$ rpki-client -vvf repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft File: D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft (raw, json) Hash identifier: cCKFVwDLfJvZcp7gjEbJkaLSgS+TTc1b2KPT3Stl5ew= Subject key identifier: D9:58:15:2A:45:D2:41:13:34:A5:6B:DD:A5:4E:17:F8:2C:86:E9:6D Authority key identifier: D7:85:2A:F0:5D:FB:B9:7A:CD:46:A3:73:99:F2:0D:EA:19:C2:EF:2C Certificate issuer: /CN=D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C Certificate serial: 39BF58FEBCDA4D4D7E3448DEB16CCA4EA0340DF4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft Manifest number: 023D Signing time: Fri 17 May 2024 22:01:49 +0000 Manifest this update: Fri 17 May 2024 21:56:49 +0000 Manifest next update: Tue 21 May 2024 08:16:49 +0000 Files and hashes: 1: D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.crl (hash: GK0pGInyFpxr5X8uC1flbUh/OIF/ftOAN/nmL0/cqQw=) 2: 3130332e3136342e3137332e302f32342d3234203d3e20313338313331.roa (hash: joZaN20RVj6C58TuxjMGymNK7Lv0pgecDFF+jskA6D0=) 3: 3130332e3136342e3137322e302f32342d3234203d3e20313338313331.roa (hash: fzXBkhYAUHRvqm/IOJ/TPlrf08VB6iOak4Th7M2bxfg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.crl rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 05:59:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:bf:58:fe:bc:da:4d:4d:7e:34:48:de:b1:6c:ca:4e:a0:34:0d:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C Validity Not Before: May 17 21:56:49 2024 GMT Not After : May 21 08:16:49 2024 GMT Subject: CN=D958152A45D2411334A56BDDA54E17F82C86E96D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:3d:44:21:84:4b:51:d0:69:25:fa:d4:1e:ce: 6b:39:b6:fb:d4:7a:03:62:c7:89:d4:6d:44:45:3d: 92:f9:e5:6f:54:16:72:08:8c:32:4c:b4:bb:c6:bb: c4:2b:34:7c:fd:9c:07:d2:d7:03:4f:32:57:69:02: 4a:4d:32:08:d8:63:81:96:70:13:12:0a:14:01:c8: 69:dc:38:5f:ee:fe:75:50:e2:ee:28:56:bc:9c:ee: bc:c4:57:2f:98:ba:c3:63:5e:66:e6:e1:80:e3:2e: 6f:91:46:be:8e:cc:78:44:a3:8e:33:96:a1:42:c3: 09:e4:a7:42:d7:91:9d:cb:71:09:c9:26:ce:10:ac: 15:4c:ec:65:b1:31:14:4c:94:b4:a6:a3:db:e2:dc: 86:d2:0d:ff:5f:94:09:f6:97:8d:cb:28:8c:2a:45: 8f:5d:1f:93:ad:a3:b5:53:c0:c4:cb:3b:76:e4:9f: 6e:cb:60:18:8b:d5:6a:49:3e:cb:b7:94:ee:40:9f: 8e:55:1f:04:bc:57:e9:24:d6:85:d5:d6:a5:33:d8: 90:72:04:a0:35:fb:66:39:96:ba:1c:7e:35:76:bb: 14:34:42:56:e1:fe:cc:70:aa:9c:4f:86:49:e4:82: 40:a3:6f:fb:75:fb:42:61:44:67:94:2e:c9:83:4c: eb:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:58:15:2A:45:D2:41:13:34:A5:6B:DD:A5:4E:17:F8:2C:86:E9:6D X509v3 Authority Key Identifier: keyid:D7:85:2A:F0:5D:FB:B9:7A:CD:46:A3:73:99:F2:0D:EA:19:C2:EF:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:18:07:4e:93:79:b3:ad:75:7c:38:01:71:c2:45:0a:8d:4d: b7:38:85:21:5d:75:32:9d:1b:26:7f:a1:ac:5c:84:26:0d:d6: ef:b3:83:45:c7:c9:76:1a:ca:e3:0c:31:14:88:9c:19:8a:7b: 10:34:10:73:bf:dc:a3:cb:57:a1:4a:e1:1b:da:56:46:dd:0c: 90:ab:81:64:6c:5a:e2:91:28:0b:e0:8a:a9:d2:83:5c:7b:7d: 34:e6:c5:a5:eb:95:0a:35:f5:1c:37:5d:20:46:0a:94:8a:b7: f4:b4:c5:2d:90:22:90:08:75:cb:ea:59:8d:b3:bc:a0:ec:78: b3:89:d7:b0:c9:10:be:8f:e7:6e:19:cf:76:15:08:91:0f:4f: 77:10:bd:d0:19:d0:0d:25:eb:53:6e:3d:b2:13:85:38:08:bb: 90:33:a9:41:80:9f:ea:20:6b:c9:81:a6:19:4f:8e:a5:2b:df: 4d:16:79:21:8c:0b:8c:f8:df:0e:a6:b8:43:9d:49:48:b2:26: 0b:2a:0f:b1:43:bb:44:00:18:20:9e:e2:c3:75:72:c2:c8:55: cd:4e:a7:4a:69:fe:0c:3b:31:d5:93:81:9b:71:cb:a7:03:e8: e9:8e:7d:08:cc:8e:74:83:ac:ee:b3:a0:68:bc:01:70:bf:7b: 79:0f:66:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOb9Y/rzaTU1+NEjesWzKTqA0DfQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc4NTJBRjA1REZCQjk3QUNENDZBMzczOTlGMjBERUEx OUMyRUYyQzAeFw0yNDA1MTcyMTU2NDlaFw0yNDA1MjEwODE2NDlaMDMxMTAvBgNV BAMTKEQ5NTgxNTJBNDVEMjQxMTMzNEE1NkJEREE1NEUxN0Y4MkM4NkU5NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlPUQhhEtR0Gkl+tQezms5tvvU egNix4nUbURFPZL55W9UFnIIjDJMtLvGu8QrNHz9nAfS1wNPMldpAkpNMgjYY4GW cBMSChQByGncOF/u/nVQ4u4oVryc7rzEVy+YusNjXmbm4YDjLm+RRr6OzHhEo44z lqFCwwnkp0LXkZ3LcQnJJs4QrBVM7GWxMRRMlLSmo9vi3IbSDf9flAn2l43LKIwq RY9dH5Oto7VTwMTLO3bkn27LYBiL1WpJPsu3lO5An45VHwS8V+kk1oXV1qUz2JBy BKA1+2Y5lrocfjV2uxQ0Qlbh/sxwqpxPhknkgkCjb/t1+0JhRGeULsmDTOsJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2VgVKkXSQRM0pWvdpU4X+CyG6W0wHwYDVR0j BBgwFoAU14Uq8F37uXrNRqNzmfIN6hnC7ywwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTg5ZjFiNC1lZjYzLTQ1MzktODQ1NS05OGM2NzE5OTVjY2YvMC9ENzg1MkFGMDVE RkJCOTdBQ0Q0NkEzNzM5OUYyMERFQTE5QzJFRjJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDc4NTJBRjA1REZCQjk3QUNENDZBMzczOTlGMjBERUExOUMy RUYyQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWU4OWYxYjQtZWY2My00NTM5LTg0 NTUtOThjNjcxOTk1Y2NmLzAvRDc4NTJBRjA1REZCQjk3QUNENDZBMzczOTlGMjBE RUExOUMyRUYyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIIYB06TebOtdXw4AXHCRQqNTbc4hSFddTKd GyZ/oaxchCYN1u+zg0XHyXYayuMMMRSInBmKexA0EHO/3KPLV6FK4RvaVkbdDJCr gWRsWuKRKAvgiqnSg1x7fTTmxaXrlQo19Rw3XSBGCpSKt/S0xS2QIpAIdcvqWY2z vKDseLOJ17DJEL6P524Zz3YVCJEPT3cQvdAZ0A0l61NuPbIThTgIu5AzqUGAn+og a8mBphlPjqUr300WeSGMC4z43w6muEOdSUiyJgsqD7FDu0QAGCCe4sN1csLIVc1O p0pp/gw7MdWTgZtxy6cD6OmOfQjMjnSDrO6zoGi8AXC/e3kPZiU= -----END CERTIFICATE-----Generated at Fri May 17 22:53:43 2024 by rpki-client on console-fra.rpki-client.org