$ rpki-client -vvf repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft File: 1DD4F8984667E142BB9C6F1133AA56899352286C.mft (raw, json) Hash identifier: MPR9fB/mogzcZK7bO8wb9541145QTcaceBRaiWopXAg= Subject key identifier: 52:7A:42:08:77:DC:C4:4E:0B:85:0A:2A:9A:BA:66:A8:DB:53:85:C7 Authority key identifier: 1D:D4:F8:98:46:67:E1:42:BB:9C:6F:11:33:AA:56:89:93:52:28:6C Certificate issuer: /CN=1DD4F8984667E142BB9C6F1133AA56899352286C Certificate serial: 3C4D001FD6F73239B38D0813981531B6093E83AC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft Manifest number: 0127 Signing time: Sat 18 May 2024 12:51:55 +0000 Manifest this update: Sat 18 May 2024 12:46:55 +0000 Manifest next update: Tue 21 May 2024 23:12:55 +0000 Files and hashes: 1: 3130332e3137382e38342e302f32332d3233203d3e20313439333138.roa (hash: npoy3cAqaGQT3/56tohle7c3xZWB2NxuHHagwsky4rY=) 2: 1DD4F8984667E142BB9C6F1133AA56899352286C.crl (hash: sodmFhV+UBRY4tnlfeoYroY0K9zvFKlJJL3zHblldR8=) 3: 3130332e3137382e38342e302f32342d3234203d3e20313439333138.roa (hash: 4OxmDVqsUe1ABUHCPmmIr3onnxCnzw8qUuBTDoNzyG8=) 4: 3130332e3137382e38352e302f32342d3234203d3e20313439333138.roa (hash: x/CYJ2GoGNsDMnR8yXnaSKtHqMsk83h1s1GIHK6LEOo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.crl rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:4d:00:1f:d6:f7:32:39:b3:8d:08:13:98:15:31:b6:09:3e:83:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DD4F8984667E142BB9C6F1133AA56899352286C Validity Not Before: May 18 12:46:55 2024 GMT Not After : May 21 23:12:55 2024 GMT Subject: CN=527A420877DCC44E0B850A2A9ABA66A8DB5385C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:19:36:08:80:6f:88:b7:c3:b6:b1:de:94:16: dc:23:cc:a7:dd:2a:94:b6:18:74:97:3e:51:6c:f1: 10:d5:b9:7e:0f:ba:2a:62:1d:67:ce:1a:f5:cc:0a: 65:fa:1d:40:b8:28:f7:08:ba:44:5c:4f:ff:d6:da: a9:7a:13:24:34:ed:de:de:90:ca:2e:38:56:74:8b: 50:e3:be:80:e0:fd:c5:d0:08:38:b9:a9:a8:3b:b6: 75:b5:c0:d1:f9:2e:92:0c:42:a2:c1:59:5e:1b:8f: 57:3e:b7:84:b4:bb:14:d9:27:c3:74:95:1b:ed:f0: 55:a5:eb:9a:29:56:98:6f:32:5e:96:b3:28:a0:67: a4:fe:13:dd:48:65:93:e5:02:ae:7b:aa:13:80:16: 32:2e:61:95:aa:49:bc:1c:d7:66:a8:15:d4:89:87: 4a:8d:e5:da:be:ba:76:ad:1f:32:00:aa:32:6d:bf: 48:cd:58:1e:c7:8f:46:c4:6e:67:4b:a0:82:e2:e6: 0c:e4:46:93:23:2c:7c:7c:51:76:f7:73:e3:81:43: 7b:8a:78:d0:51:c1:9c:29:a5:3e:22:ac:64:98:78: f9:cd:84:97:20:97:e0:09:5d:e5:ef:17:2e:73:08: eb:ca:6c:9a:82:10:4a:e2:3e:a1:a7:1a:5c:05:93: 33:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:7A:42:08:77:DC:C4:4E:0B:85:0A:2A:9A:BA:66:A8:DB:53:85:C7 X509v3 Authority Key Identifier: keyid:1D:D4:F8:98:46:67:E1:42:BB:9C:6F:11:33:AA:56:89:93:52:28:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:74:0c:10:ca:cc:2d:14:03:61:68:7a:f8:47:2e:a3:cf:61: 90:db:6d:03:b0:df:3c:7a:0c:56:3d:c1:72:82:1a:74:3c:62: e6:8d:67:4a:1c:93:df:c6:80:6b:56:cd:59:35:b3:1d:36:2e: c8:f3:a5:4e:f6:83:9c:57:c7:bf:23:29:11:f3:df:8d:2c:4b: da:3f:64:95:d1:ae:77:4f:97:0b:93:ff:b4:05:ac:37:56:11: 1c:68:82:f7:d4:ff:d1:e9:ea:aa:88:52:73:02:60:33:a7:7a: 6f:00:8f:7f:eb:73:6d:c7:80:48:22:7e:fc:9a:ed:c9:bc:ee: 0b:4c:cb:86:38:67:a5:fa:49:bc:aa:3c:63:8f:d3:00:c2:86: ee:19:9e:a7:11:e6:b9:3e:bc:91:75:ea:09:80:14:aa:52:dd: 36:5d:85:00:86:d9:9e:ba:79:4d:a4:b2:81:a8:bd:88:cc:f8: 98:81:1f:fe:6c:a0:b1:51:bb:fb:a4:9c:91:de:7e:ea:58:b8: 84:f8:46:0b:70:d3:a9:d8:a5:b1:5c:e4:3f:c6:ef:8b:f8:2c: 5c:0f:64:9c:7d:d7:e2:15:54:4c:0f:c4:a8:c8:d7:b0:54:02: fa:75:25:dd:8a:d7:d7:dd:9a:88:3c:66:a5:c2:da:f5:cf:e0: b0:c6:40:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPE0AH9b3MjmzjQgTmBUxtgk+g6wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURENEY4OTg0NjY3RTE0MkJCOUM2RjExMzNBQTU2ODk5 MzUyMjg2QzAeFw0yNDA1MTgxMjQ2NTVaFw0yNDA1MjEyMzEyNTVaMDMxMTAvBgNV BAMTKDUyN0E0MjA4NzdEQ0M0NEUwQjg1MEEyQTlBQkE2NkE4REI1Mzg1QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6GTYIgG+It8O2sd6UFtwjzKfd KpS2GHSXPlFs8RDVuX4PuipiHWfOGvXMCmX6HUC4KPcIukRcT//W2ql6EyQ07d7e kMouOFZ0i1DjvoDg/cXQCDi5qag7tnW1wNH5LpIMQqLBWV4bj1c+t4S0uxTZJ8N0 lRvt8FWl65opVphvMl6WsyigZ6T+E91IZZPlAq57qhOAFjIuYZWqSbwc12aoFdSJ h0qN5dq+unatHzIAqjJtv0jNWB7Hj0bEbmdLoILi5gzkRpMjLHx8UXb3c+OBQ3uK eNBRwZwppT4irGSYePnNhJcgl+AJXeXvFy5zCOvKbJqCEEriPqGnGlwFkzPxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUnpCCHfcxE4LhQoqmrpmqNtThccwHwYDVR0j BBgwFoAUHdT4mEZn4UK7nG8RM6pWiZNSKGwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YzA3NWVmNi1hMjUxLTQ3ZGQtOGRkYS1jYWRmZjQ5N2E3ZTUvMC8xREQ0Rjg5ODQ2 NjdFMTQyQkI5QzZGMTEzM0FBNTY4OTkzNTIyODZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMURENEY4OTg0NjY3RTE0MkJCOUM2RjExMzNBQTU2ODk5MzUy Mjg2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2MwNzVlZjYtYTI1MS00N2RkLThk ZGEtY2FkZmY0OTdhN2U1LzAvMURENEY4OTg0NjY3RTE0MkJCOUM2RjExMzNBQTU2 ODk5MzUyMjg2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC50DBDKzC0UA2FoevhHLqPPYZDbbQOw3zx6 DFY9wXKCGnQ8YuaNZ0ock9/GgGtWzVk1sx02LsjzpU72g5xXx78jKRHz340sS9o/ ZJXRrndPlwuT/7QFrDdWERxogvfU/9Hp6qqIUnMCYDOnem8Aj3/rc23HgEgifvya 7cm87gtMy4Y4Z6X6SbyqPGOP0wDChu4ZnqcR5rk+vJF16gmAFKpS3TZdhQCG2Z66 eU2ksoGovYjM+JiBH/5soLFRu/uknJHefupYuIT4Rgtw06nYpbFc5D/G74v4LFwP ZJx91+IVVEwPxKjI17BUAvp1Jd2K19fdmog8ZqXC2vXP4LDGQKM= -----END CERTIFICATE-----Generated at Sat May 18 13:30:07 2024 by rpki-client on console-fra.rpki-client.org