$ rpki-client -vvf repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft File: 9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft (raw, json) Hash identifier: 6Gticr4lJorke+F4150VrMeWnT939+UtSzNJx4HASKk= Subject key identifier: 6E:8B:4C:EE:3E:D3:74:82:C5:5C:96:5A:9B:E7:46:01:A5:48:61:3E Authority key identifier: 9B:2F:00:47:6D:6A:C1:BA:AB:05:C5:A6:25:DC:00:C2:A5:9F:99:D7 Certificate issuer: /CN=9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7 Certificate serial: 6CB299A6BE1FF3FEB724FBF0CA160681B0CEAE2D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft Manifest number: 0132 Signing time: Sat 18 May 2024 09:30:55 +0000 Manifest this update: Sat 18 May 2024 09:25:55 +0000 Manifest next update: Tue 21 May 2024 14:15:55 +0000 Files and hashes: 1: 9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl (hash: O+RHeTxgI5DPRUIBrJPLF1i7vimJtn3Xno4K0EfB0Vo=) 2: 3131332e35392e3233332e302f32342d3234203d3e203435323936.roa (hash: +rLmUnhrpQYm1zzM/b/auBD/K1cyObfNqCl5wRUOo3s=) 3: 3131332e35392e3233322e302f32332d3234203d3e203435323936.roa (hash: mq1EEKImNWuNz4Pqc6yhVdQKhMyKG/pauc89YGsxnfw=) 4: 323430303a623038303a3a2f33322d3332203d3e203435323936.roa (hash: oRpNZJ0YN09dWIN8tro8n1gQy1qrDUT1OdftcZGL5aM=) 5: 3131332e35392e3233322e302f32322d3234203d3e203435323936.roa (hash: lmRHQTQMth9Im7teGxzZWHcQYn3Rz37A7dJ29JV7fzs=) 6: 3131332e35392e3233352e302f32342d3234203d3e203435323936.roa (hash: bfgN+NWjb0NMpTDxNdInrOP2IbZKAXSVBGu3wdsraRg=) 7: 323430303a623038303a343532393a3a2f34382d3438203d3e203435323936.roa (hash: RCoL4t5rjVwcLIHYbrgMXk/hQjEua5qdWtt4LSolwOc=) 8: 3131332e35392e3233322e302f32342d3234203d3e203435323936.roa (hash: 9+NeIkEA5csXNC3BZIzReLG2h3qtxRZQgcvmda1riK0=) 9: 3131332e35392e3233342e302f32342d3234203d3e203435323936.roa (hash: H5g3fmrfp9oM89Dw09e305oCHkLTNBGvMVNYkfqjprA=) 10: 3131332e35392e3233342e302f32332d3234203d3e203435323936.roa (hash: BG9JwKdScy8n61s2h3PyyXzkkfhI5/pJ9EXoEvGTMD0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 14:15:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:b2:99:a6:be:1f:f3:fe:b7:24:fb:f0:ca:16:06:81:b0:ce:ae:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7 Validity Not Before: May 18 09:25:55 2024 GMT Not After : May 21 14:15:55 2024 GMT Subject: CN=6E8B4CEE3ED37482C55C965A9BE74601A548613E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:bc:5e:06:1b:15:1e:3b:0f:80:46:2b:5d:d8: 89:b3:be:7f:a8:18:97:05:23:28:2a:6f:b7:4b:fb: 01:cc:27:e3:f2:19:a8:d7:9a:22:07:64:61:67:b5: 37:9d:2f:5d:b2:d6:43:88:8e:3e:be:d7:cf:f6:62: 3b:41:c2:7f:e2:8c:03:a4:23:bb:32:45:b4:5f:66: 0f:13:27:19:cf:49:0c:b8:8b:1e:0b:73:11:8f:f9: 01:11:a7:10:c3:d0:2c:0d:c7:35:7c:a0:fa:24:4d: bb:18:97:ac:4a:4f:aa:f7:4d:17:e1:7d:ba:83:8f: 46:38:3c:a5:09:09:c2:09:1a:0b:15:81:13:3a:b1: 5d:78:2a:1a:4b:ef:31:6b:09:bb:15:b4:26:d5:88: 6a:80:d4:79:d4:d9:07:b3:9d:30:70:1d:7d:23:3d: 12:d3:18:f3:3b:7f:fb:c8:0c:5f:41:0e:b3:1b:ea: 4d:ee:48:47:fa:33:41:12:ed:65:0e:e1:f9:10:dc: 5c:32:48:ac:12:e0:e5:8e:bd:3d:fc:0b:67:c5:cf: 2d:04:56:fb:7c:11:c3:99:01:c3:ad:dd:44:d3:bf: 9c:ab:a2:d6:44:81:e1:51:c9:f0:71:5c:7b:cc:d1: 1c:d4:9c:c0:51:72:5e:bf:d2:cf:5d:60:ca:61:c7: 3a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:8B:4C:EE:3E:D3:74:82:C5:5C:96:5A:9B:E7:46:01:A5:48:61:3E X509v3 Authority Key Identifier: keyid:9B:2F:00:47:6D:6A:C1:BA:AB:05:C5:A6:25:DC:00:C2:A5:9F:99:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:77:5f:da:34:e4:e0:61:6a:8d:c5:e6:9a:cd:7d:29:7e:d3: 3d:e9:46:f6:5d:20:4b:ae:be:9a:7d:ed:44:24:98:49:7d:44: e9:e0:7c:0b:22:b9:1c:0b:29:56:85:f7:07:51:5a:15:a4:47: c0:26:9e:c8:b1:40:63:92:86:42:6a:76:2d:75:6a:5c:42:1d: 22:b7:7b:a5:77:05:95:97:8f:97:6b:3d:a6:80:64:d8:40:c1: 4b:93:41:c2:13:df:54:73:ea:8f:15:75:59:a0:d4:a1:69:1f: da:5a:7c:02:99:c3:c7:93:0c:f4:e1:7d:76:f5:db:e4:df:f6: c0:ab:0b:3c:bb:29:61:01:f7:3c:ea:07:fb:f9:53:e7:a7:6c: 26:50:99:ee:6e:94:a9:c4:a2:6a:47:34:8d:dd:d6:2e:27:79: 86:31:19:98:d0:57:f3:1a:a7:47:1a:ac:b6:69:97:5c:8a:f4: d0:22:29:88:eb:14:5d:fc:bd:25:d6:4e:2d:17:a5:38:41:7a: 3f:36:49:70:43:0d:1b:c7:15:04:66:84:de:6a:b5:78:f1:89: 09:5a:36:01:5b:a8:41:56:5a:22:e5:16:7b:c7:b1:3a:ca:e5: 49:3a:59:59:c2:8f:97:87:d3:09:47:e4:5a:1e:a6:0c:a2:56: 92:10:ab:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbLKZpr4f8/63JPvwyhYGgbDOri0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUIyRjAwNDc2RDZBQzFCQUFCMDVDNUE2MjVEQzAwQzJB NTlGOTlENzAeFw0yNDA1MTgwOTI1NTVaFw0yNDA1MjExNDE1NTVaMDMxMTAvBgNV BAMTKDZFOEI0Q0VFM0VEMzc0ODJDNTVDOTY1QTlCRTc0NjAxQTU0ODYxM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrvF4GGxUeOw+ARitd2Imzvn+o GJcFIygqb7dL+wHMJ+PyGajXmiIHZGFntTedL12y1kOIjj6+18/2YjtBwn/ijAOk I7syRbRfZg8TJxnPSQy4ix4LcxGP+QERpxDD0CwNxzV8oPokTbsYl6xKT6r3TRfh fbqDj0Y4PKUJCcIJGgsVgRM6sV14KhpL7zFrCbsVtCbViGqA1HnU2QeznTBwHX0j PRLTGPM7f/vIDF9BDrMb6k3uSEf6M0ES7WUO4fkQ3FwySKwS4OWOvT38C2fFzy0E Vvt8EcOZAcOt3UTTv5yrotZEgeFRyfBxXHvM0RzUnMBRcl6/0s9dYMphxzpLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbotM7j7TdILFXJZam+dGAaVIYT4wHwYDVR0j BBgwFoAUmy8AR21qwbqrBcWmJdwAwqWfmdcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NjA2NzE4Zi1mNGM2LTQ3NzUtODk1Ny05OWQyYmQ2NjYzNjMvMC85QjJGMDA0NzZE NkFDMUJBQUIwNUM1QTYyNURDMDBDMkE1OUY5OUQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUIyRjAwNDc2RDZBQzFCQUFCMDVDNUE2MjVEQzAwQzJBNTlG OTlENy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjYwNjcxOGYtZjRjNi00Nzc1LTg5 NTctOTlkMmJkNjY2MzYzLzAvOUIyRjAwNDc2RDZBQzFCQUFCMDVDNUE2MjVEQzAw QzJBNTlGOTlENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKp3X9o05OBhao3F5prNfSl+0z3pRvZdIEuu vpp97UQkmEl9ROngfAsiuRwLKVaF9wdRWhWkR8AmnsixQGOShkJqdi11alxCHSK3 e6V3BZWXj5drPaaAZNhAwUuTQcIT31Rz6o8VdVmg1KFpH9pafAKZw8eTDPThfXb1 2+Tf9sCrCzy7KWEB9zzqB/v5U+enbCZQme5ulKnEompHNI3d1i4neYYxGZjQV/Ma p0carLZpl1yK9NAiKYjrFF38vSXWTi0XpThBej82SXBDDRvHFQRmhN5qtXjxiQla NgFbqEFWWiLlFnvHsTrK5Uk6WVnCj5eH0wlH5FoepgyiVpIQq2w= -----END CERTIFICATE-----Generated at Sat May 18 09:57:32 2024 by rpki-client on console-fra.rpki-client.org