$ rpki-client -vvf repo-rpki.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.mft File: 023DAF793CD2BAF6C7BC7A45A13DF236B7401661.mft (raw, json) Hash identifier: ZW6L1rTOcZ5J9/V+InSTRD843YiSaePQggWSLfnoa5I= Subject key identifier: 84:12:FC:C8:D7:BB:9B:ED:A2:2A:C6:87:82:61:F3:93:D4:35:BC:05 Authority key identifier: 02:3D:AF:79:3C:D2:BA:F6:C7:BC:7A:45:A1:3D:F2:36:B7:40:16:61 Certificate issuer: /CN=023DAF793CD2BAF6C7BC7A45A13DF236B7401661 Certificate serial: 08DDF5F23F957952CFC8808B2806EEB547C8C9CD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.mft Manifest number: 0189 Signing time: Fri 17 May 2024 22:11:48 +0000 Manifest this update: Fri 17 May 2024 22:06:48 +0000 Manifest next update: Tue 21 May 2024 06:33:48 +0000 Files and hashes: 1: 3130332e3134392e3132312e302f32342d3234203d3e20313339393532.roa (hash: /Yf2UlWt9gQIJc10zBIWfHMTRjWsBAQPZb2JGJfsgWo=) 2: 3130332e3134392e3132312e302f32342d3234203d3e20313430303233.roa (hash: l2N1vMReyDKgx4fLqEtVZ7YiG07eULnr81oZHDOEc1A=) 3: 3130332e3134392e3132302e302f32342d3234203d3e2037373133.roa (hash: ainzYOWFmRuYIwOjzy7qOOprxvfaT81WL+OFK0r0rV4=) 4: 3130332e3134392e3132302e302f32332d3233203d3e20313430303233.roa (hash: ff8Ni5SxOrZ4/wG1CzwykgK0m08tV+LMZ7XDB4fPtpM=) 5: 3130332e3134392e3132312e302f32342d3234203d3e2037373133.roa (hash: 2sCJDv/VLB2+ZucXetRLmjAhwhdmhXnQZHqNCIpfyJU=) 6: 3130332e3134392e3132302e302f32332d3233203d3e2037373133.roa (hash: 364DCypCEYdKqCpyIMrYrwGZTcF7KG8HCkuLG3/yju4=) 7: 3130332e3134392e3132302e302f32342d3234203d3e20313339393532.roa (hash: AYBtTQuHOA+ch+67peyD8zd3htKDD7q8jH/gyQs5OE8=) 8: 023DAF793CD2BAF6C7BC7A45A13DF236B7401661.crl (hash: FaPgsS2cBAsBZRzu7rE28u609aQrDN3VtBl4270QpEM=) 9: 3130332e3134392e3132302e302f32332d3234203d3e20313430303233.roa (hash: YSw61RG8V9aOyQYDMD+nr1J8SFsLvhaFWgeo78KP3Ms=) 10: 3130332e3134392e3132302e302f32332d3233203d3e20313339393532.roa (hash: rnYczgK048JTwJb3PR1P+SoB4ImO3Se1+0bmbOU7hi4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.crl rsync://repo-rpki.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 05:59:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:dd:f5:f2:3f:95:79:52:cf:c8:80:8b:28:06:ee:b5:47:c8:c9:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=023DAF793CD2BAF6C7BC7A45A13DF236B7401661 Validity Not Before: May 17 22:06:48 2024 GMT Not After : May 21 06:33:48 2024 GMT Subject: CN=8412FCC8D7BB9BEDA22AC6878261F393D435BC05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c2:71:33:ea:90:eb:16:df:ab:eb:13:17:34: 49:3b:1d:0e:0a:be:2d:96:be:c2:60:a8:ea:c8:38: c7:1a:3a:ef:dc:6f:24:5e:8a:87:18:0f:49:c3:0c: a8:9d:0c:0b:ba:07:64:81:4f:95:db:d5:1c:78:1f: ae:8a:0f:af:58:d4:e2:73:ce:1b:85:bc:9f:7f:18: 65:ca:ef:1a:41:47:87:a0:9d:ef:46:d4:b3:58:5d: cb:cd:d4:7c:3a:25:66:6d:04:88:1c:76:d5:41:76: 55:5b:26:c8:21:18:47:d4:d3:49:d2:ae:50:86:06: 44:f2:e4:57:b1:61:27:36:b8:33:b0:10:61:ff:cc: ad:98:85:5c:01:73:8c:80:61:64:eb:f4:33:f3:26: 86:ec:fd:f1:d9:66:16:3d:d0:1e:e4:80:f0:8f:45: bc:e1:7a:d7:6b:0f:44:6d:15:6e:9f:b8:6d:29:6e: 9f:18:7d:f7:b9:01:b7:9e:6d:33:dc:c4:e4:fa:a4: 1f:bc:8f:75:5b:0b:c2:76:06:81:18:5a:40:92:34: ad:cd:aa:59:39:dc:d9:90:d2:c2:25:fa:58:02:b6: c7:7c:15:29:78:c3:49:0c:b5:c1:c5:a9:8b:d9:fb: 03:c6:3d:67:e2:73:24:65:9a:cd:fe:94:f7:df:38: b7:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:12:FC:C8:D7:BB:9B:ED:A2:2A:C6:87:82:61:F3:93:D4:35:BC:05 X509v3 Authority Key Identifier: keyid:02:3D:AF:79:3C:D2:BA:F6:C7:BC:7A:45:A1:3D:F2:36:B7:40:16:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:47:5f:eb:a7:b9:21:33:5b:2c:8f:ee:2b:cc:04:59:d7:77: ed:42:91:5d:63:d5:61:30:d7:b5:26:e5:28:e8:ef:9f:66:95: c9:98:08:aa:c6:b0:c2:d7:f8:52:cb:1f:1b:5b:b8:d0:3b:b8: c5:b3:e2:f3:41:18:8f:e5:c6:1a:19:f5:7f:10:e1:ea:18:24: 1c:a7:05:bd:e8:8d:2a:89:9d:e2:36:18:8a:ee:8e:6a:72:af: e5:3e:76:b9:b7:13:51:7c:b9:2e:14:82:24:33:c2:5e:c6:98: f3:c5:72:05:46:b5:3a:31:20:98:80:33:d8:fc:b1:a5:09:69: ca:c5:17:30:a0:5b:b4:ed:69:ad:b2:4c:97:6c:a7:d2:54:b4: 92:04:c9:d8:d1:0c:7d:a8:bf:e6:af:6a:25:4a:da:c6:6d:e7: 5e:ef:bc:48:42:04:30:17:f7:b4:66:7d:d7:2a:58:70:ff:db: 46:05:ea:34:22:c3:37:fe:14:e0:0e:70:dc:b7:ae:5a:ae:e5: 98:2f:9d:2f:7e:50:c0:ed:26:db:0a:99:a5:fd:b7:5d:0d:17: 69:31:51:7c:32:06:a9:d5:40:eb:f8:42:c1:66:3f:f6:ba:3d: 33:5c:92:c2:82:60:20:d6:e3:ab:f5:d8:28:93:89:6e:c0:b6: 72:4b:9d:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCN318j+VeVLPyICLKAbutUfIyc0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIzREFGNzkzQ0QyQkFGNkM3QkM3QTQ1QTEzREYyMzZC NzQwMTY2MTAeFw0yNDA1MTcyMjA2NDhaFw0yNDA1MjEwNjMzNDhaMDMxMTAvBgNV BAMTKDg0MTJGQ0M4RDdCQjlCRURBMjJBQzY4NzgyNjFGMzkzRDQzNUJDMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQwnEz6pDrFt+r6xMXNEk7HQ4K vi2WvsJgqOrIOMcaOu/cbyReiocYD0nDDKidDAu6B2SBT5Xb1Rx4H66KD69Y1OJz zhuFvJ9/GGXK7xpBR4egne9G1LNYXcvN1Hw6JWZtBIgcdtVBdlVbJsghGEfU00nS rlCGBkTy5FexYSc2uDOwEGH/zK2YhVwBc4yAYWTr9DPzJobs/fHZZhY90B7kgPCP RbzhetdrD0RtFW6fuG0pbp8Yffe5AbeebTPcxOT6pB+8j3VbC8J2BoEYWkCSNK3N qlk53NmQ0sIl+lgCtsd8FSl4w0kMtcHFqYvZ+wPGPWficyRlms3+lPffOLfpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhBL8yNe7m+2iKsaHgmHzk9Q1vAUwHwYDVR0j BBgwFoAUAj2veTzSuvbHvHpFoT3yNrdAFmEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OGQwZTY0MC0yMmU5LTQ0MWMtODYzNC1mOTUyNTMwN2RhNzYvMC8wMjNEQUY3OTND RDJCQUY2QzdCQzdBNDVBMTNERjIzNkI3NDAxNjYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDIzREFGNzkzQ0QyQkFGNkM3QkM3QTQ1QTEzREYyMzZCNzQw MTY2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzhkMGU2NDAtMjJlOS00NDFjLTg2 MzQtZjk1MjUzMDdkYTc2LzAvMDIzREFGNzkzQ0QyQkFGNkM3QkM3QTQ1QTEzREYy MzZCNzQwMTY2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHVHX+unuSEzWyyP7ivMBFnXd+1CkV1j1WEw 17Um5Sjo759mlcmYCKrGsMLX+FLLHxtbuNA7uMWz4vNBGI/lxhoZ9X8Q4eoYJByn Bb3ojSqJneI2GIrujmpyr+U+drm3E1F8uS4UgiQzwl7GmPPFcgVGtToxIJiAM9j8 saUJacrFFzCgW7Ttaa2yTJdsp9JUtJIEydjRDH2ov+avaiVK2sZt517vvEhCBDAX 97RmfdcqWHD/20YF6jQiwzf+FOAOcNy3rlqu5ZgvnS9+UMDtJtsKmaX9t10NF2kx UXwyBqnVQOv4QsFmP/a6PTNcksKCYCDW46v12CiTiW7AtnJLnRw= -----END CERTIFICATE-----Generated at Fri May 17 22:53:43 2024 by rpki-client on console-fra.rpki-client.org