2e:ea:d0:f0: db:e7:bc:f8:fb:01:2b:23:da:38:b6:2f:e9:a7:d4: bd:99:eb:ce:ab:e7:a9:ac:c7:09:70:8d:33:10:8a: 3c:43:22:b6:e6:54:69:28:75:87:b3:2e:46:e3:74: da:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:72:BB:B4:C0:18:C3:02:44:5C:F0:47:C8:14:F4:53:0E:3E:1E:5B X509v3 Authority Key Identifier: keyid:22:47:52:0F:12:08:C8:D9:AC:33:B3:03:50:16:DC:4E:C6:2C:DE:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:1c:69:e4:09:e1:66:17:52:ae:dc:97:33:7a:8e:9a:c9:c8: 26:85:e6:b7:55:57:26:05:52:fc:36:f0:11:aa:3e:68:6e:4d: f0:76:88:de:63:39:29:20:e1:57:00:13:3a:16:9a:5c:0a:a6: 1c:13:54:6d:00:64:8a:f2:a7:63:e5:d6:4e:d9:7e:75:f5:5b: bd:02:0b:4f:71:8b:21:98:da:22:89:b4:3b:b1:5a:74:8d:fe: 92:94:a9:8b:fc:3b:0e:51:7a:0c:fa:6d:50:55:4d:ac:8f:ae: a1:12:bd:0d:ee:a6:a4:4a:a1:12:9b:10:c8:ec:b1:ea:23:e9: fd:61:92:a8:b2:1a:23:bf:fc:92:cf:b0:72:1e:19:01:4c:3b: ba:0b:89:32:32:28:f6:69:7d:cf:5e:85:ad:57:95:2b:bd:71: 25:d1:7c:0a:56:a2:08:58:12:12:73:97:10:d3:91:5d:67:07: 51:9b:7d:cd:05:59:4c:ad:14:b2:54:19:22:ab:1d:f5:01:c8: fc:e0:52:35:97:55:01:1b:e1:ee:39:63:97:9a:76:73:86:cf: eb:45:bf:c3:19:9c:53:9a:e3:00:54:28:07:50:04:2c:cd:25: 00:ef:1a:c8:9d:6a:de:24:61:4c:db:4f:7f:9c:c9:14:45:7e: 86:36:a0:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHR9jd8dlP9Jrt2/dc1VIYVpjrcAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI0NzUyMEYxMjA4QzhEOUFDMzNCMzAzNTAxNkRDNEVD NjJDREVCMTAeFw0yNDA1MTgxNDM1MzRaFw0yNDA1MjEyMDMzMzRaMDMxMTAvBgNV BAMTKEQ5NzJCQkI0QzAxOEMzMDI0NDVDRjA0N0M4MTRGNDUzMEUzRTFFNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGBvoFkSzxW0MxuPs2/kWZ3ZMJ +HaTVLcj3/YqJM1oRP1wNLwvYZtFfX4bV0/OfIsfsQHrD0Ss/mcWzgDMN2Oo7HIm v/aK24bIlJiUkWoUYVdEGXiIArKaqE5hoY/cOFeRQdst+1E1jWjj0uLzl8Iy1YK6 HfG2lEK2r1JJCe5Ne9M+WF1RukzgjPK5t3B2vPOseQgrOLS/qywo37KM7NEz9m/w ed8AAl2j3umVQTuJsUmm4t2afhntD5k5E10TKTSRWGIGnu3FiUgHdWd2LurQ8Nvn vPj7ASsj2ji2L+mn1L2Z686r56msxwlwjTMQijxDIrbmVGkodYezLkbjdNqxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2XK7tMAYwwJEXPBHyBT0Uw4+HlswHwYDVR0j BBgwFoAUIkdSDxIIyNmsM7MDUBbcTsYs3rEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZGRmMTgxZi0xZTg5LTQwMjItODJmOC1lMGRiYTg1OWVlMmUvMC8yMjQ3NTIwRjEy MDhDOEQ5QUMzM0IzMDM1MDE2REM0RUM2MkNERUIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI0NzUyMEYxMjA4QzhEOUFDMzNCMzAzNTAxNkRDNEVDNjJD REVCMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWRkZjE4MWYtMWU4OS00MDIyLTgy ZjgtZTBkYmE4NTllZTJlLzAvMjI0NzUyMEYxMjA4QzhEOUFDMzNCMzAzNTAxNkRD NEVDNjJDREVCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIYcaeQJ4WYXUq7clzN6jprJyCaF5rdVVyYF Uvw28BGqPmhuTfB2iN5jOSkg4VcAEzoWmlwKphwTVG0AZIryp2Pl1k7ZfnX1W70C C09xiyGY2iKJtDuxWnSN/pKUqYv8Ow5Regz6bVBVTayPrqESvQ3upqRKoRKbEMjs seoj6f1hkqiyGiO//JLPsHIeGQFMO7oLiTIyKPZpfc9eha1XlSu9cSXRfApWoghY EhJzlxDTkV1nB1Gbfc0FWUytFLJUGSKrHfUByPzgUjWXVQEb4e45Y5eadnOGz+tF v8MZnFOa4wBUKAdQBCzNJQDvGsidat4kYUzbT3+cyRRFfoY2oOU= -----END CERTIFICATE-----Generated at Sat May 18 15:57:29 2024 by rpki-client on console-ams.rpki-client.org