$ rpki-client -vvf repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft File: 131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft (raw, json) Hash identifier: uGkGB4lPnxL4W5gDXx7MJU3euJgFKOh/lmwql3wBtcE= Subject key identifier: 2F:98:5F:ED:DD:8C:B0:4B:02:15:F8:0B:BF:37:1C:8A:68:B8:93:DD Authority key identifier: 13:18:07:BD:DA:AF:97:ED:72:21:4D:FB:C5:C5:39:AC:B0:4F:DC:BE Certificate issuer: /CN=131807BDDAAF97ED72214DFBC5C539ACB04FDCBE Certificate serial: 677262E99C52ADDE7327AB47A34A4E57DF52BA91 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft Manifest number: 022D Signing time: Wed 01 May 2024 01:40:47 +0000 Manifest this update: Wed 01 May 2024 01:35:47 +0000 Manifest next update: Sat 04 May 2024 02:31:47 +0000 Files and hashes: 1: 131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.crl (hash: GfrcKPheHczmUCNdEpJ+RI2/Ee/2HYZYS9iz4qG70lY=) 2: 3130332e3137342e32342e302f32332d3234203d3e20313331313131.roa (hash: Y894tdiQ2SK7ZtAbdyyCgDH4fuPwQfxtnJRFazcsN6o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.crl rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 02:31:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:72:62:e9:9c:52:ad:de:73:27:ab:47:a3:4a:4e:57:df:52:ba:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=131807BDDAAF97ED72214DFBC5C539ACB04FDCBE Validity Not Before: May 1 01:35:47 2024 GMT Not After : May 4 02:31:47 2024 GMT Subject: CN=2F985FEDDD8CB04B0215F80BBF371C8A68B893DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5e:48:a9:0e:12:2f:8b:ac:8d:c3:b9:61:f8: 1e:c5:f7:a3:d0:c7:24:9a:d9:bd:43:05:f9:40:ac: e6:31:69:6a:4b:f8:67:fb:25:b2:5f:38:95:4b:98: 70:11:75:23:25:50:92:32:ac:48:e8:28:31:46:87: d9:d0:a9:8f:3c:f5:fb:ba:e5:9c:5e:e1:e0:1c:bc: 78:48:5c:86:cc:c8:ac:22:85:e0:b2:fd:63:9a:a6: 98:13:a6:5e:57:81:df:e2:7c:cf:14:23:06:33:1c: 68:b9:9e:1d:55:87:52:85:d3:11:6d:ac:c2:8d:69: 28:35:eb:b6:c6:e0:39:98:73:8a:2e:8c:2e:bc:25: 17:69:27:56:1e:fc:77:63:36:4e:16:62:19:52:d3: 17:2d:c0:2b:d7:27:c5:2e:71:1d:a2:44:7e:40:90: 82:b4:9d:c1:3b:92:52:94:00:60:e2:d4:c1:77:0d: b6:19:35:9d:df:f6:cd:10:73:19:3a:d2:6b:0b:0b: 62:e7:15:b9:eb:84:8b:0b:d6:ef:75:af:39:f9:7b: c2:e4:22:db:ed:b1:cf:9c:b6:98:d5:ff:0e:c2:69: 0a:af:87:cc:6f:ed:0b:3c:7a:9d:b1:32:a2:3a:54: 91:d0:b9:63:dd:49:0d:eb:db:2b:92:74:25:16:45: 92:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:98:5F:ED:DD:8C:B0:4B:02:15:F8:0B:BF:37:1C:8A:68:B8:93:DD X509v3 Authority Key Identifier: keyid:13:18:07:BD:DA:AF:97:ED:72:21:4D:FB:C5:C5:39:AC:B0:4F:DC:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:2c:bc:3d:84:48:84:20:96:60:66:31:4e:26:9c:bd:07:86: eb:c9:81:35:78:05:63:7e:e2:00:de:a4:e0:6d:56:91:89:a3: a0:da:20:a0:9d:44:51:59:d8:58:a7:4b:9b:71:77:49:11:a0: 4b:26:eb:be:11:10:77:30:7d:8b:f4:de:26:30:ae:1f:54:98: 40:e1:13:a4:ef:97:fb:b1:85:58:c4:fc:e2:14:d0:2d:98:70: 79:99:b8:42:3f:d3:44:fd:15:97:74:03:6c:d4:a1:0a:cb:8f: 2a:f3:d6:2d:39:59:5d:23:19:f9:30:6c:ba:60:b9:be:cf:4c: 56:a9:5d:7a:7e:17:49:fb:6d:4e:42:35:13:07:a4:66:fe:43: 3d:a3:a8:6b:73:73:7e:eb:94:2c:14:59:e5:fa:56:cc:0c:ee: f7:64:bb:db:56:3e:b9:4f:55:5b:de:b0:19:05:15:9f:40:c6: 67:06:df:3e:c2:1c:66:4b:7a:4c:cc:ea:62:49:00:42:f1:7d: b2:96:c5:5c:ce:1b:43:6a:1f:8b:8d:92:08:18:bd:eb:8f:27: e2:35:b5:c9:52:2e:af:d2:3c:7a:41:a5:c7:44:6f:a8:db:04: 4c:68:f2:5e:df:62:d8:85:aa:ee:01:54:a1:b9:00:b6:83:c8: e6:92:d1:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ3Ji6ZxSrd5zJ6tHo0pOV99SupEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTMxODA3QkREQUFGOTdFRDcyMjE0REZCQzVDNTM5QUNC MDRGRENCRTAeFw0yNDA1MDEwMTM1NDdaFw0yNDA1MDQwMjMxNDdaMDMxMTAvBgNV BAMTKDJGOTg1RkVEREQ4Q0IwNEIwMjE1RjgwQkJGMzcxQzhBNjhCODkzREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyXkipDhIvi6yNw7lh+B7F96PQ xySa2b1DBflArOYxaWpL+Gf7JbJfOJVLmHARdSMlUJIyrEjoKDFGh9nQqY889fu6 5Zxe4eAcvHhIXIbMyKwiheCy/WOappgTpl5Xgd/ifM8UIwYzHGi5nh1Vh1KF0xFt rMKNaSg167bG4DmYc4oujC68JRdpJ1Ye/HdjNk4WYhlS0xctwCvXJ8UucR2iRH5A kIK0ncE7klKUAGDi1MF3DbYZNZ3f9s0Qcxk60msLC2LnFbnrhIsL1u91rzn5e8Lk Itvtsc+ctpjV/w7CaQqvh8xv7Qs8ep2xMqI6VJHQuWPdSQ3r2yuSdCUWRZL9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL5hf7d2MsEsCFfgLvzccimi4k90wHwYDVR0j BBgwFoAUExgHvdqvl+1yIU37xcU5rLBP3L4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZjI1Yjk2OC0wOTI3LTQ1OTQtODg3ZS02N2Y1M2Y5NjdiMTIvMC8xMzE4MDdCRERB QUY5N0VENzIyMTRERkJDNUM1MzlBQ0IwNEZEQ0JFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTMxODA3QkREQUFGOTdFRDcyMjE0REZCQzVDNTM5QUNCMDRG RENCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmYyNWI5NjgtMDkyNy00NTk0LTg4 N2UtNjdmNTNmOTY3YjEyLzAvMTMxODA3QkREQUFGOTdFRDcyMjE0REZCQzVDNTM5 QUNCMDRGRENCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKYsvD2ESIQglmBmMU4mnL0HhuvJgTV4BWN+ 4gDepOBtVpGJo6DaIKCdRFFZ2FinS5txd0kRoEsm674REHcwfYv03iYwrh9UmEDh E6Tvl/uxhVjE/OIU0C2YcHmZuEI/00T9FZd0A2zUoQrLjyrz1i05WV0jGfkwbLpg ub7PTFapXXp+F0n7bU5CNRMHpGb+Qz2jqGtzc37rlCwUWeX6VswM7vdku9tWPrlP VVvesBkFFZ9AxmcG3z7CHGZLekzM6mJJAELxfbKWxVzOG0NqH4uNkggYveuPJ+I1 tclSLq/SPHpBpcdEb6jbBExo8l7fYtiFqu4BVKG5ALaDyOaS0WQ= -----END CERTIFICATE-----Generated at Wed May 1 02:06:10 2024 by rpki-client on console-fra.rpki-client.org