$ rpki-client -vvf repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft File: D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft (raw, json) Hash identifier: B/o/0+cwVSjs/s85A6hfTOf14WJecYD0nSLKGsmQTRI= Subject key identifier: D1:EB:88:2A:03:E2:27:8E:E8:C7:DD:27:D5:A6:25:4C:EC:99:8D:2C Authority key identifier: D9:47:E8:BE:AE:01:A6:71:0E:32:4C:D4:16:D3:28:2A:DD:FB:BF:E9 Certificate issuer: /CN=D947E8BEAE01A6710E324CD416D3282ADDFBBFE9 Certificate serial: 6E4E51680CFD899848AA8F827DD205E97C9B0805 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft Manifest number: B6 Signing time: Sun 19 May 2024 18:51:32 +0000 Manifest this update: Sun 19 May 2024 18:46:32 +0000 Manifest next update: Thu 23 May 2024 02:22:32 +0000 Files and hashes: 1: 3130332e3133302e3131372e302f32342d3234203d3e203435333035.roa (hash: 2KlFaCiGH4FvI5KYZUM/LwzVbKMH9o1Jq6U1bpkh8OA=) 2: D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.crl (hash: g5OHcWpsVCTPye/+MJoWenKoaZNGlt3Cd6BvhJ2Tfp4=) 3: 3130332e3133302e3131362e302f32342d3234203d3e203435333035.roa (hash: TLz1yxR5ee4b/e3IDYBKYGMjTfF/qSNOhivvoOQ0IN4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.crl rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 19:53:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:4e:51:68:0c:fd:89:98:48:aa:8f:82:7d:d2:05:e9:7c:9b:08:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D947E8BEAE01A6710E324CD416D3282ADDFBBFE9 Validity Not Before: May 19 18:46:32 2024 GMT Not After : May 23 02:22:32 2024 GMT Subject: CN=D1EB882A03E2278EE8C7DD27D5A6254CEC998D2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:29:95:76:d8:e5:8c:f6:9a:89:20:03:35:b7: 99:e1:36:c7:62:34:f0:ae:ef:ea:b6:ab:df:d4:4a: 78:4a:47:a9:aa:98:06:fc:22:1a:30:97:58:8b:04: 1e:e3:f9:84:d0:16:e3:28:5d:e2:e0:03:04:6d:c9: 48:4b:5a:0b:ad:9b:63:3a:38:7b:8d:40:69:4a:ae: 24:a1:50:9c:08:b0:20:82:4c:ff:ba:d9:0f:60:4d: 83:91:c1:d5:db:ad:7a:a5:37:87:d1:77:ef:9c:b1: fc:53:3a:c8:24:e9:1a:96:6a:f8:67:6c:c6:72:74: e0:cc:c1:2c:7f:bd:71:ad:98:31:5e:cd:4e:71:ff: a7:ab:f3:54:15:a0:bb:86:3e:9a:ef:a1:6b:54:2c: 9c:fc:c3:d9:b9:64:80:d1:af:e7:83:bc:98:e5:1f: 32:0d:e9:36:5d:42:cb:98:d0:7d:41:30:ca:8b:ab: 4e:a9:bd:ff:d3:a4:ff:0d:4e:96:00:e5:1e:88:82: 68:ba:83:58:9b:c3:60:b5:dc:a6:7c:8f:18:25:a9: c1:63:3a:01:5f:4a:13:ed:51:42:d6:03:69:12:44: f0:b1:28:4a:8b:9a:6f:bd:11:e7:a4:33:57:82:11: 05:60:b2:4a:f0:4b:4d:f6:f5:c3:1f:2b:33:06:15: 86:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:EB:88:2A:03:E2:27:8E:E8:C7:DD:27:D5:A6:25:4C:EC:99:8D:2C X509v3 Authority Key Identifier: keyid:D9:47:E8:BE:AE:01:A6:71:0E:32:4C:D4:16:D3:28:2A:DD:FB:BF:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:14:d1:b4:7a:95:16:1e:44:38:87:b0:6e:54:28:06:ae:02: 01:a0:ae:e6:2e:c6:23:8b:dd:90:eb:90:d9:43:a8:70:c2:8f: 15:ff:9b:06:a2:fc:b4:c3:c0:56:96:e8:25:96:52:aa:3f:3d: 76:79:78:51:37:00:2c:3a:c6:cd:84:cf:70:bc:26:c4:95:c8: ab:b4:2d:66:5b:ce:e0:78:c2:a3:9a:be:fa:dd:4e:64:78:05: 32:a7:0a:c7:27:f7:63:38:95:b9:32:ea:5f:38:fc:b9:23:ea: 7b:63:bc:6e:68:12:5c:ac:58:d1:86:2b:bb:f4:de:8e:91:27: d4:06:e6:ea:24:ee:83:71:47:19:ee:a8:00:cc:02:48:7c:a0: 18:20:5f:7b:8d:e8:dd:25:a3:9c:0f:3c:3d:e4:4a:5e:db:ed: ad:69:34:eb:c6:11:5e:fa:38:52:f2:99:a5:78:07:8c:aa:5e: 1f:e3:7e:29:07:12:2f:3f:18:67:e3:b9:78:a5:a4:fe:27:79: 2d:1c:b4:4d:d6:4f:a0:93:db:be:61:f8:86:3e:a4:5b:b8:bd: c1:af:bb:62:16:34:14:50:19:61:09:e6:b7:f8:c4:86:a7:2b: 18:bc:62:a8:18:43:20:ac:10:e3:80:65:a9:c7:a5:29:80:ce: 93:c9:cd:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbk5RaAz9iZhIqo+CfdIF6XybCAUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDk0N0U4QkVBRTAxQTY3MTBFMzI0Q0Q0MTZEMzI4MkFE REZCQkZFOTAeFw0yNDA1MTkxODQ2MzJaFw0yNDA1MjMwMjIyMzJaMDMxMTAvBgNV BAMTKEQxRUI4ODJBMDNFMjI3OEVFOEM3REQyN0Q1QTYyNTRDRUM5OThEMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsKZV22OWM9pqJIAM1t5nhNsdi NPCu7+q2q9/USnhKR6mqmAb8Ihowl1iLBB7j+YTQFuMoXeLgAwRtyUhLWgutm2M6 OHuNQGlKriShUJwIsCCCTP+62Q9gTYORwdXbrXqlN4fRd++csfxTOsgk6RqWavhn bMZydODMwSx/vXGtmDFezU5x/6er81QVoLuGPprvoWtULJz8w9m5ZIDRr+eDvJjl HzIN6TZdQsuY0H1BMMqLq06pvf/TpP8NTpYA5R6Igmi6g1ibw2C13KZ8jxglqcFj OgFfShPtUULWA2kSRPCxKEqLmm+9EeekM1eCEQVgskrwS0329cMfKzMGFYapAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0euIKgPiJ47ox90n1aYlTOyZjSwwHwYDVR0j BBgwFoAU2Ufovq4BpnEOMkzUFtMoKt37v+kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZmZkYzJiNy1mMzA1LTRlMDctYWFjNS00NjllOTExM2IwYjQvMC9EOTQ3RThCRUFF MDFBNjcxMEUzMjRDRDQxNkQzMjgyQURERkJCRkU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDk0N0U4QkVBRTAxQTY3MTBFMzI0Q0Q0MTZEMzI4MkFEREZC QkZFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2ZmZGMyYjctZjMwNS00ZTA3LWFh YzUtNDY5ZTkxMTNiMGI0LzAvRDk0N0U4QkVBRTAxQTY3MTBFMzI0Q0Q0MTZEMzI4 MkFEREZCQkZFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADoU0bR6lRYeRDiHsG5UKAauAgGgruYuxiOL 3ZDrkNlDqHDCjxX/mwai/LTDwFaW6CWWUqo/PXZ5eFE3ACw6xs2Ez3C8JsSVyKu0 LWZbzuB4wqOavvrdTmR4BTKnCscn92M4lbky6l84/Lkj6ntjvG5oElysWNGGK7v0 3o6RJ9QG5uok7oNxRxnuqADMAkh8oBggX3uN6N0lo5wPPD3kSl7b7a1pNOvGEV76 OFLymaV4B4yqXh/jfikHEi8/GGfjuXilpP4neS0ctE3WT6CT275h+IY+pFu4vcGv u2IWNBRQGWEJ5rf4xIanKxi8YqgYQyCsEOOAZanHpSmAzpPJzZc= -----END CERTIFICATE-----Generated at Sun May 19 19:40:54 2024 by rpki-client on console-fra.rpki-client.org