$ rpki-client -vvf repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.mft File: 399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.mft (raw, json) Hash identifier: G/56k+KmKJZwEnjGBkljTyQG/e61iCdHrStt13Ig7VI= Subject key identifier: 76:51:9F:FA:1C:78:97:58:47:82:6A:AB:DD:A9:15:1D:A6:73:70:C6 Authority key identifier: 39:93:15:B1:8B:A7:D0:DD:66:6D:CA:8C:3D:BB:E0:13:57:5A:F7:D1 Certificate issuer: /CN=399315B18BA7D0DD666DCA8C3DBBE013575AF7D1 Certificate serial: 35D6B703643789AF793921750B716A3CC7AC43F1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.mft Manifest number: 022C Signing time: Sat 18 May 2024 07:00:43 +0000 Manifest this update: Sat 18 May 2024 06:55:43 +0000 Manifest next update: Tue 21 May 2024 13:18:43 +0000 Files and hashes: 1: 3130332e39342e3231322e302f32342d3234203d3e20313336313131.roa (hash: 1DQNd1BiHyCqeeoXg540QxKFNBelHF5fdH/zLsWceQw=) 2: 323030313a6466313a383530303a3a2f34382d3438203d3e20313336313131.roa (hash: RgjsrCu5XRLIiqwTlO9EDEJ2PdEmlJNzR7db0HMTVzE=) 3: 3130332e39342e3231322e302f32332d3233203d3e20313336313131.roa (hash: 8VIhDuue4JzU213v1PlqiZp/LgzSTn4JupEB7OWX++8=) 4: 399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.crl (hash: NV8AkMTrW1oOt0PkGjQNOdsNYIl3Fcd59SmO2YHdT+w=) 5: 3130332e39342e3231332e302f32342d3234203d3e20313336313131.roa (hash: 57JdrG+xBkKf+bas4gtaeBfmv4s/pwVp4claa1W1f2U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.crl rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 13:18:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:d6:b7:03:64:37:89:af:79:39:21:75:0b:71:6a:3c:c7:ac:43:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=399315B18BA7D0DD666DCA8C3DBBE013575AF7D1 Validity Not Before: May 18 06:55:43 2024 GMT Not After : May 21 13:18:43 2024 GMT Subject: CN=76519FFA1C78975847826AABDDA9151DA67370C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f6:aa:6d:00:d7:76:6c:80:05:03:34:27:0a: f0:7a:cf:03:cb:a9:13:65:44:dc:9f:0b:43:ad:27: 62:5d:20:26:e6:dd:e7:c9:f0:f6:0e:85:4d:af:c9: d6:28:05:e1:c9:19:23:a1:aa:f2:ee:a1:60:f3:39: fa:39:01:77:42:11:6d:f2:6b:f4:6b:60:03:bd:0d: e4:84:71:76:76:75:85:43:50:f7:c9:4e:9a:9f:4d: 20:12:a6:fe:7b:4c:d0:f3:22:d2:8e:13:e1:5f:b0: 50:34:0f:75:90:fb:c5:9b:4b:e8:2f:f4:89:ea:28: ed:db:59:f6:06:9b:4c:c4:88:a4:c2:30:5f:c0:ec: c6:68:26:91:2f:44:5b:f5:3a:c0:b3:fe:7e:60:06: 3e:6e:c0:78:63:82:46:41:16:73:38:c8:b2:ad:92: 8a:e3:ad:87:9b:d0:8c:b0:70:cf:eb:e9:5a:b5:27: 13:fb:84:09:0f:f6:8d:eb:8c:5e:d2:95:5a:3b:14: a7:1d:53:2f:89:cf:5e:41:70:9c:bb:59:d7:bc:49: 64:7c:86:04:1f:53:a8:ff:43:7c:26:44:7b:2d:7b: 7b:4a:32:4e:7e:84:08:e8:86:78:3e:a0:62:94:da: 39:f3:db:b3:11:65:94:58:71:eb:3e:5c:1d:4e:e3: 1b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:51:9F:FA:1C:78:97:58:47:82:6A:AB:DD:A9:15:1D:A6:73:70:C6 X509v3 Authority Key Identifier: keyid:39:93:15:B1:8B:A7:D0:DD:66:6D:CA:8C:3D:BB:E0:13:57:5A:F7:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:f2:57:44:96:aa:6d:3e:97:03:dc:3a:16:6f:8a:ba:de:b3: da:ca:e9:b3:7a:89:ef:55:ad:02:8e:6f:c8:8b:95:9d:37:94: 2b:46:d9:df:0e:91:9f:ab:24:fd:72:f7:d8:c0:d6:78:c3:0c: a9:7e:77:cd:2c:a7:2b:00:8d:06:e8:77:24:96:ff:77:91:59: 4d:30:e4:77:fa:35:07:a4:6e:06:b6:08:d7:7f:d9:b0:00:d6: 31:99:bb:fa:43:70:11:9f:8a:f4:77:d5:4f:82:5a:16:90:7a: 10:52:ba:fd:85:59:40:8e:d1:39:73:dd:f7:68:4c:78:a2:b3: f2:9d:37:de:56:49:f8:b4:b6:19:19:8e:24:7f:7a:12:94:30: c6:d1:39:8e:d5:39:30:04:a0:d9:ef:59:48:aa:65:b9:31:c2: 7f:18:16:07:18:06:1f:ed:0e:15:9d:d9:61:e7:ca:21:0c:f6: f9:ef:11:4f:c3:d8:1b:fa:09:ac:82:c2:f5:e8:bf:61:d2:69: 53:35:be:21:9a:9f:f7:12:d5:cd:12:37:3e:27:27:dc:42:a9: 0a:7c:e3:f7:3f:5a:6e:cd:60:d7:d7:a3:b1:f5:42:4f:73:24: 2d:56:7a:15:32:8a:c1:3b:14:9e:06:93:8a:2f:6b:a0:63:b8: 34:91:c2:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNda3A2Q3ia95OSF1C3FqPMesQ/EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk5MzE1QjE4QkE3RDBERDY2NkRDQThDM0RCQkUwMTM1 NzVBRjdEMTAeFw0yNDA1MTgwNjU1NDNaFw0yNDA1MjExMzE4NDNaMDMxMTAvBgNV BAMTKDc2NTE5RkZBMUM3ODk3NTg0NzgyNkFBQkREQTkxNTFEQTY3MzcwQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx9qptANd2bIAFAzQnCvB6zwPL qRNlRNyfC0OtJ2JdICbm3efJ8PYOhU2vydYoBeHJGSOhqvLuoWDzOfo5AXdCEW3y a/RrYAO9DeSEcXZ2dYVDUPfJTpqfTSASpv57TNDzItKOE+FfsFA0D3WQ+8WbS+gv 9InqKO3bWfYGm0zEiKTCMF/A7MZoJpEvRFv1OsCz/n5gBj5uwHhjgkZBFnM4yLKt korjrYeb0IywcM/r6Vq1JxP7hAkP9o3rjF7SlVo7FKcdUy+Jz15BcJy7Wde8SWR8 hgQfU6j/Q3wmRHste3tKMk5+hAjohng+oGKU2jnz27MRZZRYces+XB1O4xubAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdlGf+hx4l1hHgmqr3akVHaZzcMYwHwYDVR0j BBgwFoAUOZMVsYun0N1mbcqMPbvgE1da99EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MmYyODg3OS00ODQ0LTQyZGUtYjJkOS1hOTY2NmRlMjgyZWEvMC8zOTkzMTVCMThC QTdEMERENjY2RENBOEMzREJCRTAxMzU3NUFGN0QxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzk5MzE1QjE4QkE3RDBERDY2NkRDQThDM0RCQkUwMTM1NzVB RjdEMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzJmMjg4NzktNDg0NC00MmRlLWIy ZDktYTk2NjZkZTI4MmVhLzAvMzk5MzE1QjE4QkE3RDBERDY2NkRDQThDM0RCQkUw MTM1NzVBRjdEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGHyV0SWqm0+lwPcOhZvirres9rK6bN6ie9V rQKOb8iLlZ03lCtG2d8OkZ+rJP1y99jA1njDDKl+d80spysAjQbodySW/3eRWU0w 5Hf6NQekbga2CNd/2bAA1jGZu/pDcBGfivR31U+CWhaQehBSuv2FWUCO0Tlz3fdo THiis/KdN95WSfi0thkZjiR/ehKUMMbROY7VOTAEoNnvWUiqZbkxwn8YFgcYBh/t DhWd2WHnyiEM9vnvEU/D2Bv6CayCwvXov2HSaVM1viGan/cS1c0SNz4nJ9xCqQp8 4/c/Wm7NYNfXo7H1Qk9zJC1WehUyisE7FJ4Gk4ova6BjuDSRwoM= -----END CERTIFICATE-----Generated at Sat May 18 08:05:07 2024 by rpki-client on console-fra.rpki-client.org