$ rpki-client -vvf repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.mft File: 1D996206B24E67937CEF2CE40882DBFAD893F1FB.mft (raw, json) Hash identifier: sDBYTOBjnsfwr7dr6NE7hfHY516yHqqOOB3LWosXD0U= Subject key identifier: 5B:ED:05:7E:AF:D5:C3:61:A6:64:8B:66:62:3F:3C:65:93:70:6B:14 Authority key identifier: 1D:99:62:06:B2:4E:67:93:7C:EF:2C:E4:08:82:DB:FA:D8:93:F1:FB Certificate issuer: /CN=1D996206B24E67937CEF2CE40882DBFAD893F1FB Certificate serial: 6929B8BBE7983F295CD45AA8615199CC668AA79E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D996206B24E67937CEF2CE40882DBFAD893F1FB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.mft Manifest number: 0450 Signing time: Sat 25 May 2024 10:30:35 +0000 Manifest this update: Sat 25 May 2024 10:25:35 +0000 Manifest next update: Tue 28 May 2024 14:02:35 +0000 Files and hashes: 1: 1D996206B24E67937CEF2CE40882DBFAD893F1FB.crl (hash: Sh0t77k1WQFgmMWVxm0WlPj5eALw9qOGk3sJJz1YvxQ=) 2: 323430313a333234303a3a2f33322d3438203d3e203633343930.roa (hash: YKtgnb5kKX8bPRqoLdO+lXtvjcZUmkJ3dEdtuow//ZM=) 3: 3130332e39332e3233362e302f32332d3234203d3e203633343930.roa (hash: qS1Rkv5hhZGu51FNzNPxJzgSrW8IO7dBXG6bCp+s7hE=) 4: 3130332e3233352e36362e302f32332d3234203d3e203633343930.roa (hash: IiBDjguiz0QfHwEmciKV91MMzri0AWL7mVdEYRmvrGw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.crl rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D996206B24E67937CEF2CE40882DBFAD893F1FB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 May 2024 09:57:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:29:b8:bb:e7:98:3f:29:5c:d4:5a:a8:61:51:99:cc:66:8a:a7:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D996206B24E67937CEF2CE40882DBFAD893F1FB Validity Not Before: May 25 10:25:35 2024 GMT Not After : May 28 14:02:35 2024 GMT Subject: CN=5BED057EAFD5C361A6648B66623F3C6593706B14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:88:10:d2:25:24:d8:8e:5d:69:3c:f3:1d:3e: a5:c7:fc:e3:74:73:1c:9a:51:d1:73:8b:1c:d7:50: ea:17:b2:8e:81:51:fd:d9:e1:79:eb:7d:67:aa:b6: e5:9f:c0:38:fa:70:c3:c2:b6:57:7f:7b:57:80:3a: 91:78:2c:c1:03:e4:d8:49:83:e7:1d:fc:2c:61:8f: 77:b7:82:1b:c2:f0:13:eb:b7:f0:38:31:2d:0c:fe: 21:4e:c8:43:0b:58:f0:41:3b:f9:b2:33:56:ec:1c: f8:2b:c2:82:e4:26:23:a1:eb:62:e2:ce:c4:3c:65: a5:ba:0c:b4:b9:bb:b0:f0:04:e0:b1:32:a7:9a:e0: 48:7a:ab:96:a7:5c:8e:63:53:72:f8:64:37:18:b0: d6:16:06:2a:f3:bf:4e:07:f5:f5:33:ff:8b:15:d1: 87:14:ef:d9:fd:d1:4c:69:fe:63:59:6d:ed:31:cc: d3:1f:01:23:5f:f8:fa:4d:4a:38:9c:4f:64:7d:8b: e1:b7:e8:d1:fd:6c:9b:aa:b3:68:9a:44:ec:28:ad: 18:1b:da:9f:91:42:ef:d0:25:69:ed:3c:69:5a:2f: 37:0c:9b:b7:e2:b3:86:6e:31:f0:47:60:c4:da:7b: 72:99:cf:02:db:99:ae:43:3f:bc:00:8d:76:91:74: d1:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:ED:05:7E:AF:D5:C3:61:A6:64:8B:66:62:3F:3C:65:93:70:6B:14 X509v3 Authority Key Identifier: keyid:1D:99:62:06:B2:4E:67:93:7C:EF:2C:E4:08:82:DB:FA:D8:93:F1:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D996206B24E67937CEF2CE40882DBFAD893F1FB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:cb:a7:2c:b8:11:44:f9:0c:1e:af:be:08:20:92:b6:25:75: 21:08:17:7b:e3:66:21:63:bb:74:c9:c0:97:ff:33:4e:a8:54: f4:53:be:3a:b9:24:4d:ce:c9:e8:db:44:88:60:5f:23:ef:6d: 1c:c6:ca:95:32:cc:a1:47:96:1d:66:5e:05:3d:7d:78:ba:48: 46:10:bf:b4:09:97:92:e1:4f:97:a5:ec:78:64:8f:22:a9:9f: a4:f9:97:71:fb:f0:56:d0:74:66:5c:3e:17:bf:ea:7a:0e:d1: b9:30:4e:03:1f:68:06:8b:37:75:30:c1:a5:a5:0d:bb:fa:db: 26:81:8b:49:e3:12:7b:5b:41:4a:3e:4f:db:f3:7c:ee:91:64: bf:94:58:6a:c8:8b:00:6c:f1:61:21:2a:f7:e6:af:0d:73:1f: 42:fe:3b:8b:f7:8e:5c:f0:09:18:39:4e:b7:a5:d7:40:e6:a7: 5e:e1:49:78:80:ed:b5:4d:a7:b7:85:98:ef:c7:6e:49:67:3e: 4a:98:db:97:14:f8:59:a6:6f:74:37:e6:ac:1d:f9:5b:8f:8a: d4:b5:9b:3d:0f:5c:c3:13:ef:22:0b:ad:2b:9c:42:9b:8e:d3: 37:75:cc:de:0e:52:79:ee:1e:79:51:f8:93:7c:a3:9e:a5:30: 31:70:da:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaSm4u+eYPylc1FqoYVGZzGaKp54wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ5OTYyMDZCMjRFNjc5MzdDRUYyQ0U0MDg4MkRCRkFE ODkzRjFGQjAeFw0yNDA1MjUxMDI1MzVaFw0yNDA1MjgxNDAyMzVaMDMxMTAvBgNV BAMTKDVCRUQwNTdFQUZENUMzNjFBNjY0OEI2NjYyM0YzQzY1OTM3MDZCMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxiBDSJSTYjl1pPPMdPqXH/ON0 cxyaUdFzixzXUOoXso6BUf3Z4XnrfWeqtuWfwDj6cMPCtld/e1eAOpF4LMED5NhJ g+cd/Cxhj3e3ghvC8BPrt/A4MS0M/iFOyEMLWPBBO/myM1bsHPgrwoLkJiOh62Li zsQ8ZaW6DLS5u7DwBOCxMqea4Eh6q5anXI5jU3L4ZDcYsNYWBirzv04H9fUz/4sV 0YcU79n90Uxp/mNZbe0xzNMfASNf+PpNSjicT2R9i+G36NH9bJuqs2iaROworRgb 2p+RQu/QJWntPGlaLzcMm7fis4ZuMfBHYMTae3KZzwLbma5DP7wAjXaRdNHXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW+0Ffq/Vw2GmZItmYj88ZZNwaxQwHwYDVR0j BBgwFoAUHZliBrJOZ5N87yzkCILb+tiT8fswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OWUzNjA1Ni1mMDk3LTQ5YTctYmQyMy0zZDcxMWU4OWYzMDUvMC8xRDk5NjIwNkIy NEU2NzkzN0NFRjJDRTQwODgyREJGQUQ4OTNGMUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQ5OTYyMDZCMjRFNjc5MzdDRUYyQ0U0MDg4MkRCRkFEODkz RjFGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzllMzYwNTYtZjA5Ny00OWE3LWJk MjMtM2Q3MTFlODlmMzA1LzAvMUQ5OTYyMDZCMjRFNjc5MzdDRUYyQ0U0MDg4MkRC RkFEODkzRjFGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADbLpyy4EUT5DB6vvgggkrYldSEIF3vjZiFj u3TJwJf/M06oVPRTvjq5JE3OyejbRIhgXyPvbRzGypUyzKFHlh1mXgU9fXi6SEYQ v7QJl5LhT5el7HhkjyKpn6T5l3H78FbQdGZcPhe/6noO0bkwTgMfaAaLN3UwwaWl Dbv62yaBi0njEntbQUo+T9vzfO6RZL+UWGrIiwBs8WEhKvfmrw1zH0L+O4v3jlzw CRg5Trel10Dmp17hSXiA7bVNp7eFmO/HbklnPkqY25cU+Fmmb3Q35qwd+VuPitS1 mz0PXMMT7yILrSucQpuO0zd1zN4OUnnuHnlR+JN8o56lMDFw2mI= -----END CERTIFICATE-----Generated at Sat May 25 11:20:05 2024 by rpki-client on console-fra.rpki-client.org