$ rpki-client -vvf repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.mft File: 255AA179563123A815C2B4073AD84B69F0967F4D.mft (raw, json) Hash identifier: NiywAn1/kR+muuWNHaV6a//YZPpc2XiY7jrFyIJzhhE= Subject key identifier: 93:EB:23:D3:30:BD:4F:4F:FE:8F:5E:4D:D3:00:6D:F6:2A:26:2B:83 Authority key identifier: 25:5A:A1:79:56:31:23:A8:15:C2:B4:07:3A:D8:4B:69:F0:96:7F:4D Certificate issuer: /CN=255AA179563123A815C2B4073AD84B69F0967F4D Certificate serial: 5538A9AAD563336AC3DAAC7B84193140A6B4C47D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/255AA179563123A815C2B4073AD84B69F0967F4D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.mft Manifest number: 0409 Signing time: Tue 28 May 2024 17:20:45 +0000 Manifest this update: Tue 28 May 2024 17:15:45 +0000 Manifest next update: Fri 31 May 2024 20:37:45 +0000 Files and hashes: 1: 3130332e3132362e3137322e302f32342d3234203d3e20313338313132.roa (hash: jy1Fc5g9Db6h1mMJwzy/8O2MmQKCnyUDCwHhfQ+qXBM=) 2: 323430343a6563303a3a2f33322d3332203d3e20313338313132.roa (hash: wB8cIPzXQ9LIImsEDpW6J4o7tPX0govGViUMbV41brs=) 3: 3130332e3132362e3137342e302f32342d3234203d3e20313338313132.roa (hash: Xh3q63iYyvrkplxU534qRklvzEwf6vZiKBb9qHrHUkk=) 4: 255AA179563123A815C2B4073AD84B69F0967F4D.crl (hash: ENE1lykNtO+Jbxm4yvExt4QFLeqPB7qlVEWQnQ8KQdE=) 5: 3130332e3132362e3137352e302f32342d3234203d3e20313338313132.roa (hash: Gr00cYR+nYBb/SkFvFy1dK21r9ioSRsvvp7/EkC0W50=) 6: 3130332e3132362e3137332e302f32342d3234203d3e20313338313132.roa (hash: NEaLVemL0ZiM1VH2Vchnghk4t/tNq7fa8pEsc7X1h1E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.crl rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/255AA179563123A815C2B4073AD84B69F0967F4D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 May 2024 20:37:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:38:a9:aa:d5:63:33:6a:c3:da:ac:7b:84:19:31:40:a6:b4:c4:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=255AA179563123A815C2B4073AD84B69F0967F4D Validity Not Before: May 28 17:15:45 2024 GMT Not After : May 31 20:37:45 2024 GMT Subject: CN=93EB23D330BD4F4FFE8F5E4DD3006DF62A262B83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b7:15:fb:5f:f0:c6:e4:9c:48:bf:b9:5d:1b: f5:40:06:1d:3c:4f:f6:61:4b:96:83:20:ad:39:35: 9f:9e:d6:4f:33:9c:5f:53:52:d8:a1:69:2a:c0:c9: 82:bf:74:bc:b6:2f:f5:58:c7:93:cf:83:80:24:0e: 99:8f:90:70:86:09:41:b6:d9:4c:df:28:1b:83:23: 65:14:59:02:85:99:74:85:4e:94:00:f8:9e:31:1e: 89:59:7a:b4:37:00:92:44:f5:6b:a0:ee:bf:b1:16: 5e:90:df:19:2c:91:04:b6:7f:58:14:7a:5c:f3:a1: 19:88:20:95:41:de:7d:d9:0f:4d:47:75:36:d6:c7: 98:76:d7:cd:91:85:c2:d7:af:f4:27:39:ea:3f:6d: 78:b3:41:2d:c8:f2:e3:ba:ab:72:be:cf:1e:7b:7d: 63:0f:90:f4:af:35:d0:23:80:36:07:77:a9:af:de: 14:78:d1:5d:4c:3e:0a:17:53:b1:cd:a9:53:1d:7f: a9:d5:38:64:76:b9:6b:53:7c:ec:bb:24:9d:83:56: 38:26:26:88:61:30:7b:08:74:fc:15:6a:99:70:00: 09:f5:ec:c3:3f:8e:26:1a:ca:fb:40:7c:73:e1:c2: f0:e2:2a:32:09:ea:a5:2c:38:a0:5e:d6:b0:9b:32: 0c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:EB:23:D3:30:BD:4F:4F:FE:8F:5E:4D:D3:00:6D:F6:2A:26:2B:83 X509v3 Authority Key Identifier: keyid:25:5A:A1:79:56:31:23:A8:15:C2:B4:07:3A:D8:4B:69:F0:96:7F:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/255AA179563123A815C2B4073AD84B69F0967F4D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:85:75:4c:0d:a5:70:8e:d0:1b:36:ab:93:6a:3a:47:50:95: fd:cd:1e:b8:df:62:39:f7:71:e6:47:f7:c2:59:e5:6a:cd:e0: 64:b8:22:36:71:d1:2f:c8:79:6f:ee:e1:0a:88:8f:4d:a4:da: 4d:91:76:63:9f:d1:9e:bc:e1:37:8f:9d:a8:54:3a:17:6d:c5: 50:f8:72:7a:8c:5d:2c:81:84:51:da:72:22:d9:1f:58:5e:21: 4d:cf:84:71:f6:06:9a:96:85:74:e4:2f:0a:08:b3:b5:d6:db: a8:33:eb:61:82:44:0a:70:5c:b7:38:22:09:dc:81:81:f1:52: 5c:42:9f:c9:f3:bb:fb:37:46:ad:76:cc:fa:fe:b6:6c:00:87: 44:19:e0:58:b6:19:a3:51:7a:ff:d0:cc:bf:3e:01:81:be:ab: 2a:39:21:a8:c3:5d:d8:6f:dc:87:85:b7:93:ab:e3:91:cc:f7: a4:72:bb:26:6d:e7:8e:44:b2:62:e8:ef:b2:c9:82:ee:c5:f1: 56:42:62:cd:ce:53:b7:e0:3e:03:c5:ab:04:a3:d0:40:c2:a8: 7d:a8:f9:52:11:0f:4f:e4:ce:d5:15:93:28:bf:f0:8d:87:bc: a9:a5:f9:8d:29:d9:78:33:7f:0e:53:08:8b:f8:9a:d8:79:79: 17:35:ca:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVTipqtVjM2rD2qx7hBkxQKa0xH0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU1QUExNzk1NjMxMjNBODE1QzJCNDA3M0FEODRCNjlG MDk2N0Y0RDAeFw0yNDA1MjgxNzE1NDVaFw0yNDA1MzEyMDM3NDVaMDMxMTAvBgNV BAMTKDkzRUIyM0QzMzBCRDRGNEZGRThGNUU0REQzMDA2REY2MkEyNjJCODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLtxX7X/DG5JxIv7ldG/VABh08 T/ZhS5aDIK05NZ+e1k8znF9TUtihaSrAyYK/dLy2L/VYx5PPg4AkDpmPkHCGCUG2 2UzfKBuDI2UUWQKFmXSFTpQA+J4xHolZerQ3AJJE9Wug7r+xFl6Q3xkskQS2f1gU elzzoRmIIJVB3n3ZD01HdTbWx5h2182RhcLXr/QnOeo/bXizQS3I8uO6q3K+zx57 fWMPkPSvNdAjgDYHd6mv3hR40V1MPgoXU7HNqVMdf6nVOGR2uWtTfOy7JJ2DVjgm JohhMHsIdPwVaplwAAn17MM/jiYayvtAfHPhwvDiKjIJ6qUsOKBe1rCbMgxPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk+sj0zC9T0/+j15N0wBt9iomK4MwHwYDVR0j BBgwFoAUJVqheVYxI6gVwrQHOthLafCWf00wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZGI4ZDkwOC0xYjk5LTQ1NWMtYWM3Ni04ZDYyNGRmYTQzYjYvMC8yNTVBQTE3OTU2 MzEyM0E4MTVDMkI0MDczQUQ4NEI2OUYwOTY3RjRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjU1QUExNzk1NjMxMjNBODE1QzJCNDA3M0FEODRCNjlGMDk2 N0Y0RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGRiOGQ5MDgtMWI5OS00NTVjLWFj NzYtOGQ2MjRkZmE0M2I2LzAvMjU1QUExNzk1NjMxMjNBODE1QzJCNDA3M0FEODRC NjlGMDk2N0Y0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACmFdUwNpXCO0Bs2q5NqOkdQlf3NHrjfYjn3 ceZH98JZ5WrN4GS4IjZx0S/IeW/u4QqIj02k2k2RdmOf0Z684TePnahUOhdtxVD4 cnqMXSyBhFHaciLZH1heIU3PhHH2BpqWhXTkLwoIs7XW26gz62GCRApwXLc4Ignc gYHxUlxCn8nzu/s3Rq12zPr+tmwAh0QZ4Fi2GaNRev/QzL8+AYG+qyo5IajDXdhv 3IeFt5Or45HM96RyuyZt545EsmLo77LJgu7F8VZCYs3OU7fgPgPFqwSj0EDCqH2o +VIRD0/kztUVkyi/8I2HvKml+Y0p2Xgzfw5TCIv4mth5eRc1yos= -----END CERTIFICATE-----Generated at Tue May 28 19:28:40 2024 by rpki-client on console-ams.rpki-client.org